1
0
mirror of https://git.yoctoproject.org/poky synced 2026-07-15 15:37:03 +00:00
Commit Graph

3526 Commits

Author SHA1 Message Date
Bruce Ashfield 3482e7f32a linux-yocto/6.6: address ltp hang
Integrating the following commit(s) to linux-yocto/6.6:

1/1 [
    Author: Baokun Li
    Email: libaokun1@huawei.com
    Subject: ext4: get rid of ppath in get_ext_path()
    Date: Thu, 22 Aug 2024 10:35:32 +0800

    The use of path and ppath is now very confusing, so to make the code more
    readable, pass path between functions uniformly, and get rid of ppath.

    After getting rid of ppath in get_ext_path(), its caller may pass an error
    pointer to ext4_free_ext_path(), so it needs to teach ext4_free_ext_path()
    and ext4_ext_drop_refs() to skip the error pointer. No functional changes.

    Signed-off-by: Baokun Li <libaokun1@huawei.com>
    Reviewed-by: Jan Kara <jack@suse.cz>
    Reviewed-by: Ojaswin Mujoo <ojaswin@linux.ibm.com>
    Tested-by: Ojaswin Mujoo <ojaswin@linux.ibm.com>
    Link: https://patch.msgid.link/20240822023545.1994557-13-libaokun@huaweicloud.com
    Signed-off-by: Theodore Ts'o <tytso@mit.edu>
]

(From OE-Core rev: 737293bead3e7b994347e47f09bc69437479d50c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
[YC: more detail at https://lore.kernel.org/openembedded-core/DJGKEQF8GRU1.RF7JY64COTAA@smile.fr/T/#u]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 8cfb09a6b0 linux-yocto/6.6: genericarm64 fix configuration audit warning
Integrating the following commit(s) to linux-yocto/.:

1/1 [
    Author: Bruce Ashfield
    Email: bruce.ashfield@gmail.com
    Subject: genericarm64/serial: change SERIAL_IMX_CONSOLE to =y
    Date: Fri, 19 Jun 2026 00:54:55 +0200

    With the following upstream commit, this option is no longer
    tristate, so we set it to =y instead:

      commit 3f8b835a63341163da0400befb3c6e8f6d4085da
      Author: Randy Dunlap <rdunlap@infradead.org>
      Date:   Sat Jan 10 15:26:40 2026 -0800

          serial: imx: change SERIAL_IMX_CONSOLE to bool

          [ Upstream commit 79527d86ba91c2d9354832d19fd12b3baa66bd10 ]

          SERIAL_IMX_CONSOLE is a build option for the imx driver (SERIAL_IMX).
          It does not build a separate console driver file, so it can't be built
          as a module since it isn't built at all.

          Change the Kconfig symbol from tristate to bool and update the help
          text accordingly.

          Fixes: 0db4f9b91c86 ("tty: serial: imx: enable imx serial console port as module")
          Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
          Link: https://patch.msgid.link/20260110232643.3533351-2-rdunlap@infradead.org
          Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
          Signed-off-by: Sasha Levin <sashal@kernel.org>

    Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
    (cherry picked from commit 465cb5bcefd72f429e0b3ad6ab5b3fcff5b390fc)
    Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
    Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
]

(From OE-Core rev: 535c5940d92c39d220ab2d36b15c2dc31b41b8e0)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
He Zhe e5db0f30c8 lttng-modules: Fix trace_hrtimer_start build failure
Fix the following build failure

probes/../../include/lttng/tracepoint-event-impl.h:133:6: error: conflicting
types for 'trace_hrtimer_start'; have 'void(struct hrtimer *, enum hrtimer_mode)'
  133 | void trace_##_name(_proto);
      |      ^~~~~~

(From OE-Core rev: e0598e2bbf9513ad71dea185a540de16996c4114)

Signed-off-by: He Zhe <zhe.he@windriver.com>
[YC: backported from wrynose commit e32cbc177dae ("lttng-modules: Fix
trace_hrtimer_start build failure").
This is a partial backport of commit 7dae5f40e394 ("lttng-modules:
fix build against kernel 7.1+")]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield b61b34f6f8 linux-yocto/6.6: update to v6.6.142
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    924b4a879cbb Linux 6.6.142
    cefa4265b111 security/keys: fix missed RCU read section on lookup
    105c6a594b3f LoongArch: kprobes: Fix handling of fatal unrecoverable recursions
    1f9c82855641 net: gro: don't merge zcopy skbs
    f504118252af pds_core: ensure null-termination for firmware version strings
    d3f3d6fa0cad pds_core: add an error code check in pdsc_dl_info_get
    01f7f893d5e1 net: mana: validate rx_req_idx to prevent out-of-bounds array access
    3dee2fe0c818 ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
    d798b25c24f4 gpio: cdev: check if uAPI v2 config attributes are correctly zeroed
    0f1fd5e83f0b gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n)
    cd87492b79d1 string: add mem_is_zero() helper to check if memory area is all zeros
    c9ea01768903 bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
    40fc66218ad1 net: ag71xx: check error for platform_get_irq
    2a1905730e0c Bluetooth: btmtk: fix urb->setup_packet leak in error paths
    f04578422154 Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c
    73377cf3056a Bluetooth: btmtk: rename btmediatek_data
    aa58d8366269 Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset
    b748250d778e Bluetooth: btmtk: add the function to get the fw name
    e91687643c44 tracing: Avoid NULL return from hist_field_name() on truncation
    8ba1c4ddbb1c ALSA: seq: Serialize UMP output teardown with event_input
    e5604a480487 ALSA: seq: ump: Use guard() for locking
    b6d3d3816c67 ptrace: Convert ptrace_attach() to use lock guards
    60ef1675b652 pds_core: fix debugfs_lookup dentry leak and error handling
    3231aff8ab26 pds_core: fix error handling in pdsc_devcmd_wait
    1900ca8acb92 bridge: mcast: Fix a possible use-after-free when removing a bridge port
    6e79715b7b8a net: bridge: Flush multicast groups when snooping is disabled
    00904a73272b RDMA/rtrs: Fix use-after-free in path file creation cleanup
    a7685f4d90c1 platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
    527a7990e663 platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
    6ea1690b24e9 platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
    32ba2ce2b15f platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
    566f42fb67a7 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
    314a94c47d28 net: dsa: mt7530: preserve VLAN tags on trapped link-local frames
    1bddf306212a net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw
    d2be607d042d net: dsa: mt7530: fix FDB entries not aging out with short timeout
    69a0885079c9 wifi: ath11k: fix peer resolution on rx path when peer_id=0
    070e40acc59e drm/msm/snapshot: fix dumping of the unaligned regions
    dd844b31f4ea spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()
    5c54c482934b net/mlx5: Do not restore destination-less TC rules
    d65b279a1898 tls: Preserve sk_err across recvmsg() when data has been copied
    1822997aa8c2 x86/xen: Fix xen_e820_swap_entry_with_ram()
    06cc5ad2c112 net: phy: DP83TC811: add reading of abilities
    d04494596b5e net: phy: c45: add genphy_c45_pma_read_ext_abilities() function
    acdc12b71c9a net: tls: prevent chain-after-chain in plain text SG
    131ef12057d9 net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
    d38ba387244e net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
    a09d07ac45e2 powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()
    7256e54583ae drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN
    567b5e976e2e drm/msm/dsi: don't dump registers past the mapped region
    b40e10c72df5 ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
    720c76b930c5 net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
    9baafc2fea09 accel/qaic: Add overflow check to remap_pfn_range during mmap
    f775be13d342 HID: quirks: really enable the intended work around for appledisplay
    a5db6a7c062f wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
    3d675896ea03 wifi: ath11k: fix error path leaks in some WMI WOW calls
    b77be98447c4 net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference
    78cf08b3be47 net: ethernet: cortina: Carry over frag counter
    68c9c3ac9ce5 net: ethernet: cortina: Drop half-assembled SKB
    3b249988d774 net: ethernet: cortina: Make RX SKB per-port
    00efe58bbdcc netfs: Fix overrun check in netfs_extract_user_iter()
    0df68fd72b2a zonefs: handle integer overflow in zonefs_fname_to_fno
    eef4f71b46a9 irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT
    6760af11a26e irqchip/ath79-cpu: Remove unused function
    6af5fd2ffda1 phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access
    b0cc58e8f749 net: lan966x: avoid unregistering netdev on register failure
    9e1c9b957344 ice: fix locking in ice_dcb_rebuild()
    07d77d774f71 tcp: Fix imbalanced icsk_accept_queue count.
    08d355936fcf test_kprobes: clear kprobes between test runs
    8a5f01446021 kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()
    99948d73a8c7 netfilter: x_tables: unregister the templates first
    26b2290baaf6 btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
    542b49d2cf12 ALSA: hda: cs35l56: Put ACPI device after setting companion
    508b1193d63b ARM: integrator: Fix early initialization
    fb3ff02dd444 pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150
    7d694570281a kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
    0df3f3031517 kunit: config: Enable KUNIT_DEBUGFS by default
    8b0f4e3b7ad6 firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
    adfff93d08a2 firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
    58ab91af4124 HID: uclogic: Fix regression of input name assignment
    a2d1c819348b hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors
    20d626463e3f hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()
    cba4f1122dfb hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()
    6b5573b63e30 hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple
    4d1da9a6be5a hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR
    60c4b9fe1a3d hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer
    d94ceb16e55b hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer
    f85c81e93dbd hwmon: (pmbus/adm1266) reject implausible blackbox record_count
    025cfc7a09c5 hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
    32edd2a28e11 batman-adv: tt: fix negative tt_buff_len
    22d59c72f4a4 batman-adv: tt: fix negative last_changeset_len
    c2c88736022c batman-adv: tp_meter: fix race condition in send error reporting
    0b1bedf114ea batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown
    53f931e0146a batman-adv: tp_meter: avoid use of uninit sender vars
    48663158222b batman-adv: bla: fix report_work leak on backbone_gw purge
    b54e459cf869 batman-adv: frag: disallow unicast fragment in fragment
    c1bac194733a batman-adv: fix tp_meter counter underflow during shutdown
    f653b040dad1 batman-adv: fix fragment reassembly length accounting
    866ac1d57040 batman-adv: dat: handle forward allocation error
    6de089b545db batman-adv: clear current gateway during teardown
    70bcb678561f batman-adv: mcast: fix use-after-free in orig_node RCU release
    90c398e822ca drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
    fb30a3890d62 drm/amd/display: Validate GPIO pin LUT table size before iterating
    266b21b57fbb drm/amd/display: Fix integer overflow in bios_get_image()
    e4d3d33ab7bd drm/bridge: megachips: remove bridge when irq request fails
    25473edcdaef drm/bridge: it66121: acquire reset GPIO in probe
    21ab64c77a30 drm/virtio: use uninterruptible resv lock for plane updates
    371f53925a67 device property: set fwnode->secondary to NULL in fwnode_init()
    fb3539b367f5 LoongArch: Remove unused code to avoid build warning
    14553be882d9 RDMA/siw: Reject MPA FPDU length underflow before signed receive math
    f2dc841d7dc9 spi: ti-qspi: fix use-after-free after DMA setup failure
    450c319dd04d spi: sprd: fix error pointer deref after DMA setup failure
    309c6058622d scsi: isci: Fix use-after-free in device removal path
    9d5ae6b8d9ec phy: tegra: xusb: Fix per-pad high-speed termination calibration
    45760b72e84c spi: qup: fix error pointer deref after DMA setup failure
    3c83a6912c24 drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe
    dab9f93251b2 KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
    e0790046f6be arm64: probes: Handle probes on hinted conditional branch instructions
    f383cff9fb38 tracing: Do not call map->ops->elt_free() if elt_alloc() fails
    bdc349a87f1f cifs: Fix busy dentry used after unmounting
    1ced0f5a851f wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
    a3a4366731a5 ice: fix setting promisc mode while adding VID filter
    add70e2682c0 ixgbevf: fix use-after-free in VEPA multicast source pruning
    3c5411fa4944 ipv4: raw: reject IP_HDRINCL packets with ihl < 5
    f50c3ff97c83 wifi: ath11k: clear shared SRNG pointer state on restart
    ce29d3bf79a2 vsock/virtio: reset connection on receiving queue overflow
    cc27e989a5df vsock/vmci: fix UAF when peer resets connection during handshake
    273a1481c556 ring-buffer: Fix reporting of missed events in iterator
    3904b993cc17 qed: fix double free in qed_cxt_tables_alloc()
    c161ad9157f5 netfilter: nft_inner: Fix IPv6 inner_thoff desync
    c281e018af98 netfilter: ipset: stop hash:* range iteration at end
    1e5e20031c5e netfilter: nf_queue: hold bridge skb->dev while queued
    41ec2e242f17 netfilter: ip6t_hbh: reject oversized option lists
    16bd798cb6d8 net: ifb: report ethtool stats over num_tx_queues
    289499907399 net: bcmgenet: keep RBUF EEE/PM disabled
    8420aa490041 phonet/pep: disable BH around forwarded sk_receive_skb()
    be43e6b40431 Bluetooth: serialize accept_q access
    a143ce77a529 Bluetooth: MGMT: validate Add Extended Advertising Data length
    9d20d48be2c4 Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
    fe69f634b076 Bluetooth: bnep: Fix UAF read of dev->name
    3af41ee7ebec Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
    5d86d2f1b4d9 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
    6f63a60580eb net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
    686b4283f82c drivers/base/memory: fix memory block reference leak in poison accounting
    29cd94e678fc efi: Allocate runtime workqueue before ACPI init
    7b6f8c8eb93f ALSA: asihpi: Fix potential OOB array access at reading cache
    41a766c64729 ALSA: pcm: Don't setup bogus iov_iter for silencing
    dade81458966 ALSA: ua101: Reject too-short USB descriptors
    0dbf64c50244 hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX
    adcfb16ae402 smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close
    7df1df6f40c0 smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
    9d378e17c864 ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow
    e43cb36d4d78 ksmbd: fix null pointer dereference in compare_guid_key()
    082351f9d400 mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
    31527d80234c sysfs: don't remove existing directory on update failure
    ad7520628c74 Revert "af_unix: Reject SIOCATMARK on non-stream sockets"
    f624070c322d Revert "s390/cio: Update purge function to unregister the unused subchannels"
    7963b6141b4c Revert "ice: Remove jumbo_remove step from TX path"
    6331b0f7b71e Revert "ice: fix double-free of tx_buf skb"
    2035acfb1722 smb: client: reject userspace cifs.spnego descriptions
    3106f326f67c af_unix: Give up GC if MSG_PEEK intervened.
    3a436932eb39 ksmbd: close durable scavenger races against m_fp_list lookups
    712cdf917e77 ksmbd: validate owner of durable handle on reconnect
    7f0cb478703c ksmbd: add durable scavenger timer
    50a23fa28e76 ksmbd: avoid reclaiming expired durable opens by the client
    2682bf9a804b Revert "x86/vdso: Fix output operand size of RDPID"
    ba5b43db126a wifi: mac80211: check tdls flag in ieee80211_tdls_oper
    a052c2d8399a s390/debug: Reject zero-length input before trimming a newline
    492349e5e4a3 driver core: platform: use generic driver_override infrastructure
    64a3ee535bd7 driver core: generalize driver_override in struct device
    fabfed1afe27 spi: spidev: fix lock inversion between spi_lock and buf_lock
    6a3af482188f mptcp: pm: ADD_ADDR rtx: free sk if last
    9426265e157d mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
    19a3ec9ef176 mptcp: pm: ADD_ADDR rtx: allow ID 0
    b386aa38b81d mptcp: sync the msk->sndbuf at accept() time

(From OE-Core rev: ba0f120f6cdbcc1d2782bef27c101e20a11f0f19)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 1abb9145fc linux-yocto/6.6: update to v6.6.141
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0a40c6fbd105 Linux 6.6.141
    f9957ea12103 netfs: Fix potential uninitialised var in netfs_extract_user_iter()
    989214c66884 net: skbuff: propagate shared-frag marker through frag-transfer helpers
    78bf6b6bb195 net: skbuff: preserve shared-frag marker during coalescing
    9115669faedc net/rds: reset op_nents when zerocopy page pin fails
    864889ea15f0 mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
    013dcdc19615 mptcp: pm: ADD_ADDR rtx: fix potential data-race
    b21823f637e0 spi: sifive: fix controller deregistration
    524202b00b91 spi: sifive: Simplify clock handling with devm_clk_get_enabled()
    bf76b4a58c1a media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
    9c7c941d2242 spi: st-ssc4: fix controller deregistration
    d8cd9fb5e655 spi: st-ssc4: switch to use modern name
    a7fb771314fb ksmbd: validate inherited ACE SID length
    190e570cc0fc RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
    8358a142f2a1 f2fs: fix false alarm of lockdep on cp_global_sem lock
    6b050c4cfade f2fs: fix incorrect file address mapping when inline inode is unwritten
    f63201f674ee mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
    93a9014029e4 mptcp: pm: prio: skip closed subflows
    0750c7935feb mptcp: fix rx timestamp corruption on fastopen
    11fdbd033e4c mptcp: drop __mptcp_fastopen_gen_msk_ackseq()
    7d7c9f0fcd19 RDMA/mana: Validate rx_hash_key_len
    cc3c0a0f9657 btrfs: fix missing last_unlink_trans update when removing a directory
    397418a9456c btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I()
    546ca2e3e55a btrfs: use inode already stored in local variable at btrfs_rmdir()
    39aba0e6d5aa smb: client: Use FullSessionKey for AES-256 encryption key derivation
    cea7d2688ded drm/v3d: Reject empty multisync extension to prevent infinite loop
    958e032618c8 eventfs: Use list_add_tail_rcu() for SRCU-protected children list
    d2a675f2e238 btrfs: fix double free in create_space_info_sub_group() error path
    1ce1ec384486 btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type()
    707cb5df3eab pmdomain: core: Fix detach procedure for virtual devices in genpd
    c7d1eb27cf37 drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
    4e04b564c005 drm/gma500/oaktrail_lvds: fix hang on init failure
    63a2b5906e15 drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
    4eb9d07b219f drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()
    e5eb0a29a8aa drm/i915: skip __i915_request_skip() for already signaled requests
    2776f9016f1b iommu/vt-d: Disable DMAR for Intel Q35 IGFX
    534ebc08df97 libceph: handle rbtree insertion error in decode_choose_args()
    ea0d42137f0c libceph: Fix potential out-of-bounds access in crush_decode()
    d7a65a34d245 libceph: Fix potential null-ptr-deref in decode_choose_args()
    0d2dd7e6bb74 libceph: Fix potential out-of-bounds access in osdmap_decode()
    bcbbdae1b88f netfs: fix error handling in netfs_extract_user_iter()
    cad72955f8fb powerpc/warp: Fix error handling in pika_dtm_thread
    d6bda9df0c0a io-wq: check that the predecessor is hashed in io_wq_remove_pending()
    4bfdcefdaa60 ceph: fix a buffer leak in __ceph_setxattr()
    3d3b2b01a3e7 ALSA: usb-audio: Bound MIDI endpoint descriptor scans
    fafc97bd01e4 ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
    7eaa514be4c0 drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
    b41598bf54b3 smb/client: fix possible infinite loop and oob read in symlink_data()
    a1d4f3d3c0dc ASoC: SOF: Intel: hda: Fix NULL pointer dereference
    0f9ac21618c0 ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio
    1eda406a9432 ASoC: SOF: Intel: hda-dai: remove dspless special case
    e3ccb11fc824 netfilter: nf_tables: unconditionally bump set->nelems before insertion
    dde6eca9afae KVM: x86: Fix Xen hypercall tracepoint argument assignment
    a99a25db131e KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
    01b71b930f15 KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
    5b6da42fd804 audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
    810d382802a5 net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled
    ecca618e1e33 netfilter: nft_ct: fix missing expect put in obj eval
    151ee470edc3 audit: fix incorrect inheritable capability in CAPSET records
    b92e124ef30a netfilter: nf_conntrack_sip: get helper before allocating expectation
    0088b3328a6f workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path
    a5712dc25d14 i40e: Cleanup PTP pins on probe failure
    e4c4a5074532 crypto: af_alg - Cap AEAD AD length to 0x80000000
    fa6794c968d4 bonding: fix NULL pointer dereference in actor_port_prio setting
    044dcbcb19c3 netconsole: avoid out-of-bounds access on empty string in trim_newline()
    feb754bde3ef net/sched: sch_pie: annotate more data-races in pie_dump_stats()
    bf3962084183 ksmbd: validate response sizes in ipc_validate_msg()
    52b9f8099369 net: bcmgenet: fix leaking free_bds
    dda1a2e898ad net: bcmgenet: Initialize u64 stats seq counter
    f17a4850d1ce crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
    d65a64755a3d smb: client: fix OOB reads parsing symlink error response
    ba302d3abb82 smb: client: correctly handle ErrorContextData as a flexible array
    2c7d07892ef8 Revert "crypto: nx - Migrate to scomp API"
    6c9970847516 Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx"
    cb4634cb537b Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx"
    02ecc0978c45 ntfs: ->d_compare() must not block
    9ccd0c1686c3 net/sched: cls_flower: revert unintended changes
    131e50acfeed sfc: fix error code in efx_devlink_info_running_versions()
    688f12aa4451 net: tls: fix strparser anchor skb leak on offload RX setup failure
    3ad2471e61e9 ice: fix NULL pointer dereference in ice_reset_all_vfs()
    bee6158b8a36 iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
    b90697dd4b45 iavf: wait for PF confirmation before removing VLAN filters
    5936b7f29a38 iavf: stop removing VLAN filters from PF on interface down
    ee587b3b97b7 iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING
    3b7265b3a82f bonding: 3ad: implement proper RCU rules for port->aggregator
    2353f43d7ee7 bonding: print churn state via netlink
    fcf04d6f6943 bonding: add support for per-port LACP actor priority
    60fcd5af8279 net: bonding: add broadcast_neighbor option for 802.3ad
    ee2217012b3a bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner
    71d591d33dc4 drm/amd/display: Read EDID from VBIOS embedded panel info
    3dce88cf11d7 drm/amd/display: Allow DCE link encoder without AUX registers
    e3f95b1ba242 futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
    d68f753d89f4 ALSA: hda/conexant: Fix missing error check for jack detection
    539604dcbf41 ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87
    35b7210e15a6 ALSA: hda/conexant: fix some typos
    3eaf81c3553e netconsole: propagate device name truncation in dev_name_store()
    3bc2c51a9ba1 net: netconsole: move newline trimming to function
    003b52afba79 net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)
    a0f4e4e8e0f5 bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
    0928f17e86a5 ipv6: rename and move ip6_dst_lookup_tunnel()
    3bab544ae1e1 ipv4: add new arguments to udp_tunnel_dst_lookup()
    f933e5a43732 ipv4: remove "proto" argument from udp_tunnel_dst_lookup()
    0379c21610f0 ipv4: rename and move ip_route_output_tunnel()
    5cb1dd7093d3 sctp: discard stale INIT after handshake completion
    043e4b649b4b netfilter: skip recording stale or retransmitted INIT
    e3610ad82ebd ASoC: codecs: ab8500: Fix casting of private data
    b884ff67d62e drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
    d4e0172a1b61 drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
    ee035a9d3eed drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
    63691e396105 drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
    f675801889b2 drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
    c12a5d35033c drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
    e74fc9c72c1b drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
    2c6fb056567e drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
    f264019be80d drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
    b233ba52fd2e net: phy: dp83869: fix setting CLK_O_SEL field.
    47d017fe3159 net: mctp i2c: check length before marking flow active
    924b961d293c ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams
    9247d59ca15b neigh: let neigh_xmit take skb ownership
    dbe42409bfeb neighbour: add RCU protection to neigh_tables[]
    ec2501e361b0 net/sched: taprio: fix NULL pointer dereference in class dump
    0d0dd383ac4d NFC: trf7970a: Ignore antenna noise when checking for RF field
    17e23e815008 net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
    5db090ca07b2 net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
    3db8d078f7f6 vrf: Fix a potential NPD when removing a port from a VRF
    d4f8505517ff net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()
    229ad4b2dd86 net/sched: sch_choke: annotate data-races in choke_dump_stats()
    bd426bda5741 net/sched: netem: check for negative latency and jitter
    5c4fe716511d net/sched: netem: fix slot delay calculation overflow
    3a3698b96688 net/sched: netem: validate slot configuration
    116f10027e61 net/sched: netem: only reseed PRNG when seed is explicitly provided
    39a66e83ea41 net/sched: netem: fix queue limit check to include reordered packets
    d2a74e0ea346 net/sched: netem: fix probability gaps in 4-state loss model
    818f7673ed7f netdevsim: zero initialize struct iphdr in dummy sk_buff
    47421f8401fc cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro()
    ea6e650b079e arm64/scs: Fix potential sign extension issue of advance_loc4
    b933de804c84 drm/sysfb: ofdrm: fix PCI device reference leaks
    8524b1c04adc spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
    ea2ecd29b8f4 netfilter: nf_conntrack_sip: don't use simple_strtoul
    82664d0f1ba2 netfilter: xt_policy: fix strict mode inbound policy matching
    f60bc289c555 drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2)
    da602e831334 drm/amdgpu/uvd3.1: Don't validate the firmware when already validated
    03011db69f5e drm/amdgpu: fix spelling typos
    8c4254c8f583 drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
    1b8595d126ea nvme-pci: fix missed admin queue sq doorbell write
    ad9973df8e0e netfilter: arp_tables: fix IEEE1394 ARP payload parsing
    d7c8f95f599b nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
    cbf460bf9492 tracing: branch: Fix inverted check on stat tracer registration
    f8f643d5ebef btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent()
    03d3739a830e mailbox: mailbox-test: make data_ready a per-instance variable
    75a365c69bb7 mailbox: mailbox-test: initialize struct earlier
    3afca89fae50 mailbox: mailbox-test: don't free the reused channel
    14aed0d4e583 mailbox: add sanity check for channel array
    0a0ac6cd2e46 cgroup/rdma: fix integer overflow in rdmacg_try_charge()
    81c9e7e4030e mailbox: mailbox-test: free channels on probe error
    0d2edd20b61b fbdev: offb: fix PCI device reference leak on probe failure
    86094f62ba21 rtc: abx80x: Disable alarm feature if no interrupt attached
    a11372a8b1ce fs/adfs: validate nzones in adfs_validate_bblk()
    0897ccf6e930 vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
    0274f24485fc tipc: fix double-free in tipc_buf_append()
    0ace0ce02911 nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
    6bedc3ff4ba4 net: dsa: realtek: rtl8365mb: fix mode mask calculation
    d394093ed06e net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
    86a6243d8654 net/sched: sch_red: annotate data-races in red_dump_stats()
    717bec018ce1 net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()
    7bdb2b038c35 net/sched: sch_pie: annotate data-races in pie_dump_stats()
    046b2d8c9606 net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
    b6ba93a7b71e net/rds: zero per-item info buffer before handing it to visitors
    1ff46c9915c1 ksmbd: scope conn->binding slowpath to bound sessions only
    407b6e699ba8 ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
    27fca12b9c2c ksmbd: destroy async_ida in ksmbd_conn_free()
    8a3cd890fd2a ksmbd: add support for supplementary groups
    234681c54581 ksmbd: Use struct_size() to improve smb_direct_rdma_xmit()
    1f3235364037 ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
    8db8727ea8d1 arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
    37537e42e6df slip: bound decode() reads against the compressed packet length
    c6980e8b1a86 slip: reject VJ receive packets on instances with no rstate array
    5d05de2f0928 netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
    32e50f92c7cf netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
    5241a3ab2c77 ipvs: fix MTU check for GSO packets in tunnel mode
    cbeb259f3138 netfilter: xtables: restrict several matches to inet family
    1c9fb8aeed06 netfilter: conntrack: remove sprintf usage
    8def8fbd23f4 netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
    554cc061ca13 netfilter: nft_osf: restrict it to ipv4
    f9ef3db77a38 openvswitch: cap upcall PID array size and pre-size vport replies
    8a5e840babc5 pppoe: drop PFC frames
    d67fbc6dea5d sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
    0069813e6ca9 ipv6: fix possible UAF in icmpv6_rcv()
    733a1b310297 e1000e: Unroll PTP in probe error handling
    8a254c6db3ee i40e: don't advertise IFF_SUPP_NOFCS
    ca6f9d9aee54 ice: fix double-free of tx_buf skb
    a753619ffecf ice: Remove jumbo_remove step from TX path
    982a56c888d3 tcp: annotate data-races around tp->plb_rehash
    993847e92765 tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
    a445beb84c83 tcp: annotate data-races around tp->dsack_dups
    60db862ea01e tcp: annotate data-races around tp->bytes_retrans
    3e1b40e4f186 tcp: annotate data-races around tp->bytes_sent
    409a02760834 tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans
    eee072fe16c6 net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
    aaac3bed0342 nexthop: fix IPv6 route referencing IPv4 nexthop
    616db97e3aff net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys
    497925275838 macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
    f250c3772dd7 arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
    0fa0bcdebeb0 arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
    3098c905af2f arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
    6d9f35fe4638 PCMCIA: Fix garbled log messages for KERN_CONT
    ca962d175543 arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT
    7adb32513191 arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
    640aea541eba arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT
    1f285713fb8d arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT
    827ccceff758 arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT
    eecee15e263c crypto: ccp - copy IV using skcipher ivsize
    f19a744d5271 crypto: sa2ul - Fix AEAD fallback algorithm names
    424df78c8a64 drm/i915/wm: Verify the correct plane DDB entry
    ed5ca5d5b97c drm/i915: Loop over all active pipes in intel_mbus_dbox_update
    c2577b18c6e2 drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update()
    c5de9ff7939b drm/i915: Simplify watermark state checker calling convention
    73abb7c1fffd drm/i915: Constify watermark state checker
    cea15f66b7b6 f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
    756d1a3954fe f2fs: Use sysfs_emit_at() to simplify code
    21fe517179f3 clk: visconti: pll: initialize clk_init_data to zero
    caa74d80d749 lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
    db62a24a07b3 clk: qcom: dispcc-sc7180: Add missing MDSS resets
    5db0537ddef4 dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets
    166db4ebae34 clk: xgene: Fix mapping leak in xgene_pllclk_init()
    bf94322387ab clk: qoriq: avoid format string warning
    4ba394f83b3c clk: imx8mq: Correct the CSI PHY sels
    a778bbd3ab28 clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels()
    0d2ba7e2e4c6 clk: imx: imx6q: Fix device node reference leak in pll6_bypassed()
    235c36a86cb7 clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
    081d334fe42d clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
    d18b05a09142 clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
    9b54ebbe5d2f clk: qcom: gcc-sc8180x: Use retention for USB power domains
    a4cee425ae6b clk: qcom: gcc-sc8180x: Add missing GDSCs
    9109efceb709 dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
    d7aef29573c7 scsi: target: core: Fix integer overflow in UNMAP bounds check
    b6007cfea4ed clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers
    c5f4a211e82d scsi: sg: Resolve soft lockup issue when opening /dev/sgX
    d85a906b4e51 scsi: sg: Fix sysctl sg-big-buff register during sg_init()
    f9c921fd5264 scsi: sg: Make sg_sysfs_class constant
    fa4e1c583c9d clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source
    137b5918931d RDMA/core: Prefer NLA_NUL_STRING
    ba0843c19558 platform/x86: dell-wmi-sysman: bound enumeration string aggregation
    622754397ac5 platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()
    0b11fcbe80a5 fs/ntfs3: terminate the cached volume label after UTF-8 conversion
    a7fd0d0cb43f nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist()
    ccfa51ea8a40 mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()
    3d0e610c43cb platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup
    fed8b8f33a46 tty: hvc_iucv: fix off-by-one in number of supported devices
    61599d438e2d leds: lgm-sso: Remove duplicate assignments for priv->mmap
    bc7998e70fa7 platform/surface: surfacepro3_button: Drop wakeup source on remove
    e87c4c0095ac backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt()
    c5be52529ad8 dev_printk: add new dev_err_probe() helpers
    10bb319b0b18 i3c: mipi-i3c-hci: fix IBI payload length calculation for final status
    54dc499e5cb3 perf util: Kill die() prototype, dead for a long time
    2f3548314715 ipmi: ssif_bmc: change log level to dbg in irq callback
    bffedb7a72e6 ipmi: ssif_bmc: fix message desynchronization after truncated response
    7d2a487c275c ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure
    128845823138 perf expr: Return -EINVAL for syntax error in expr__find_ids()
    ea0078135c6a perf lock: Fix option value type in parse_max_stack
    9bab7d2a2850 pinctrl: abx500: Fix type of 'argument' variable
    92170bd2eadd perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace
    aceabce300c3 perf branch: Avoid incrementing NULL
    8fe5240c7bd8 pinctrl: cy8c95x0: Avoid returning positive values to user space
    03e71cc07cba pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
    091709439f88 pinctrl: cy8c95x0: remove duplicate error message
    a79fdd593c84 pinctrl: pinctrl-pic32: Fix resource leak
    d216b34a9f69 bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
    699e16e65962 bpf: allow UTF-8 literals in bpf_bprintf_prepare()
    520454e83971 bpf: Fix NULL deref in map_kptr_match_type for scalar regs
    2f954f8a04b7 bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
    d0d124dbcef9 bpf, sockmap: Take state lock for af_unix iter
    a94d3dd78ee8 bpf, sockmap: Fix af_unix null-ptr-deref in proto update
    3cef33b9813b bpf, sockmap: Fix af_unix iter deadlock
    7fd3b41260c6 bpf, arm64: Fix off-by-one in check_imm signed range check
    ad4505d2ab3a HID: usbhid: fix deadlock in hid_post_reset()
    5897c1dd1bfe mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
    295757c3b9de mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions
    560c0456e613 mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path
    cca2c083cfcb mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
    b194ae62e9e7 mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
    301e85ff299b mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook
    2e472d2bdc14 mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook
    036a794e7d7f mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations
    fab6b870dfe6 dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
    ba91de4f0f98 mtd: physmap_of_gemini: Fix disabled pinctrl state check
    033939479b10 HID: asus: do not abort probe when not necessary
    08c4fa3f5a9b HID: asus: make asus_resume adhere to linux kernel coding standards
    5dcb51558e78 ima: check return value of crypto_shash_final() in boot aggregate
    9399a9298935 tracing: Rebuild full_name on each hist_field_name() call
    c258fbf57113 soundwire: cadence: Clear message complete before signaling waiting thread
    0b73d5dfa3fe dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register()
    5acbbb205a1c soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
    faa66f358d30 dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function
    b9ae3942deec ocfs2: validate group add input before caching
    bb3c54d1e715 ocfs2: validate bg_bits during freefrag scan
    d919b905939e ocfs2: fix listxattr handling when the buffer is full
    f1e38ba97b1a ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended
    064494145a70 arm64/xor: fix conflicting attributes for xor_block_template
    08c073e8f8d5 ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
    96a30f7cb8e0 arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
    ccff9145cd52 soc: qcom: aoss: compare against normalized cooling state
    d672c7623306 soc: qcom: llcc: fix v1 SB syndrome register offset
    819d8ebad320 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
    f37de46149db ocfs2/dlm: validate qr_numregions in dlm_match_regions()
    813a47b03090 unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure
    39a8c0df2d5a soc/tegra: cbb: Set ERD on resume for err interrupt
    b87992ddf49a arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual
    7d6481cf2987 arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot
    03d523e50662 arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl
    a37e61cde05a arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes
    7ce6aa2eca26 arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes
    1563a05cf920 arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller
    4322d8c7af96 arm64: dts: qcom: sm8550: Fix GIC_ITS range length
    97bacd872319 arm64: dts: qcom: sm8450: Fix GIC_ITS range length
    1e014285a3cd soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
    9f54516bce15 soc: qcom: ocmem: register reasons for probe deferrals
    d45c46c0e84f soc: qcom: ocmem: use scoped device node handling to simplify error paths
    1637ce361b1d soc: qcom: ocmem: make the core clock optional
    2ecad03d6c5d arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
    5a0dcba6178f arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
    5b94fe0879bc arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
    167e5fa8feee arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
    fe1d1423c524 iommufd: vfio compatibility extension check for noiommu mode
    700e54a2beba arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1)
    036f599234e4 arm64: dts: imx8-apalis: Fix LEDs name collision
    cecc17692ebf memory: tegra30-emc: Fix dll_change check
    7e19e72f3064 memory: tegra124-emc: Fix dll_change check
    c13c938a8058 ARM: dts: mediatek: mt7623: fix efuse fallback compatible
    8fcefe840fa8 ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
    8be69e9245f8 efi/capsule-loader: fix incorrect sizeof in phys array reallocation
    233a0945a4b1 gfs2: prevent NULL pointer dereference during unmount
    bf5fcd9c37c2 gfs2: add some missing log locking
    6678dde26570 quota: Fix race of dquot_scan_active() with quota deactivation
    f57b68b36571 ktest: Run POST_KTEST hooks on failure and cancellation
    aa6b9e38086c ktest: Honor empty per-test option overrides
    5bddd0d3a926 ktest: Avoid undef warning when WARNINGS_FILE is unset
    232d67974a61 gfs2: Call unlock_new_inode before d_instantiate
    18216b8ab690 crypto: jitterentropy - replace long-held spinlock with mutex
    f57498d2bf16 dm cache: fix missing return in invalidate_committed's error path
    3a77b05ff2c4 ALSA: sc6000: Keep the programmed board state in card-private data
    dcbc2e2b2434 ALSA: sc6000: Use standard print API
    3e79a563377a spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback
    fa7881f3b627 PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
    bf98711d2f33 PCI: tegra194: Use DWC IP core version
    5d9c9dfef907 PCI: tegra194: Allow system suspend when the Endpoint link is not up
    2c87f49f2082 PCI: tegra194: Disable direct speed change for Endpoint mode
    272e9c4bcae8 PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"
    997122b96544 PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
    39564f51567e PCI: tegra194: Don't force the device into the D0 state before L2
    e81f33968542 PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0()
    fdb9c5a3a627 PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down
    8aa59b1e53a7 PCI: tegra194: Increase LTSSM poll time on surprise link down
    8f26b92dc606 PCI: tegra194: Fix polling delay for L2 state
    9e225563c5a9 ASoC: SOF: compress: return the configured codec from get_params
    2721d23db2e9 ALSA: scarlett2: Add missing sentinel initializer field
    7e805fdb16dc selftest: memcg: skip memcg_sock test if address family not supported
    05a3fd57cdfa Documentation: fix a hugetlbfs reservation statement
    11a810989a4d selftests/mm: skip migration tests if NUMA is unavailable
    07a5ecb94768 PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
    0afb2eca25be PCI: Enable AtomicOps only if Root Port supports them
    9f1daac27ca2 ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]
    5f1035ba3ed9 crypto: qat - use swab32 macro
    1ac96689ce29 ASoC: qcom: qdsp6: topology: check widget type before accessing data
    d39e8c3724a6 ASoC: fsl_easrc: Change the type for iec958 channel status controls
    4d427d3f507a ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
    a2e9527bc88e ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()
    4428887805ef ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
    0dddb5642d64 ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
    ceb388682ea1 ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
    4605327fd688 ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state()
    a6bc5432055b ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
    62c4ab11840d ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
    6adc82ff2f20 ASoC: fsl_micfil: Add access property for "VAD Detected"
    4ba05463862c pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()
    3a73abb39037 pmdomain: ti: omap_prm: Fix a reference leak on device node
    bad87bdd52f5 drm/msm/a6xx: Use barriers while updating HFI Q headers
    98fce340ec48 drm/msm/shrinker: Fix can_block() logic
    679a533d2235 drm/msm/a6xx: Fix HLSQ register dumping
    f101e4ebf1fc ASoC: SOF: Intel: hda: Place check before dereference
    2958b391d9c5 ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}')
    ad08dd4476eb drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
    ef1c7aaa1319 drm/amd/pm/ci: Fill DW8 fields from SMC
    9e6d83f651ac drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
    4cf77e3298e4 drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
    37f93b3159fa drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
    cc88a98c873b drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
    33da7d5b6a50 drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
    9a7f12105f0e ALSA: core: Validate compress device numbers without dynamic minors
    0558d1b0b5f0 drm/panel: simple: Correct G190EAN01 prepare timing
    c4fc7ed73a0a drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
    97d360a0112e drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
    af6825d3e446 drm/msm/dsi: add the missing parameter description
    9830999c9e06 drm/msm/dpu: fix mismatch between power and frequency
    94d99e853617 spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo
    8ebaa3deb04f drm/amdgpu/gfx10: look at the right prop for gfx queue priority
    a6d44f477000 padata: Put CPU offline callback in ONLINE section to allow failure
    0e664e99abb4 padata: Remove cpu online check from cpu add and removal
    39024f54f098 crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs
    59fce560694d crypto: atmel - Use unregister_{aeads,ahashes,skciphers}
    60c571a7d8d0 crypto: atmel - Remove cfb and ofb
    3cd5cae11afa fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break
    6f866e941a7e dm init: ensure device probing has finished in dm-mod.waitfor=
    5af3d8f2acb6 drm/amdgpu: Add default case in DVI mode validation
    ef0d045ebbaf drm/sun4i: Fix resource leaks
    6040b24095a8 spi: fsl-qspi: Use reinit_completion() for repeated operations
    dc97ec849559 drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check
    b01a582c8c6f drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs
    5302015daf26 drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
    d4ac87567f86 dm log: fix out-of-bounds write due to region_count overflow
    15c30997dca6 dm cache metadata: fix memory leak on metadata abort retry
    2ebe1ab83292 platform/chrome: chromeos_tbmc: Drop wakeup source on remove
    12105c7f1837 dm cache: fix dirty mapping checking in passthrough mode switching
    89e04987574a dm cache: support shrinking the origin device
    d90accff225f dm cache: fix concurrent write failure in passthrough mode
    ac5ee9944389 dm cache policy smq: fix missing locks in invalidating cache blocks
    ecb10c193cbe dm cache: fix write hang in passthrough mode
    ceff6df26691 dm cache: fix write path cache coherency in passthrough mode
    0aa745fea1f8 dm cache: fix null-deref with concurrent writes in passthrough mode
    002a5f925d42 ASoC: sti: use managed regmap_field allocations
    686a6b305ec8 ASoC: sti: Return errors from regmap_field_alloc()
    cf615b90a11a drm/sun4i: backend: fix error pointer dereference
    d8a541906860 drm/komeda: fix integer overflow in AFBC framebuffer size check
    866d3d9b8775 net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
    1943e71a0d6a sctp: fix missing encap_port propagation for GSO fragments
    cc4dead22ede net: phy: qcom: at803x: Use the correct bit to disable extended next page
    22f22f1346b4 net: phy: move at803x PHY driver to dedicated directory
    e30356c3cf2f net: phy: add Rust Asix PHY driver
    014860036d1f net: phy: aquantia: move to separate directory
    77a853aec710 Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
    6b4d226d01ab Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
    a673cf6c4ac7 Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
    315acf971d75 Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU
    0a04db240eff bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
    61a9b216ca5b net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic()
    02c1256f1990 net/mlx5e: Fix features not applied during netdev registration
    4f1ca61e5311 dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110
    b3682e7ad450 net: ipa: Fix decoding EV_PER_EE for IPA v5.0+
    f7361841d0ce net: ipa: Fix programming of QTIME_TIMESTAMP_CFG
    954745d0223e ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
    e19c5ed9f192 bpf: Fix OOB in pcpu_init_value
    07035306bf72 net/rds: Restrict use of RDS/IB to the initial network namespace
    2c7883d606aa net/rds: Optimize rds_ib_laddr_check
    f23424a0ddad net/sched: act_ct: Only release RCU read lock after ct_ft
    e9cf4018d742 net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
    f4ed5d750b4a 6pack: propagage new tty types
    b1f7158a86f3 bpf: Fix RCU stall in bpf_fd_array_map_clear()
    8849b50e81a2 netfilter: nft_fwd_netdev: check ttl/hl before forwarding
    9ca570236cc0 netfilter: xt_socket: enable defrag after all other checks
    e8206538cbaf net: bcmgenet: fix racing timeout handler
    1b0865a6efce net: bcmgenet: switch to use 64bit statistics
    991cd78f95f2 net: bcmgenet: support reclaiming unsent Tx packets
    355b61569e84 net: bcmgenet: move DESC_INDEX flow to ring 0
    df3a1bb0ae1a net: bcmgenet: add bcmgenet_has_* helpers
    d650d12d58ef net: bcmgenet: Remove custom ndo_poll_controller()
    2a7459017042 net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
    03d97b558d80 arm64: kexec: Remove duplicate allocation for trans_pgd
    0e72fd7f05ae ACPI: AGDI: fix missing newline in error message
    3ff85ae79e1a bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
    26b380a3ca0b bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
    d3f280be48f1 wifi: brcmfmac: Fix error pointer dereference
    a713b72ff88c bpf: Fix stale offload->prog pointer after constant blinding
    b4b5a20bed82 bpf: fix end-of-list detection in cgroup_storage_get_next_key()
    1aa61a6f42ad macvlan: annotate data-races around port->bc_queue_len_used
    0adec27bde44 selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
    81bc3a2ccc37 selftests/powerpc: Re-order *FLAGS to follow lib.mk
    7ca35863213c powerpc/crash: fix backup region offset update to elfcorehdr
    6e474972b85e r8152: fix incorrect register write to USB_UPHY_XTAL
    ea04b9881534 wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap()
    571a05ea1baa bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
    eefe0c2ea2c3 bpf, devmap: Remove unnecessary if check in for loop
    6d5202409467 wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()
    66f2a0becd35 wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
    6cf44608d5e6 arm64: cpufeature: Make PMUVer and PerfMon unsigned
    63fe66f10283 wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
    4dd75a78cdfb wifi: mt76: mt7915: fix use_cts_prot support
    382cbdf6e484 wifi: mt76: mt7615: fix use_cts_prot support
    c8e46d0664c4 wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr()
    231b895daa02 module: Fix freeing of charp module parameters when CONFIG_SYSFS=n
    e6962cb18a89 params: Replace __modinit with __init_or_module
    edc90a12073b s390/bpf: Zero-extend bpf prog return values and kfunc arguments
    e70b9c2292cc dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n
    6e8d309bc69b dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
    c7ad31fb948f bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
    5d81743ee3cc bpf: Add CHECKSUM_COMPLETE to bpf test progs
    008c456b76e9 wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
    255cc1d30f32 wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
    a5af71c6181e firmware: dmi: Correct an indexing error in dmi.h
    240f832a9c20 locking: Fix rwlock support in <linux/spinlock_up.h>
    ca2d280b9b38 hrtimer: Reduce trace noise in hrtimer_start()
    ece8be21d8c9 hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns()
    16774f7333fc hrtimers: Update the return type of enqueue_hrtimer()
    b54f14e1460c irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter
    c4295487124f s390/cio: use generic driver_override infrastructure
    9d606425a752 s390/cio: convert sprintf()/snprintf() to sysfs_emit()
    3d0cfecf4ff7 s390/cio: make sch->lock spinlock pointer a member
    6325eea40a95 debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str()
    f9c489418b8e debugfs: check for NULL pointer in debugfs_create_str()
    fc6ecb4b8ef9 thermal/drivers/spear: Fix error condition for reading st,thermal-flags
    f75ea8cdca54 devres: fix missing node debug info in devm_krealloc()
    d172f1c8a8b3 ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
    9a6f4d85a016 ACPI: x86: cmos_rtc: Clean up address space handler driver
    da8255040938 pstore/ram: fix resource leak when ioremap() fails
    4048ed98860d blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()
    b88f905d4449 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
    5dd9d864eb96 loop: fix partition scan race between udev and loop_reread_partitions()
    282e06e6d494 drbd: Balance RCU calls in drbd_adm_dump_devices()
    131ea3e57fc2 fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
    467289e0d0f2 blk-cgroup: wait for blkcg cleanup before initializing new disk

(From OE-Core rev: 050911a7705f3bb17d30034f3f16372b2e79b85d)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 7f8ff2413f linux-yocto/6.6: update to v6.6.140
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    eac8889a3a1c Linux 6.6.140
    4c3ed344a970 smb: client: use kzalloc to zero-initialize security descriptor buffer
    2074dfffad76 Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
    b94588f5a697 crypto: nx - fix context leak in nx842_crypto_free_ctx
    d7e42dc47beb Bluetooth: MGMT: Fix memory leak in set_ssp_complete
    f7c14993dc2f mtd: spi-nor: sst: Fix SST write failure
    5bb5faff4837 drm/amdgpu/vcn4: Avoid overflow on msg bound check
    1936310f68c5 drm/amdgpu/vcn3: Avoid overflow on msg bound check
    9b2c795bb2c6 vsock/virtio: fix length and offset in tap skb for split packets
    65c484726e74 vsock/virtio: fix accept queue count leak on transport mismatch
    a998a7e250bf vsock: fix buffer size clamping order
    944d76f749dd KVM: arm64: Wake-up from WFI when iqrchip is in userspace
    83ce43a21bb7 ceph: only d_add() negative dentries when they are unhashed
    09a69a3d8f97 usb: dwc3: Move GUID programming after PHY initialization
    033c80d80fd1 tracing/probes: Limit size of event probe to 3K
    f5ee467b5676 btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
    6b57d6e4c302 batman-adv: tp_meter: fix tp_num leak on kmalloc failure
    79bc0eaeef2c batman-adv: stop tp_meter sessions during mesh teardown
    c2287250ba69 pwm: imx-tpm: Count the number of enabled channels in probe
    3666c037fbde mtd: spi-nor: sst: Fix write enable before AAI sequence
    b7cd63d13fae mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()`
    0000a7780e0e ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
    b32f4cd81ef5 mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
    8e7317598d72 usb: typec: tcpm: reset internal port states on soft reset AMS
    2b26b1ec4c1d mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
    0dd8917f35da mm/damon/core: implement damon_kdamond_pid()
    7c504ffab3ef rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
    cfa4267b5075 mm/damon/core: disallow time-quota setting zero esz
    172dcb67dd35 bonding: fix use-after-free due to enslave fail after slave array update
    cf1fd517f892 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
    c0428a22daf6 rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
    594973a2e549 fbcon: Avoid OOB font access if console rotation fails
    f4b177f96955 spi: microchip-core-qspi: fix controller deregistration
    091499f90e09 spi: microchip-core-qspi: Use helper function devm_clk_get_enabled()
    420d6f5e3fb4 mm/hugetlb_cma: round up per_node before logging it
    fa7aaaed583a spi: uniphier: fix controller deregistration
    3e272e6be1a2 spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
    c9577d966503 spi: uniphier: switch to use modern name
    664b60985a77 spi: tegra20-sflash: fix controller deregistration
    4541a6cbec27 spi: tegra114: fix controller deregistration
    df771f250402 spi: sun6i: fix controller deregistration
    9da85b209f26 spi: sun6i: switch to use modern name
    7fd0c4fd2185 spi: zynq-qspi: fix controller deregistration
    dc2044ef3647 spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
    ae6ee9f16538 spi: zynq-qspi: switch to use modern name
    db96551920e2 spi: ti-qspi: fix controller deregistration
    25ba53c43f30 spi: spi-ti-qspi: switch to use modern name
    3b6cededf65a spi: spi-ti-qspi: Convert to platform remove callback returning void
    1cdba535877d spi: sun4i: fix controller deregistration
    79a38ff2bd3d spi: sun4i: switch to use modern name
    904ff4e79961 spi: syncuacer: fix controller deregistration
    5bbe69946620 spi: synquacer: switch to use modern name
    6823f730bf19 Bluetooth: hci_conn: fix potential UAF in create_big_sync
    b4a53add2fa8 xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
    0555d4f52623 xfrm: ah: account for ESN high bits in async callbacks
    9d3968c48367 net: ipv6: stop checking crypto_ahash_alignmask
    0841fc6a36c3 net: ipv4: stop checking crypto_ahash_alignmask
    7e78a5bcbd65 ALSA: seq: Fix UMP group 16 filtering
    dbacde3d4755 ALSA: seq: Notify client and port info changes
    3915715273cd ALSA: core: Serialize deferred fasync state checks
    fe337552143f ALSA: misc: Use guard() for spin locks
    409fb34c1860 ALSA: hda: cs35l56: Propagate ASP TX source control errors
    247ed8a969f9 tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
    e1c50b273298 net: stmmac: Prevent NULL deref when RX memory exhausted
    8a2c91de61ff net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
    6a74af77eba5 net: stmmac: avoid shadowing global buf_sz
    2adbfca7452e crypto: caam - guard HMAC key hex dumps in hash_digest_key
    f3a3e2dac5ec printk: add print_hex_dump_devel()
    43a878639b90 erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
    6923cde8dc1d crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
    268ae55a4c4f crypto: nx - Migrate to scomp API
    c5fa7465794c crypto: nx - Avoid -Wflex-array-member-not-at-end warning
    bf96052d617b ksmbd: reset rcount per connection in ksmbd_conn_wait_idle_sess_id()
    e1c24ce7573d wifi: rtl8xxxu: fix potential use of uninitialized value
    3ca80e3012c8 hfsplus: fix held lock freed on hfsplus_fill_super()
    61a790974ff7 hfsplus: fix uninit-value by validating catalog record size
    82fb9da6477d xfs: fix a resource leak in xfs_alloc_buftarg()
    b58baa1d50aa mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs
    058b451b1039 udf: fix partition descriptor append bookkeeping
    401a49b7f26e firmware: google: framebuffer: Do not unregister platform device
    2a40f8bc9bb7 fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
    a2c817c62943 spi: fix resource leaks on device setup failure
    4c4641366143 net: qrtr: ns: Limit the total number of nodes
    0dbec101a707 net: qrtr: ns: Limit the maximum number of lookups
    e6f6cd501fb5 net: qrtr: ns: Limit the maximum server registration per node
    0b9e4bbfb7c9 net: bridge: use a stable FDB dst snapshot in RCU readers
    218b772e4815 net: mctp: fix don't require received header reserved bits to be zero
    6a2d6273b6c3 RDMA/mana_ib: Disable RX steering on RSS QP destroy
    8d4edc89bf71 sched: Use u64 for bandwidth ratio calculations
    ede9eca9701d block: relax pgmap check in bio_add_page for compatible zone device pages
    18d6a7c9e4e6 media: rc: igorplugusb: heed coherency rules
    69b3a50dee62 ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
    32fbdb6d6718 media: rc: ttusbir: respect DMA coherency rules
    35bcafc82254 ALSA: aoa: i2sbus: clear stale prepared state
    a045146109ea ALSA: aoa: Use guard() for mutex locks
    07f9bff69da8 ipmi:ssif: Clean up kthread on errors
    1f5e011fc8c8 ipmi:ssif: Fix a shutdown race
    37a430a2d4e6 thermal: core: Fix thermal zone governor cleanup issues
    78509c488c5d PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete
    801000afc9c9 wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
    b3303d6e92f6 wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
    b968db3b8b4f wifi: mt76: connac: introduce helper for mt7925 chipset
    8dc5b98c20aa arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
    bf477abd448c lib: test_hmm: evict device pages on file close to avoid use-after-free
    11869ce402d9 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
    7edd983e42ee f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally
    35baa66a8cd7 ksmbd: replace connection list with hash table
    b0b3d62d7230 ksmbd: use msleep instaed of schedule_timeout_interruptible()
    1171f329cf1c f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
    8e47d297e7cf smb: client: validate the whole DACL before rewriting it in cifsacl
    325d4ac11f52 ksmbd: require minimum ACE size in smb_check_perm_dacl()
    1593ddb37bd1 smb: common: change the data type of num_aces to le16
    795dddb10687 smb: move some duplicate definitions to common/smbacl.h
    65419eb4259a batman-adv: bla: put backbone reference on failed claim hash insert
    7b8fbcee3184 batman-adv: bla: only purge non-released claims
    368449e467d5 batman-adv: bla: prevent use-after-free when deleting claims
    aafcbaf1159e batman-adv: stop caching unowned originator pointers in BAT IV
    e4a3c4a4c8f6 batman-adv: reject new tp_meter sessions during teardown
    f61499359fa5 batman-adv: fix integer overflow on buff_pos
    1bfb06ecb00f sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
    ee4c7a919761 drm/amdgpu/pm: align Hawaii mclk workaround with radeon
    a103f1192dc7 drm/amdgpu/pm: add missing revision check for CI
    4f7ca00fa91d drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
    b5de35bafcd3 drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
    91fbb5e635c8 drm/amdgpu: zero-initialize GART table on allocation
    b8cbc52c73fa drm/radeon: add missing revision check for CI
    91c6dc5a4169 drm/amdkfd: validate SVM ioctl nattr against buffer size
    6b992591e04f drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
    638d3e0b9eb7 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
    c72a8b4dc6d5 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
    944db9cfa537 drm/amdgpu/vce: Prevent partial address patches
    1dc005775fb5 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
    0fb5cb556b24 drm/amdgpu: Add bounds checking to ib_{get,set}_value
    4a8093c7def1 drm/amdkfd: Add upper bound check for num_of_nodes
    1db431380879 drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
    01eea4d12fb6 spi: cadence: fix unclocked access on unbind
    31e7dd252bf7 spi: cadence: fix controller deregistration
    bb6b50f709c5 spi: mpc52xx: fix use-after-free on unbind
    59abb878f5a6 spi: orion: fix clock imbalance on registration failure
    678a461af304 spi: orion: fix runtime pm leak on unbind
    1f120e1a3e1e spi: imx: fix runtime pm leak on probe deferral
    17aa64b8fe3e spi: img-spfi: fix controller deregistration
    77defd64b405 spi: rspi: fix controller deregistration
    c6f82bd90a71 spi: sprd: fix controller deregistration
    6dd37ce42ac7 spi: coldfire-qspi: fix controller deregistration
    3ad32a7140eb spi: bcmbca-hsspi: fix controller deregistration
    562d954a1449 spi: fsl: fix controller deregistration
    59da4cdd0c7b spi: sh-hspi: fix controller deregistration
    863edec24c1d spi: mtk-nor: fix controller deregistration
    4ea9a1ad663c spi: omap2-mcspi: fix controller deregistration
    89c0a7762104 spi: fsl-espi: fix controller deregistration
    2be39222d6ca spi: s3c64xx: fix controller deregistration
    b9d4b9c3457c spi: dln2: fix controller deregistration
    951694f9fab9 media: omap3isp: drop the use count of v4l2 pipeline
    e85f1e23168f media: i2c: ov08d10: fix image vertical start setting
    0b49f5dabc3a media: staging: imx: request mbus_config in csi_start
    2dde85b42abd media: i2c: imx412: Assert reset GPIO during probe
    97dbf8e69f3a media: dib8000: avoid division by 0 in dib8000_set_dds()
    492c5292540f media: pci: zoran: fix potential memory leak in zoran_probe()
    f3290d970bbe platform/x86: hp-wmi: Ignore backlight and FnLock events
    3ce8f3057c51 media: saa7164: add ioremap return checks and cleanups
    55be73783f11 spi: at91-usart: fix controller deregistration
    70c2ee9cab5c spi: qup: fix controller deregistration
    5a531cbb3bce spi: lantiq-ssc: fix controller deregistration
    38321b03b8c2 regulator: bd9571mwv: fix OF node reference imbalance
    0da216314247 regulator: act8945a: fix OF node reference imbalance
    feb17524aa4e media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
    da769e8f8e34 regulator: rk808: fix OF node reference imbalance
    5b7471dce523 media: rc: streamzap: Error handling in probe
    0cc9251833bf media: rc: xbox_remote: heed DMA restrictions
    cd8f1633c3e8 regulator: max77650: fix OF node reference imbalance
    e46b3b0c9c44 regulator: mt6357: fix OF node reference imbalance
    8c7a281a9922 staging: media: atomisp: Disallow all private IOCTLs
    f367ddf1299e spi: atmel: fix controller deregistration
    725b90ce70a7 spi: bcm63xx: fix controller deregistration
    fd10fb4c33bd media: i2c: ov8856: free control handler on error in ov8856_init_controls()
    6467d656e689 media: uvcvideo: Enable VB2_DMABUF for metadata stream
    0bc4cf1a6ba0 HID: playstation: Clamp num_touch_reports
    df870e104571 exit: Sleep at TASK_IDLE when waiting for application core dump
    0b8167e83647 LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup
    07d190e4ec68 LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
    db7f65df10bd KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
    70d12291805a KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value
    42dd1c91f993 f2fs: fix node_cnt race between extent node destroy and writeback
    88b98e3cfb92 f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
    72ec0749a1ba f2fs: fix fiemap boundary handling when read extent cache is incomplete
    a2bcf16cdf79 f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
    ebeb70e29e37 mptcp: fix scheduling with atomic in timestamp sockopt
    a79bafdd4b63 mptcp: sockopt: set timestamp flags on subflow socket, not msk
    bd36fb4f9446 mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
    23e881c7fedb mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
    114b4a6d4ede mptcp: fastclose msk when linger time is 0
    ecc36a82ecfc RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
    e3dc3a2fb05f RDMA/rxe: Reject unknown opcodes before ICRC processing
    539cabb7b2d8 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
    e01a957561f6 RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
    a13c2ac4d480 RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
    c5dc30da9900 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
    92582c6978d9 power: supply: max17042: avoid overflow when determining health
    27f7c024ede4 PCI/AER: Stop ruling out unbound devices as error source
    3937fa851992 PCI/AER: Clear only error bits in PCIe Device Status
    b1e9f2d58707 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
    971f17f5d910 KVM: x86: check for nEPT/nNPT in slow flush hypercalls
    ba7f71b6161c smb: client: validate dacloffset before building DACL pointers
    ef6495d4df6e smb/client: fix out-of-bounds read in symlink_data()
    dffb44b2e06a smb/client: fix out-of-bounds read in smb2_compound_op()
    e5c93847bf03 s390/debug: Reject zero-length input in debug_input_flush_fn()
    fb4ae739811d RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
    c741433f6c8d openvswitch: vport: fix self-deadlock on release of tunnel ports
    9a4d7222c095 nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
    d525ecf92228 nvme-apple: drop invalid put of admin queue reference count
    4af2e558e6fd md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
    2ae0afd98432 libceph: Fix slab-out-of-bounds access in auth message processing
    470822125b62 lib/scatterlist: fix temp buffer in extract_user_to_sg()
    3f17500e86d7 lib/scatterlist: fix length calculations in extract_kvec_to_sg
    2aa77a18dc7f lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
    bb0988ed4f2e isofs: validate block number from NFS file handle in isofs_export_iget
    c9b37c8b73f6 isofs: validate Rock Ridge CE continuation extent against volume size
    5489c98bc681 dm-verity-fec: correctly reject too-small hash devices
    2e28bb9cc39f dm-verity-fec: correctly reject too-small FEC devices
    ae9cd0b46b18 eventfs: Hold eventfs_mutex and SRCU when remount walks events
    f0b0b09d9840 dm: fix a buffer overflow in ioctl processing
    16fc9f57b5d7 dm: don't report warning when doing deferred remove
    12161e03d33a dm-thin: fix metadata refcount underflow
    c2670ec4aa49 btrfs: fix double free in create_space_info() error path
    f7126b0b2455 ASoC: qcom: q6apm: remove child devices when apm is removed
    3141d8b00cad ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
    cb25b46a8dbe ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
    ef1b78a68675 ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error
    a06bd365a587 ASoC: fsl_easrc: fix comment typo
    d91e616474c6 ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table
    88f32a6806c8 cpuidle: powerpc: avoid double clear when breaking snooze
    47bc7a03449c clk: microchip: mpfs-ccc: fix out of bounds access during output registration
    be8af24ff376 clk: imx: imx8-acm: fix flags for acm clocks
    d79e92161b65 spi: topcliff-pch: fix use-after-free on unbind
    5f08cbdce0f3 thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp
    c040f6c5402c thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata
    50dfaf4a0277 udf: reject descriptors with oversized CRC length
    82bc89fbb82d ibmveth: Disable GSO for packets with small MSS
    9415a3fbf677 hv_sock: fix ARM64 support
    a0ea2ee6ec05 gpio: of: clear OF_POPULATED on hog nodes in remove path
    476254a6c87c extcon: ptn5150: handle pending IRQ events during system resume
    2a5ed5055d1e cifs: change_conf needs to be called for session setup
    ff519f87c36b cifs: abort open_cached_dir if we don't request leases
    3d2ecbd444b0 block: add pgmap check to biovec_phys_mergeable
    0d7e7235bc54 af_unix: Reject SIOCATMARK on non-stream sockets
    d6c7f32094d6 hwmon: (corsair-psu) Close HID device on probe errors
    39f0604bf1ae clk: rk808: fix OF node reference imbalance
    0fc5303fa33d hwmon: (ltc2992) Fix u32 overflow in power read path
    66daaf79de20 hwmon: (ltc2992) Clamp threshold writes to hardware range
    c9a3b2fb4003 parisc: Fix IRQ leak in LASI driver
    f94450ce5053 net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
    21d70744e6d3 net/rds: handle zerocopy send cleanup before the message is queued
    eca62bb0569d ip6_gre: Use cached t->net in ip6erspan_changelink().
    d3bd80404979 net: libwx: fix VF illegal register access
    6162e8212e88 sound: ua101: fix division by zero at probe
    0653c0516234 net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
    9a80c458320e mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
    895ebbedf883 fanotify: fix false positive on permission events
    f39501ea776f staging: vme_user: fix root device leak on init failure
    1108b8722b9f spi: s3c64xx: fix NULL-deref on driver unbind
    487f65651549 spi: zynqmp-gqspi: fix controller deregistration
    5105f3e6b2df Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
    ab77c8bc3026 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
    6cb7f67bc28d Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
    1e1e509b6fd2 Bluetooth: virtio_bt: validate rx pkt_type header length
    ed41c81d30b2 Bluetooth: virtio_bt: clamp rx length before skb_put
    4aec732807c5 selinux: prune /sys/fs/selinux/disable
    01231051fa45 selinux: shrink critical section in sel_write_load()
    ebd425067290 selinux: don't reserve xattr slot when we won't fill it
    c2efc4956981 ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
    3bf4e93ed085 xfrm: provide message size for XFRM_MSG_MAPPING
    0f39c2626617 powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
    cdbd10975b96 ALSA: firewire-tascam: Do not drop unread control events
    b0c0d44adb55 usb: ulpi: fix memory leak on ulpi_register() error paths
    20284bf5cc84 USB: serial: option: add Telit Cinterion LE910Cx compositions
    9b92535cb729 USB: omap_udc: DMA: Don't enable burst 4 mode
    91c3634bc6ac ALSA: usb-audio: Fix UAC3 cluster descriptor size check
    e0e3dcf48189 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
    a3c42466f45c ALSA: usb-audio: midi2: Restart output URBs on resume
    d06d937b0a4c usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
    6e29c32a2721 usb: usblp: fix heap leak in IEEE 1284 device ID via short response
    ed4168d1a50f wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
    c3d7b90dc950 wifi: b43: enforce bounds check on firmware key index in b43_rx()
    fe75fa1ac9a9 wifi: mac80211: remove station if connection prep fails
    83226c71af53 wifi: ath5k: do not access array OOB
    95fcb436586d wifi: rsi: fix kthread lifetime race between self-exit and external-stop
    03584528bfff wifi: mac80211: drop stray 'static' from fast-RX rx_result
    1baaeb6adecb wifi: b43legacy: enforce bounds check on firmware key index in RX path
    d04bc2355392 wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work
    e451c325b000 wifi: mt76: mt7921: fix a potential clc buffer length underflow
    640b4c00fb0e exit: prevent preemption of oopsing TASK_DEAD task
    e4bbd3521db0 bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
    aa71ab2cc929 selftests/bpf: validate fake register spill/fill precision backtracking logic
    2fcd619caecb bpf: handle fake register spill to stack with BPF_ST_MEM instruction
    f013c1dafe93 selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros
    c05c8db19cd3 bpf: track aligned STACK_ZERO cases as imprecise spilled registers
    9d2cf5a4a378 selftests/bpf: validate zero preservation for sub-slot loads
    d3b398ee3404 bpf: preserve constant zero when doing partial register restore
    6d40191708e1 selftests/bpf: validate STACK_ZERO is preserved on subreg spill
    57f41f1eac13 bpf: preserve STACK_ZERO slots on partial reg spills
    c994886689fe selftests/bpf: add stack access precision test
    e4da60feca4d bpf: support non-r10 register spill/fill to/from stack in precision tracking
    36aa34f42cb6 net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
    898a1751b620 KVM: SVM: check validity of VMCB controls when returning from SMM
    695b491dc3f2 dmaengine: idxd: Fix leaking event log memory
    5ba95b119aa7 dmaengine: idxd: Fix crash when the event log is disabled
    0305e7118451 net: txgbe: fix RTNL assertion warning when remove module
    db104b0d8a78 flow_dissector: do not dissect PPPoE PFC frames
    da54b3039d43 net: Fix icmp host relookup triggering ip_rt_bug
    d51bf43193b1 iommu/amd: serialize sequence allocation under concurrent TLB invalidations
    c28c87d9a389 iommu/amd: Use atomic64_inc_return() in iommu.c
    488e386484ec KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
    4772032a2c62 rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
    4d08401aa13f ext4: validate p_idx bounds in ext4_ext_correct_indexes
    e3bf143b1e98 rxrpc: Fix potential UAF after skb_unshare() failure
    0d645c6d13fa spi: meson-spicc: Fix double-put in remove path
    e2c2b044458c x86/shstk: Prevent deadlock during shstk sigreturn
    21159d8b335a drm/amd/display: Do not skip unrelated mode changes in DSC validation
    c79cf4232160 x86: shadow stacks: proper error handling for mmap lock
    4a0bb8f9f71b spi: rockchip: fix controller deregistration
    327a64241f30 ASoC: SOF: Don't allow pointer operations on unconfigured streams
    cf3eb7c8e705 iommufd: Fix a race with concurrent allocation and unmap
    3bb92bac4e27 ACPI: video: force native backlight on HP OMEN 16 (8A44)
    95242430c136 ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
    419d6c640da7 ACPI: scan: Use acpi_dev_put() in object add error paths
    4f312c30f036 fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
    ce905b65e649 ipmi:si: Return state to normal if message allocation fails
    2418e4b21fb1 ipmi: Check event message buffer response for bad data
    67c44e0deba9 ipmi: Add limits to event and receive message requests
    1f678d13e939 scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
    bffef0acec9c netfilter: reject zero shift in nft_bitwise
    6bd17925bd68 net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
    50c6a1f05973 ALSA: caiaq: fix usb_dev refcount leak on probe failure
    be0376affcaf drm/amdgpu: fix zero-size GDS range init on RDNA4
    8e8be63465a5 ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
    e4389fb74cec ALSA: caiaq: Don't abort when no input device is available
    be62c8bb03b6 ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
    68532b09cbfc driver core: Add kernel-doc for DEV_FLAG_COUNT enum value
    b69933e97efe crypto: authencesn - reject short ahash digests during instance creation
    e3cebcde0114 seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode
    262152ec3710 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
    8a1fc8d698ac rtmutex: Use waiter::task instead of current in remove_waiter()
    a954061b334e ntfs3: fix integer overflow in run_unpack() volume boundary check
    bf7ac4a1d3bf ntfs3: add buffer boundary checks to run_unpack()
    98f4ba3480b9 ktest: Fix the month in the name of the failure directory
    9d8fd84aab19 IB/core: Fix zero dmac race in neighbor resolution
    35f6b3281efd dm mirror: fix integer overflow in create_dirty_log()
    c5a45d14234b crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
    5281e6e23023 crypto: atmel-tdes - fix DMA sync direction
    3061c9bfb3f5 crypto: ccree - fix a memory leak in cc_mac_digest()
    5b71db0780f1 crypto: hisilicon - Fix dma_unmap_single() direction
    3f92c1de3bf1 crypto: atmel-ecc - Release client on allocation failure
    b63f1e2f0e31 crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
    d78ee361b365 crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit
    4b7d07747400 can: ucan: fix devres lifetime
    204028af77a2 Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
    6cbf21775ee6 taskstats: set version in TGID exit notifications
    ab5fdcd53564 tcp: call sk_data_ready() after listener migration
    8bcc1cd237ab inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
    33698bd1b2db md/raid5: validate payload size before accessing journal metadata
    09880592f5a9 md/raid5: fix soft lockup in retry_aligned_read()
    1bc1107a3a40 ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
    ab6da97bc310 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
    8bbed28f6b42 io_uring/poll: fix multishot recv missing EOF on wakeup race
    d26f8c361f75 mtd: docg3: fix use-after-free in docg3_release()
    980d6ba22747 mtd: docg3: Convert to platform remove callback returning void
    ddb188b88d55 KVM: nSVM: Add missing consistency check for nCR3 validity
    23ccf4affa6c KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS
    de6d8562a9cf KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT
    c0095cef7303 KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
    83754e459c4b KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
    ddc242a7bb44 KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
    d218a0e8a63c KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT
    263640149d81 KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode
    36f36a6e4e74 KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts
    3ac9d4241d20 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
    1709418535a8 KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
    702ce67817de KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2
    15003179c74d KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
    35053cdec119 KVM: x86: Defer non-architectural deliver of exception payload to userspace read
    f3deabe0f5ac userfaultfd: allow registration of ranges below mmap_min_addr
    14c643ecdc42 mm/damon/core: use time_in_range_open() for damos quota window start
    d975c077fbdc rtc: ntxec: fix OF node reference imbalance
    f92cc1d2c0b4 tpm: tpm_tis: stop transmit if retries are exhausted
    2e0fd1cb4de4 tpm: tpm_tis: add error logging for data transfer
    a866e2b1c65e crypto: talitos - rename first/last to first_desc/last_desc
    00463d5f864a crypto: talitos - fix SEC1 32k ahash request limitation
    a72815210182 arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
    00b1d0f4e7bb mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
    0aaa43198645 mmc: block: use single block write in retry
    fdabbc881930 randomize_kstack: Maintain kstack_offset per task
    c03556448d47 power: supply: axp288_charger: Do not cancel work before initializing it
    703fb43600c2 LoongArch: Show CPU vulnerabilites correctly
    41aec1d85b88 tpm: avoid -Wunused-but-set-variable
    64282a745897 extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
    4b2738b93eda libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
    92e7c209036d ipv4: icmp: validate reply type before using icmp_pointers
    2fd4f8b74930 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
    3e75d06cf3e4 drm/arcpgu: fix device node leak
    fa0c4283efef net: ks8851: Avoid excess softirq scheduling
    640a7631d31d net: ks8851: Reinstate disabling of BHs around IRQ handler
    f0858e1d5624 net/smc: avoid early lgr access in smc_clc_wait_msg
    e98bd8888e3f net: txgbe: fix firmware version check
    8fdbb6262a4a net: rds: fix MR cleanup on copy error
    ff78ed177a66 net: qrtr: ns: Free the node during ctrl_cmd_bye()
    4069329eeba0 tools/accounting: handle truncated taskstats netlink messages
    d61482be4aae rxrpc: Fix re-decryption of RESPONSE packets
    f1c6bd0cc786 rxrpc: Fix rxkad crypto unalignment handling
    c4b8f32e73ea rxrpc: Fix memory leaks in rxkad_verify_response()
    97a97090872f iio: adc: ad7768-1: fix one-shot mode data acquisition
    528763fd6bb8 ALSA: pcmtest: Fix resource leaks in module init error paths
    c21ef73713eb ALSA: pcmtest: fix reference leak on failed device registration
    99c8060c3b33 ALSA: 6fire: Fix input volume change detection
    f537e3ad6960 ALSA: caiaq: Handle probe errors properly
    f4dfbdc1be34 ALSA: caiaq: Fix control_put() result and cache rollback
    e794e1763e80 ALSA: core: Fix potential data race at fasync handling
    fafab8b3cd57 io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE
    cf522703d4f1 io_uring/poll: fix signed comparison in io_poll_get_ownership()
    89ca27d6d3b2 iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()
    44100ed1bdce io_uring/timeout: check unused sqe fields
    2f4809a879f0 rbd: fix null-ptr-deref when device_add_disk() fails
    1627d6060b45 selftests/mqueue: Fix incorrectly named file
    5d1451cb2cf6 remoteproc: xlnx: Only access buffer information if IPI is buffered
    c9d2f7b9c38c parisc: _llseek syscall is only available for 32-bit userspace
    1b4039d8f4f6 nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
    86bffea0b9f2 nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4
    ec7f47706269 mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused
    965d6162dd88 md/raid10: fix deadlock with check operation and nowait requests
    222055e6b406 erofs: fix the out-of-bounds nameoff handling for trailing dirents
    8555d6990432 ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes
    25ded535ee26 ALSA: ctxfi: Add fallback to default RSR for S/PDIF
    831074ec21b4 ALSA: aoa: i2sbus: fix OF node lifetime handling
    32e0b9255726 ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
    0f313eb6a8f6 net: qrtr: ns: Fix use-after-free in driver remove()
    3a5023627ab9 media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe()
    4a34fd6b04f9 lib/ts_kmp: fix integer overflow in pattern length calculation
    a34d96381bf8 Revert "ALSA: usb: Increase volume range that triggers a warning"
    72099f015d3c PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
    2209fdae5c2f media: mtk-jpeg: fix use-after-free in release path due to uncancelled work
    e9ae00490d47 net: strparser: fix skb_head leak in strp_abort_strp()
    914c6456fcfc net: caif: clear client service pointer on teardown
    1fbe46d2b727 ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
    42dc622776f3 media: amphion: Fix race between m2m job_abort and device_run
    0ba03e06f037 of: unittest: fix use-after-free in testdrv_probe()
    9f1cbca178c0 crypto: pcrypt - Fix handling of MAY_BACKLOG requests
    9337ed5e777e f2fs: fix to detect potential corrupted nid in free_nid_list
    f99165ef0677 spi: imx: fix use-after-free on unbind
    8c43ed08643a um: drivers: call kernel_strrchr() explicitly in cow_user.c
    cc9b6303e7ea wifi: rtw88: check for PCI upstream bridge existence
    2d1f18efccdb zram: do not forget to endio for partial discard requests
    108f2cd13577 LoongArch: Add spectre boundry for syscall dispatch table
    29166a0e732f driver core: Don't let a device probe until it's ready
    886f97fa59d0 ocfs2: split transactions in dio completion to avoid credit exhaustion
    17b399cbb9fa device property: Make modifications of fwnode "flags" thread safe
    abc6bdcbc045 regset: use kvzalloc() for regset_get_alloc()
    e620378aab78 drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
    be7c5dcfd3c7 drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array
    c7f4dad62813 padata: Remove comment for reorder_work
    a11a12a9880a padata: Fix pd UAF once and for all
    0b60eb04b852 Bluetooth: MGMT: Fix possible UAFs
    d0b27c41aa09 firmware: google: framebuffer: Do not mark framebuffer as busy
    fd19eb1c7504 ibmasm: fix heap over-read in ibmasm_send_i2o_message()
    a672682d39dd ibmasm: fix OOB reads in command_file_write due to missing size checks
    fc7e9a74e322 misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
    28a2e047d037 leds: qcom-lpg: Check for array overflow when selecting the high resolution
    fa297e919d16 drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
    8775fa6e2914 ALSA: usb-audio: Evaluate packsize caps at the right place
    e3a0ebd80ae6 usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change
    82d050713073 usb: chipidea: otg: not wait vbus drop if use role_switch
    8429841d12ca usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()
    d1905dbbb7c0 ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
    610ba605a4f7 ALSA: usb-audio: Avoid false E-MU sample-rate notifications
    ab5ba9fd1387 ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
    4d922539ad7d Linux 6.6.139
    ff6fc65b3bf7 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
    8f907d345bae ptrace: slightly saner 'get_dumpable()' logic

(From OE-Core rev: be37c8721aacb0e9b05b5c6f24f2f28ada746740)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield cd5bd462a2 linux-yocto/6.6: update to v6.6.138
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    3b9f64db04968 Linux 6.6.138
    50ed1e7873100 xfrm: esp: avoid in-place decrypt on shared skb frags

(From OE-Core rev: c5695ca3eef548ac0a2ce9dd933b8c776707c6d8)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 72cf57fe51 linux-yocto/6.6: update to v6.6.137
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    258cf62a6dfde Linux 6.6.137
    4b4defd2fce3f Buffer overflow in drivers/xen/sys-hypervisor.c
    402d84ad9e89b xen/privcmd: fix double free via VMA splitting
    710a4ce5d7afd crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
    3ef530ef5585f crypto: authencesn - Fix src offset when decrypting in-place
    d0c4ff6812386 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
    60c798725c966 crypto: authenc - use memcpy_sglist() instead of null skcipher
    c2138c9bd02af crypto: algif_aead - snapshot IV for async AEAD requests
    3115af9644c34 crypto: algif_aead - Revert to operating out-of-place
    dbea57c08acfc crypto: algif_aead - use memcpy_sglist() instead of null skcipher
    9ec26b5d193c9 crypto: scatterwalk - Backport memcpy_sglist()

(From OE-Core rev: 2c23f41118253f10fa63897b4587bd83421cec55)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield e0d2943590 linux-yocto/6.6: update to v6.6.136
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    142cd8382222 Linux 6.6.136
    deeaba4c54ae md/raid1: fix data lost for writemostly rdev
    1fa36cf495b0 rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
    09427bcb1715 crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
    b5c14bd4da1f crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
    607ba280f2ad crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
    c89c768734f3 crypto: testmgr - Hide ENOENT errors better
    695cac6ed284 crypto: testmgr - Hide ENOENT errors
    74e2db36fe50 net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
    f6634af5de72 ALSA: caiaq: take a reference on the USB device in create_card()
    86fc28191418 ALSA: usb-audio: apply quirk for MOONDROP JU Jiu
    ef57cd3329b4 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
    8d5729350b23 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
    ffbce350c6fd ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
    a34d456934fe smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
    b53b8e98c233 smb: client: require a full NFS mode SID before reading mode bits
    0521a67e4b0f smb: server: fix max_connections off-by-one in tcp accept path
    97f8d2648ef4 smb: server: fix active_num_conn leak on transport allocation failure
    b3e0e7dd53f1 fuse: quiet down complaints in fuse_conn_limit_write
    f1441a1ecace fuse: Check for large folio with SPLICE_F_MOVE
    d23ad78bfd20 fuse: reject oversized dirents in page cache
    a76c1cad4e80 f2fs: fix to avoid memory leak in f2fs_rename()
    f90b8a1798b7 fs/ntfs3: validate rec->used in journal-replay file record check
    a6bcf8010af0 rxrpc: only handle RESPONSE during service challenge
    d6a76b3600e1 rxrpc: Fix anonymous key handling
    6669cf805940 scripts/dtc: Remove unused dts_version in dtc-lexer.l
    cf044df0901f Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave"
    e2c9dc6b6e96 ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
    37f074e65f24 ocfs2: validate inline data i_size during inode read
    4bf8cd09f427 ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
    c98b6fa86b33 rxrpc: Fix key quota calculation for multitoken keys
    e297bb2c2568 KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs
    f363c496e203 scripts: generate_rust_analyzer.py: define scripts
    ceb73484e720 PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
    7ad01905831c net: annotate data-races around sk->sk_{data_ready,write_space}
    fa5d5baf67f6 i40e: Fix preempt count leak in napi poll tracepoint
    71ca90c26eef net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers
    f77b51bcee7b wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
    10f4ff4baeb6 md/raid1,raid10: don't ignore IO flags
    50352fc10392 ipv6: add NULL checks for idev in SRv6 paths
    e238ab12556b PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
    ebc8815a917f Revert "perf unwind-libdw: Fix invalid reference counts"
    45cbaf5c7cdc media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
    e3957eb26a3d media: vidtv: fix pass-by-value structs causing MSAN warnings
    7318e3549518 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
    cb8092038e95 media: as102: fix to not free memory after the device is registered in as102_usb_probe()
    47fa09fe7f3e bcache: fix cached_dev.sb_bio use-after-free and crash
    e88354b381e2 ALSA: 6fire: fix use-after-free on disconnect
    b5d141ea15f1 media: em28xx: fix use-after-free in em28xx_v4l2_open()
    9a9bdaf9dc42 media: mediatek: vcodec: fix use-after-free in encoder release path
    17cb7957c979 media: vidtv: fix nfeeds state corruption on start_streaming failure
    115a5266749d mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
    cec74b2ab7df mm/kasan: fix double free for kasan pXds
    887632163b54 ASoC: qcom: q6apm: move component registration to unmanaged version
    dc6a6c3db3a4 KVM: x86: Use scratch field in MMIO fragment to hold small write values
    24b1e0d5d254 checkpatch: add support for Assisted-by tag
    e0c211a0c261 ice: Fix memory leak in ice_set_ringparam()
    e6661add2d9c nf_tables: nft_dynset: fix possible stateful expression memleak in error path
    aaba6ee63ba6 blktrace: fix __this_cpu_read/write in preemptible context
    9df613ef6e8e nfc: nci: complete pending data exchange on device close
    4604b7b4eee6 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
    5afb9356a2e5 KVM: nVMX: Fold requested virtual interrupt check into has_nested_events()
    002a73470b56 net: add proper RCU protection to /proc/net/ptype
    f9d4b618f1b9 iio: common: st_sensors: Fix use of uninitialize device structs
    36f127b971c0 btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
    128b03ccb258 net: skb: fix cross-cache free of KFENCE-allocated skb head
    b670833749ff KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
    6575f9fbf084 ocfs2: handle invalid dinode in ocfs2_group_extend
    6f072daefcab ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
    4b80b5a838a3 ocfs2: fix possible deadlock between unlink and dio_end_io_write
    b7efb4c94797 media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
    426ef05e82ee dcache: Limit the minimal number of bucket to two
    452894005b4a ALSA: ctxfi: Limit PTP to a single page
    6718df49e5a7 Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race
    554391e7da68 USB: serial: option: add Telit Cinterion FN990A MBIM composition
    779412e0e391 staging: sm750fb: fix division by zero in ps_to_hz()
    f632987306bc wifi: rtw88: fix device leak on probe failure
    e2f8c5d134f7 scripts: generate_rust_analyzer.py: avoid FD leak
    cce24f70090e fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
    301857c5ac27 usb: port: add delay after usb_hub_set_port_power()
    8fb82e3555a7 USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen
    9dec3276d122 usb: storage: Expand range of matched versions for VL817 quirks entry
    885c8591784d usbip: validate number_of_packets in usbip_pack_ret_submit()
    745a535461bb ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
    b5b5d5936a50 ksmbd: require 3 sub-authorities before reading sub_auth[2]
    4b73376feecb ksmbd: validate EaNameLength in smb2_get_ea()
    bfbc74df8bbe smb: client: fix off-by-8 bounds check in check_wsl_eas()
    1b2bfedccc4f usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
    9ceff1251904 usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
    0f156bb5334e usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
    859a239d58a8 fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
    f856f4b6efd5 ALSA: fireworks: bound device-supplied status before string array lookup
    63c11b19cdc1 drm/vc4: platform_get_irq_byname() returns an int
    2819f34e08bd NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
    d4e1946bea8d net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
    932ae5309e53 HID: core: clamp report_size in s32ton() to avoid undefined shift
    c8cc765253ad HID: alps: fix NULL pointer dereference in alps_raw_event()
    c65ee4d3be5d staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
    fa00738ab30b i2c: s3c24xx: check the size of the SMBUS message before using it
    5e9cfffad898 can: raw: fix ro->uniq use-after-free in raw_rcv()
    0eb1263a3b8c nfc: llcp: add missing return after LLCP_CLOSED checks
    e2e0e7884314 drm/i915/psr: Do not use pipe_src as borders for SU area
    7ab1832fe163 objtool: Remove max symbol name length limitation
    29d39948ce52 ALSA: usb-audio: Improve Focusrite sample rate filtering
    c5e918390002 netfilter: conntrack: add missing netlink policy validations
    e86ab1e56613 crypto: algif_aead - Fix minimum RX size check for decryption
    cfab2c817d2e perf/x86/intel/uncore: Skip discovery table for offline dies
    1981e469558b gpio: tegra: fix irq_release_resources calling enable instead of disable
    9ccce02d5013 l2tp: Drop large packets with UDP encap
    ae8343a19ccb net: ipa: fix event ring index not programmed for IPA v5.0+
    a7d326dfb13b net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
    b9232421a77a af_unix: read UNIX_DIAG_VFS data under unix_state_lock
    00e1d650fa4b net: txgbe: leave space for null terminators on property_entry
    288138418bef netfilter: ip6t_eui64: reject invalid MAC header for all packets
    36bf0d98e180 netfilter: xt_multiport: validate range encoding in checkentry
    368c22aea490 netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
    730663352c91 ipvs: fix NULL deref in ip_vs_add_service error path
    c4d93470aff0 selftests: net: bridge_vlan_mcast: wait for h1 before querier check
    d3125c541a96 xfrm_user: fix info leak in build_mapping()
    b66920a3348c xfrm: Wait for RCU readers during policy netns exit
    a55793e5a97d xsk: validate MTU against usable frame size on bind
    81ab60836b27 xsk: fix XDP_UMEM_SG_FLAG issues
    cfcc8a82ad03 xsk: respect tailroom for ZC setups
    a03975beb9f6 xsk: tighten UMEM headroom validation to account for tailroom and min frame
    c9eef0760db4 e1000: check return value of e1000_read_eeprom
    d8a747057a17 ixgbevf: add missing negotiate_features op to Hyper-V ops table
    feba4907c302 tracing/probe: reject non-closed empty immediate strings
    7a01c81120f5 dt-bindings: net: Fix Tegra234 MGBE PTP clock
    366f890831ff net: stmmac: Fix PTP ref clock for Tegra234
    d8c2aa3c4a1e nfc: s3fwrn5: allocate rx skb before consuming bytes
    47a8bf52156a ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
    363a38044b8c net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
    eb3765b90eb8 net: sched: act_csum: validate nested VLAN headers
    a6566cd33f6f eventpoll: defer struct eventpoll free to RCU grace period
    34160cca50ec drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock
    dd5c49787a32 drm/vc4: Fix a memory leak in hang state error path
    a812008fe3a0 drm/vc4: Fix memory leak of BO array in hang state
    5befb65dca90 drm/vc4: Release runtime PM reference after binding V3D
    96f71e3a7f9b PCI: hv: Set default NUMA node to 0 for devices without affinity info
    6948caaff66d arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency
    d4d11b70a30f soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching
    f0288da67320 ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J
    3ec7437e9d11 wifi: brcmfmac: validate bsscfg indices in IF events
    cf50a1178dfc ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585
    e6a445513fbc HID: roccat: fix use-after-free in roccat_report_event
    40f40229baa7 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10
    e73692e0e271 HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3
    a9098b43562f platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug
    36af81124ca8 pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer)
    b17dcf3c9cb4 ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx
    5d4fe469fe7d fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
    7b73bea718fe ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex
    e51cd8954919 ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list
    b6ba1eacf276 wifi: wl1251: validate packet IDs before indexing tx_frames
    d7b59c2e6109 ALSA: hda/realtek: add quirk for Framework F111:000F
    fa4f1f52528c netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
    b345586c9fe8 ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx
    c09a7446aab5 btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
    aa77bd6d08f0 can: mcp251x: add error handling for power enable in open and resume
    5c37bd025068 ASoC: SOF: topology: reject invalid vendor array size in token parser
    64e4ced7dd47 ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF
    719df67c2003 ALSA: asihpi: avoid write overflow check warning
    384c3f844f53 media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl()
    e0c656cbb2a7 ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC
    1e1015643535 ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk
    2cd86c2cd771 ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA
    62298a48f8b8 RDMA/irdma: Fix double free related to rereg_user_mr

(From OE-Core rev: e1b84d7426c14f41676c40bc3056fb4636ea7900)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 47c59204c5 linux-yocto/6.6: update to v6.6.135
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    9760bf04666d Linux 6.6.135
    53b86879e92b Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
    9853917f9edf rxrpc: Fix missing error checks for rxkad encryption/decryption failure
    1355eb244aa5 rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)
    9ce36d28f67c rxrpc: fix reference count leak in rxrpc_server_keyring()
    47073aab8a3a rxrpc: reject undecryptable rxkad response tickets
    b8f66447448d rxrpc: Only put the call ref if one was acquired
    f1a7a3ab0f35 rxrpc: Fix key reference count leak from call->key
    93fc15be44a3 rxrpc: Fix call removal to use RCU safe deletion
    e63265f188ea net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
    88591194df73 mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
    b7b8012193fd net: stmmac: fix integer underflow in chain mode
    9a56735581d5 net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure
    6468cab1173f mmc: vub300: fix NULL-deref on disconnect
    80fd0de89805 pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
    0985b18c95eb net/mlx5: Update the list of the PCI supported devices
    ca3f48c3567d drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
    2f55b58b5a0b batman-adv: hold claim backbone gateways by reference
    2eb9d67704ca net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
    0e43e0a3c940 net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
    d3de72e2a2b9 EDAC/mc: Fix error path ordering in edac_mc_alloc()
    672b526def1f X.509: Fix out-of-bounds access when parsing extensions
    69d61639bc7e batman-adv: reject oversized global TT response buffers
    07cb6c72e66b nfc: pn533: allocate rx skb before consuming bytes
    0f36273a4b24 arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges
    e3d84395a16d arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity
    e85ee7bd042c arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V
    03c00ef6d6df Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"
    4bf41c2731a0 wifi: brcmsmac: Fix dma_free_coherent() size
    3bcf7aca63f0 tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
    c221ed63a276 xfrm: clear trailing padding in build_polexpire()
    070abdf1b043 netfilter: nft_ct: fix use-after-free in timeout object destroy
    533e0a0454d0 Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
    32bad10de347 netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR
    84d458018b14 seg6: separate dst_cache for input and output paths in seg6 lwtunnel
    3e9bf8c3ba89 Revert "mptcp: add needs_id for netlink appending addr"
    8ec6a58586f1 usb: gadget: f_hid: move list and spinlock inits from bind to alloc
    e8984f068e90 virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
    0dc539b888fb scsi: ufs: core: Fix use-after free in init error and remove paths
    146e25625378 ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
    811b3dccfb0a MIPS: mm: Rewrite TLB uniquification for the hidden bit feature
    591f030449ad MIPS: mm: Suppress TLB uniquification on EHINV hardware
    8a4de6bcaf01 MIPS: Always record SEGBITS in cpu_data.vmbits
    00a4b91f8fac Input: uinput - take event lock when submitting FF request "event"
    546c18a14924 Input: uinput - fix circular locking dependency with ff-core
    3fd6547f5b8a mptcp: fix slab-use-after-free in __inet_lookup_established
    673d2a3eef6e net: rfkill: prevent unlimited numbers of rfkill events from being created
    e0c8542c3d09 xfrm_user: fix info leak in build_report()
    1de5c76bf40e wifi: rt2x00usb: fix devres lifetime
    066c760acead lib/crypto: chacha: Zeroize permuted_state before it leaves scope
    91f02726b220 x86/CPU: Fix FPDSS on Zen1

(From OE-Core rev: 4536d25fbba2ce23dfb91b25729efe83ac102f61)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 171afa565f linux-yocto/6.6: update to v6.6.134
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    8cee53b8eaeb5 Linux 6.6.134
    6b63a54a790a6 net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
    79bc854d44f9f MPTCP: fix lock class name family in pm_nl_create_listen_socket
    83170a05908b6 ext4: handle wraparound when searching for blocks for indirect mapped blocks
    a070d5a872ffe ext4: publish jinode after initialization
    e2316c5d759d3 dmaengine: fsl-edma: fix channel parameter config for fixed channel requests
    72c0f5de91098 dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()
    892ba47ef7140 x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
    7ddcf4a245c1c mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
    15f5241d5a523 scsi: target: tcm_loop: Drain commands in target_reset handler
    d88541ffd56d6 net: mana: fix use-after-free in add_adev() error path
    ed71cf465c75f net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
    a2d3c892115e1 net: macb: Move devm_{free,request}_irq() out of spin lock area
    9e7d5b7581ce1 iio: imu: inv_icm42600: fix odr switch when turning buffer off
    d1e3aa80e6e04 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
    c6da4fed7537a usb: gadget: f_uac1_legacy: validate control request size
    cb5316b37288a usb: gadget: f_rndis: Protect RNDIS options with mutex
    75776a055b656 usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
    c78e463ee134b usb: gadget: uvc: fix NULL pointer dereference during unbind race
    f6813c2b2ae78 usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
    3db70e16fccb4 LoongArch: vDSO: Emit GNU_EH_FRAME correctly
    cddea0c721106 gfs2: Validate i_depth for exhash directories
    514784b8951e7 gfs2: Improve gfs2_consist_inode() usage
    3a9fd45afadec btrfs: do not free data reservation in fallback from inline due to -ENOSPC
    681377e4e229d btrfs: fix the qgroup data free range for inline data extents
    f5b469a84400a usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
    5aa776c8615be USB: dummy-hcd: Fix interrupt synchronization error
    791966f85b439 USB: dummy-hcd: Fix locking/synchronization error
    2516336e825fc thunderbolt: Fix property read in nhi_wake_supported()
    4b8e527aca357 misc: fastrpc: possible double-free of cctx->remote_heap
    9e796001af97a thermal: core: Fix thermal zone device registration error path
    e208c45c63258 gpio: mxc: map Both Edge pad wakeup to Rising Edge
    da39ee627fd82 cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
    8a71911fc7eee net: ftgmac100: fix ring allocation unwind on open failure
    602596c69a70e vxlan: validate ND option lengths in vxlan_na_create
    28a371be901ef counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
    885aa739a07ab counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
    6cea34d7ec682 netfilter: ipset: drop logically empty buckets in mtype_del
    aca0938d0bb44 nvmem: imx: assign nvmem_cell_info::raw_len
    eeb496e82b916 dt-bindings: connector: add pd-disable dependency
    1603dd471f477 comedi: me4000: Fix potential overrun of firmware buffer
    c16ac4e173a05 comedi: me_daq: Fix potential overrun of firmware buffer
    f517646e008fe comedi: ni_atmio16d: Fix invalid clean-up after failed attach
    c01bcc67a9a69 comedi: Reinit dev->spinlock between attachments to low-level drivers
    d5d9df8b08d68 comedi: dt2815: add hardware detection to prevent crash
    787c21d2cc13b cdc-acm: new quirk for EPSON HMD
    e0bfd6d4dc77a bridge: br_nd_send: validate ND option lengths
    2e5cbab8ccbfc fork: defer linking file vma until vma is fully initialized
    13e8e5bd99849 vfio/pci: Insert full vma on mmap'd MMIO fault
    1a0a115843ec4 vfio/pci: Use unmap_mapping_range()
    764438b5c5d15 vfio: Create vfio_fs_type with inode per device
    cfca84f5986af usb: cdns3: gadget: fix state inconsistency on gadget init failure
    9ab9b0e5fcdac usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
    beab10429439e usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
    af1e68c43ed88 usb: ehci-brcm: fix sleep during atomic
    95e09b07e5029 usb: usbtmc: Flush anchored URBs in usbtmc_release
    aaeae6533d77e usb: ulpi: fix double free in ulpi_register_interface() error path
    a6f374ba81dde usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
    1f83e4f8509aa iio: gyro: mpu3050: Fix out-of-sequence free_irq()
    2a4537653d200 iio: gyro: mpu3050: Move iio_device_register() to correct location
    8f237c408f300 iio: gyro: mpu3050: Fix irq resource leak
    a09171d3f23e1 iio: gyro: mpu3050: Fix incorrect free_irq() variable
    4cda5db84e917 iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
    11aaba2824a14 iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
    dae6048cb63fe iio: light: vcnl4035: fix scan buffer on big-endian
    13f4f2d046661 iio: dac: ad5770r: fix error return in ad5770r_read_raw()
    97d908087e85c iio: accel: fix ADXL355 temperature signature value
    81b90c03dd65f Input: xpad - add support for Razer Wolverine V3 Pro
    6260b66c005fa Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
    92b1a92857002 Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
    a6d5d972460ca Input: synaptics-rmi4 - fix a locking bug in an error path
    fa64aab25aba4 iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
    624e292e74769 USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
    619d8d1cc4688 USB: serial: option: add support for Rolling Wireless RW135R-GL
    d3f78e9cd0bbe USB: serial: io_edgeport: add support for Blackbox IC135A
    beadc871ccf86 drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
    32ac48642e71e drm/ast: dp501: Fix initialization of SCU2C
    7759f105e9c89 iio: adc: ti-adc161s626: fix buffer read on big-endian
    43fa022b56dcd mips: mm: Allocate tlb_vpn array atomically
    37ae8fadc74ed hwmon: (occ) Fix division by zero in occ_show_power_1()
    4c10f326f628e MIPS: Fix the GCC version check for `__multi3' workaround
    91649c02c1baa Bluetooth: SMP: force responder MITM requirements before building the pairing response
    b1c6a8e554a39 Bluetooth: SMP: derive legacy responder STK authentication from MITM state
    c8859675f1cf9 ALSA: ctxfi: Fix missing SPDIFI1 index handling
    a82c1bce2d129 ALSA: caiaq: fix stack out-of-bounds read in init_card
    2de70a6149e03 USB: serial: option: add MeiG Smart SRM825WN
    ffbed27ba15ef wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
    9907ac9b9a18b wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
    489f2ef2b9088 drm/ioc32: stop speculation on the drm_compat_ioctl path
    0320474d92c69 riscv: kgdb: fix several debug register assignment bugs
    e01779a5c0283 mips: ralink: update CPU clock index
    649ceac79c831 hwmon: (occ) Fix missing newline in occ_show_extended()
    164a1b397da0c hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
    cb048be568a85 dt-bindings: gpio: fix microchip #interrupt-cells
    220f29e819244 hwmon: (pxe1610) Check return value of page-select write in probe
    2dd67966f39a2 accel/qaic: Handle DBC deactivation if the owner went away
    690509a2eea89 iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
    8755066f7bd0f bpf: reject direct access to nullable PTR_TO_BUF pointers
    5e4ee5dbea134 ipv6: avoid overflows in ip6_datagram_send_ctl()
    36a5d17d7ddad net: hsr: fix VLAN add unwind on slave errors
    4a09f72007201 net/sched: cls_flow: fix NULL pointer dereference on shared blocks
    18328eff2f97d net/sched: cls_fw: fix NULL pointer dereference on shared blocks
    1734bd85c5e0a net/x25: Fix overflow when accumulating packets
    143d4fa68ae9e net/x25: Fix potential double free of skb
    1fc7fbac8b98f net/mlx5: Avoid "No data available" when FW version queries fail
    7129632cab3e4 net/mlx5: lag: Check for LAG device before creating debugfs
    e1f6f47d6e60d net: macb: properly unregister fixed rate clocks
    b3f799cdf830d net: macb: fix clk handling on PCI glue driver removal
    a14b568633486 net/sched: sch_netem: fix out-of-bounds access in packet corruption
    8d597e3e74027 bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
    6b0a8de67ac0c rds: ib: reject FRMR registration before IB connection is established
    244b639e6a3a8 Bluetooth: MGMT: validate mesh send advertising payload length
    5fb69e1eeea9d Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
    f71695e81f4cb Bluetooth: MGMT: validate LTK enc_size on load
    adb90cd0f9f7a Bluetooth: SCO: fix race conditions in sco_sock_connect()
    2504ce3fc39ed Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
    4b12a3cc3f075 netfilter: nf_tables: reject immediate NF_QUEUE verdict
    f00ac65c90ea4 netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
    2ea0f35f235f7 netfilter: ctnetlink: ignore explicit helper on new expectations
    a76157a1eee5f netfilter: nf_conntrack_expect: store netns and zone in expectation
    e7ccaa0a62a8f netfilter: nf_conntrack_expect: use expect->helper
    d81c3205085b5 netfilter: nf_conntrack_expect: honor expectation helper field
    2898080c054ea netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent
    2cf2737c85a2b netfilter: nf_conntrack_helper: pass helper to expect cleanup
    1b842ade214b9 netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
    c2d4a3abb15ca netfilter: x_tables: ensure names are nul-terminated
    607245c4dbb86 netfilter: nfnetlink_log: account for netlink header size
    5382bb03e9c33 netfilter: flowtable: strictly check for maximum number of actions
    6c7fbdb8ffde6 net: ipv6: flowlabel: defer exclusive option free until RCU teardown
    b99d82706bd15 bpf: Fix regsafe() for pointers to packet
    236b564165b49 net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
    2c1fadd221b21 NFC: pn533: bound the UART receive buffer
    e35f5195cd44f net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
    7d9f2f4aabd11 ipv6: prevent possible UaF in addrconf_permanent_addr()
    584d8648f859f ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
    c56f78614e778 net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
    658261898130d bridge: br_nd_send: linearize skb before parsing ND options
    a0c4ce9900a10 ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
    3d5127d998de6 ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
    c64dc67d70da6 tg3: Fix race for querying speed/duplex
    d1b041080086e net/ipv6: ioam6: prevent schema length wraparound in trace fill
    7f56d87e527bb net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
    0fda873092b54 net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
    3e52e1b121c28 net: fec: fix the PTP periodic output sysfs interface
    7cdf2c6381b21 crypto: af-alg - fix NULL pointer dereference in scatterwalk
    31022cfde5235 crypto: caam - fix overflow on long hmac keys
    a7ecf06d3ee06 crypto: caam - fix DMA corruption on long hmac keys
    4073217be3df0 wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
    18e28353074a3 wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
    12322d8654cf9 wifi: ath11k: skip status ring entry processing
    90afe0af4452b dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
    ea553dfb630e1 spi: geni-qcom: Check DMA interrupts early in ISR
    295f8075d0044 btrfs: reject root items with drop_progress and zero drop_level
    b404e6b9863ea i2c: tegra: Don't mark devices with pins as IRQ safe
    c7a27bb4d0f65 HID: multitouch: Check to ensure report responses match the request
    e9126544fd779 objtool: Fix Clang jump table detection
    960159a9f8468 tg3: replace placeholder MAC address with device property
    c9fc98beeedf0 btrfs: don't take device_list_mutex when querying zone info
    b256d055da472 atm: lec: fix use-after-free in sock_def_readable()
    8bd690ac12423 HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
    7b56b67776520 arm64/scs: Fix handling of advance_loc4
    80de0a9581338 Linux 6.6.133
    9a3a2ae5efbbc xattr: switch to CLASS(fd)
    16d41d32b7c76 Revert "xattr: switch to CLASS(fd)"

(From OE-Core rev: 65242fa5eaa679398d2cb782aea5219e49054cfb)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield c1e0c27492 linux-yocto/6.6: update to v6.6.132
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    08667c1437c07 Linux 6.6.132
    866c39b567bde Revert "rust: pin-init: add references to previously initialized fields"
    e7ccb57fe7164 Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors"
    29242a6238213 Linux 6.6.131
    e10af36ac3f7b tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses.
    de7c0c04ad868 futex: Clear stale exiting pointer in futex_lock_pi() retry path
    37cf97e37498a dmaengine: idxd: Fix freeing the allocated ida too late
    509ff03a3f188 dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API
    e3387416ad6b2 btrfs: fix lost error when running device stats on multiple devices fs
    94054ffd311a1 btrfs: fix leak of kobject name for sub-group space_info
    1ddab07bf2ed5 btrfs: fix super block offset in error message in btrfs_validate_super()
    5a0538380d29e dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA
    ab4a8624b999a dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
    26271695302c8 dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA
    a3142cc1581a5 dmaengine: xilinx: xilinx_dma: Fix dma_device directions
    4b6e1da50b22e dmaengine: xilinx: xdma: Fix regmap init error handling
    afc39537cddcb dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA.
    5893ae3b4591b phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types()
    54d77cc0c40ca dmaengine: idxd: Fix memory leak when a wq is reset
    2bb9e9e93adff dmaengine: idxd: Fix not releasing workqueue on .release()
    cfadf46a67b68 erofs: fix "BUG: Bad page state in z_erofs_do_read_page"
    75669e987137f xfs: save ailp before dropping the AIL lock in push callbacks
    7121b22b0bac8 xfs: avoid dereferencing log items after push callbacks
    aba546061341b mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]
    2efbc838a26d3 nvme: fix admin queue leak on controller reset
    5a1e865e51063 xattr: switch to CLASS(fd)
    bb42e9627aa92 libbpf: Fix -Wdiscarded-qualifiers under C23
    4913592a3358f gfs2: Fix unlikely race in gdlm_put_lock
    8c93e73af8563 mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode
    8cdc84415a4d2 mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode
    0890fba6129dc rust: pin-init: internal: init: document load-bearing fact of field accessors
    c28fc9b0dbc7a rust: pin-init: add references to previously initialized fields
    ef41a85a55022 tracing: Fix potential deadlock in cpu hotplug with osnoise
    5a9f33294cc04 tracing: Switch trace_osnoise.c code over to use guard() and __free()
    c9b95ef6f5039 ksmbd: fix memory leaks and NULL deref in smb2_lock()
    9e785f004cbc5 ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
    d3c4458707e70 powerpc64/bpf: do not increment tailcall count when prog is NULL
    d419788a834f7 arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off
    1c82f863f090a ext4: always drain queued discard work in ext4_mb_release()
    ca99cbcc316cd ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
    c84c0272e0b66 ext4: fix the might_sleep() warnings in kvfree()
    9449f99ba04f5 ext4: fix use-after-free in update_super_work when racing with umount
    b77de3fceafbb ext4: reject mount if bigalloc with s_first_data_block != 0
    2d31a5073f86a ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
    ecc50bfca9b5c ext4: avoid infinite loops caused by residual data
    65c6c30ce6362 ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
    df3cecfc5036f ext4: make recently_deleted() properly work with lazy itable initialization
    2b7bf66a09873 ext4: fix fsync(2) for nojournal mode
    850e68a1d3b06 ext4: fix stale xarray tags after writeback
    699bac4d4c951 ext4: convert inline data to extents when truncate exceeds inline size
    17c21b951e87c ext4: fix journal credit check when setting fscrypt context
    813f372a3b8aa xfs: fix ri_total validation in xlog_recover_attri_commit_pass2
    d38135af04a3a xfs: stop reclaim before pushing AIL during unmount
    f458dceaa6a35 LoongArch: Workaround LS2K/LS7A GPU DMA hang bug
    ebf6860ef7093 dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
    79c4796b2711e dmaengine: sh: rz-dmac: Protect the driver specific lists
    75552b2c17124 irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment
    d536a00f1b451 jbd2: gracefully abort on checkpointing state corruptions
    fd28c56186991 KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
    78c8b090a3d5c net: macb: Use dev_consume_skb_any() to free TX SKBs
    d20d3eedbd04e scsi: ses: Handle positive SCSI error from ses_recv_diag()
    4ed727e35b0ab scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
    c9e137c26cd45 alarmtimer: Fix argument order in alarm_timer_forward()
    5c8ecdcfbfb0b erofs: add GFP_NOIO in the bio completion if needed
    a58d298a83a3a s390/entry: Scrub r12 register on kernel entry
    fedd2e1630cac virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
    1a0d9083c24fb media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
    ebdd28353b958 hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible()
    7c0666a26b290 hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature
    844a18493173f hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes
    d4f4364974460 KVM: arm64: Discard PC update state on vcpu reset
    501559fbe2097 platform/x86: ISST: Correct locked bit width
    2e2c7a6b2958e cpufreq: conservative: Reset requested_freq on limits change
    cb3d6efa78460 can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
    54ecdf76a55e7 can: gw: fix OOB heap access in cgw_csum_crc8_rel()
    9e7f353710f85 ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload
    a2842de6856a7 ALSA: firewire-lib: fix uninitialized local variable
    6fafc4c4238e5 ksmbd: do not expire session on binding failure
    358cdaa1f7fbf ksmbd: fix potencial OOB in get_file_all_info() for compound requests
    c3a89e3ec1ccf ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
    a11911d94c032 s390/barrier: Make array_index_mask_nospec() __always_inline
    7a5260fbc6e79 s390/syscalls: Add spectre boundary for syscall dispatch table
    adb25339b6611 spi: spi-fsl-lpspi: fix teardown order issue (UAF)
    ffd860907d0cb ASoC: adau1372: Fix clock leak on PLL lock failure
    94577b2e936f0 ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
    227b7e14ae408 sysctl: fix uninitialized variable in proc_do_large_bitmap
    6ec394998c42a hwmon: (adm1177) fix sysfs ABI violation and current unit conversion
    e23602eb07797 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
    9c886e63b6965 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
    d997deaa7de36 ASoC: Intel: catpt: Fix the device initialization
    9014a30df4365 spi: sn-f-ospi: Fix resource leak in f_ospi_probe()
    b5f87d8493f54 PM: hibernate: Drain trailing zero pages on userspace restore
    8dda015822771 PM: hibernate: Don't ignore return from set_memory_ro()
    6a492d10c2f88 drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
    daf1396e8f42a x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size
    8212295549e47 scsi: scsi_transport_sas: Fix the maximum channel scanning issue
    ad5085d7ef1c5 RDMA/irdma: Return EINVAL for invalid arp index error
    acb060bc2609c RDMA/irdma: Fix deadlock during netdev reset with active connections
    45897c22a93ec RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
    2175c64d27e27 RDMA/irdma: Clean up unnecessary dereference of event->cm_node
    18386d84d2ad3 RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
    d783393d2122b RDMA/irdma: Update ibqp state to error if QP is already in error state
    af310407f79d5 RDMA/irdma: Initialize free_qp completion before using it
    e82f2775b50cc RDMA/rw: Fall back to direct SGE on MR pool exhaustion
    96c60fb6896e6 regmap: Synchronize cache for the page selector
    9524634194516 net: macb: use the current queue number for stats
    fcec5ce2d73a4 netfilter: ctnetlink: use netlink policy range checks
    fe463e76c9b4b netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
    168145c874446 netfilter: nf_conntrack_expect: skip expectations in other netns via proc
    c6a503a9f4deb netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
    a8365d1064ded netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
    2dcf324855c34 tls: Purge async_hold in tls_decrypt_async_wait()
    6fba3c3d48c92 Bluetooth: btusb: clamp SCO altsetting table indices
    52667c859fe33 Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
    5f84e845648df Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
    8d83194e8a880 Bluetooth: hci_sync: Remove remaining dependencies of hci_request
    0ee469ba7c58c Bluetooth: Remove 3 repeated macro definitions
    50c1e5fc7c444 Bluetooth: L2CAP: Fix send LE flow credits in ACL link
    acfb29f82223e dma-mapping: add missing `inline` for `dma_free_attrs`
    47d5f290fab3c net: enetc: fix the output issue of 'ethtool --show-ring'
    2297e38114316 udp: Fix wildcard bind conflict check when using hash2
    5b5af243e566b tcp: optimize inet_use_bhash2_on_bind()
    79a5c9344eaaf tcp: Rearrange tests in inet_csk_bind_conflict().
    34f5fe33e43bc tcp: Use bhash2 for v4-mapped-v6 non-wildcard address.
    654386baef228 net: fix fanout UAF in packet_release() via NETDEV_UP race
    a8ec35bb7b503 ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist.
    9241d441feb40 ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire.
    6ae421f59bf80 ice: use ice_update_eth_stats() for representor stats
    0677d6bf6e853 platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen
    b04420f5b9315 rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
    81acbd345d405 net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
    c1f97152df8df openvswitch: validate MPLS set/set_masked payload length
    42f0d3d812096 openvswitch: defer tunnel netdev_put to RCU release
    4c3e25a7b711a net: openvswitch: Avoid releasing netdev before teardown completes
    eb435d150ca74 nfc: nci: fix circular locking dependency in nci_close_device
    cfd863d4a3f2e ionic: fix persistent MAC address override on PF
    a4fd36bb000db pinctrl: mediatek: common: Fix probe failure for devices without EINT
    a04a760c06bb5 Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
    28904375d54b4 Bluetooth: hci_ll: Fix firmware leak on error path
    45aaca995e4a7 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
    477ad49760720 Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
    a4bda464c0deb can: statistics: add missing atomic access in hot path
    d6923498e972b dma: swiotlb: add KMSAN annotations to swiotlb_bounce()
    d3225e6b9bd51 af_key: validate families in pfkey_send_migrate()
    6a3ec6efbc4f9 esp: fix skb leak with espintcp and async crypto
    e17b0106447ed xfrm: Fix the usage of skb->sk
    86f130cf52504 xfrm: call xdo_dev_state_delete during state update
    7aac2b997e614 spi: intel-pci: Add support for Nova Lake mobile SPI flash
    56bc8de780720 usb: core: new quirk to handle devices with zero configurations
    1eed0199dbf41 objtool: Handle Clang RSP musical chairs
    006ce15577e76 ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
    f264d4e3a9261 ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
    c57276ced3c32 btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
    2635d0c715f3f HID: apple: avoid memory leak in apple_report_fixup()
    d9365789a6fd7 dma-buf: Include ioctl.h in UAPI header
    9d43a897a9122 ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits()
    cb4954fc2520d ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg()
    082f15d288732 module: Fix kernel panic when a symbol st_shndx is out of bounds
    f18c38cb24c9c HID: asus: add xg mobile 2023 external hardware support
    4d36b7ad2c18b HID: mcp2221: cancel last I2C command on read error
    952e41b0f9238 net: usb: r8152: add TRENDnet TUC-ET2G
    7edfe4346b052 HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
    eac08882569bc HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2
    6f12734c4b619 nvme-pci: ensure we're polling a polled queue
    50063c576c6ed platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10
    0ab508ace30c7 platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1
    94cfabcf28209 nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
    c69b5dd587f6f nvme-pci: cap queue creation to used queues
    79dc4ced3bb62 platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list
    f20f17cffbe34 HID: asus: avoid memory leak in asus_report_fixup()
    694ea55f1b1c7 bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
    d47bba0cfdd4c bpf: Release module BTF IDR before module unload
    0f46fd10de29e sh: platform_early: remove pdev->driver_override check
    0af982240b8f4 hwmon: axi-fan: don't use driver_override as IRQ name
    e73121faf530e hwmon: (axi-fan-control) Make use of dev_err_probe()
    50fe5fbf98290 hwmon: (axi-fan-control) Use device firmware agnostic API
    bd738f986f6a0 cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled
    656f35b463995 perf: Make sure to use pmu_ctx->pmu for groups
    79cda13757901 perf: Extract a few helpers

(From OE-Core rev: f95c69b567abe9a87b15ac38b98b2836cb9a8f0c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:55 +01:00
Bruce Ashfield 73edbddc7f linux-yocto/6.6: update to v6.6.130
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c09fbcd31ae6 Linux 6.6.130
    1dacf6b3718a xen/privcmd: add boot control for restricted usage in domU
    1879319d790f xen/privcmd: restrict usage in unprivileged domU
    2cf5eff223fc tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
    c1bfc25d62d8 lib/bootconfig: check xbc_init_node() return in override path
    df1f4a7d9cf6 drm/i915/gt: Check set_default_submission() before deferencing
    b0158d9d6f4e ksmbd: fix use-after-free in durable v2 replay of active file handles
    806f13752652 ksmbd: fix use-after-free of share_conf in compound request
    87158a633e9a drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()
    6ec8f8ebd023 mtd: rawnand: brcmnand: skip DMA during panic write
    a80291e577b4 mtd: rawnand: serialize lock/unlock against other NAND operations
    69aece634a7e i2c: cp2615: fix serial string NULL-deref at probe
    2aeb380c731f i2c: cp2615: replace deprecated strncpy with strscpy
    7864c667aed0 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
    c51957601d32 x86/platform/uv: Handle deconfigured sockets
    197fc4dda1c0 i2c: pxa: defer reset on Armada 3700 when recovery is used
    c40387488be0 i2c: fsi: Fix a potential leak in fsi_i2c_probe()
    994b301a217f USB: serial: f81232: fix incomplete serial port generation
    2124d82fd25e Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
    eec4d5758f33 drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
    5b0578a9a9ec hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
    5fcef2e370f3 hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value
    b61529c357f1 icmp: fix NULL pointer dereference in icmp_tag_validation()
    1a0c3c7b5b14 net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
    ff0c54f088f7 net: mvpp2: guard flow control update with global_tx_fc in buffer switching
    224f4678812e nfnetlink_osf: validate individual option lengths in fingerprints
    adee3436ccd2 netfilter: nf_tables: release flowtable after rcu grace period on error
    d016c216bc75 netfilter: bpf: defer hook memory release until rcu readers are done
    0a3f8cd3f370 net: bonding: fix NULL deref in bond_debug_rlb_hash_show
    a05a2149386f udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
    3dffc083292e net/mlx5e: Fix race condition during IPSec ESN update
    99aaee927800 net/mlx5e: Prevent concurrent access to IPSec ASO context
    7712b5ff6967 net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
    5da8009be419 net: macb: fix uninitialized rx_fs_lock
    edf4c2aaee08 ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
    a6dc74209462 wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
    0a4da176ae4b wifi: mac80211: fix NULL deref in mesh_matches_local()
    58f74dc73d1b iavf: fix VLAN filter lost on add/delete race
    fb602ed4b19e igc: fix missing update of skb->tail in igc_xmit_frame()
    4de6a43e8ecf net: usb: aqc111: Do not perform PM inside suspend callback
    a73d95b57bf9 clsact: Fix use-after-free in init/destroy rollback asymmetry
    125f932a76a9 net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
    f1c7701d3ac9 net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
    21c89a0a8de7 net/sched: teql: Fix double-free in teql_master_xmit
    f00fc26c8a06 net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
    39f2d86f2ddd PM: runtime: Fix a race condition related to device removal
    fd8278ffba49 sched: idle: Consolidate the handling of two special cases
    249e90557158 net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
    fcdf56bbdade net: bcmgenet: increase WoL poll timeout
    f5e4f4e4cdb7 netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
    262beb78e95e netfilter: xt_time: use unsigned int for monthday bit shift
    63b8097cea19 netfilter: xt_CT: drop pending enqueued packets on template removal
    e68a8db3a054 netfilter: nft_ct: drop pending enqueued packets on removal
    b477ef7fa612 netfilter: nft_ct: add seqadj extension for natted connections
    52235bf88159 netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
    528b4509c9df netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
    f04cc86d5990 netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
    9e5021a90653 netfilter: ctnetlink: remove refcounting in expectation dumpers
    a75d3be96d70 mpls: add missing unregister_netdevice_notifier to mpls_init
    0c9fb70a206a net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
    e160b869b0a8 Bluetooth: qca: fix ROM version reading on WCN3998 chips
    11a87dd5df42 Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
    45ebe5b90020 Bluetooth: HIDP: Fix possible UAF
    f35209cf4826 Bluetooth: hci_sync: Fix hci_le_create_conn_sync
    2d3deaa162a7 Bluetooth: ISO: Fix defer tests being unstable
    e7899dc538f3 Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy
    c02860835673 Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU
    b5c20c899246 Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU
    d30acb4ecbe2 firmware: arm_scpi: Fix device_node reference leak in probe path
    37e776e2e0a5 wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
    256f7d4c1123 wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
    d21923a8059f soc: fsl: qbman: fix race condition in qman_destroy_fq
    d0a466caf4ac cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
    ccb2262681d6 btrfs: tree-checker: fix misleading root drop_level error message
    56e72c8b02d9 btrfs: log new dentries when logging parent dir of a conflicting inode
    df656e45774f drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}
    9085ad02eff0 drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
    41b0edc1be8d drm/radeon: apply state adjust rules to some additional HAINAN vairants
    2a28ad57d12e drm/amdgpu/mmhub3.0: add bounds checking for cid
    46411902afd1 drm/amdgpu/mmhub3.0.2: add bounds checking for cid
    0fabdcd12c29 drm/amdgpu/mmhub3.0.1: add bounds checking for cid
    6b257be5d3ad drm/amdgpu/mmhub2.3: add bounds checking for cid
    aa3c80150b0e drm/amdgpu/mmhub2.0: add bounds checking for cid
    9f41b9f82ecf drm/amdgpu/gmc9.0: add bounds checking for cid
    447f2c6ef11c serial: uartlite: fix PM runtime usage count underflow on probe
    59e13f1c9a8c serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
    d2719a0a9c34 serial: 8250: Fix TX deadlock when using DMA
    092cb022a454 serial: 8250_pci: add support for the AX99100
    85654456e394 iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
    d8570211a2b1 mtd: Avoid boot crash in RedBoot partition table parser
    2a79fd98b961 mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
    d55ff6f213be mtd: rawnand: pl353: make sure optimal timings are applied
    f13100b1f5f1 spi: fix statistics allocation
    6bbd385b30c7 spi: fix use-after-free on controller registration failure
    9443202d9138 pmdomain: bcm: bcm2835-power: Increase ASB control timeout
    4ada013fd7da mmc: sdhci: fix timing selection for 1-bit bus width
    451816d430b3 mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
    0c5026178856 net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume
    fbbd4c07a537 net: macb: Introduce gem_init_rx_ring()
    2fd0bdd49e57 net: macb: queue tie-off or disable during WOL suspend
    8afb437ea1f7 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
    1ada20331f2d batman-adv: avoid OGM aggregation when skb tailroom is insufficient
    fc77e0a5600e iio: light: bh1780: fix PM runtime leak on error path
    64ad49597d14 btrfs: fix transaction abort on file creation due to name hash collision
    b19c0465e4da btrfs: fix transaction abort on set received ioctl due to item overflow
    6bce705b699c btrfs: fix transaction abort when snapshotting received subvolumes
    3f04f871a1d4 kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
    61cfa81f19b9 kprobes: Remove unneeded goto
    6ebef4a220a1 ksmbd: unset conn->binding on failed binding request
    9229709ec8bf smb: client: fix krb5 mount with username option
    807bd1258453 Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
    dd3b221e2107 Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
    935c716be860 parisc: Flush correct cache in cacheflush() syscall
    5653af416a48 net: macb: fix use-after-free access to PTP clock
    70662874f646 NFC: nxp-nci: allow GPIOs to sleep
    67f2796354bf LoongArch: Give more information if kmem access failed
    e48bf8f1d2b1 nvdimm/bus: Fix potential use after free in asynchronous initialization
    41f6ba6c98a6 sunrpc: fix cache_request leak in cache_release
    d1a19217995d NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
    439a6728ec46 io_uring/kbuf: check if target buffer list is still legacy on recycle
    d77401968c78 mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node()
    8e7715193e5a s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
    2c5c0f4dc8cc s390/stackleak: Fix __stackleak_poison() inline assembly constraint
    3e0619a2a61b s390/xor: Fix xor_xc_2() inline assembly constraints
    1b3ff4d88b50 mptcp: pm: in-kernel: always set ID as avail when rm endp
    268fd5502281 net: stmmac: remove support for lpi_intr_o
    fbab8c08e1a6 binfmt_misc: restore write access before closing files opened by open_exec()
    8c1befea57db sched/fair: Fix pelt clock sync when entering idle
    d1365d2abfaf f2fs: zone: fix to avoid inconsistence in between SIT and SSA
    3da45ec1e485 rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
    8af210df4f71 platform/x86/amd/pmc: Add support for Van Gogh SoC
    9c05cd8f4232 x86/uprobes: Fix XOL allocation failure for 32-bit tasks
    1b24d3e8792b drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
    2e147aa3169b drm/exynos: vidi: fix to avoid directly dereferencing user pointer
    21ca24ba51a2 drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
    e1903358b215 drm/amdgpu: Add basic validation for RAS header
    ce63943f9bce l2tp: do not use sock_hold() in pppol2tp_session_get_sock()
    da249eb3206c drm/amd/pm: Use pm_display_cfg in legacy DPM (v2)
    b3367ee3e557 drm/amd/display: Add pixel_clock to amd_pp_display_configuration
    ec2b34acb189 net: dsa: properly keep track of conduit reference
    0643aa246819 bpf: Forget ranges when refining tnum after JSET
    2cbef9ea5a0a net: fix segmentation of forwarding fraglist GRO
    e19201b0c67d net: gso: fix tcp fraglist segmentation after pull from frag_list
    1f2b859225eb net: add support for segmenting TCP fraglist GSO packets
    9b03768037d9 tracing: Add recursion protection in kernel stack trace recording
    eba0c75670c0 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
    33743ec6679a riscv: Sanitize syscall table indexing under speculation
    4357e02cafab btrfs: do not strictly require dirty metadata threshold for metadata writepages
    bfc717be833f iomap: allocate s_dio_done_wq for async reads as well
    a426f29ac3fa rxrpc: Fix data-race warning and potential load/store tearing
    fc3454a20bef x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
    03c29d6d3719 x86/sev: Harden #VC instruction emulation somewhat
    f69fec628756 ipv6: use RCU in ip6_xmit()
    897d9006e75f dm-verity: disable recursive forward error correction
    0464bf75590d rxrpc: Fix recvmsg() unconditional requeue
    1b0edd6022a3 ext4: always allocate blocks only from groups inode can use
    90336fc3d6f5 eth: bnxt: always recalculate features after XDP clearing, fix null-deref
    1e3769aa0946 usb: typec: ucsi: Move unregister out of atomic section
    c57387d447a2 pNFS: Fix a deadlock when returning a delegation during open()
    a4810f8beb01 NFS: Fix a deadlock involving nfs_release_folio()
    1562138b9cab nfs: pass explicit offset/count to trace events
    815db2363e51 dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
    64d8abd8c530 btrfs: fix NULL dereference on root when tracing inode eviction
    54322d95309d arm64: mm: Don't remap pgtables for allocate vs populate
    6a36c8e88af7 arm64: mm: Batch dsb and isb when populating pgtables
    37413d064396 arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
    7d115eb231a6 net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz
    9dcd86cb22e1 btrfs: always fallback to buffered write if the inode requires checksum
    dbc4e10619ed ext4: fix dirtyclusters double decrement on fs shutdown
    db489778e6f2 f2fs: fix to avoid migrating empty section
    5d305a95130a net/tcp-md5: Fix MAC comparison to be constant-time
    307afccb751f ksmbd: Compare MACs in constant time
    946054b773ed smb: client: Compare MACs in constant time
    26a29582980b xfs: ensure dquot item is deleted from AIL only after log shutdown
    50c0e03072fc xfs: fix integer overflow in bmap intent sort comparator
    2bfc83cee05f crypto: atmel-sha204a - Fix OOM ->tfm_count leak
    0629a1a187e4 cifs: open files should not hold ref on superblock
    0a47c3889fcd net: macb: Shuffle the tx ring before enabling tx
    0bc70491e466 drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output
    920467466d2d drm/msm: Fix dma_free_attrs() buffer size
    fec5c70b82af ksmbd: Don't log keys in SMB3 signing and encryption key generation
    d1cdf0c63947 iomap: reject delalloc mappings during writeback
    0ba544dacec2 mm/kfence: fix KASAN hardware tag faults during late enablement
    816fa1dfae45 KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
    5d1e72015b90 KVM: SVM: Add a helper to look up the max physical ID for AVIC
    32ca7117e153 KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids
    d146f2775804 usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
    c24c06ed1849 can: gs_usb: gs_can_open(): always configure bitrates before starting device
    dfc314d7c767 net/sched: act_gate: snapshot parameters with RCU on replace
    0be8c9627556 kbuild: Leave objtool binary around with 'make clean'
    2d53b863b401 selftests: mptcp: join: check RM_ADDR not sent over same subflow
    1ec68e2096ef selftests: mptcp: add a check for 'add_addr_accepted'
    05799c2f1ca5 mptcp: pm: in-kernel: always mark signal+subflow endp as used
    a29641dc1267 mptcp: pm: avoid sending RM_ADDR over same subflow
    7f3b7dc8c6ca drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
    c33523b8fd2d net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
    71511dae56a7 gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
    f9f1660b7ffc x86/sev: Allow IBPB-on-Entry feature for SNP guests
    c8ddb2d30d03 platform/x86: hp-bioscfg: Support allocations of larger data
    3c5c818c78b0 wifi: libertas: fix use-after-free in lbs_free_adapter()
    cf29329a13df ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
    ca049ef5c8c7 gve: defer interrupt enabling until NAPI registration
    212b9632718c drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD
    3161ae587816 i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
    0911fd8e400e i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
    dcd66a0c0388 i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
    5c485bc32551 iio: imu: inv_icm42600: fix odr switch to the same value
    27c324ef1638 iio: gyro: mpu3050-i2c: fix pm_runtime error handling
    2a86a396aa00 iio: gyro: mpu3050-core: fix pm_runtime error handling
    10ea2df061f3 iio: buffer: Fix wait_queue not being removed
    dd7b7093bb77 iio: chemical: bme680: Fix measurement wait duration calculation
    342e5f67fb99 iio: potentiometer: mcp4131: fix double application of wiper shift
    dcdf1e92674e iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
    5a3952ba82f8 iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
    fa87bb35b917 iio: frequency: adf4377: Fix duplicated soft reset mask
    8f9fca12f2f3 iio: dac: ds4424: reject -128 RAW value
    fa6fd9aec721 btrfs: abort transaction on failure to update root in the received subvol ioctl
    40f7c69eb00d smb: client: fix iface port assignment in parse_server_interfaces
    438e77435aee smb: client: fix in-place encryption corruption in SMB2_write()
    dcd1f1321034 smb: client: fix atomic open with O_DIRECT & O_SYNC
    2ca6bdf449b1 lib/bootconfig: check bounds before writing in __xbc_open_brace()
    bbdb80f29ee9 lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()
    f59193807211 x86/apic: Disable x2apic on resume if the kernel expects so
    35e3ec8e589b scsi: core: Fix error handling for scsi_alloc_sdev()
    cc7d44c59ea5 lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
    b373ff56ed2d s390/dasd: Copy detected format information to secondary device
    3a67baa8eec4 s390/dasd: Move quiesce state with pprc swap
    41e91dff2d39 xfs: fix undersized l_iclog_roundoff values
    eaaaa3abbb20 cifs: make default value of retrans as zero
    e9311e199ac6 tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
    aeb7255531ba drm/i915: Fix potential overflow of shmem scatterlist length
    624f991cac21 drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
    2550d63cc350 drm/amd: Set num IP blocks to 0 if discovery fails
    c658c1c85ec2 drm/amdgpu: Fix use-after-free race in VM acquire
    3704ac6a0d9a net: dsa: microchip: Fix error path in PTP IRQ setup
    81431da77792 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
    599625881978 net: ncsi: fix skb leak in error paths
    302fef75512b ksmbd: fix use-after-free by using call_rcu() for oplock_info
    b720c84087cb smb: server: fix use-after-free in smb2_open()
    bf4d66d72e4a ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
    d156b1c24f72 pmdomain: bcm: bcm2835-power: Fix broken reset status read
    57e35502faa9 parisc: Check kernel mapping earlier at bootup
    344fde7a3dc0 parisc: Fix initial page table creation for boot
    52db5ef163c9 hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
    7003352d4327 arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation
    fad178ae8949 nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
    5699359529c6 parisc: Increase initial mapping to 64 MB with KALLSYMS
    f3ca45673dab batman-adv: Avoid double-rtnl_lock ELP metric worker
    422b4524320c tracing: Fix syscall events activation by ensuring refcount hits zero
    9298b0806923 ice: fix retry for AQ command 0x06EE
    5138cd978bab net: mana: Ring doorbell at 4 CQ wraparounds
    1a6da3dbb998 media: dvb-net: fix OOB access in ULE extension header tables
    768f25613a9f staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
    740bca8bbdb7 staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
    627cf4d1f0ea ixgbevf: fix link setup issue
    aac3ac27e6da ice: reintroduce retry mechanism for indirect AQ
    1fc8c3a0d249 irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports
    3cfdf8d27b66 device property: Allow secondary lookup in fwnode_get_next_child_node()
    54f2f0591216 drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
    98310fe3a2a7 drm/bridge: samsung-dsim: Fix memory leak in error path
    f3333543326c Revert "tcpm: allow looking for role_sw device in the main node"
    70c78429ef38 scsi: hisi_sas: Fix NULL pointer exception during user_scan()
    8be15087d037 scsi: hisi_sas: Use macro instead of magic number
    228c626df8d5 scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
    a6a894413b04 scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
    069307ae8cb9 i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach
    7d86de3847c5 time/jiffies: Mark jiffies_64_to_clock_t() notrace
    657dc653b06a ceph: fix memory leaks in ceph_mdsc_build_path()
    b3f5513141ec ceph: fix i_nlink underrun during async unlink
    59c7bf668c20 libceph: admit message frames only in CEPH_CON_S_OPEN state
    5f2806684b05 libceph: Use u32 for non-negative values in ceph_monmap_decode()
    50156622eb08 libceph: prevent potential out-of-bounds reads in process_message_header()
    3e2e36e9b9f3 libceph: reject preamble if control segment is empty
    8bb87547e92d libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
    8b6767e4141b kprobes: avoid crash when rmmod/insmod after ftrace killed
    a360d3815aae tipc: fix divide-by-zero in tipc_sk_filter_connect()
    a8e9cab16771 ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
    270277c2ab63 mmc: core: Avoid bitfield RMW for claim/retune flags
    d8f20b282418 mm/kfence: disable KFENCE upon KASAN HW tags enablement
    f36ab071abd0 mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
    b88ce81232bb mm/tracing: rss_stat: ensure curr is false from kthread context
    155f471e38aa usb: image: mdc800: kill download URB on timeout
    e7b3d154eb08 usb: mdc800: handle signal and read racing
    9c6159d5b72d usb: renesas_usbhs: fix use-after-free in ISR during device removal
    4ee3062bf2c9 usb: class: cdc-wdm: fix reordering issue in read code path
    659c0c7d50a4 USB: core: Limit the length of unkillable synchronous timeouts
    39bd4097292f USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
    fc26e98b6cb8 USB: usbcore: Introduce usb_bulk_msg_killable()
    2872b67951fe usb: roles: get usb role switch from parent only for usb-b-connector
    52950203880b usb: cdc-acm: Restore CAP_BRK functionnality to CH343
    24aa4caf7f95 usb: core: don't power off roothub PHYs if phy_set_mode() fails
    19ef3da0a82d usb: misc: uss720: properly clean up reference in uss720_probe()
    f1c8b8183abc usb: dwc3: pci: add support for the Intel Nova Lake -H
    939e3d17b843 usb: yurex: fix race in probe
    b2dd9abf8c06 usb: xhci: Prevent interrupt storm on host controller error (HCE)
    2e2baa8fb5aa usb: xhci: Fix memory leak in xhci_disable_slot()
    2f2418efd495 USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed
    9105f4d74762 usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
    551f82df759c USB: add QUIRK_NO_BOS for video capture several devices
    ad4394f269dc KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC
    22bd6fea06bc ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
    af834b026bfc net: usb: lan78xx: skip LTM configuration for LAN7850
    2aaf0a7be0b8 net: usb: lan78xx: fix TX byte statistics for small packets
    e94d81319259 net: usb: lan78xx: fix silent drop of packets with checksum errors
    c5c5a6c53cf3 ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
    629cf09464cf ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
    3dfd1328c052 cgroup: fix race between task migration and iteration
    343d4b4a21a5 Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on"
    ce0caaed5940 usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
    3e2f1628faa3 octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status
    e4a4ca0b69c5 octeontx2-af: devlink health: use retained error fmsg API
    fa3183e7c748 octeontx2-af: devlink: fix NIX RAS reporter recovery condition
    cf6099ef493b net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
    764039ff6515 ASoC: detect empty DMI strings
    35c7624d30cb ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
    e15b56da10b5 ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
    0a1fc25deaba e1000/e1000e: Fix leak in DMA error cleanup
    e611b36efca1 i40e: fix src IP mask checks and memcpy argument names in cloud filter
    628773eba024 nvme-pci: Fix race bug in nvme_poll_irqdisable()
    83e6edd63583 nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
    f691272c3e8c sched: idle: Make skipping governor callbacks more consistent
    ac8f2dfcecbd regulator: pca9450: Correct interrupt type
    28986d1c093f regulator: pca9450: Make IRQ optional
    540803559993 netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
    4a1f6ee69267 netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
    47b1c5d1b094 netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
    9b94f0e42ed2 netfilter: x_tables: guard option walkers against 1-byte tail reads
    0a55d62cdb62 netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
    61243ff7e757 amd-xgbe: prevent CRC errors during RX adaptation with AN disabled
    df65ae0f1330 amd-xgbe: fix link status handling in xgbe_rx_adaptation
    86f5334fcb48 mctp: route: hold key->lock in mctp_flow_prepare_output()
    a3a1ea5d1f8d can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value
    d7900a43b0a3 mctp: i2c: fix skb memory leak in receive path
    8460187b4852 serial: caif: hold tty->link reference in ldisc_open and ser_release
    bba6c0806a8c net: sfp: improve Huawei MA5671a fixup
    17f69ee2ed08 net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
    2369830617a5 net: sfp: improve Nokia GPON sfp fixup
    783025a3babb net: sfp: re-implement ignoring the hardware TX_FAULT signal
    d9744892b8ed ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays
    e03f8d141911 ASoC: simple-card-utils: use __free(device_node) for device node
    317a9298c54b ASoC: soc-core: flush delayed work before removing DAIs and widgets
    8b76136bd446 ASoC: soc-core: drop delayed_work_pending() check before flush
    59b06d8b9bdb net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
    383b37c04a48 net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
    957d2a58f7f8 net/mlx5: Fix deadlock between devlink lock and esw->wq
    87db2efa8327 net/mlx5: Query to see if host PF is disabled
    0e4dd5078b0c net/mlx5: IFC updates for disabled host PF
    11762a893ffc bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
    43723dff1a59 drm/msm/dsi: fix pclk rate calculation for bonded dsi
    7c370f2cb7fc drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations
    c58dcaac49b6 net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets
    74c39a47856b xprtrdma: Decrement re_receiving on the early exit paths
    2f91ef68d0ed smb/server: Fix another refcount leak in smb2_open()
    fd4ff8c64639 powerpc: 83xx: km83xx: Fix keymile vendor prefix
    a971ce3a39e5 remoteproc: mediatek: Unprepare SCP clock during system suspend
    f3394234b849 remoteproc: sysmon: Correct subsys_name_len type in QMI request
    80bc3c57dd32 powerpc/uaccess: Fix inline assembly for clang build on PPC32
    9e5df7e19c44 ALSA: usb-audio: Check max frame size for implicit feedback mode, too
    8d66e46ff0f4 ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
    32af15506450 scsi: ufs: core: Fix shift out of bounds when MAXQ=32
    0614f5618c24 scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
    7b640a732689 ASoC: cs42l43: Report insert for exotic peripherals
    f43a420065f0 ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
    80e35a0a8ab5 scsi: ses: Fix devices attaching to different hosts
    486519660bd9 ACPI: OSI: Add DMI quirk for Acer Aspire One D255
    b006c61a5d97 wifi: mac80211: set default WMM parameters on all links
    d7963d6997fe unshare: fix unshare_fs() handling
    7da755e0d02e scsi: mpi3mr: Add NULL checks when resetting request and reply queues
    5bb47c03024e ACPI: PM: Save NVS memory on Lenovo G70-35
    e7919a293f9b scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
    ae10787d955f apparmor: fix race between freeing data and fs accessing it
    6ef1f2926c41 apparmor: fix race on rawdata dereference
    f90e3ecd9e1e apparmor: fix differential encoding verification
    17debf558602 apparmor: fix unprivileged local user can do privileged policy management
    55ef2af7490a apparmor: Fix double free of ns_name in aa_replace_profiles()
    7c7cf05e0606 apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
    5a184f7cbdea apparmor: fix side-effect bug in match_char() macro usage
    3f8699b3ee0c apparmor: fix: limit the number of levels of policy namespaces
    33959a491e9f apparmor: replace recursive profile removal with iterative approach
    663ce34786e7 apparmor: fix memory leak in verify_header
    07cf6320f40e apparmor: validate DFA start states are in bounds in unpack_pdb
    7f4d6a5d3429 net: tcp: accept old ack during closing
    5a110ddcc99b net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
    59c15b9cc453 tracing: Add NULL pointer check to trigger_data_free()
    c7919c1c1d80 selftest/arm64: Fix sve2p1_sigill() to hwcap test
    a0fb59f527d0 xdp: produce a warning when calculated tailroom is negative
    d5f7daed130c i40e: use xdp.frame_sz as XDP RxQ info frag_size
    7b9c0ee7fed9 i40e: fix registering XDP RxQ info
    183f940bdf90 xsk: introduce helper to determine rxq->frag_size
    8701504563fa xdp: use modulo operation to calculate XDP frag tailroom
    5b1449301ca0 net/sched: act_ife: Fix metalist update behavior
    b299121e7453 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
    5f93e6b4d12b net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
    a12cdaa3375f net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
    29629dd7d373 net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
    3cdb52d6eba0 net: stmmac: Fix error handling in VLAN add and delete paths
    722a28b635ec nfc: rawsock: cancel tx_work before socket teardown
    edc188322caa nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback
    dcbcccfc5195 nfc: nci: free skb on nci_transceive early error paths
    f7d8b5d649dd net: nfc: nci: Fix zero-length proprietary notifications
    dbd58b0730aa net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
    e42ff5abbd14 nvme: fix memory allocation in nvme_pr_read_keys()
    be3b61ebcafe nvme: reject invalid pr_read_keys() num_keys values
    5d53fe502ef4 drm/sched: Fix kernel-doc warning for drm_sched_job_done()
    0c3dce09e8ef amd-xgbe: fix sleep while atomic on suspend/resume
    581800298313 ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
    db93ff008d2e smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info()
    99acd1ea3499 smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op()
    9b02c5c4147f bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
    4bb55e430d82 bpf: export bpf_link_inc_not_zero.
    39959a7d3efe xen/acpi-processor: fix _CST detection using undersized evaluation buffer
    8babb2714033 net/rds: Fix circular locking dependency in rds_tcp_tune
    11fc15378e87 indirect_call_wrapper: do not reevaluate function pointer
    7ae7b093b7db wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
    a6605f619131 wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
    aca4c9e4901b wifi: wlcore: Fix a locking bug
    78bb63bbabb3 wifi: cw1200: Fix locking in error paths
    3bf4ee25f051 octeon_ep: avoid compiler and IQ/OQ reordering
    4818b80d20de octeon_ep: Relocate counter updates before NAPI
    5c262bd0e393 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
    f8db044a0a47 net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value
    14cecde3eb07 kunit: tool: copy caller args in run_kernel to prevent mutation
    eb5632fae6a3 rust: kunit: fix warning when !CONFIG_PRINTK
    b73832292cd9 can: mcp251x: fix deadlock in error path of mcp251x_open
    70e951afad4c can: bcm: fix locking for bcm_op runtime updates
    b4d1e6d27f93 amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
    622062f24644 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
    c7becfe3e604 dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
    420bc92cc966 dpaa2-switch: do not clear any interrupts automatically
    fb64be8e20dc xsk: Fix zero-copy AF_XDP fragment drop
    5172adf9efb8 xsk: Fix fragment node deletion to prevent buffer leak
    eb66c67b0847 xsk: s/free_list_node/list_node/
    560c974b7ccd xsk: Get rid of xdp_buff_xsk::xskb_list_node
    4e58b99c3c33 net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table
    391396b5052d drm/solomon: Fix page start when updating rectangle in page addressing mode
    352d940bcdbd drm/ssd130x: Replace .page_height field in device info with a constant
    3327bb9d474d drm/ssd130x: Store the HW buffer in the driver-private CRTC state
    be3079b7a328 drm/ssd130x: Use bool for ssd130x_deviceinfo flags
    9328cc4e511c e1000e: clear DPG_EN after reset to avoid autonomous power-gating
    337ecf555a4b hwmon: (it87) Check the it87_lock() return value
    95b14ecc5688 pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
    cc06e3f73390 platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
    896449ad9053 pinctrl: equilibrium: fix warning trace on load
    27fad3a507d6 pinctrl: equilibrium: rename irq_chip function callbacks
    70cde1f24ffb hwmon: (aht10) Fix initialization commands for AHT20
    166678027ad4 hwmon: (aht10) Add support for dht20
    cc7f6f0a2666 ARM: clean up the memset64() C wrapper
    ec312cb9bd97 selftests: mptcp: join: check removing signal+subflow endp
    047de213219d selftests: mptcp: more stable simult_flows tests
    7c01b680beaf scsi: core: Fix refcount leak for tagset_refcnt
    3990f352bb0a smb: client: Don't log plaintext credentials in cifs_set_cifscreds
    f65c92e81cb4 smb: client: fix broken multichannel with krb5+signing
    874c47503e0f smb: client: fix cifs_pick_channel when channels are equally loaded
    6f1d1614f841 drbd: fix null-pointer dereference on local read error
    e91d8d6565b7 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
    6b847d65f5b0 Squashfs: check metadata block offset is within range
    e8ef82cb6443 scsi: target: Fix recursive locking in __configfs_open_file()
    7dbffffd5761 net/sched: ets: fix divide by zero in the offload path
    1b1fac4c7a3a RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
    d0148965dbca IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
    22a9adea7e26 wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
    650981e718e6 wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
    fa18639deab4 wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
    129c8bb320a7 wifi: radiotap: reject radiotap with unknown bits
    a0c6ae2ea845 ALSA: usb-audio: Use correct version for UAC3 header validation
    cf48c2d1db3a platform/x86: dell-wmi: Add audio/mic mute key codes
    411ba3cd837f platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
    6a25e2527928 x86/efi: defer freeing of boot services memory
    6e330889e6c8 HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
    888f164453f2 can: usb: f81604: handle bulk write errors properly
    9b740ff5bc64 can: usb: f81604: handle short interrupt urb messages properly
    f6e90c113c92 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
    13b646eec3ba can: ucan: Fix infinite loop from zero-length messages
    54ee74307165 can: usb: f81604: correctly anchor the urb in the read bulk callback
    1818974e1b5e can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
    7f8505c7ce3f net: usb: pegasus: validate USB endpoints
    12c0243de0ae net: usb: kalmia: validate USB endpoints
    72f90f481c6a net: usb: kaweth: validate USB endpoints
    d1f6d20b3c26 nfc: pn533: properly drop the usb interface reference on disconnect
    af050ab44fa1 media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
    5f8463e43720 eventpoll: Fix integer overflow in ep_loop_check_proc()
    1b3ae721257e drm/amdgpu: keep vga memory on MacBooks with switchable graphics
    aa7f9ef72eae drm/amd: Drop special case for yellow carp without discovery
    4b4eee6d0c00 net: arcnet: com20020-pci: fix support for 2.5Mbit cards
    efc159492b5c ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314
    f3cb23e1fcf3 hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race
    020bfaac6cb4 ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
    c676ab65519c drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
    d637f6ec149f usb: cdns3: fix role switching during resume
    3de5fd27af5b usb: cdns3: call cdns_power_is_lost() only once in cdns_resume()
    3097fb95e244 usb: cdns3: remove redundant if branch
    7b900a94d716 clk: tegra: tegra124-emc: fix device leak on set_rate()
    8acf534d5a58 arm64: dts: rockchip: Fix rk356x PCIe range mappings
    3469112edc5c mfd: omap-usb-host: Fix OF populate on driver rebind
    1d4ea57730bf mfd: omap-usb-host: Convert to platform remove callback returning void
    59b76ae68764 mfd: qcom-pm8xxx: Fix OF populate on driver rebind
    a97ff3b70ff5 mfd: qcom-pm8xxx: Convert to platform remove callback returning void
    57e83bfbe1e4 ext4: fix e4b bitmap inconsistency reports
    e33256b2f927 ext4: convert bd_buddy_page to bd_buddy_folio
    ccab2af6c19f ext4: convert bd_bitmap_page to bd_bitmap_folio
    ceee57fd7207 ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()
    31c4c67dec33 mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
    c42ffd816c0f mailbox: Allow controller specific mapping using fwnode
    cfdb216691ec mailbox: Use guard/scoped_guard for con_mutex
    bef5ecf09d70 mailbox: Use dev_err when there is error
    5e99cbdfcd15 mailbox: remove unused header files
    235359afbe0a mailbox: sort headers alphabetically
    97b60acdca6f mailbox: don't protect of_parse_phandle_with_args with con_mutex
    49ada773c180 mailbox: Use of_property_match_string() instead of open-coding
    dc7c9b9d03a5 ext4: drop extent cache when splitting extent fails
    f0931a5c1700 ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
    67cdb7bd7442 ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
    11406eb96a19 ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT
    ed0096fc86b2 ext4: get rid of ppath in ext4_ext_handle_unwritten_extents()
    d7b04ea31c6e ext4: get rid of ppath in ext4_ext_convert_to_initialized()
    c24ce099bea9 ext4: get rid of ppath in ext4_convert_unwritten_extents_endio()
    147a6a2725b1 ext4: get rid of ppath in ext4_split_convert_extents()
    cda8a34348d7 ext4: get rid of ppath in ext4_split_extent()
    58ddae5d77b1 ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1
    e766534911b3 ext4: subdivide EXT4_EXT_DATA_VALID1
    ffb68fc57207 ext4: get rid of ppath in ext4_split_extent_at()
    fb138df7d886 ext4: get rid of ppath in ext4_ext_insert_extent()
    8f6e910852d8 ext4: get rid of ppath in ext4_ext_create_new_leaf()
    cafb151eb180 ext4: get rid of ppath in ext4_find_extent()
    a4a7024448ab bus: omap-ocp2scp: fix OF populate on driver rebind
    e4be2bd01a76 bus: omap-ocp2scp: Convert to platform remove callback returning void
    43bb0a265b26 drm/tegra: dsi: fix device leak on probe
    ec3be7dc9391 KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
    5e8bf325ed12 KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
    ca921be7a117 media: tegra-video: Fix memory leak in __tegra_channel_try_format()
    7a9c901edcaf media: tegra-video: Use accessors for pad config 'try_*' fields
    32a1889f7bb0 KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR
    469a8a038d8b KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
    626ccc6daa7a KVM: x86: Fix KVM_GET_MSRS stack info leak
    fa0e278a1230 PCI: Use resource_set_range() that correctly sets ->end
    ffe8617e2e5b resource: Add resource set range and size helpers
    fffdb0fece19 PCI: Use resource names in PCI log messages
    bc440d87e655 PCI: Update BAR # and window messages
    b9eccd59697f memory: mtk-smi: fix device leak on larb probe
    b16599fedf49 memory: mtk-smi: fix device leaks on common probe
    646ac65db6c1 memory: mtk-smi: Convert to platform remove callback returning void
    5f5997339cf0 PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value
    8a95fb9df110 bpf: Fix stack-out-of-bounds write in devmap
    dfe079bb6ab3 btrfs: fix compat mask in error messages in btrfs_check_features()
    a1b82706c233 btrfs: fix warning in scrub_verify_one_metadata()
    6eac621b2deb btrfs: fix objectid value in error message in check_extent_data_ref()
    ad567ccfd90c btrfs: fix incorrect key offset in error message in check_dev_extent_item()
    ab69bf6f8970 btrfs: add support for inserting raid stripe extents
    cbca08a23773 btrfs: read raid stripe tree from disk
    fff272a83847 btrfs: add raid stripe tree definitions
    9895ddc5efec btrfs: move btrfs_extref_hash into inode-item.h
    d928f8aec88d btrfs: remove btrfs_crc32c wrapper
    971658d3932b btrfs: move btrfs_crc32c_final into free-space-cache.c
    37fc52528383 ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put()
    996d43a72d11 ALSA: pci: hda: use snd_kcontrol_chip()
    4f8d58123378 perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
    949e15a8dbde ALSA: usb-audio: Use inclusive terms
    6ec99e9c90f4 ALSA: usb-audio: Cap the packet size pre-calculations
    133c3f3dde72 scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume
    0990188985f5 rseq: Clarify rseq registration rseq_size bound check comment
    7b2c39f7bada ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices
    8b00427317ba scsi: pm8001: Fix use-after-free in pm8001_queue_command()
    be4c63507aca scsi: lpfc: Properly set WC for DPP mapping
    2edbd1733091 irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
    0bd326dffd9e drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
    7e55d0788b36 drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
    2106a0153b5d drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release

(From OE-Core rev: 5a3cfb5dd393656dae18eece3c006fb1a3dc244a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:54 +01:00
Bruce Ashfield fe8122e97d linux-yocto/6.6: update to v6.6.129
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4fc00fe35d46 Linux 6.6.129
    acf7c8972775 Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer"
    682d8e2f892b Linux 6.6.128
    0ac0e02183c5 arm64: Fix sampling the "stable" virtual counter in preemptible section
    18845fb30921 drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
    fe418ef21efd NTB: ntb_transport: Fix too small buffer for debugfs_name
    1cdff5d564fe tracing: Wake up poll waiters for hist files when removing an event
    e4e5026252b4 tracing: Fix checking of freed trace_event_file for hist files
    ad058a4317db net: nfc: nci: Fix parameter validation for packet data
    dc99b25ed4f7 arm64: Force the use of CNTVCT_EL0 in __delay()
    ad3640895956 x86/kexec: Copy ACPI root pointer address from config table
    9c735a7d98c9 net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
    1e300c33ef3c net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
    6ccfcad1b582 ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
    c854ab481ece cifs: some missing initializations on replay
    6a3ce8c8ad80 fbcon: Remove struct fbcon_display.inverse
    b6de6d481cc2 fbdev: ffb: fix corrupted video output on Sun FFB1
    3ed019654234 fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
    e8c5d5f6cd66 fbdev: vt8500lcdfb: fix missing dma_free_coherent()
    a785c4e2a999 fbcon: check return value of con2fb_acquire_newinfo()
    632d233cf2e6 ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
    e075ec9b08f8 atm: fore200e: fix use-after-free in tasklets during device removal
    9f8ad199844c net: intel: fix PCI device ID conflict between i40e and ipw2200
    6eb571a37631 io_uring/filetable: clamp alloc_hint to the configured alloc range
    0f4dcba31bf4 tracing: Fix to set write permission to per-cpu buffer_size_kb
    ec4445ae9e58 net: macb: Fix tx/rx malfunction after phy link down and up
    013ac469596a octeontx2-af: CGX: fix bitmap leaks
    0f85a9655445 net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
    63afc078bba6 net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
    710657d3d31f LoongArch: Disable instrumentation for setup_ptwalker()
    6868bd64dc90 LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
    a50371c6ad99 LoongArch: Prefer top-down allocation after arch_mem_init()
    bb1a54f7f011 LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
    9efa154609cd ceph: supply snapshot context in ceph_zero_partial_object()
    103e9d1d43e6 MIPS: rb532: Fix MMIO UART resource registration
    953953abb66e cifs: Fix locking usage for tcon fields
    cc3f83b6fb37 staging: rtl8723bs: fix null dereference in find_network
    369d369ed08f parisc: kernel: replace kfree() with put_device() in create_tree_node()
    a19b61fdb958 PCI: Fix pci_slot_trylock() error handling
    65e794574069 net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
    4857c37c7ba9 drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
    7a4fd19c567f tipc: fix RCU dereference race in tipc_aead_users_dec()
    8e875cf8851b mtd: rawnand: pl353: Fix software ECC support
    f5da4c24aa6d usb: dwc2: fix resume failure if dr_mode is host
    76c1123ffccf usb: dwc3: gadget: Move vbus draw to workqueue context
    aa8d68d97c7f scsi: ufs: core: Flush exception handling work when RPM level is zero
    d3e837e11ee9 perf/arm-cmn: Reject unsupported hardware configurations
    9bd98d088f47 remoteproc: imx_rproc: Fix invalid loaded resource table detection
    d99a08c2b4d5 btrfs: continue trimming remaining devices on failure
    41a09925ec68 arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
    1047ca2d8169 PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
    639265296fe6 Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
    cfccd3b8c51b kexec: derive purgatory entry from symbol
    bb273b68c171 ocfs2: fix reflink preserve cleanup issue
    649c2e853608 rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
    81c44a4bc168 mm/highmem: fix __kmap_to_page() build error
    1eabfd2c437b iio: gyro: itg3200: Fix unchecked return value in read_raw
    9d0ca11258e7 powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
    442f5db91317 tools: Fix bitfield dependency failure
    e4709950acd4 dm mpath: make pg_init_delay_msecs settable
    542dd6da35eb bus: fsl-mc: fix an error handling in fsl_mc_device_add()
    65f5a17b6d56 usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
    22e460b6333a x86/kexec: add a sanity check on previous kernel's ima kexec buffer
    57c4fd0f4b02 nvmem: Drop OF node reference on nvmem_add_one_cell() failure
    13c1f31f777c nfsd: fix return error code for nfsd_map_name_to_[ug]id
    d92b8fac294b md/bitmap: fix GPF in write_page caused by resize race
    142b1bba3299 PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
    708e20c66b27 KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
    a6f660d62bc1 xfs: fix remote xattr valuelblk check
    38613c01f69e xfs: fix freemap adjustments when adding xattrs to leaf blocks
    ffaf5c99d0f8 xfs: delete attr leaf freemap entries when empty
    e2e7c275f557 mfd: core: Add locking around 'mfd_of_node_list'
    01aed2f1d7cb iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
    a5b1ddbe31f4 media: verisilicon: AV1: Fix tile info buffer size
    8be53110395e xfs: mark data structures corrupt on EIO and ENODATA
    297bb8b1db60 selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
    aa5f25d55cda mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
    8dcff1979381 drm: of: drm_of_panel_bridge_remove(): fix device_node leak
    52920a853381 media: venus: vdec: restrict EOS addr quirk to IRIS2 only
    225f2221b422 media: venus: vdec: fix error state assignment for zero bytesused
    272d44fa7bce arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
    ed36f6ae0039 dm-unstripe: fix mapping bug when there are multiple targets in a table
    fb49f209995f dm-integrity: fix recalculation in bitmap mode
    de7934627cc4 s390/pci: Handle futile config accesses of disabled devices directly
    1c7c87cf18da clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc()
    0f0809bfe4fa media: i2c: ov01a10: Fix digital gain range
    85cc6574f21b clk: clk-apple-nco: Add "apple,t8103-nco" compatible
    3880e331b0b3 KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
    e113339cc7d2 soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
    d451bf970a0c soc: ti: k3-socinfo: Fix regmap leak on probe failure
    7daf279c674d dm: clear cloned request bio pointer when last clone bio completes
    2d10a3dad8d6 dm-integrity: fix a typo in the code for write/discard race
    d03a29cb36d6 media: i2c: ov5647: use our own mutex for the ctrl lock
    089625cccd7e media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
    c146483bad46 media: i2c: ov5647: Sensor should report RAW color space
    e5f4aad2627d media: i2c: ov5647: Correct minimum VBLANK value
    1f413dac763a media: i2c: ov5647: Correct pixel array offset
    cabd025182cf media: i2c: ov5647: Initialize subdev before controls
    c9af1818387f media: ccs: Avoid possible division by zero
    0c074e80921f media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
    8de39720e7a3 media: i2c: ov01a10: Fix test-pattern disabling
    a14a3cef8017 media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
    567a03fe8d08 media: i2c: ov01a10: Fix analogue gain range
    e2f6d78dc3a8 media: i2c: ov01a10: Fix reported pixel-rate value
    bb2b049f75f1 media: i2c: ov01a10: Fix the horizontal flip control
    ccb92def042a media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
    9cb9eca33d20 media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
    046c5db6bbba media: cx25821: Add missing unmap in snd_cx25821_hw_params()
    544215cc37d0 media: cx23885: Add missing unmap in snd_cx23885_hw_params()
    10ab64f8efc2 media: cx88: Add missing unmap in snd_cx88_hw_params()
    27c508f61963 media: radio-keene: fix memory leak in error path
    dd8508820246 media: verisilicon: AV1: Set IDR flag for intra_only frame type
    8305902ac038 arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
    b74bf7d0d01f HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
    3f1b21cc67a1 HID: prodikeys: Check presence of pm->input_ep82
    243e1165eb03 HID: magicmouse: Do not crash on missing msc->input
    449004434e1f HID: hid-pl: handle probe errors
    cad7442ff23b arm64: Disable branch profiling for all arm64 code
    deb8f6dfd31d KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
    275e15fd1cf7 ARM: omap2: Fix reference count leaks in omap_control_init()
    b44eb959159f media: verisilicon: AV1: Fix tx mode bit setting
    8ad7e6ea46a9 media: verisilicon: AV1: Fix enable cdef computation
    564fd3a63efc media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
    12cafc15d246 media: mtk-mdp: Fix error handling in probe function
    637510cb5bed media: mediatek: encoder: Fix uninitialized scalar variable issue
    031f2adc1499 dm-verity: correctly handle dm_bufio_client_create() failure
    a9ddc035050a fpga: dfl: use subsys_initcall to allow built-in drivers to be added
    d6f5aed42760 ASoC: SOF: ipc4-control: Keep the payload size up to date
    e1dd7092fa8f ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data
    59fe643f21b9 ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
    3a5a4b066329 ASoC: SOF: ipc4-control: If there is no data do not send bytes update
    955e2d6e5e0a clk: renesas: rzg2l: Select correct div round macro
    a4be3b90ba9d clk: renesas: rzg2l: Fix intin variable size
    90c8353f4718 rpmsg: core: fix race in driver_override_show() and use core helper
    7ef82863d422 netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
    b690635d4719 dpaa2-switch: validate num_ifs to prevent out-of-bounds write
    9ac6aebef4b4 net: consume xmit errors of GSO frames
    175881094756 net/mlx5: Fix missing devlink lock in SRIOV enable error path
    54fb0577ebe7 net/mlx5: DR, Fix circular locking dependency in dump
    b324327ff6f4 RDMA/umem: Fix double dma_buf_unpin in failure path
    35854ed5c40b net: usb: pegasus: enable basic endpoint checking
    df001db47708 RDMA/efa: Fix typo in efa_alloc_mr()
    337d7b4112a4 net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
    52d469319ced RDMA/core: Fix stale RoCE GIDs during netdev events at registration
    0b7d596da5de tipc: fix duplicate publication key in tipc_service_insert_publ()
    481ea39b342c Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
    efcdb4da480c Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ
    1a138921ce56 Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
    1d93a369b5aa Bluetooth: hci_qca: Cleanup on all setup failures
    7247f340f824 Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
    2983b39f8c0d Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
    1f40fde29349 wifi: cfg80211: wext: fix IGTK key ID off-by-one
    322437972f0a net: ethernet: xscale: Check for PTP support properly
    854f5997df49 net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
    19f359963ae8 net: usb: lan78xx: scan all MDIO addresses on LAN7801
    ef9b10a02050 net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
    166801e49a5b xfrm: always flush state and policy upon NETDEV_UNREGISTER event
    56d5c0557e53 ipmi: ipmb: initialise event handler read bytes
    f13e4fe961a7 xfrm: skip templates check for packet offload tunnel mode
    719918fc88df xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
    d0559d07afab ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
    85c9daa1f831 ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
    a4557dc20df4 rtc: zynqmp: correct frequency value
    61bd8787c605 drm/amd/display: Remove conditional for shaper 3DLUT power-on
    0b284a7ce311 btrfs: replace BUG() with error handling in __btrfs_balance()
    8995fc0e00b3 ALSA: usb-audio: Add sanity check for OOB writes at silencing
    6a997eb80644 drm/radeon: Add HAINAN clock adjustment
    5b9af0342402 drm/amdgpu: Add HAINAN clock adjustment
    c26bde6301f2 ALSA: usb-audio: Update the number of packets properly at receiving
    d2e92247b24a drm/amdgpu: Adjust usleep_range in fence wait
    068dee782c8c drm/amd/display: Avoid updating surface with the same surface under MPO
    1a7f1116c7f8 ARM: 9467/1: mm: Don't use %pK through printk
    44373b1e9c12 include: uapi: netfilter_bridge.h: Cover for musl libc
    9f33e83c8393 thermal: int340x: Fix sysfs group leak on DLVR registration failure
    e1dc45d97975 libceph: define and enforce CEPH_MAX_KEY_LEN
    a87a445ac1d9 ceph: supply snapshot context in ceph_uninline_data()
    2f5c626ea792 fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()
    ad0d779cdc26 fs/ntfs3: drop preallocated clusters for sparse and compressed files
    8d8c70b57dbe fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
    af839013c70a fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
    68e32694be23 fs: ntfs3: check return value of indx_find to avoid infinite loop
    6dedf0369f2a MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
    da08099d5f7a iio: magnetometer: Remove IRQF_ONESHOT
    53f2152b48d5 iio: Use IRQF_NO_THREAD
    be5465701341 Revert "mfd: da9052-spi: Change read-mask to write-mask"
    dc3bc979814b phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
    afb941338c8e phy: mvebu-cp110-utmi: fix dr_mode property read from dts
    d476130e53d3 watchdog: imx7ulp_wdt: handle the nowayout option
    0883ddd583ed binder: don't use %pK through printk
    1d7120244b54 fix it87_wdt early reboot by reporting running timer
    4ff5ab3e7141 serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
    8311bb40698b staging: rtl8723bs: fix memory leak on failure path
    03a2f7f9864c misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
    ece3722169ba misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
    c219c20cc357 dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
    f89324e2e09d dmaengine: sun6i: Choose appropriate burst length under maxburst
    f9305dda5015 fpga: of-fpga-region: Fail if any bridge is missing
    b2bbcaa36c1a usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
    32ccda4895ba serial: 8250_dw: handle clock enable errors in runtime_resume
    52b42c24750a staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
    cd496527efa8 soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
    3be7beef4a05 m68k: nommu: fix memmove() with differently aligned src and dest for 68000
    6ce681cf8082 clk: microchip: core: correct return value on *_get_parent()
    e2809ad08252 mailbox: sprd: clear delivery flag before handling TX done
    4c4679b31b9d remoteproc: mediatek: Break lock dependency to `prepare_lock`
    332fb842181e mailbox: sprd: mask interrupts that are not handled
    17ee46882b3e mailbox: imx: Skip the suspend flag for i.MX7ULP
    51edcbd17c8d mailbox: pcc: Remove spurious IRQF_ONESHOT usage
    f720e653aa1a remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized
    cb6c4aa73491 tracing: Fix false sharing in hwlat get_sample()
    9566c87101b2 vhost: fix caching attributes of MMIO regions by setting them explicitly
    f1bf5ebd5fda scsi: buslogic: Reduce stack usage
    d16337560750 hisi_acc_vfio_pci: update status after RAS error
    559e227b1df7 ata: libata: avoid long timeouts on hot-unplugged SATA DAS
    55de264a4d32 RDMA/rtrs-clt: For conn rejection use actual err number
    3819890d6ab2 nfc: nxp-nci: remove interrupt trigger type
    392e3d44841d myri10ge: avoid uninitialized variable use
    6e2a6100ac5b PCI: Mark Nvidia GB10 to avoid bus reset
    846b226065fe PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
    ec494c0260bf PCI: Enable ACS after configuring IOMMU for OF platforms
    a2376e912723 PCI: Fix pci_slot_lock () device locking
    f5ea62163a78 PCI: Mark ASM1164 SATA controller to avoid bus reset
    391200c274e9 net/rds: Clear reconnect pending bit
    f713dcd2ce83 vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
    7a8acafd45a9 net: usb: sr9700: remove code to drive nonexistent multicast filter
    87465580215c wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
    b015d4c70c9a wifi: rtw89: pci: restore LDO setting after device resume
    d9b549b6951b octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
    37f4e6804d98 Bluetooth: btusb: Add device ID for Realtek RTL8761BU
    c051ef2f61f4 Bluetooth: btusb: Add new VID/PID for RTL8852CE
    07960da05c0d Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
    c06dbfd954c9 Bluetooth: hci_conn: Set link_policy on incoming ACL connections
    9eaeba5600e5 ipv4: fib: Annotate access to struct fib_alias.fa_state.
    31d4bb68f436 wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
    941e3066441c wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
    2ace7ac88cb0 net: hns3: extend HCLGE_FD_AD_QID to 11 bits
    d5cd3bb7794e ipv4: igmp: annotate data-races around idev->mr_maxdelay
    ab2848d3783a gro: change the BUG_ON() in gro_pull_from_frag0()
    f0f729bdffb0 net/rds: No shortcut out of RDS_CONN_ERROR
    db62e9f44838 wifi: iwlwifi: mvm: check the validity of noa_len
    116bc0980e91 net: usb: r8152: fix transmit queue timeout
    f4bf64072c36 openrisc: define arch-specific version of nop()
    07a9b32eaae7 netfilter: xt_tcpmss: check remaining length before reading optlen
    89f50775d883 netfilter: nf_conntrack: Add allow_clash to generic protocol handler
    99c75e53cec0 ext4: mark group extend fast-commit ineligible
    0d5fcb063cda ext4: move ext4_percpu_param_init() before ext4_mb_init()
    83b074b69022 ext4: mark group add fast-commit ineligible
    46ed4e9c8d30 ipv6: exthdrs: annotate data-race over multiple sysctl
    55170230de66 ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
    f73528f140f1 wifi: ath12k: fix preferred hardware mode calculation
    c5547727bd1c wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
    ddfe47664cc6 PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
    d880c9b73890 wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode
    f2f65b28d802 iommu/amd: move wait_on_sem() out of spinlock
    5bfb25495e39 wifi: libertas: fix WARNING in usb_tx_block
    9ff4843e6ea3 iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
    4f9e7ca933a9 dm: remove fake timeout to avoid leak request
    df379f57c2cd dm: replace -EEXIST with -EBUSY
    dd181178c245 wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H
    a96d161cfdb1 wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
    9fdce77e38c1 wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero
    f70fcbc2ac7c jfs: nlink overflow in jfs_rename
    68f7fc769243 jfs: Add missing set_freezable() for freezable kthread
    34506cb119bb ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
    8fb5c4c979ae modpost: Amend ppc64 save/restfpr symnames for -Os build
    fecfe41f7ed0 ASoC: es8328: Add error unwind in resume
    18c67fb3750b hwmon: (f71882fg) Add F81968 support
    f8ddbe303419 hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE
    2d48f60307e6 ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe()
    3383271464b7 spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
    19513daa8d13 ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio
    d1b6536ac20d gpio: aspeed-sgpio: Change the macro to support deferred probe
    98c0e07dc7d6 ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro
    49afc2e5bfae HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
    4df1e6252d07 HID: multitouch: add eGalaxTouch EXC3188 support
    876bb1eabdb1 media: rkisp1: Fix filter mode register configuration
    ac2d898da509 drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
    80b8b0df370f drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
    ec40702029b0 drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
    af67b50311e7 virt: vbox: uapi: Mark inner unions in packed structs as packed
    34eae7e0ab61 hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
    bbfaa5761f58 drm: Account property blob allocations to memcg
    e97de3e924b3 drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
    30aaed311f97 media: v4l2-async: Fix error handling on steps after finding a match
    4010e596d23c media: cx25821: Fix a resource leak in cx25821_dev_setup()
    33af366211ee media: solo6x10: Check for out of bounds chip_id
    4ba5c7a1aade media: pvrusb2: fix URB leak in pvr2_send_request_ex
    45d9a0cd1b88 media: adv7180: fix frame interval in progressive mode
    f5a5a824f0ac media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START
    81bc7d5e7897 spi: spi-mem: Limit octal DTR constraints to octal DTR situations
    822530fb85d8 ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
    21f6e02a1910 ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
    04184bcb50f5 HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards
    55462d16cb9c drm/amdgpu: avoid a warning in timedout job handler
    40e0b938db37 drm/amdgpu: add support for HDP IP version 6.1.1
    b0d35bc9c159 media: mediatek: vcodec: Don't try to decode 422/444 VP9
    38ef3e1e1e9b media: omap3isp: set initial format
    d490523d2374 media: omap3isp: isppreview: always clamp in preview_try_format()
    a9d1d7d27151 media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
    2663ef70c612 drm/v3d: Set DMA segment size to avoid debug warnings
    50e8aac244e7 spi: stm32: fix Overrun issue at < 8bpw
    8b971c21603a media: dvb-core: dmxdevfilter must always flush bufs
    b2a97f2259f6 spi-geni-qcom: use xfer->bits_per_word for can_dma()
    5d0814ad6654 spi-geni-qcom: initialize mode related registers to 0
    ac9a7c329a56 drm/display/dp_mst: Add protection against 0 vcpi
    afa0bfe1437d parisc: Prevent interrupts during reboot
    12535a5d5d64 arm64: tegra: smaug: Add usb-role-switch support
    1da904e84de6 pstore: ram_core: fix incorrect success return when vmap() fails
    a4345acbe390 char: tpm: cr50: Remove IRQF_ONESHOT
    3e656f767407 mailbox: bcm-ferxrm-mailbox: Use default primary handler
    7b9394e49720 crypto: hisilicon/qm - move the barrier before writing to the mailbox register
    5f007c6acaa7 PCI/MSI: Unmap MSI-X region on error
    f557c206c32e clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
    6f113ab549b8 clocksource/drivers/sh_tmu: Always leave device running after probe
    c8a34bceefbc bpf: verifier improvement in 32bit shift sign extension pattern
    47bbd0cb7db3 sparc: don't reference obsolete termio struct for TC* constants
    6aa04820dbfe sparc: Synchronize user stack on fork and clone
    648aa7ce0bd8 blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
    9150176cbf71 xenbus: Use .freeze/.thaw to handle xenbus devices
    2050a5cff32c perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
    84a17b7b292d s390/perf: Disable register readout on sampling events
    bafd4aa1908a cpufreq: dt-platdev: Block the driver from probing on more QC platforms
    a61c1bc84c4a md-cluster: fix NULL pointer dereference in process_metadata_update
    b4a0b646cc28 ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
    01e8751b37a3 ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
    64eb63f573f4 EFI/CPER: don't go past the ARM processor CPER record buffer
    e0ec99115e13 APEI/GHES: ensure that won't go past CPER allocated record
    5a9b1dda8481 EFI/CPER: don't dump the entire memory region
    6ea4b7bc2e7b x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
    30868a6a5238 rnbd-srv: Zero the rsp buffer before using it
    fd7e360845d3 arm64: Add support for TSV110 Spectre-BHB mitigation
    94ab05af1d96 perf/arm-cmn: Support CMN-600AE
    61cd0b287fb9 s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
    7823e09a68b5 tools/power cpupower: Reset errno before strtoull()
    93e8e3ee165a smb: client: prevent races in ->query_interfaces()
    e428670cfb29 gfs2: fiemap page fault fix
    048b58edc57d smb: client: add proper locking around ses->iface_last_update
    8b5dcfa97bf3 btrfs: handle user interrupt properly in btrfs_trim_fs()
    2bb588cede1c minix: Add required sanity checking to minix_check_superblock()
    43ccadb866de i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
    de9affb698d5 hfsplus: pretend special inodes as regular files
    f5d27ad99fca audit: add missing syscalls to read class
    c1b6227555c5 fs/buffer: add alert in try_to_free_buffers() for folios without buffers
    bccd4ebbdac3 hfsplus: fix volume corruption issue for generic/498
    91e27bc79c3b audit: add fchmodat2() to change attributes class
    4bde6678bc54 rtc: interface: Alarm race handling should not discard preceding error
    4927e2d29b74 libperf build: Always place libperf includes first
    5cf6e76e4f4f libperf: Don't remove -g when EXTRA_CFLAGS are used
    66e9b70c64df libsubcmd: Fix null intersection case in exclude_cmds()
    56042755b72f perf callchain: Fix srcline printing with inlines
    eddddf4ed7f6 perf unwind-libdw: Fix invalid reference counts
    985d844a5997 perf test stat tests: Fix for virtualized machines
    fa99e8717a68 perf test stat: Update test expectations and events
    8f36abf181c2 ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
    f939f666ec02 ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
    ce18fa88b154 ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false
    655c9ba9915f SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
    df10f23defff SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
    97503a852d3b ata: libata-scsi: refactor ata_scsi_translate()
    51680e9a1680 ata: pata_ftide010: Fix some DMA timings
    f18f70123962 ext4: use optimized mballoc scanning regardless of inode format
    4a79fde8db7e ext4: fix memory leak in ext4_ext_shift_extents()
    93b2ebbbcb2e ext4: don't cache extent during splitting extent
    c0155dee51b9 MIPS: Work around LLVM bug when gp is used as global register variable
    c941c268ad00 drm/amd/display: Use same max plane scaling limits for all 64 bpp formats
    da0959402742 ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk
    5fed5f6c6a02 x86/hyperv: Fix error pointer dereference
    1ee1d006c9fe btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
    b7bc182ec184 efi: Fix reservation of unaccepted memory table
    3222c8020aeb s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
    9e5cb7e67fbd spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
    a98d73dcc339 spi: wpcm-fiu: Simplify with dev_err_probe()
    978137e940de spi: wpcm-fiu: Fix uninitialized res
    87e463136302 spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
    971bf8e61e9b drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
    17e94789c216 drm/amdkfd: fix debug watchpoints for logical devices
    e975148b2c29 ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init
    3a2f5a21285b drm/i915/acpi: free _DSM package when no connectors
    29b2fbe3498d ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
    f8a5426652bd drm/amdgpu: Fix memory leak in amdgpu_ras_init()
    e87c73a80a12 drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
    8dc6beca70f0 apparmor: fix aa_label to return state from compount and component match
    b25298e89a29 apparmor: fix invalid deref of rawdata when export_binary is unset
    dbbe0a2e3e4b apparmor: make label_match return a consistent value
    0563743d3f70 apparmor: remove apply_modes_to_perms from label_match
    32928c1749e8 apparmor: refcount the pdb
    f89b657e1785 apparmor: provide separate audit messages for file and policy checks
    e78e00cf9eba apparmor: use passed in gfp flags in aa_alloc_null()
    1f736dfe27c8 apparmor: fix rlimit for posix cpu timers
    24bb7d11dc30 apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
    0dc19bca2260 apparmor: fix NULL sock in aa_sock_file_perm
    a4ff9e4f4ad4 net/mlx5: Fix multiport device check over light SFs
    f94a0de7b9f3 bonding: alb: fix UAF in rlb_arp_recv during bond up/down
    8bc48c4fb636 octeontx2-af: Fix default entries mcam entry action
    3f483a90634d inet: move icmp_global_{credit,stamp} to a separate cache line
    c9141a794fdc cache: add __cacheline_group_{begin, end}_aligned() (+ couple more)
    8dacf34eb427 netns-ipv4: reorganize netns_ipv4 fast path variables
    1402ebe132a9 cache: enforce cache groups
    4ec8a98b3dc3 tcp: Set pingpong threshold via sysctl
    b4d5e97679bc tcp: defer regular ACK while processing socket backlog
    22023ffad74c icmp: prevent possible overflow in icmp_global_allow()
    b0da61015db2 icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns
    e0987b6c3b34 icmp: move icmp_global.credit and icmp_global.stamp to per netns storage
    19c7d8ac5198 macvlan: observe an RCU grace period in macvlan_common_newlink() error path
    b5c84070333a ping: annotate data-races in ping_lookup()
    6b6b2fbd66d8 bpftool: Fix truncated netlink dumps
    db4636748c22 ipv6: fix a race in ip6_sock_set_v6only()
    7017745068a9 netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
    9464ca7a6e56 net: remove WARN_ON_ONCE when accessing forward path array
    60e921703943 netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
    f199874c199b selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled
    3c2b767a8ae2 selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled
    d0fdad1bdd21 net: bridge: mcast: always update mdb_n_entries for vlan contexts
    779a9ae0ef22 net/rds: rds_sendmsg should not discard payload_len
    88b0fced1bbb xen-netback: reject zero-queue configuration from guest
    163d04897e57 net: usb: catc: enable basic endpoint checking
    b067e6c7973b net: sparx5/lan969x: fix PTP clock max_adj value
    bcc60ad129ae ipv6: Fix out-of-bound access in fib6_add_rt2node().
    cc1b179f778f net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
    357a3544a385 net: mscc: ocelot: split xmit into FDMA and register injection paths
    487fac2388ad net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
    d6f03772d9c0 net: sparx5/lan969x: fix DWRR cost max to match hardware register width
    9eefda7a03ef selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
    5c577ac939bc cpuidle: Skip governor when only one idle state is available
    7bb9178df6f0 ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
    d389943443c5 selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
    2efc98314a61 selftests/memfd: delete unused declarations
    d809ee17c0d1 kbuild: Add objtool to top-level clean target
    e156a104ba26 powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check
    727992102836 ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
    a584b9d1059b fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
    71c8b966ec56 fs/ntfs3: prevent infinite loops caused by the next valid being the same
    fb2d7c30d030 io_uring/cancel: de-unionize file and user_data in struct io_cancel_data
    533d495f15e4 dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
    592833ea0051 dmaengine: fsl-edma-main: Convert to platform remove callback returning void
    a489f1fd52bc backlight: qcom-wled: Change PM8950 WLED configurations
    82f2eaab2f94 backlight: qcom-wled: Support ovp values for PMI8994
    97790c9b255d leds: qcom-lpg: Check the return value of regmap_bulk_write()
    99cc7352156c pinctrl: single: fix refcount leak in pcs_add_gpio_func()
    eccf17c0a801 pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
    e8e960c3d23f iio: sca3000: Fix a resource leak in sca3000_probe()
    43b6f69e1806 ovl: Fix uninit-value in ovl_fill_real
    d26685b2d9ad pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
    4f531b1a5468 usb: bdc: fix sleep during atomic
    c5bde5357e10 drivers: iio: mpu3050: use dev_err_probe for regulator request
    29040d42d641 mfd: simple-mfd-i2c: Add Delta TN48M CPLD support
    fd1a3a0b98a9 mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order
    d9e5d3e1924a mfd: simple-mfd-i2c: Add SpacemiT P1 support
    07fb61ff35fd mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA
    b07aa526d053 mfd: simple-mfd-i2c: Add MAX77705 support
    3ea01691738b mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
    9c858ef369bb Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
    b359ca27c589 coresight: etm3x: Fix cpulocked warning on cpuhp
    2fad88d7760c watchdog: starfive-wdt: Fix PM reference leak in probe error path
    7281a0c907cc iio: pressure: mprls0025pa: fix scan_type struct
    6dd1e95cc554 mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
    24ec8015beca serial: SH_SCI: improve "DMA support" prompt
    c233e1e81873 serial: imx: change SERIAL_IMX_CONSOLE to bool
    65f2c608096d staging: greybus: lights: avoid NULL deref
    e230aee60444 dma: dma-axi-dmac: fix SW cyclic transfers
    6be32baf6541 dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
    06c8ed283635 clk: mediatek: Fix error handling in runtime PM setup
    547ae2f17349 clk: qcom: gfx3d: add parent to parent request map
    bb5de8aca640 clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
    ae56e2c27f6d clk: Move clk_{save,restore}_context() to COMMON_CLK section
    d81b51c8a7ed clk: qcom: gcc-ipq5018: flag sleep clock as critical
    048fbee3e431 clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
    df1c437bfca4 clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
    915e7579855e clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops
    d31b1b143819 clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops
    45a013dabc5f clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops
    ac003c1a80d9 clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
    1e1664eb6f24 clk: qcom: rcg2: compute 2d using duty fraction directly
    8cb92d27454e clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs
    3e5349e54113 fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
    68dae7b64c31 fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings()
    ca81f7811dfe tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
    7e6556e9329b tracing: Properly process error handling in event_hist_trigger_parse()
    aa6e847e2795 fs/nfs: Fix readdir slow-start regression
    c1f244f7868c nvdimm: virtio_pmem: serialize flush requests
    25d623f0d77c scsi: csiostor: Fix dereference of null pointer rn
    94a6c85a68bc scsi: ufs: host: mediatek: Require CONFIG_PM
    fdf1188cfa80 scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
    8e3d91135417 pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
    34276d267742 RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
    685163733ed1 power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
    d2a6ca4c0748 mtd: spinand: Fix kernel doc
    9fbbd62436ce mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
    5f1a84bb4a95 cxl: Fix premature commit_end increment on decoder commit failure
    db830aea65e4 RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
    6faf28106ea1 svcrdma: Reduce the number of rdma_rw contexts per-QP
    63a45e2a1264 svcrdma: Increase the per-transport rw_ctx count
    46ccddede7be svcrdma: Clean up comment in svc_rdma_accept()
    4965711d22a0 svcrdma: Remove queue-shortening warnings
    91cb7ff68604 RDMA/core: Fix a couple of obvious typos in comments
    756c93d6df7c RDMA/rxe: Fix race condition in QP timer handlers
    bf1feed1a788 RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
    0f5e62ea5c43 mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
    1733d168099e crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT fails
    2abf05a122cf crypto: ccp - Factor out ring destroy handling to a helper
    b2e7e269aba9 crypto: ccp - Move direct access to some PSP registers out of TEE
    54541017ac6a crypto: ccp - Add an S4 restore flow
    21f422a86ded mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
    bc779d426ef1 tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus()
    26793db60925 RDMA/rxe: Fix double free in rxe_srq_from_init
    9a0323f5e54e RDMA/rtrs-srv: fix SG mapping
    86183153c299 power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
    3af85f239648 power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
    7ac6501b587c power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
    2078830c32d1 power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
    af261f218a76 power: supply: rt9455: Fix use-after-free in power_supply_changed()
    77ea437faa4c power: supply: goldfish: Fix use-after-free in power_supply_changed()
    cbb9b07f88a9 power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
    0de95d29d847 power: supply: bq25980: Fix use-after-free in power_supply_changed()
    cb5c743936ed power: supply: bq256xx: Fix use-after-free in power_supply_changed()
    697bb5dc0cb4 power: supply: act8945a: Fix use-after-free in power_supply_changed()
    f50433f2603d power: supply: ab8500: Fix use-after-free in power_supply_changed()
    2ad50784c9eb RDMA/hns: Notify ULP of remaining soft-WCs during reset
    70a5eb757ace RDMA/hns: Fix WQ_MEM_RECLAIM warning
    2fb573fa9d71 IB/cache: update gid cache on client reregister event
    04b41f1d0e33 RDMA/rtrs: server: remove dead code
    d858a1d814d3 octeontx2-pf: Unregister devlink on probe failure
    320b54651a59 ionic: Rate limit unknown xcvr type messages
    69042a930eae octeon_ep: ensure dbell BADDR updation
    664355e6f130 octeon_ep: set backpressure watermark for RX queues
    dc4d11c5f316 octeon_ep: disable per ring interrupts
    2c33c53a9c8c octeon_ep: support Octeon CN10K devices
    a40e276b9696 octeon_ep: restructured interrupt handlers
    77c641b3bd4e octeon_ep: support to fetch firmware info
    331e2b705163 serial: caif: fix use-after-free in caif_serial ldisc_close()
    2c1f59005da9 xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
    d621dd67a72d net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input callers
    31ca4fbf56d1 net: Add skb_dstref_steal and skb_dstref_restore
    dea1465394ff net: sunhme: Fix sbus regression
    e3f80666c273 net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
    e131aac543cd smb: client: correct value for smbd_max_fragmented_recv_size
    0e64bd46a04a procfs: fix missing RCU protection when reading real_parent in do_task_stat()
    6dc10494cfe2 net: hns3: fix double free issue for tx spare buffer
    44b2256b17f1 PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
    f1535d56fc3f netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
    f7eb1903c6e0 netfilter: nft_counter: fix reset of counters on 32bit archs
    cfe35cb86256 netfilter: nft_set_hash: fix get operation on big endian
    77eef9f2eef0 nfc: hci: shdlc: Stop timers and work before freeing context
    db76b75ede38 inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
    43f4661e9b2c bonding: only set speed/duplex to unknown, if getting speed failed
    8b5ed7c5417b octeontx2-af: Fix PF driver crash with kexec kernel booting
    cf5967514735 mptcp: fix receive space timestamp initialization
    2622f355e621 of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy()
    e7c1e60802d8 ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
    7dc4778ee848 ipc: don't audit capability check in ipc_permissions()
    2c80b0974047 PCI/ACPI: Restrict program_hpx_type2() to AER bits
    89db6475c0b4 PCI: Add defines for bridge window indexing
    82bd7f9d08ce PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
    1f5438cb5d78 PCI: Log bridge info when first enumerating bridge
    f49c44723a70 PCI: Log bridge windows conditionally
    988b8b98103c PCI: Supply bridge device, not secondary bus, to read window details
    7fd6672a1bb0 PCI: Move pci_read_bridge_windows() below individual window accessors
    a79a3d1fd32c PCI: Initialize RCB from pci_configure_device()
    a7c08278f2d0 wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump()
    62c2290dc976 tcp: tcp_tx_timestamp() must look at the rtx queue
    d3b7ffa90f61 fat: avoid parent link count underflow in rmdir
    243f71ed873f nfsd: never defer requests during idmap lookup
    0114244ec49a dm: use bio_clone_blkg_association
    c93f23375d8c iommu/vt-d: Flush cache for PASID table before using it
    bff7ac6b98fa PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
    af0f0d30fd02 kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup()
    ecb0af907733 module: add helper function for reading module_buildid()
    767f1a8c8483 netfilter: nf_conncount: fix tracking of connections from localhost
    abaa1508d5db netfilter: nft_compat: add more restrictions on netlink attributes
    0792ad077d77 netfilter: nf_conncount: increase the connection clean up limit to 64
    d12e9e90632c netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
    5802782366ba netfilter: nf_tables: reset table validation state on abort
    4d7a05da767e wifi: cfg80211: stop NAN and P2P in cfg80211_leave
    11f832532440 mctp i2c: initialise event handler read bytes
    f03666259d22 net: mctp-i2c: fix duplicate reception of old data
    37ccd48cf35f quota: fix livelock between quotactl and freeze_super
    96ac80ce22bc PCI/portdrv: Fix potential resource leak
    cf7e6dbb51a7 PCI: Do not attempt to set ExtTag for VFs
    a4176432d41e Documentation: tracing: Add PCI tracepoint documentation
    60b896647d88 Documentation: trace: Refactor toctree
    b2f972293451 docs: fix WARNING document not included in any toctree
    bd43a6e85779 Documentation: tracing: Add ring-buffer mapping
    baa42b756d18 PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails
    d8e7624e2113 PCI/PM: Avoid redundant delays on D3hot->D3cold
    63d3556c9a8e Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors
    24c190a5a24e PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
    f448acd86835 Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
    1ae5fd122398 spi: tools: Add include folder to .gitignore
    169ae51f31b0 platform/chrome: cros_ec_lightbar: Fix response size initialization
    e3311645c7c1 media: uvcvideo: Fix allocation for small frame sizes
    01fe5a26ccc6 platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev
    0347548ccf07 drm/msm/a2xx: fix pixel shader start on A225
    661152ffb0f2 media: ccs: Accommodate C-PHY into the calculation
    e7815709bc97 drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x
    33acf9a4d6eb HID: playstation: Add missing check for input_ff_create_memless
    f0a6e4b27bad regulator: core: move supply check earlier in set_machine_constraints()
    2d5b17e8364b drm/msm/disp/dpu: add merge3d support for sc7280
    83d3d9ec347a drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
    f721f873d3e1 ASoC: nau8821: Fixup nau8821_enable_jack_detect()
    88a6bed89eb8 ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
    e19f5b5d1059 ASoC: nau8821: Consistently clear interrupts before unmasking
    1c7ee23dfcd1 smack: /smack/doi: accept previously used values
    661d87242dd6 smack: /smack/doi must be > 0
    34bacb3cc343 workqueue: Process rescuer work items one-by-one using a cursor
    c906c9d81fdf workqueue: Only assign rescuer work when really needed
    c17f947a6fca workqueue: Factor out assign_rescuer_work()
    e3b15841172e arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
    4ffe98b89c9c arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
    c77d1b2f5e51 arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0
    1895ad99349e arm64: dts: amlogic: g12: assign the MMC A signal clock
    44cd81bbb21b arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
    6a47c69a8bba arm64: dts: amlogic: gx: assign the MMC signal clocks
    59f3138d11cc arm64: dts: amlogic: axg: assign the MMC signal clocks
    716c8ebe0409 arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
    8461f646f68a ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
    87a1f93986aa powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
    06195456c4e4 soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
    993d41578772 soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
    c43e0a0353e5 powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
    ac2c85d2a2f6 ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
    dc62cf0814fa arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
    1aeb4ed95c3f arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
    93aaa53ecf20 arm64: dts: qcom: sdm630: fix gpu_speed_bin size
    e15f1e18cdf4 clk: qcom: Return correct error code in qcom_cc_probe_by_index()
    458f7417fae0 arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings
    063898a3f9ac EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
    e37f5e05b5bc EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
    8afa17757873 soc: qcom: smem: handle ENOMEM error during probe
    cff0ef043e16 pstore/ram: fix buffer overflow in persistent_ram_save_old()
    8ad5577b2d4a sched/rt: Skip currently executing CPU in rto_next_cpu()
    322154c3981e mfd: wm8350-core: Use IRQF_ONESHOT
    3db9471b23f5 EDAC/altera: Remove IRQF_ONESHOT
    adb69cc223d7 scsi: efct: Use IRQF_ONESHOT and default primary handler
    ddc34a1b8550 bpf: Fix bpf_xdp_store_bytes proto for read-only arg
    74081d6c1da1 crypto: hisilicon/trng - support tfms sharing the device
    260a9e382996 crypto: hisilicon/trng - modifying the order of header files
    9681044e45c9 bpf, sockmap: Fix FIONREAD for sockmap
    acaf1ea47bbf bpf, sockmap: Fix incorrect copied_seq calculation
    7111701a09cc hrtimer: Fix trace oddity
    33a30bf9e0d4 crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable
    6eae58af0c31 crypto: hisilicon/zip - adjust the way to obtain the req in the callback function
    ab8b2eaf7add crypto: hisilicon/zip - remove zlib and gzip
    70b2f4fc1ede crypto: hisilicon/zip - support deflate algorithm
    0aa430f4661d crypto: octeontx - fix dma_free_coherent() size
    53e97a309cc3 crypto: cavium - fix dma_free_coherent() size
    2b757fea9f4f ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
    e1767524765e libbpf: Fix OOB read in btf_dump_get_bitfield_value
    542bf32cf757 selftests/bpf: veristat: fix printing order in output_stats()
    6e6abc72accf crypto: qat - fix warning on adf_pfvf_pf_proto.c
    abb6e07f46a7 s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
    27d7a35b8052 PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
    70e8af620210 perf: arm_spe: Properly set hw.state on failures
    3deb7b6a2e31 PM: wakeup: Handle empty list in wakeup_sources_walk_start()
    d6749d0b8ddc Partial revert "x86/xen: fix balloon target initialization for PVH dom0"
    ef3b74d20f5e x86/xen: make some functions static
    31cac6acf77e ublk: Validate SQE128 flag before accessing the cmd
    8f3d79abdec0 iomap: fix submission side handling of completion side errors
    597ec9e7f5cc md/raid10: fix any_working flag handling in raid10_sync_request
    72b2db83705b cpuidle: governors: menu: Always check timers with tick stopped
    0add3e6f91aa cpuidle: menu: Cleanup after loadavg removal
    ca762fa01f64 io_uring/sync: validate passed in offset
    f2cf475d23b8 ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
    9cc9efa703f0 xen/virtio: Don't use grant-dma-ops when running as Dom0
    7425453ea16d smb: client: fix potential UAF and double free in smb2_open_file()
    e3d1fd084319 btrfs: fix block_group_tree dirty_list corruption
    46fb7ee9f852 btrfs: qgroup: return correct error when deleting qgroup relation item
    a51cff9be046 tpm: st33zp24: Fix missing cleanup on get_burstcount() error
    948966e546f2 tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
    20ac431e02dc i3c: dw: Initialize spinlock to avoid upsetting lockdep
    d87268326b27 gfs2: Fix use-after-free in iomap inline data write path
    4991b13cc9f1 gfs2: Add metapath_dibh helper
    7e3b7a47867a gfs2: Retries missing in gfs2_{rename,exchange}
    b68be2b8b564 i3c: master: Update hot-join flag only on success
    5560116126da fs: add <linux/init_task.h> for 'init_fs'
    4b2a0a4e9428 i3c: Move device name assignment after i3c_bus_init
    e2647d540bea audit: move the compat_xxx_class[] extern declarations to audit_arch.h
    979c708e6c9d rcu: Fix rcu_read_unlock() deadloop due to softirq
    dffd52d0d14e rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler()
    3ccd035ef99d rcu: Refactor expedited handling check in rcu_read_unlock_special()
    6cc7a424a39a rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu()
    cb9eaff659dd rcu: s/boost_kthread_mutex/kthread_mutex
    7b57ada854b3 hfsplus: return error when node already exists in hfs_bnode_create
    2e000d8a5306 auxdisplay: arm-charlcd: fix release_mem_region() size
    a6a3e4af1099 RDMA/umad: Reject negative data_len in ib_umad_write
    ffba40b67663 RDMA/siw: Fix potential NULL pointer dereference in header processing

(From OE-Core rev: 620a32621b5e7c33609fc6dbff01758303f41189)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-26 16:55:54 +01:00
Yoann Congal ec940f36ea linux-yocto/6.6: update CVE exclusions (6.6.127)
Regenerated to fix this warning:
WARNING: linux-yocto-6.6.127+git-r0 do_cve_check: Kernel CVE status needs updating: generated for 6.6.123 but kernel is 6.6.127

$ ./meta/recipes-kernel/linux/generate-cve-exclusions.py .../cvelistV5/ 6.6.127 > meta/recipes-kernel/linux/cve-exclusion_6.6.inc

Generated at 2026-05-27 12:02:49.732909+00:00 for kernel version 6.6.127
From cvelistV5 cve_2026-05-27_0900Z

(From OE-Core rev: d0d02d0f45b4c5108ae648fb16d2a2a0dc1ae0e7)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-06-10 14:35:21 +01:00
Bruce Ashfield 535e57ab6d linux-yocto/6.6: update to v6.6.127
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    7a137e9bfa0e Linux 6.6.127
    f478b8239d65 net: tunnel: make skb_vlan_inet_prepare() return drop reasons
    35ac888bf8ac USB: serial: option: add Telit FN920C04 RNDIS compositions
    d4534a7f6c92 f2fs: fix to avoid mapping wrong physical block for swapfile
    20a8bad29d18 f2fs: fix zoned block device information initialization
    acc2c97fc000 f2fs: fix to avoid UAF in f2fs_write_end_io()
    75e19da068ad f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
    eebd72cff518 f2fs: fix out-of-bounds access in sysfs attribute read/write
    81193503af1f f2fs: fix to add gc count stat in f2fs_gc_range
    0634e8d65099 fbdev: smscufx: properly copy ioctl memory to kernelspace
    78daf5984d96 fbdev: rivafb: fix divide error in nv3_arb()
    f42a2d49c465 LoongArch: Add writecombine support for DMW-based ioremap()
    6e5eccdef67e cpuset: Fix missing adaptation for cpuset_is_populated
    ff37dd18ce77 mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather
    2eeca9383efe mm/hugetlb: fix two comments related to huge_pmd_unshare()
    51dcf459845f mm/hugetlb: fix hugetlb_pmd_shared()
    8c9a1b071051 mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
    168ee1549fa2 Revert "wireguard: device: enable threaded NAPI"
    78e706f9b197 LoongArch: Rework KASAN initialization for PTW-enabled systems
    f507fc06c7cd LoongArch: Add WriteCombine shadow mapping in KASAN
    16f137fb74c1 gpiolib: acpi: Fix gpio count with string references
    61e007657bf7 ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
    f49d2497da14 ASoC: cs42l43: Correct handling of 3-pole jack load detection
    329bb274a3a9 platform/x86: panasonic-laptop: Fix sysfs group leak in error path
    e8f5d1306a3a platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
    c3876edb0184 ASoC: amd: yc: Add quirk for HP 200 G2a 16
    d7d7b93aca64 ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
    9cf4b9b8ad09 platform/x86: classmate-laptop: Add missing NULL pointer checks
    e120bae4c56d drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used
    cbd9931e6456 romfs: check sb_set_blocksize() return value
    79100c3bc0c4 ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel
    6834804ad484 ALSA: hda/realtek: Add quirk for Inspur S14-G1
    b204c5ec24a2 gpio: sprd: Change sprd_gpio lock to raw_spin_lock
    4cfb1aed4753 ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
    2accd79be906 ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
    b19838402873 bus: fsl-mc: fix use-after-free in driver_override_show()
    3118a9c6875b bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions
    8cb905eca739 PCI: endpoint: Avoid creating sub-groups asynchronously
    68c9fdb01af8 PCI: endpoint: Remove unused field in struct pci_epf_group
    74e7458537cd scsi: qla2xxx: Fix bsg_done() causing double free

(From OE-Core rev: a1a509419ca18a193eff978c97aac5d86a06e6e7)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-12 21:31:33 +01:00
Bruce Ashfield 9524eaf69d linux-yocto/6.6: update to v6.6.126
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    56865d9b7074c Linux 6.6.126
    673dafb9a8634 Revert "driver core: enforce device_lock for driver_match_device()"
    ae462074fde3b Linux 6.6.125
    1c04c3a4de8d4 gpio: omap: do not register driver in probe()
    455e882192c98 mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
    2b890bc3a5774 selftests: mptcp: pm: ensure unknown flags are ignored
    8df235f768cea spi: cadence-quadspi: Implement refcount to handle unbind during busy
    665e570600733 vsock/test: verify socket options after setting them
    a9e757473561d netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
    1c4f72fa96993 netfilter: nf_tables: missing objects with no memcg accounting
    30405b23b4d5e nfsd: don't ignore the return code of svc_proc_register()
    57770faaff8ee net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
    dccf7bc011d0e scsi: qla2xxx: Query FW again before proceeding with login
    aed16d37696f4 scsi: qla2xxx: Free sp in error path to fix system crash
    528b2f1027edf scsi: qla2xxx: Delay module unload while fabric scan in progress
    ccbfcaa4b88e5 scsi: qla2xxx: Allow recovery for tape devices
    949010291bb94 scsi: qla2xxx: Validate sp before freeing associated memory
    71dee092903ad wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
    df1e20796c9f3 nilfs2: Fix potential block overflow that cause system hang
    dd1f6c9206385 crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
    d6f0d58680868 crypto: virtio - Add spinlock protection with virtqueue notification
    6edf8df4bd29f crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
    7dbeeafcb6e50 crypto: octeontx - Fix length check to avoid truncation in ucode_load_store
    6dda9f0699054 Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
    adc1796eced46 driver core: enforce device_lock for driver_match_device()
    787769c8cc504 smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
    5accdc5b7f28a ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
    4386f6af8aaed smb: client: split cached_fid bitfields to avoid shared-byte RMW races

(From OE-Core rev: d5ac249edb6ca794fc72cef09a27c65ffed8879c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-12 21:31:33 +01:00
Bruce Ashfield 8676d6c57f linux-yocto/6.6: update to v6.6.124
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    1b4ef5214f17e Linux 6.6.124
    23897ece6167c ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
    d0a6e43d7cccc spi: tegra114: Preserve SPI mode bits in def_command1_reg
    126a09f4fcd2b spi: tegra: Fix a memory leak in tegra_slink_probe()
    dfc6367898077 spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer
    712cde8d91688 spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
    53eba2a4a4666 spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
    f9cafa63039b8 spi: tegra210-quad: Move curr_xfer read inside spinlock
    552e3d8a8bef2 spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
    a168f2002b2b4 gve: Correct ethtool rx_dropped calculation
    d4a81b8ec6398 btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
    0e0120214b5dc ASoC: amd: fix memory leak in acp3x pdm dma ops
    50b7c7a255858 ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
    42c574c1504aa netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
    8c934bafd10b9 hwmon: (occ) Mark occ_init_attribute() as __printf
    3f89a4ef6505a drm/mgag200: fix mgag200_bmc_stop_scanout()
    9d40a85138568 net: gro: fix outer network offset
    00a7512ff7195 net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
    17d340e81c4b5 tipc: use kfree_sensitive() for session key material
    b2c9edad3620f net: don't touch dev->stats in BPF redirect paths
    11ba9f0dc8651 macvlan: fix error recovery in macvlan_common_newlink()
    f89e33c9c37f0 dpaa2-switch: add bounds check for if_id in IRQ handler
    3bf519e39b51c net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
    a0d2389c8cdc1 net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
    c0ed6c77ec340 net: liquidio: Initialize netdev pointer before queue setup
    b97415c4362f7 dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
    13336a6239b9d net/sched: cls_u32: use skb_header_pointer_careful()
    fcbda653b5a88 net: add skb_header_pointer_careful() helper
    3a6d6b332f929 smb/client: fix memory leak in smb2_open_file()
    f54886e18b856 platform/x86: hp-bioscfg: Skip empty attribute names
    9423990550a2a platform/x86: intel_telemetry: Fix PSS event register mask
    ca9ff71c15bc8 platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
    bae0565fa975d wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
    ccd1843b63f64 wifi: mac80211: correctly check if CSA is active
    73b487d44bf4f scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
    29fe5ff92433a ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
    11ebafffce31e scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
    2f4f008f622d4 wifi: cfg80211: Fix bitrate calculation overflow for HE rates
    d61171cf09715 regmap: maple: free entry on mas_store_gfp() failure
    f9b06d28a60b3 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
    254f303cd6663 ASoC: tlv320adcx140: Propagate error codes during probe
    e2c03961b01a8 ASoC: amd: yc: Fix microphone on ASUS M6500RE
    f532b29b0e313 nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
    7c54d3f5ebbc5 nvme-fc: release admin tagset if init fails
    1d395dae332ba ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
    db1bef623ae32 wifi: mac80211: collect station statistics earlier when disconnect
    1fbb409652e3d ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
    f63f30607dd8e HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
    cff3f619fd1cb HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
    68ab5057e690e HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
    383bc94e90661 netfilter: replace -EEXIST with -EBUSY
    a58fbeda600fe ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
    bfcfb9e548bc1 HID: playstation: Center initial joystick axes to prevent spurious events
    9edee94001b63 HID: intel-ish-hid: Reset enum_devices_done before enumeration
    28b97fcbbf523 btrfs: fix reservation leak in some error paths when inserting inline extent
    9ab846d8dd027 HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
    5b25505b52dff HID: intel-ish-hid: Update ishtp bus match to support device ID table
    07df5ff4f6490 smb/server: fix refcount leak in parse_durable_handle_context()
    73ede654d9daa LoongArch: Enable exception fixup for specific ADE subcode
    2456fde2b1377 smb/server: fix refcount leak in smb2_open()
    5fbdf95d2575e LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
    04dd114b682a4 smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
    b03415955ed31 block,bfq: fix aux stat accumulation destination
    8365785e59ea4 net: usb: sr9700: support devices with virtual driver CD
    b167312390fdd wifi: wlcore: ensure skb headroom before skb_push
    ffe1e19c3b0e5 wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
    d75245dad5cc6 tracing: Fix ftrace event field alignments
    df54838ab6182 gve: Fix stats report corruption on queue count change
    a8adf1ceee4e1 KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
    46c93903e4c19 binderfs: fix ida_alloc_max() upper bound
    ebb6aa6928d5c binder: fix BR_FROZEN_REPLY error log
    9f6022b2573ae sched/rt: Fix race in push_rt_task
    64c0b7e229375 ublk: fix deadlock when reading partition table
    c3db89ea1ed3d hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    df524a68d9021 netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
    b61f9b2fcf181 KVM: Don't clobber irqfd routing type when deassigning irqfd
    d2bddc2da2b3b Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
    7f7467be748eb ARM: 9468/1: fix memset64() on big-endian
    4f9f1fdc0ebdf rbd: check for EOD after exclusive lock is ensured to be held
    071159ff5c0bf pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
    7aa0c2bb0771a pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
    e2e1c77319d52 pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
    1267af5b2033d pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
    c28dcc1cb4fda pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
    302651ccef698 platform/x86: intel_telemetry: Fix swapped arrays in PSS output
    c56b4c84b3b21 x86/kfence: fix booting on 32bit non-PAE systems
    dca1a6ba0da9f nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

(From OE-Core rev: 0844b7e2205b530febbc7a9b6640e3e30d3c8dd1)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-12 21:31:33 +01:00
Daniel Turull 7488cae173 lttng-ust: upgrade 2.13.8 -> 2.13.10
Changelog for lttng-ust: 2.13.8 -> 2.13.10
============================================================

2026-02-13 lttng-ust 2.13.10
	* Fix: ustctl: sigbus handling: statement with no effect

2025-04-14 (National Gardening Day) lttng-ust 2.13.9
	* Fix: Use UATOMIC_HAS_ATOMIC_{BYTE,SHORT} for counter atomics
	* Fix: lttng-ust-tp regex warnings
	* lttng-ust-java: Load lttng-ust-context-jni before other JNI libraries
	* doc/examples: set minimal CMake version to 3.5.0
	* Fix: Update get_mempolicy check to handle EPERM
	* Fix: Correct numa_available return code checks
	* Fix: test_benchmark: do not match CPU(s) scaling MHz:
	* Tests: Fix abi conflict test when building with clang
	* Fix: Build examples when rpath is stripped from in-build-tree libs
	* ust-fd: Add close_range declaration
	* docs: Correct GitHub URLs in lttng-ust.3
	* fix: handle EINTR correctly in get_cpu_mask_from_sysfs

(From OE-Core rev: 90f529115ed175652d2ab8c538d1c213550056f8)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-04 13:57:33 +01:00
Martin Jansa 0092522376 dtc: backport fix for build with glibc-2.43
glibc-2.43 isn't used in OE builds yet, but this fixes dtc-native:
https://errors.yoctoproject.org/Errors/Details/903983/

../sources/dtc-1.7.2/libfdt/fdt_overlay.c: In function ‘overlay_fixup_phandle’:
../sources/dtc-1.7.2/libfdt/fdt_overlay.c:424:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
  424 |                 sep = memchr(fixup_str, ':', fixup_len);
      |                     ^
../sources/dtc-1.7.2/libfdt/fdt_overlay.c:434:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
  434 |                 sep = memchr(name, ':', fixup_len);
      |                     ^
cc1: all warnings being treated as errors

(From OE-Core rev: 7e9f4ab3d1839cef771675091e5ce49eccc39169)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 28552a7b6c94060c7ab3899619ab8afb74124d02)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-04 13:57:32 +01:00
João Marcos Costa (Schneider Electric) 75ffda84c1 linux-yocto/6.6: update CVE exclusions (6.6.123)
This new version of cve-exclusion_6.6.inc was generated with oe-core's
latest version of the generate-cve-exclusions.py.

Regarding the database used and how this file was generated:

Generated at 2026-04-03 09:30:32.247568+00:00 for kernel version 6.6.123
From cvelistV5 cve_2026-04-03_0700Z

The backporting of the generate-cve-exclusions.py script from master to
Scarthgap is handled in a different patch.

(From OE-Core rev: 4bdf5345c32c9e294a64d61af49ce2adabdaf1db)

Signed-off-by: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-04 13:57:32 +01:00
Bruce Ashfield 7a3c441dc7 kernel-devsrc: make tools/Build optional
kernel-devsrc fails to copy files for v6.12+ as the
following upstream commit has removed the file tools/build/Build:

   commit ea974028a049f2cea4bb6be963ee3e3844a03f6d
   Author: Brian Norris <briannorris@chromium.org>
   Date:   Mon Jul 15 13:32:43 2024 -0700

       tools build: Avoid circular .fixdep-in.o.cmd issues

We make the failed copy of this file non-fatal to support
all kernel versions.

(From OE-Core rev: 005b57b805228f2793265d6d1d1a2f52342935b3)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 13e16e5be25f379211c7329fa1462464174c0f2d)
Suggested-by: Calvin Owens <calvin@wbinvd.org>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-04 13:57:32 +01:00
João Marcos Costa (Schneider Electric) 3b059913f4 linux/generate-cve-exclusions: backport script from master branch
The current version of this script in Scarthgap is outdated, since it
still uses data from linux_kernel_cves. This repository was archived in
2024.

To avoid any risks of conflicts, and/or a patch series longer than it
needs to be, I copied the generate-cve-exclusions.py script from
oe-core's master branch (rev. "e954a94b5b528b2430e8da331107d7d58287f89b") as-is.

(From OE-Core rev: 66a13f93403533b95ed27eed24931aa310f8ce79)

Signed-off-by: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-05-04 13:57:31 +01:00
Ankur Tyagi 78193f7a83 wireless-regdb: upgrade 2025.10.07 -> 2026.02.04
(From OE-Core rev: a26cdcc31b97b5eed545b9859bee8b5c098d394b)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f86c38b13121788fe6a654df04800d24b2b28b61)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
[YC: logs: https://git.kernel.org/pub/scm/linux/kernel/git/wens/wireless-regdb.git/log/?h=master-2026-02-04]
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-03-25 17:34:13 +00:00
Bruce Ashfield 7ba05c3301 linux-yocto/6.6: update to v6.6.123
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c56aaf1a85ae9 Linux 6.6.123
    7e0d31c47b8a9 bpf/selftests: test_select_reuseport_kern: Remove unused header
    5a530c8ead06e Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
    507692c056363 Revert "net: Allow to use SMP threads for backlog NAPI."
    dd4c7800a905d drm/amd/display: use udelay rather than fsleep
    572777a258c04 ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
    1891abe832cbf ksmbd: fix recursive locking in RPC handle list access
    b6978c565ce33 xsk: Fix race condition in AF_XDP generic RX path
    c74e2dbb53168 drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
    a3f75ee1a436e drm/amdkfd: Don't use sw fault filter if retry cam enabled
    21bad75012f76 pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
    38a0f2215aee4 mptcp: avoid dup SUB_CLOSED events after disconnect
    73408fa92742b writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
    d84a4836dc246 perf: sched: Fix perf crash with new is_user_task() helper
    e57bda247f29c drm/msm/a6xx: fix bogus hwcg register updates
    e228ad913b0d2 pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
    daf8a4eb70ff4 ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
    db24153fc77a8 net/sched: act_ife: convert comma to semicolon
    1d14f86e813f6 btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
    9d0ed508a9e2a drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
    e26235840fd96 team: Move team device type change at the end of team_port_add
    27ca8004ba93a wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
    fb2b9a1e85bdd wifi: mac80211: move TDLS work to wiphy work
    6b615a8fb3af0 ksmbd: Fix race condition in RPC handle list access
    d1bda2ab0cf95 drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
    4d1e9a4a450aa ksmbd: smbd: fix dma_unmap_sg() nents
    143980bd2be75 mei: trace: treat reg parameter as string
    ce820dd4e6e2d arm64/fpsimd: signal: Fix restoration of SVE context
    40b73f0519d3c arm64/fpsimd: signal: Consistently read FPSIMD context
    15110f9cdc877 arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state
    e527e695fdfc1 mm/kfence: randomize the freelist on initialization
    38c32baf6d2c7 gpio: rockchip: Stop calling pinctrl for set_direction
    e618b52a1589a drm/amdgpu/gfx11: fix wptr reset in KGQ init
    c61c93218956c drm/amdgpu/gfx10: fix wptr reset in KGQ init
    cbf4d79e5c619 drm/amdgpu/soc21: fix xclk for APUs
    9a15d3fdc22d4 drm/imx/tve: fix probe device leak
    cdaf07ec0b698 scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
    884b2590ffcc7 flex_proportions: make fprop_new_period() hardirq safe
    4bed436cdef70 selftests: mptcp: join: fix local endp not being tracked
    ba58cd70a4223 selftests: mptcp: check subflow errors in close events
    8b5061c3400a7 selftests: mptcp: check no dup close events after error
    d761d42be060b mptcp: only reset subflow errors when propagated
    510a16f1c5c16 efivarfs: fix error propagation in efivar_entry_get()
    a9c96f113a5f3 scsi: qla2xxx: edif: Fix dma_free_coherent() size
    122751f43f930 gpio: pca953x: mask interrupts in irq shutdown
    c2fc0aae3cf42 ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
    441d129ba899e scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
    28a1e5e97c899 ASoC: fsl: imx-card: Do not force slot width to sample width
    018e9e9cae7b3 rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
    929e568a83da5 riscv: compat: fix COMPAT_UTS_MACHINE definition
    8519c9231ce23 pinctrl: meson: mark the GPIO controller as sleeping
    be1cebabb3cd2 dma/pool: distinguish between missing and exhausted atomic pools
    0368794dc28a1 gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
    2f45c46661911 ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
    ac3a2ea06f3c8 scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
    0d434670eb0bb net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
    e43fdee29a96f net: bridge: fix static key check
    546eba0b10989 nfc: nci: Fix race between rfkill and nci_unregister_device().
    970526dde3686 net/mlx5e: Account for netdev stats in ndo_get_stats64
    e014f11f741be net/mlx5e: Report rx_discards_phy via rx_dropped
    62e1d8920f692 net/mlx5e: TC, delete flows only for existing peers
    fd30aa82df73b ice: stop counting UDP csum mismatch as rx_errors
    f8d002626d434 nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
    d448bf96889f1 rocker: fix memory leak in rocker_world_port_post_fini()
    2a0522f564acd net: wwan: t7xx: fix potential skb->frags overflow in RX path
    96595848c6fd6 ipv6: use the right ifindex when replying to icmpv6 from localhost
    509b526d64290 net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
    8c0be3277e7ae bonding: annotate data-races around slave->last_rx
    5058d3f8f1720 octeon_ep: Fix memory leak in octep_device_setup()
    724c9d346a3ac net: bcmasp: fix early exit leak with fixed phy
    923379f1d7e3a can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
    dc5d1eb935be0 net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
    186d147cf7689 Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
    2cf6f68313dcc Linux 6.6.122
    96aa13ff68ef5 net: phy: fix phy_uses_state_machine()
    043aa41c43f8c net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
    b5a933535cc34 net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
    1e2848bda819a x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
    8db5de0cf02fc wifi: ath11k: fix RCU stall while reaping monitor destination ring
    8d2979b9bb1be drm/amdgpu: csa unmap use uninterruptible lock
    7d52c592cf53f fs/ntfs3: Initialize allocated memory before use
    1067361a1cc6a ksmbd: fix use-after-free in ksmbd_session_rpc_open
    17fbad93879e8 usbnet: Fix using smp_processor_id() in preemptible code warnings
    8120e420013d9 NFSD: fix race between nfsd registration and exports_proc
    d89f3037d54d3 nvme: fix PCIe subsystem reset controller state transition
    7dfb39b0186dd nvme-pci: do not directly handle subsys reset fallout
    ca88419cf0623 nvme-fc: rename free_ctrl callback to match name pattern
    f83824b023c75 ASoC: codecs: wsa883x: fix unnecessary initialisation
    0ded4420b54e9 ASoC: codecs: wsa881x: fix unnecessary initialisation
    ea2474ea2eef4 ASoC: codecs: wsa881x: Drop unused version readout
    ebae26dd15140 phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
    479fab9aeade1 phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
    d6705bcc5fe7c mm: kmsan: fix poisoning of high-order non-compound pages
    4a04ff9cd816e mm/page_alloc: prevent pcp corruption with SMP=n
    93464499df42b dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
    1a179ac01ff39 dmaengine: stm32: dmamux: fix device leak on route allocation
    041863dd410bd iio: adc: exynos_adc: fix OF populate on driver rebind
    91a756d22f048 ALSA: scarlett2: Fix buffer overflow in config retrieval
    6b20590c43538 arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
    fb3c1f24f3b7e mm/rmap: fix two comments related to huge_pmd_unshare()
    522e580524106 iio: core: add separate lockdep class for info_exist_lock
    31c3c9f3b1b9b iio: core: add missing mutex_destroy in iio_dev_release()
    5596ce564a8c3 mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
    e9711bd0e6481 mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
    adec5e1f9c99f can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
    4d3c2a1d4c7c3 bridge: mcast: Fix use-after-free during router port configuration
    8670b53b8ee91 bpf: Do not let BPF test infra emit invalid GSO types to stack
    1da48da947d0c selftests/bpf: Check for timeout in perf_link test
    526394af4e8ad migrate: correct lock ordering for hugetlb file folios
    59ff56992bba2 can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
    179f6f0cf5ae4 can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
    7c308f7530bff can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
    e9410fdd4d5f7 can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
    1b32339156035 irqchip/gic-v3-its: Avoid truncating memory addresses
    dd40d94ffd7c8 perf/x86/intel: Do not enable BTS for guests
    cad7003d951e8 pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
    6384f7851838f platform/x86: hp-bioscfg: Fix automatic module loading
    bd8955337e376 netrom: fix double-free in nr_route_frame()
    43f233eb6e7b9 uacce: ensure safe queue release with state management
    4c042bc71474d uacce: implement mremap in uacce_vm_ops to return -EPERM
    9ab05cdcac354 uacce: fix isolate sysfs check condition
    d9031575a2f8a uacce: fix cdev handling in the cleanup path
    bf7785434b5d0 intel_th: fix device leak on output open()
    98ecbfb2598c9 tracing: Fix crash on synthetic stacktrace field usage
    2ddc09f6a0a22 slimbus: core: fix device reference leak on report present
    dd58835fba5d6 slimbus: core: fix runtime PM imbalance on report present
    d2846f8a89fd6 octeontx2: Fix otx2_dma_map_page() error return code
    8557bdd9af8dd arm64: Set __nocfi on swsusp_arch_resume()
    19b2c3f3ca1b4 arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
    7761d7801f40e wifi: rsi: Fix memory corruption due to not set vif driver data size
    5d0ab96350e06 wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
    36e0bc5e8b282 wifi: ath12k: fix dma_free_coherent() pointer
    1928851334ecf wifi: ath10k: fix dma_free_coherent() pointer
    f2677d6e2bbc5 mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
    bcb72b6a39e90 mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
    7bff0156d13f0 ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
    a8c42d11b0526 ALSA: ctxfi: Fix potential OOB access in audio mixer handling
    cbe409f68380a iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
    c2d6e00829cbf iio: chemical: scd4x: fix reported channel endianness
    9795fe80976f8 iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
    8271e1860c7cd iio: adc: ad9467: fix ad9434 vref mask
    9e77ef924fe31 iio: accel: iis328dq: fix gain values
    c0ebc3d8ad6b5 of: platform: Use default match table for /firmware
    f4c270975fe1d of: fix reference count leak in of_alias_scan()
    2757f7748ce2d leds: led-class: Only Add LED to leds_list when it is fully ready
    93dfcc59b2bf3 x86: make page fault handling disable interrupts properly
    03710cebfc0bc net/sched: act_ife: avoid possible NULL deref
    d9d5f222558b4 vsock/virtio: cap TX credit to local buffer size
    17c9b158bc4d7 vsock/test: fix seqpacket message bounds test
    02f9af192b98d vsock/virtio: fix potential underflow in virtio_transport_get_credit()
    c70e99dd37163 net: openvswitch: fix data race in ovs_vport_get_upcall_stats
    77c6aa2c388e9 octeontx2-af: Fix error handling
    4ad32b1e0ca42 net: dsa: fix off-by-one in maximum bridge ID determination
    0efee0b992f28 bonding: provide a net pointer to __skb_flow_dissect()
    a142ae1c56131 selftests: net: amt: wait longer for connection before sending packets
    e206fb415db36 be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
    baafbbc23d421 drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
    2c1fc0547a870 drm/amd/pm: Don't clear SI SMC table when setting power limit
    c378cdae46369 usbnet: limit max_mtu based on device's hard_mtu
    fad8f4ff7928f ipv6: annotate data-race in ndisc_router_discovery()
    fc8ba17fd3337 mISDN: annotate data-race around dev->work
    bfb030a377e05 net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
    3a1601756a905 net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
    42e16254f1d3e be2net: fix data race in be_get_new_eqd
    a111d1fb91ae3 net: hns3: fix data race in hns3_fetch_stats
    f1f9cfd2f46a7 netdevsim: fix a race issue related to the operation on bpf_bound_progs list
    7f523dd499b72 ALSA: usb: Increase volume range that triggers a warning
    408bfa8d70f79 scsi: qla2xxx: Sanitize payload size to prevent member overflow
    9fdc6f28d5e81 scsi: core: Wake up the error handler when final completions race against each other
    0df7ecb393db7 riscv: clocksource: Fix stimecmp update hazard on RV32
    1b47e6d3bc026 kconfig: fix static linking of nconf
    24f31be6ad705 regmap: Fix race condition in hwspinlock irqsave routine
    417cdfd9b9f98 spi: spi-sprd-adi: Fix double free in probe error path
    1a27bd3c6949f spi: sprd-adi: switch to use spi_alloc_host()
    74634f4a64897 spi: sprd: adi: Use devm_register_restart_handler()
    aa79a5a959c7c interconnect: debugfs: initialize src_node and dst_node to empty strings
    ce8d8a3368128 iio: adc: ad7280a: handle spi_setup() errors in probe()
    7673167fac932 iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
    85eb83694a91c io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
    eb5ff1025c921 platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
    29917c80aa96a platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
    6484f43740cc9 comedi: Fix getting range information for subdevices 16 to 255
    bf843b0624d89 x86/kfence: avoid writing L1TF-vulnerable PTEs
    8adc31a561a55 arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro
    929229fdd116a arm64: dts: rockchip: remove dangerous max-link-speed from helios64
    f86264ec0e2b1 scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
    156284ab2f641 scsi: storvsc: Process unsupported MODE_SENSE_10
    21937a189daa8 Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
    dcecb4269dd4b Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
    93cbf6d80da2a Revert "nfc/nci: Add the inconsistency check between the input data length and count"
    9367b4709b528 w1: fix redundant counter decrement in w1_attach_slave_device()
    6a5820ecfa5a7 w1: therm: Fix off-by-one buffer overflow in alarms_store
    aaff8f3a35c9d comedi: dmm32at: serialize use of paged registers
    dce0865a5828a serial: 8250_pci: Fix broken RS485 for F81504/508/512
    b0a9609283a5c crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
    93b8635974fb0 net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
    0686bedfed341 net/sched: Enforce that teql can only be used as root qdisc
    fcf8cd4654790 octeontx2: cn10k: fix RX flowid TCAM mask handling
    04ba6de6eff61 ipvlan: Make the addrs_lock be per port
    68e92085427c8 l2tp: avoid one data-race in l2tp_tunnel_del_work()
    0bb986d83922c veth: fix data race in veth_get_ethtool_stats
    1cc98b8887cab fou: Don't allow 0 for FOU_ATTR_IPPROTO.
    4170ec351e456 tools: ynl: Specify --no-line-number in ynl-regen.sh.
    f87b9b7a618c8 gue: Fix skb memleak with inner IP protocol 0.
    8a8a5a43fef4e amd-xgbe: avoid misleading per-packet error log
    e7e81abbcc562 sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
    ce4352057fc5a can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
    4b37dc63957cb selftests: net: fib-onlink-tests: Convert to use namespaces by default
    8ba4cf99c61cd selftests/net: convert fib-onlink-tests.sh to run it in unique namespace
    80c881e53a4fa bonding: limit BOND_MODE_8023AD to Ethernet devices
    b66dfde203fb4 net: usb: dm9601: remove broken SR9700 support
    b36bbac746ee6 igc: fix race condition in TX timestamp read for register 0
    9a151fd0bd7d9 ice: Avoid detrimental cleanup for bond during interface stop
    a6a0dd00178ea ice: initialize ring_stats->syncp
    e635e5b7eac83 ata: libata: Print features also for ATAPI devices
    02fc7c01a35d3 ata: libata: Call ata_dev_config_lpm() for ATAPI devices
    1c6714932c3df ata: libata-core: Introduce ata_dev_config_lpm()
    557b62028c077 ata: libata: Add cpr_log to ata_dev_print_features() early return
    e2d46e0b76cab pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
    f0070413c6580 dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
    230c9ed464eda dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
    564752b42d137 dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
    64a0b97df8366 dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
    658e1879ebe68 dt-bindings: power: rpmpd: Update part number to X1E80100
    ce649f43c4936 dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains
    25ebc01125e60 dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215
    f33305f0925be dt-bindings: power: qcom,rpmpd: Add SM7150
    ce5ee09c0aeea btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
    774089dc718f5 Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
    fe11f976dd0ad hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
    11536f3371f4a arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
    8d9f22c570ba3 testptp: Add option to open PHC in readonly mode
    4f3c8c7f4e1bd selftest/ptp: update ptp selftest to exercise the gettimex options
    59ac47a0275fc ptp: add testptp mask test
    4fbfc6bca4e37 ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.
    ba3a97c832725 posix-clock: Store file pointer in struct posix_clock_context
    ea2d9bfd422e9 Fix memory leak in posix_clock_open()
    221e4d1e29bb4 posix-clock: introduce posix_clock_context concept
    2c590e4b3d4cc io_uring: move local task_work in exit cancel loop
    99da896614d17 btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
    696ebf74738b9 dmaengine: ti: k3-udma: fix device leak on udma lookup
    6fdf168f57e33 dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
    8df7c3e6d1e5e dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
    4e45ae701b816 dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
    6bf4ef078fd11 dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
    9fba97baa520c dmaengine: lpc18xx-dmamux: fix device leak on route allocation
    c81ea0222eaaa dmaengine: idxd: fix device leaks on compat bind and unbind
    db7c79c1bbfb1 dmaengine: dw: dmamux: fix OF node leak on route allocation failure
    c80ca7bdff158 dmaengine: bcm-sba-raid: fix device leak on probe
    987c71671367f dmaengine: at_hdmac: fix device leak on of_dma_xlate()
    2838cb6133ac2 dmaengine: apple-admac: Add "apple,t8103-admac" compatible
    1f70af89b0893 drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
    bc0b17bdba383 drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
    cb4c9fc5e79a7 drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
    3dc1a40180264 drm/amdkfd: fix a memory leak in device_queue_manager_init()
    a4218ac0bb8e7 drm/amd: Clean up kfd node on surprise disconnect
    d9a82256a4c7e drm/amd/display: Bump the HDMI clock to 340MHz
    1d8f4d24fc1b3 LoongArch: Fix PMU counter allocation for mixed-type event groups
    43964644348f6 mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
    6ef36b329bbe2 mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
    b73f2834e1bc6 x86/resctrl: Fix memory bandwidth counter width for Hygon
    a78dca14fb2b0 x86/resctrl: Add missing resctrl initialization for Hygon
    71c5bc6720b60 tcpm: allow looking for role_sw device in the main node
    bfefcc78a8ec5 EDAC/i3200: Fix a resource leak in i3200_probe1()
    dc2365df328a9 EDAC/x38: Fix a resource leak in x38_probe1()
    ac92563601513 hrtimer: Fix softirq base check in update_needs_ipi()
    0b06cde92f2f9 ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
    ed61badfc2bc8 nvme-pci: disable secondary temp for Wodposit WPBSNM8
    3f6a36c9dc73d USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
    f890044ad2959 USB: serial: option: add Telit LE910 MBIM composition
    384084a094c74 USB: OHCI/UHCI: Add soft dependencies on ehci_platform
    93f21786487cd usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
    928e7d022d167 usb: dwc3: Check for USB4 IP_NAME
    ee82bc9f1df97 phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
    9e0d336e71c47 phy: rockchip: inno-usb2: fix disconnection in gadget mode
    16a6a73087fb4 phy: freescale: imx8m-pcie: assert phy reset during power on
    942381794fc31 phy: rockchip: inno-usb2: fix communication disruption in gadget mode
    9716e427489f6 x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
    809a437e27a3b net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
    58d236065ba65 can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
    f905bcfa971ed can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
    1a3286edf4d48 null_blk: fix kmemleak by releasing references to fault configfs items
    2de6d3348937f ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
    8fab42516eb3c scsi: core: Fix error handler encryption support
    60e450eec5d63 drm/amd/display: Check dce_hwseq before dereferencing it
    d64557b61c1dd HID: usbhid: paper over wrong bNumDescriptor field
    d66d8ad31057d i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
    88a9483f093bb dmaengine: omap-dma: fix dma_pool resource leak in error paths
    2a7ddafac3820 phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
    76b870fdaad82 phy: stm32-usphyc: Fix off by one in probe()
    beba460a29915 phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
    8151ecaaf08e3 phy: drop probe registration printks
    7070ed66aba3b phy: phy-snps-eusb2: refactor constructs names
    0b347b180ad5e phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
    0fd2001907fea dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
    59cb421b0902f dmaengine: tegra-adma: Fix use-after-free
    df8a131a41ff6 dmaengine: xilinx: xdma: Fix regmap max_register
    7602a67114cd5 mm, kfence: describe @slab parameter in __kfence_obj_info()
    f332d75388ea5 textsearch: describe @list member in ts_ops search
    805f1c634817a ASoC: tlv320adcx140: fix word length
    659939d08e5f7 ASoC: tlv320adcx140: fix null pointer
    0a234660dc70c net/sched: sch_qfq: do not free existing class in qfq_change_class()
    a3f895d4494a8 selftests: drv-net: fix RPS mask handling for high CPU numbers
    9356b69d03d0f ipv6: Fix use-after-free in inet6_addr_del().
    82c9039c8ebb7 net: hv_netvsc: reject RSS hash key programming without RX indirection table
    58208907c4044 btrfs: fix memory leaks in create_space_info() error paths
    0bd151ce4200c btrfs: introduce btrfs_space_info sub-group
    42c8d48bf3abe btrfs: factor out check_removing_space_info() from btrfs_free_block_groups()
    34d5cd41418af btrfs: factor out init_space_info() from create_space_info()
    1fe74715ccb4e btrfs: store fs_info in space_info
    6126877f90fe7 net/mlx5e: Restore destroying state bit after profile cleanup
    147b9a2fc7a35 vsock/test: add a final full barrier after run all tests
    06fe0801396a3 ipv4: ip_gre: make ipgre_header() robust
    15f6faf36e162 macvlan: fix possible UAF in macvlan_forward_source()
    0ba0a79500fcf net: update netdev_lock_{type,name}
    2f03dafea0a80 ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
    98151bb13af1e net: bridge: annotate data-races around fdb->{updated,used}
    9f1ac4c98add7 net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry
    f2dc6ab3a14c2 btrfs: send: check for inline extents in range_is_hole_in_parent()
    fdecd3b6aac10 nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
    50f80e82e7966 nvmet-tcp: remove boilerplate code
    611e839d2d552 can: etas_es58x: allow partial RX URB allocation to succeed
    869862056e100 pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
    55787a73fbb61 xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
    6eb597cb4e37f ASoC: codecs: wsa884x: fix codec initialisation
    ca72af7608d68 Revert "gfs2: Fix use of bio_chain"
    30f9b41b03903 efi/cper: Fix cper_bits_to_str buffer handling and return value
    73069e1134029 firmware: imx: scu-irq: Set mu_resource_id before get handle
    cbb31f77b879f Linux 6.6.121
    0b1ac9743f3d9 riscv: Replace function-like macro by static inline function
    d03ee41854866 gpio: pca953x: fix wrong error probe return value
    5192f17d1127a bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
    83eef6f904a84 scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
    06f90c7dce191 ASoC: fsl_sai: Add missing registers to cache default
    2c4404d6e4edb ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
    be3923930a71b ALSA: usb-audio: Update for native DSD support quirks
    78d87b72cebe2 can: j1939: make j1939_session_activate() fail if device is no longer registered
    f73d92997388b drm/amd/display: Fix DP no audio issue
    53de1e6cde8f9 netfilter: nf_tables: avoid chain re-validation if possible
    c04b3a832c062 powercap: fix sscanf() error return value handling
    e07dea55aa134 powercap: fix race condition in register_control_type()
    98676ee71fd4e bpf: Fix reference count leak in bpf_prog_test_run_xdp()
    7c81ad5e580bd bpf, test_run: Subtract size of xdp_frame from allowed metadata size
    d08b4193cd55a bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
    875d7cb4fe156 bpf: Make variables in bpf_prog_test_run_xdp less confusing
    a60c827903b45 bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
    77c956152a3a7 riscv: uprobes: Add missing fence.i after building the XOL buffer
    5c7c4131beade x86/microcode/AMD: Select which microcode patch to load
    90c4cb136e398 NFSD: Remove NFSERR_EAGAIN
    249d45ca97381 nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
    93a2e7eaf876d NFS: trace: show TIMEDOUT instead of 0x6e
    21f8bc5179bed ALSA: ac97: fix a double free in snd_ac97_controller_register()
    3b7c1a3805a51 ALSA: ac97bus: Use guard() for mutex locks
    a19df91b5b93b LoongArch: Add more instruction opcodes and emit_* helpers
    029935507d0af arp: do not assume dev_hard_header() does not change skb->head
    0d254b0a15f29 net: enetc: fix build warning when PAGE_SIZE is greater than 128K
    93f18eaa19037 net: usb: pegasus: fix memory leak in update_eth_regs_async()
    11bf9134613f6 net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
    9be826178831c HID: quirks: work around VID/PID conflict for appledisplay
    88bea149db205 net: fix memory leak in skb_segment_list for GRO packets
    970a1ac90325f bnxt_en: Fix potential data corruption with HW GRO/LRO
    dc6f73f73ce88 net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
    81e7205b82a7f net/mlx5e: Don't print error message due to invalid module
    0ab968d9c56bd netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
    582a5e922a965 net: sock: fix hardened usercopy panic in sock_recv_errqueue
    874794fb4f3db inet: ping: Fix icmp out counting
    2985712dc76df net: mscc: ocelot: Fix crash when adding interface under a lag
    4c8facf028ec7 bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
    94e070cd50790 net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
    3cd717359e56f netfilter: nf_conncount: update last_gc only when GC has been performed
    c6cfd76700551 netfilter: nf_tables: fix memory leak in nf_tables_newrule()
    76f4218bdadde gpio: pca953x: handle short interrupt pulses on PCAL devices
    4d7652d1a3525 gpio: pca953x: Add support for level-triggered interrupts
    26f64b3ee5172 gpio: pca953x: Utilise temporary variable for struct device
    2a968d1fd7bd6 gpio: pca953x: Utilise dev_err_probe() where it makes sense
    62ecdf65b8ab0 netfilter: nft_synproxy: avoid possible data-race on update operation
    51ea246778e57 arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
    b6600d9d893f6 ARM: dts: imx6q-ba16: fix RTC interrupt level
    837fe3df68601 arm64: dts: add off-on-delay-us for usdhc2 regulator
    c6f7b3cf44856 scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
    cf73e6020b3d7 scsi: ufs: core: Fix EH failure after W-LUN resume error
    ac01c92333497 scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
    afd993bababfe smb/client: fix NT_STATUS_NO_DATA_DETECTED value
    bbbc1a48f121a smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
    ca9b4aaa7e63b smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
    f18975f2cd41c NFS: Fix up the automount fs_context to use the correct cred
    f719a300eaa05 NFSv4: ensure the open stateid seqid doesn't go backwards
    af4fc583fd900 dm-snapshot: fix 'scheduling while atomic' on real-time kernels
    fc220dae3cf89 alpha: don't reference obsolete termio struct for TC* constants
    be3bc3d84a2a5 ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
    78faf283336dc csky: fix csky_cmpxchg_fixup not working
    13159c7125636 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
    381261f24f4e4 NFSD: NFSv4 file creation neglects setting ACL
    4c06b7cb87e5b nfsd: set security label during create operations
    d761a185f8950 nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr()
    ab2b5755269cf nfsd: convert to new timestamp accessors
    1310640f9ae92 net: Add locking to protect skb->dev access in ip_output
    9c2f8a9b68024 ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
    4ebc711b738d1 libceph: make calc_target() set t->paused, not just clear it
    90a60fe61908a libceph: reset sparse-read state in osd_fault()
    e097cd858196b libceph: return the handler error from mon_handle_auth_done()
    8081faaf089db libceph: make free_choose_arg_map() resilient to partial allocation
    d3613770e2677 libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
    ef208ea331ef6 libceph: prevent potential out-of-bounds reads in handle_auth_done()
    d21ec867d84c9 wifi: avoid kernel-infoleak from struct iw_point
    16e107d586208 pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
    7291ef23491f9 gpio: rockchip: mark the GPIO controller as sleeping
    e23882b11f8d3 drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
    526bd4bfa1206 drm/pl111: Fix error handling in pl111_amba_probe
    1c5a3175aecf8 counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
    8a1b8778b7868 counter: 104-quad-8: Fix incorrect return value in IRQ handler
    84875a1d92243 lib/crypto: aes: Fix missing MMU protection for AES S-box
    e1e8d4973c1a7 mei: me: add nova lake point S DID
    a63998cd6687c btrfs: always detect conflicting inodes when logging inode refs
    28b2a80560969 net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
    8f5211fc891d0 atm: Fix dma_free_coherent() size
    06600719d0f7a nfsd: provide locking for v4_end_grace
    e15e59b5aa624 NFSD: Fix permission check for read access to executable-only files

(From OE-Core rev: 3a8ee137c9147e6bf717fb903ea4c27b9d58fa34)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield 1997141268 linux-yocto/6.6: update to v6.6.120
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c596736dadab Linux 6.6.120
    0eb7d3da258b ext4: fix error message when rejecting the default hash
    52c4538a92da ext4: filesystems without casefold feature cannot be mounted with siphash
    bb4511b55fd3 Revert "iommu/amd: Skip enabling command/event buffers for kdump"
    0e8ac70521e6 firmware: arm_scmi: Fix unused notifier-block in unregister
    21e82354cdd7 tty: fix tty_port_tty_*hangup() kernel-doc
    25466e5b4bb1 blk-mq: setup queue ->tag_set before initializing hctx
    d292db57e915 pwm: stm32: Always program polarity
    b92ec4a84872 net: stmmac: make sure that ptp_rate is not 0 before configuring EST
    f6dcbd2bbea5 virtio_console: fix order of fields cols and rows
    8d8a670c1c28 mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result()
    8bf34bd12231 mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs()
    c45dcf86c75e mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration()
    d41809aa8e24 mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions()
    e471ed55f3d6 mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out()
    8b6d3b7c12bd mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
    520e8b12f0a4 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
    945e0575dcfc mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
    3fc04a106f87 mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
    7110f671d86a mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
    8feb7885b769 mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
    c6e1f6e91e9c mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
    5988035dd57a mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter()
    1c5a0de26879 mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
    c62c5296fdb8 RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests
    32ca3557d968 RDMA/rxe: Remove the direct link to net_device
    f3652768a89c net: Allow to use SMP threads for backlog NAPI.
    03765d5c1808 net: Remove conditional threaded-NAPI wakeup based on task state.
    51445190c10a sched/fair: Proportional newidle balance
    5b7949a95c39 sched/fair: Small cleanup to update_newidle_cost()
    38d080768c85 sched/fair: Small cleanup to sched_balance_newidle()
    17d3103325e8 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
    339bcd3d051c mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
    b75608e7547d mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
    65a02ffb5223 KVM: SVM: Fix redundant updates of LBR MSR intercepts
    35c53e4eae0f KVM: nSVM: Fix and simplify LBR virtualization handling with nested
    e6ff197547a9 KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
    991d961055d0 KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
    2c1ea6214827 media: mediatek: vcodec: Use spinlock for context list protection lock
    cc12debd518b media: amphion: Remove vpu_vb_is_codecconfig
    e42ccf472feb media: amphion: Make some vpu_v4l2 functions static
    93f537ffaece media: amphion: Add a frame flush mode for decoder
    37304368a2a9 KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
    2f3139eaae99 powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
    47dee8b41fd7 mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
    3339e058b80d mm/balloon_compaction: we cannot have isolated pages in the balloon list
    98a5af4a8eae media: verisilicon: Fix CPU stalls on G2 bus error
    5acc3c7d3c4c media: verisilicon: g2: Use common helpers to compute chroma and mv offsets
    381a387ececd media: verisilicon: Store chroma and motion vectors offset
    f7b8851c541e f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
    be4c3a3c6c23 f2fs: use global inline_xattr_slab instead of per-sb slab cache
    34c817843cb3 f2fs: fix to propagate error from f2fs_enable_checkpoint()
    bcd0086ee5a2 f2fs: fix to avoid updating compression context during writeback
    b54cdce20f86 f2fs: drop inode from the donation list when the last file is closed
    1a00afcdaefc f2fs: keep POSIX_FADV_NOREUSE ranges
    64ed96a21f0f f2fs: remove unused GC_FAILURE_PIN
    ec3656a8cb42 genirq/irq_sim: Initialize work context pointers properly
    72295ae05d13 mm: fix arithmetic for max_prop_frac when setting max_ratio
    bcf2450f46cd mm: fix arithmetic for bdi min_ratio
    4584486cfcca net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
    4914c0a16654 page_pool: Fix use-after-free in page_pool_recycle_in_ring
    b86dc510308d xfrm: state: fix out-of-bounds read during lookup
    3c591353956f ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
    36acfec981d8 ext4: introduce ITAIL helper
    48098bb42a9f powerpc/64s/radix/kfence: map __kfence_pool at page granularity
    668350eba983 LoongArch: Refactor register restoration in ftrace_common_return
    6940c1d0c84a drm/amd/display: Fix null pointer deref in dcn20_resource.c
    d767ce15045d net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
    dbf427663ce2 usb: xhci: Apply the link chain quirk on NEC isoc endpoints
    bbda96e97a00 usb: xhci: move link chain bit quirk checks into one helper function.
    bf4127db6cb7 xhci: dbgtty: fix device unregister: fixup
    dff9dd015331 tty: introduce and use tty_port_tty_vhangup() helper
    21e52dc77629 drm/tilcdc: Fix removal actions in case of failed probe
    5bc791132f62 drm/tilcdc: request and mapp iomem with devres
    205aa0c83cd4 drm/mediatek: Fix probe resource leaks
    fef6d1474ab3 drm/mediatek: Fix probe memory leak
    11dba925f5fe drm/amdgpu: Forward VMID reservation errors
    5c7c7135468f mptcp: ensure context reset on disconnect()
    a902343f1331 net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
    b2e7973d83a8 pmdomain: imx: Fix reference count leak in imx_gpc_probe()
    4544cfa16834 pmdomain: Use device_get_match_data()
    d7ba1b448f2a mm: consider non-anon swap cache folios in folio_expected_ref_count()
    7e0fcf9d71c2 mm: simplify folio_expected_ref_count()
    6e5bff40bb38 wifi: mac80211: Discard Beacon frames to non-broadcast address
    46b9fd1433d2 lockd: fix vfs_test_lock() calls
    c9bf31522828 mptcp: fallback earlier on simult connection
    38a053796019 PCI: brcmstb: Fix disabling L0s capability
    cf74785c00b8 fuse: fix readahead reclaim deadlock
    7ba826aae1d4 svcrdma: bound check rq_pages index in inline path
    8ca34c5cedec ARM: dts: microchip: sama7g5: fix uart fifo size to 32
    2ce95f8656b6 gpiolib: acpi: Add quirk for Dell Precision 7780
    2e14206551bc NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
    8bd6dff8b801 f2fs: fix to avoid potential deadlock
    c375c4b3997e f2fs: use f2fs_err_ratelimited() to avoid redundant logs
    5ceea587c4e2 mptcp: pm: ignore unknown endpoint flags
    d1d03d9184a6 scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
    b0d2a7ccd17c usb: ohci-nxp: fix device leak on probe failure
    2a16f46eef6d usb: ohci-nxp: Use helper function devm_clk_get_enabled()
    c08838ce6b50 mm/ksm: fix exec/fork inheritance support for prctl
    93e4a783d34c wifi: mt76: Fix DTS power-limits on little endian systems
    bb2805532f76 btrfs: don't rewrite ret from inode_permission
    0baa9f64bf79 gfs2: fix freeze error handling
    35521feb614d jbd2: fix the inconsistency between checksum and data in memory for journal sb
    902ca2356f1e ext4: fix string copying in parse_apply_sb_mount_options()
    7a35a505d76a ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
    931c86fc7989 ALSA: wavefront: Clear substream pointers on close
    4425583a691a ALSA: wavefront: Use guard() for spin locks
    02b63f3bc292 ALSA: wavefront: Fix integer overflow in sample size validation
    596b04a1638e ALSA: wavefront: Use standard print API
    eee39f83246a mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
    d88481653d74 tpm: Cap the number of PCR banks
    dbd0829d2458 blk-mq: add helper for checking if one CPU is mapped to specified hctx
    9202337a2d90 usb: gadget: lpc32xx_udc: fix clock imbalance in error path
    23525fc0ea62 drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
    0336188cc85d drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
    678d1c86566d drm/msm/dpu: Add missing NULL pointer check for pingpong interface
    56f07bc0a0ff drm/mgag200: Fix big-endian support
    3d004f7341d4 drm/ttm: Avoid NULL pointer deref for evicted BOs
    3144af03d517 drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
    ed51ddd5d449 drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
    f6916363112c drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
    e05d53454b55 drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
    9a8837f9a3e3 net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open()
    6b93c8ab6f6c net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
    907e8a8f506d net: usb: sr9700: fix incorrect command used to write single register
    cff353b7d1c7 nfsd: Drop the client reference in client_states_open()
    fd43edf357a3 LoongArch: BPF: Sign extend kfunc call arguments
    446c851e338b LoongArch: BPF: Zero-extend bpf_tail_call() index
    ad6ea65f154b fjes: Add missing iounmap in fjes_hw_init()
    2c4c0c09f964 e1000: fix OOB in e1000_tbi_should_accept()
    c0acdee51323 RDMA/cm: Fix leaking the multicast GID table reference
    9d85524789c2 RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
    a94bd2d93f7e samples/ftrace: Adjust LoongArch register restore order in direct calls
    b8f12a3ecf03 tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
    45b44c3a5e62 x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo
    3e3c0dc025f0 idr: fix idr_alloc() returning an ID out of range
    c9acbaec693b kasan: refactor pcpu kasan vmalloc unpoison
    e53bfe453059 compiler_types.h: add "auto" as a macro for "__auto_type"
    b9b5f45cc1b7 LoongArch: Use unsigned long for _end and _text
    f0b9e0bdc8bc LoongArch: Use __pmd()/__pte() for swap entry conversions
    582c1dcc5bb5 LoongArch: Fix build errors for CONFIG_RANDSTRUCT
    155d6a8f5d5f LoongArch: Correct the calculation logic of thread_count
    4632c8b0966d LoongArch: Add new PCI ID for pci_fixup_vgadev()
    80617b75fd70 media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
    53e256b5c360 media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
    a8e6cf7fa2be media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
    4b139f88c2ab media: amphion: Cancel message work before releasing the VPU core
    52604951b90c media: vpif_display: fix section mismatch
    08c6c6f2a570 media: vpif_capture: fix section mismatch
    1ad7c8174109 media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
    99293be855c3 media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
    b93abb4385b8 media: TDA1997x: Remove redundant cancel_delayed_work in probe
    1b5602078557 media: samsung: exynos4-is: fix potential ABBA deadlock on init
    4d8da22db935 media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
    3a294b90cd1a media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
    4972ad7eec91 media: cec: Fix debugfs leak on bus_register() failure
    6b5dd195993b fbdev: tcx.c fix mem_map to correct smem_start offset
    cce58e4cc535 fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
    243b674b2b52 fbdev: gbefb: fix to use physical address instead of dma address
    2b0b703a3483 dm-bufio: align write boundary on physical block size
    34f6abd6e4c4 dm-ebs: Mark full buffer dirty even on partial write
    4654800c51be firmware: stratix10-svc: Add mutex in stratix10 memory management
    a73881ae085d media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
    318d470f64ba powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
    40feb7bcde49 parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
    d3842cbf13b7 parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
    13cf5cd4d535 media: rc: st_rc: Fix reset control resource leak
    52bae1ff6805 mfd: max77620: Fix potential IRQ chip conflict when probing two devices
    1b630d8f2c27 mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
    fbf57f5e453d clk: samsung: exynos-clkout: Assign .num before accessing .hws
    ae80fb3d4e8c leds: leds-lp50xx: Enable chip before any communication
    cc468490d143 leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
    a406e6c74bd9 leds: leds-lp50xx: Allow LED 0 to be added to module bank
    b13a3dbfa196 powerpc/64s/slb: Fix SLB multihit issue during SLB preload
    db9c8e8d3cd6 powerpc, mm: Fix mprotect on book3s 32-bit
    14b08c85cb88 arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator
    a1d55aa866db PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
    9024cb893f17 HID: logitech-dj: Remove duplicate error logging
    240cd7f2812c iommu: disable SVA when CONFIG_X86 is set
    3627e0e773f1 iommu/tegra: fix device leak on probe_device()
    0314de9c844d iommu/sun50i: fix device leak on of_xlate()
    7b1df346f6c5 iommu/qcom: fix device leak on of_xlate()
    21a0e8bdee72 iommu/omap: fix device leaks on probe_device()
    173ff5fc9a15 iommu/mediatek: fix device leak on of_xlate()
    83f3010de73c iommu/mediatek-v1: fix device leaks on probe()
    e7bcedf59b28 iommu/mediatek-v1: fix device leak on probe_device()
    83a8e18f30a6 iommu/ipmmu-vmsa: fix device leak on of_xlate()
    e83739232b9f iommu/exynos: fix device leak on of_xlate()
    aa749c2daf02 iommu/apple-dart: fix device leak on of_xlate()
    b3e9fa847b2d iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
    17ec295d3981 ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
    c4a8098b2985 ASoC: qcom: q6adm: the the copp device only during last instance
    54b1b731d235 ASoC: qcom: q6asm-dai: perform correct state check before closing
    ed120b75aef2 ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr
    4054a3597d04 ASoC: stm32: sai: fix OF node leak on probe
    8a6826a43d8d ASoC: stm32: sai: fix clk prepare imbalance on probe failure
    637d027bb75c ASoC: stm32: sai: fix device leak on probe
    49c2ef075dbe ntfs: Do not overwrite uptodate pages
    6c32d5bb9f8f selftests/ftrace: traceonoff_triggers: strip off names
    21077a775094 blk-mq: skip CPU offline notify on unmapped hctx
    0fbd2d4a1e2c blk-mq: don't schedule block kworker on isolated CPUs
    1d0026c1e4bc RDMA/bnxt_re: fix dma_free_coherent() pointer
    0ca967c599fd RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
    5012b4c81223 ksmbd: Fix memory leak in get_file_all_info()
    77645e82b739 RDMA/bnxt_re: Fix to use correct page size for PDE table
    639e07bbfa17 RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
    689eb90b703b RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
    78d9259378aa RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
    c67499757bcf RDMA/efa: Remove possible negative shift
    fc23d05f0b3f RDMA/irdma: avoid invalid read in irdma_net_event
    9f6185a32496 net: rose: fix invalid array index in rose_kill_by_device()
    5979338c8301 ipv4: Fix reference count leak when using error routes with nexthop objects
    c53aa6a5086f ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
    4d0ceb7677e1 net: stmmac: fix the crash issue for zero copy XDP_TX action
    b23a2e155894 octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
    cf7ae870560b platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
    25be7178446c net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
    38722e69ee64 net: usb: asix: validate PHY address before use
    0e85ce7a3755 net: dsa: b53: skip multicast entries for fdb_dump()
    328dc0b12fb8 firewire: nosy: Fix dma_free_coherent() size
    535ce34a5bdb genalloc.h: fix htmldocs warning
    ef277ae121b3 smc91x: fix broken irq-context in PREEMPT_RT
    2ac08f3dcd0c selftests: net: fix "buffer overflow detected" for tap.c
    4bd4ea3eb326 net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
    e5ee9d93229b amd-xgbe: reset retries and mode on RX adapt failures
    6bfb62b6010a team: fix check for port enabled in team_queue_override_port_prio_changed()
    859bf9688bfb platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
    ec24f3b4a831 platform/x86: msi-laptop: add missing sysfs_remove_group()
    1717357007db ip6_gre: make ip6gre_header() robust
    0fc642f011cb net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
    248dadfee95a net: mdio: aspeed: add dummy read to avoid read-after-write issue
    c0ecb3e4451f Bluetooth: btusb: revert use of devm_kzalloc in btusb
    0279978adec6 crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
    18de0e41d69d iavf: fix off-by-one issues in iavf_config_rss_reg()
    f38cca04a23f i40e: fix scheduling in set_rx_mode
    e27036473d39 wifi: mac80211: do not use old MBSSID elements
    8e628bebb109 wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
    34e9dd0a1281 wifi: rtw88: limit indirect IO under powered off for RTL8822CS
    5c04217d06a1 iommu/mediatek: fix use-after-free on probe deferral
    e19578444587 ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
    84716eb9dc31 hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
    f94800fbc26c hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
    3769c56a1f0d hwmon: (max16065) Use local variable to avoid TOCTOU
    237a3095bcd6 i2c: amd-mp2: fix reference leak in MP2 PCI device
    ad296c4e19c7 platform/x86: intel: chtwc_int33fe: don't dereference swnode args
    c6210714347f rpmsg: glink: fix rpmsg device leak
    3ccb504e8045 soc: amlogic: canvas: fix device leak on lookup
    c8ddc5f321d1 soc: qcom: ocmem: fix device leak on lookup
    98bf1dece54c tracing: Fix fixed array of synthetic event
    b3b689729cbc amba: tegra-ahb: Fix device leak on SMMU enable
    206c012bcbd1 crypto: caam - Add check for kcalloc() in test_len()
    84238876e3b3 crypto: af_alg - zero initialize memory allocated via sock_kmalloc
    d3c094e07853 selftests: openvswitch: Fix escape chars in regexp.
    4cd6081860a5 drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
    0126560370ed io_uring/poll: correctly handle io_poll_add() return value on update
    ec5aadc4fa49 gpio: regmap: Fix memleak in error path in gpio_regmap_register()
    8c4e5a643de3 s390/ipl: Clear SBP flag when bootprog is set
    7359e1d39c78 btrfs: don't log conflicting inode if it's a dir moved in the current transaction
    d790ef0c4819 powerpc/kexec: Enable SMT before waking offline CPUs
    7452d53f2933 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
    21a64218450e svcrdma: return 0 on success from svc_rdma_copy_inline_range
    354834eb7867 nfsd: Mark variable __maybe_unused to avoid W=1 build break
    cd8cf2be3717 net/handshake: restore destructor on submit failure
    e0643d46759d fsnotify: do not generate ACCESS/MODIFY events on child for special files
    19d4c57ae91b r8169: fix RTL8117 Wake-on-Lan in DASH mode
    a143c3677662 PM: runtime: Do not clear needs_force_resume with enabled runtime PM
    65b1971147ec tracing: Do not register unsupported perf events
    079f1c3f5619 xfs: fix a memory leak in xfs_buf_item_init()
    97bf1f137364 KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
    d6d257ce44af KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
    d44197b5281d KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
    2d1d833b4025 KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
    99c709294ac8 KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
    aab88dcc4fb4 KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
    7b54ccef865e KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
    73f77550086f KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
    8ff24d46a4b2 KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
    e927ab132b87 libceph: make decode_pool() more resilient against corrupted osdmaps
    e09fd2eb6d4c parisc: Do not reprogram affinitiy on ASP chip
    062774439d44 scs: fix a wrong parameter in __scs_magic
    393b8f9bedc7 platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
    e30a69bf891e KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI)
    96f1b074c98c ocfs2: fix kernel BUG in ocfs2_find_victim_chain
    fb9bd6d8d314 media: vidtv: initialize local pointers upon transfer of memory ownership
    1e90812c0220 tools/testing/nvdimm: Use per-DIMM device handle
    a4c67d96f92e f2fs: fix return value of f2fs_recover_fsync_data()
    4ce9eecb7466 f2fs: fix age extent cache insertion skip on counter overflow
    3d65e27e57aa f2fs: invalidate dentry cache on failed whiteout creation
    efe3371001f5 f2fs: fix to avoid updating zero-sized extent in extent cache
    c3031cf2b61f f2fs: ensure node page reads complete before f2fs_put_super() finishes
    0260ad551b08 scsi: target: Reset t_task_cdb pointer in error case
    71074ea29886 NFSD: use correct reservation type in nfsd4_scsi_fence_client
    e354793a7ab9 scsi: aic94xx: fix use-after-free in device removal path
    e9e601b7df58 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
    6741f90220dc cpufreq: nforce2: fix reference count leak in nforce2
    dffe25224f51 cpuidle: governors: teo: Drop misguided target residency check
    ed023a179150 intel_th: Fix error handling in intel_th_output_open
    d285517429a7 char: applicom: fix NULL pointer dereference in ac_ioctl
    96e001d20405 usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
    679e15fb53f9 usb: dwc3: keep susphy enabled during exit to avoid controller faults
    fa8747590b0e usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
    75c5d9bce072 usb: phy: isp1301: fix non-OF device reference imbalance
    319f7a85b3c4 usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
    848132371006 USB: lpc32xx_udc: Fix error handling in probe
    4824123c9f87 phy: broadcom: bcm63xx-usbh: fix section mismatches
    f4cacf8827ba media: pvrusb2: Fix incorrect variable used in trace message
    4a54d8fcb093 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
    22847606976c usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
    252892d5a6a2 mptcp: avoid deadlock on fallback while reinjecting
    17b470ee53dd mptcp: schedule rtx timer only after pushing data
    fa4a445f832b media: v4l2-mem2mem: Fix outdated documentation
    94a16a3a1001 jbd2: use a weaker annotation in journal handling
    815327958ec4 jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
    79a0e4d3fbef ext4: align max orphan file size with e2fsprogs limit
    dc06c9dc5e1d ext4: fix incorrect group number assertion in mb_check_buddy
    36bf0f765333 ext4: clear i_state_flags when alloc inode
    b5d942922182 ext4: xattr: fix null pointer deref in ext4_raw_inode()
    2c0acd1a1e94 ktest.pl: Fix uninitialized var in config-bisect.pl
    5fd1a6c631b2 fs/ntfs3: fix mount failure for sparse runs in run_unpack()
    7ad2c3ae0795 kallsyms: Fix wrong "big" kernel symbol type read from procfs
    037cf435316e floppy: fix for PAGE_SIZE != 4KB
    59e7ee37d5f8 block: rate-limit capacity change info log
    075e7d288ca3 s390/dasd: Fix gendisk parent after copy pair swap
    4f4515f02497 lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
    fe2ce8f925b0 mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
    18b99fa603d0 io_uring: fix filename leak in __io_openat_prep()
    19166de97372 KEYS: trusted: Fix a memory leak in tpm2_load_cmd
    bc390b273720 cifs: Fix memory and information leak in smb3_reconfigure()
    23a89dda39f4 vhost/vsock: improve RCU read sections around vhost_vsock_get()
    cebfc2ba2e6f block: rnbd-clt: Fix signedness bug in init_dev()
    8d8cd3d315db platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
    e3ef3e4888de nvme-fc: don't hold rport lock when putting ctrl
    62641daa93cb i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware
    92544ae44c44 libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
    1abf4ddeda5c serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
    72ab74fce63b usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
    4373a81f6b0a usb: xhci: limit run_graceperiod for only usb 3.0 devices
    1803fe66c9f2 iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
    914605b0de81 usb: typec: ucsi: Handle incorrect num_connectors capability
    de6dd14643e5 usbip: Fix locking bug in RT-enabled kernels
    44c8dccb09a2 exfat: fix remount failure in different process environments
    b1cad002d69a reset: fix BIT macro reference
    d2c7c90aca7b via_wdt: fix critical boot hang due to unnamed resource allocation
    b39fa021839b fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
    6c6a81d86a3c fuse: Always flush the page cache before FOPEN_DIRECT_IO write
    69f05f3e5390 scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
    0ec5059916f5 scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
    61c409780367 scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
    b5020721e953 powerpc/addnote: Fix overflow on 32-bit builds
    71f543a56177 clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
    cad4dfddaf69 ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
    a6f1ced333a6 firmware: imx: scu-irq: Init workqueue before request mbox channel
    aafed85dbff7 ipmi: Fix __scan_channels() failing to rescan channels
    42985fb28312 ipmi: Fix the race between __scan_channels() and deliver_response()
    2f21a7cbaaa9 ALSA: usb-mixer: us16x08: validate meter packet indices
    ba2d15635e59 ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
    930acded6bbf ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
    8f289fa12926 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
    97575fb2b714 dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
    d9bd2d0985b2 mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
    3dd6d0138482 spi: fsl-cpm: Check length parity before switching to 16 bit mode
    a287987af354 ACPI: CPPC: Fix missing PCC check for guaranteed_perf
    ef0f9059a647 ACPI: PCC: Fix race condition by removing static qualifier
    20dbeaed2459 can: gs_usb: gs_can_open(): fix error handling
    3f3c1c05c6ff Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
    bf95ec558058 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
    2bee957f6155 HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
    a28a375a5439 ksmbd: fix buffer validation by including null terminator size in EA length
    e54fb2a47725 ksmbd: Fix refcount leak when invalid session is found on session lookup
    da29cd197246 ksmbd: skip lock-range check on equal size to avoid size==0 underflow
    378a5d288598 block: rnbd-clt: Fix leaked ID in init_dev()
    d9479998c19a spi: cadence-quadspi: Fix clock disable on probe failure path
    a0fee4e618f1 x86/xen: Fix sparse warning in enlighten_pv.c
    79ee93cb007e x86/xen: Move Xen upcall handler
    86fcc629fdc0 drm/panel: sony-td4353-jdi: Enable prepare_prev_first
    fd8bb8fa7bc9 MIPS: Fix a reference leak bug in ip22_check_gio()
    11dddaed6978 hwmon: (tmp401) fix overflow caused by default conversion rate value
    fa37adcf1d56 hwmon: (ibmpex) fix use-after-free in high/low store
    b7b4f3bf118f net: hns3: add VLAN id validation before using
    3708637cb0d4 net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
    1956d47a03eb net: hns3: using the num_tqps in the vf driver to apply for resources
    049538a3aa98 net: enetc: do not transmit redirected XDP frames when the link is down
    011ae80c49d9 net/handshake: duplicate handshake cancellations leak socket
    7646e5d8188b net/mlx5: Serialize firmware reset with devlink
    873cb8bb91ba net/mlx5: Skip HotPlug check on sync reset using hot reset
    de0560f2c33c net/mlx5: fw_tracer, Handle escaped percent properly
    8ac688c0e430 net/mlx5: fw_tracer, Validate format string parameters
    0b0e4639a827 net/mlx5: Drain firmware reset in shutdown callback
    24d3f86df879 net/mlx5: fw reset, clear reset requested on drain_fw_reset
    ca9983bc3a11 ethtool: Avoid overflowing userspace buffer on stats query
    4cc829d61f10 iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
    a9c87779df20 netfilter: nf_tables: remove redundant chain validation on register store
    1816619b2fe8 netfilter: nf_tables: allow loads only when register is initialized
    fb1347c5c016 netfilter: nf_tables: pass context structure to nft_parse_register_load
    8bc10b03e705 nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
    2f125ebe47d6 net/sched: ets: Remove drr class from the active list if it changes to strict
    f818cd472565 caif: fix integer underflow in cffrml_receive()
    4729ff0581fb ipvs: fix ipv4 null-ptr-deref in route error path
    325eb61bb307 netfilter: nf_conncount: fix leaked ct in error paths
    3e778855fbce broadcom: b44: prevent uninitialized value usage
    10ffc558246f net: openvswitch: fix middle attribute validation in push_nsh() action
    5f2831fc593c mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
    4a3c569005f4 mlxsw: spectrum_router: Fix neighbour use-after-free
    5a182635fef3 mlxsw: spectrum_router: Fix possible neighbour reference count leak
    17aefe815462 ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
    9987cda315c0 net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
    156a0f6341dc netrom: Fix memory leak in nr_sendmsg()
    0e26e3ef8e5c net: fec: ERR007885 Workaround for XDP TX path
    ab794ec9f374 gfs2: Fix use of bio_chain
    96a60775dbb1 Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
    6d9a87ecf31f Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
    5adad9727a81 ksmbd: vfs: fix race on m_flags in vfs_cache
    d64977495e44 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
    c4d7795fa55e smb/server: fix return value of smb2_ioctl()
    11860cf9cc87 gfs2: fix remote evict for read-only filesystems
    58d3e00853e4 btrfs: scrub: always update btrfs_scrub_progress::last_physical
    935284aaf233 wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
    857e7a2d5a94 hfsplus: fix volume corruption issue for generic/073
    05ec9af3cc43 hfsplus: Verify inode mode when loading from disk
    b9d1c6bb5f19 hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
    6348bea92f4f hfsplus: fix volume corruption issue for generic/070
    44a38eb4f787 ntfs: set dummy blocksize to read boot_block when mounting
    fb9e2f99ac10 kbuild: Use objtree for module signing key path
    f5c2a7cb2f00 fs/ntfs3: Support timestamps prior to epoch
    fefb29d64e7b livepatch: Match old_sympos 0 and 1 in klp_find_func()
    e71e8079adfe cpuidle: menu: Use residency threshold in polling state override decisions
    ae7ead58d949 cpufreq: s5pv210: fix refcount leak
    9ba782fbe66a cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
    ce2bdfc4af3f ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
    1bc34293dfbd ACPICA: Avoid walking the Namespace if start_node is NULL
    30917f8d4383 x86/ptrace: Always inline trivial accessors
    6c074ccf7705 sched/fair: Revert max_newidle_lb_cost bump
    91e448e69aca sched/deadline: only set free_cpus for online runqueues
    6e41d9ec8d7c perf/x86/amd: Check event before enable to avoid GPF
    011e356fe41e iomap: account for unaligned end offsets when truncating read range
    82b60ffbb532 iomap: adjust read range correctly for non-block-aligned positions
    c0c0951b9cd4 btrfs: fix memory leak of fs_devices in degraded seed device path
    f64105c91557 bpf, arm64: Do not audit capability check in do_jit()
    beeed972ab48 btrfs: fix a potential path leak in print_data_reloc_error()
    54ac15426326 btrfs: do not skip logging new dentries when logging a new name
    e5daff089b92 ipv6: add exception routes to GC list in rt6_insert_exception
    90f7d995b861 ipv6: avoid possible NULL deref in modify_prefix_route()
    dea3ed2c16f9 ALSA: dice: fix buffer overflow in detect_stream_formats()
    dbf2d472323d usb: phy: Initialize struct usb_phy list_head
    4ef659d1f2e1 usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
    7c0b3edb6c77 net: lan743x: Allocate rings outside ZONE_DMA
    95eb965ce0a6 LoongArch: Add machine_kexec_mask_interrupts() implementation
    8d9d121e3799 ocfs2: fix memory leak in ocfs2_merge_rec_left()
    c21c606ad398 irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
    94a4c58d7195 efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
    f5a28c4ee058 efi/cper: Adjust infopfx size to accept an extra space
    b930724424b7 efi/cper: Add a new helper function to print bitmasks
    99bc41d7d796 dm log-writes: Add missing set_freezable() for freezable kthread
    448092910421 dm-raid: fix possible NULL dereference with undefined raid type
    ca8764c0ea1f block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
    fd7e7353a5ba ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
    6d4f17782ce4 ALSA: firewire-motu: add bounds check in put_user loop for DSP events
    2e09c882a66e rtc: gamecube: Check the return value of ioremap()
    5ef0faed120a ALSA: uapi: Fix typo in asound.h comment
    74f2a6b2cff8 dma/pool: eliminate alloc_pages warning in atomic_pool_expand
    ddd32ec66bc4 ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
    1e59c7587bb0 nvme-auth: use kvfree() for memory allocated with kvcalloc()
    27d20907debf block: fix comment for op_is_zone_mgmt() to include RESET_ALL
    94f146df56fb blk-mq: Abort suspend when wakeup events are pending
    5e3230f9f644 ASoC: ak5558: Disable regulator when error happens
    8465515b8689 ASoC: ak4458: Disable regulator when error happens
    5fd617128b57 ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
    1edf1b4467d3 platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
    4543d9ccd99e fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
    a98719b6af3e NFS: Fix inheritance of the block sizes when automounting
    52cfde819a96 Expand the type of nfs_fattr->valid
    dce10c59211e NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
    e04647b63cfd Revert "nfs: ignore SB_RDONLY when mounting nfs"
    350e69eb93ef Revert "nfs: clear SB_RDONLY before getting superblock"
    b2ed74f8ccd2 Revert "nfs: ignore SB_RDONLY when remounting nfs"
    f718f9ea6094 NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
    b8045ad0d53a NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
    991609c4a7b1 NFS: Initialise verifiers for visible dentries in readdir and lookup
    29e8d9b274c9 fs/nls: Fix utf16 to utf8 conversion
    796318ae388f NFS: Avoid changing nlink when file removes and attribute updates race
    f1fe47f592d3 9p: fix cache/debug options printing in v9fs_show_options
    a888905f2874 fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
    ae836bfac958 pinctrl: single: Fix incorrect type for error return variable
    de0711dbfb5c pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
    7438b1d70bf2 perf tools: Fix split kallsyms DSO counting
    d01f0e072dad net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
    84a7efd23b78 clk: keystone: fix compile testing
    fe78b35d19ae md/raid5: fix IO hang when array is broken with IO inflight
    61f371ade3b6 remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
    d31af068650c mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
    c44e376a533e selftests: bonding: add delay before each xvlan_over_bond connectivity check
    4035ea8f02fd selftests: bonding: add ipvlan over bond testing
    194788280708 selftests: bonding: Add more missing config options
    12364ab3a790 selftests: bonding: add missing build configs
    d29034c70f15 mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
    660936cb5155 net: stmmac: fix rx limit check in stmmac_rx_zc()
    8286c02fe910 netfilter: nft_connlimit: update the count if add was skipped
    da9f247fb5ef netfilter: nf_conncount: rework API to use sk_buff directly
    11b01b8ef1b1 netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
    c327ca1b2de5 Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
    14f860fb0873 resource: introduce is_type_match() helper and use it
    7c5527d18857 resource: replace open coded resource_intersection()
    9bf08dab7041 resource: Reuse for_each_resource() macro
    09811a83b214 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
    6338e278de4a ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
    7236e72a91ee ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
    3ff05c6af301 ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
    83a9770432f5 ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
    886c8f5af8a9 ASoC: Intel: catpt: Fix error path in hw_params()
    84b3ea5ba85c vdpa/pds: use %pe for ERR_PTR() in event handler registration
    c1947cecdd5c virtio: fix virtqueue_set_affinity() docs
    1c7d1ef95abf virtio: fix whitespace in virtio_config_ops
    83dc689e138b virtio: fix typo in virtio_device_ready() comment
    22b11e8f0b8f virtio_vdpa: fix misleading return in void function
    55b273382c52 ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
    0adc8de19be0 ext4: remove unused return value of __mb_check_buddy
    db5deba07f53 ublk: prevent invalid access with DEBUG
    0a0a51092c1c ublk: complete command synchronously on error
    84ea891dc897 ublk: make sure io cmd handled in submitter task context
    c242024efd1b ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
    1968f2ab4188 hwmon: sy7636a: Fix regulator_enable resource leak on error path
    e84690a05e47 drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
    6dca0f3f61ab ASoC: fsl_xcvr: clear the channel status control memory
    aaf2a6097116 RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
    715fdb3b3054 RDMA/irdma: Add support to re-register a memory region
    8c7b21f37494 RDMA/irdma: Fix data race in irdma_free_pble
    444de2316b09 RDMA/irdma: Fix data race in irdma_sc_ccq_arm
    599632e08859 iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
    136ff909dfb9 backlight: lp855x: Fix lp855x.h kernel-doc warnings
    30cbe4b64274 backlight: led-bl: Add devlink to supplier LEDs
    26fa6991683f wifi: ieee80211: correct FILS status codes
    e3676761efb2 iomap: always run error completions in user context
    4ae9ff07bc2b iomap: factor out a iomap_dio_done helper
    7e50ce619ec6 drm/nouveau: restrict the flush page to a 32-bit address
    96c56c5ff4e4 PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
    5928832a90c1 btrfs: fix leaf leak in an error path in btrfs_del_items()
    3cfa3d4b155a staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
    d6ce96e10e4d firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
    1c3c234af940 mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
    ccc585db618c RDMA/bnxt_re: Fix the inline size for GenP7 devices
    e3e1c7416be8 RISC-V: KVM: Fix guest page fault within HLV* instructions
    76ae0cc39673 crypto: ccree - Correctly handle return of sg_nents_for_len
    6cd14414394b crypto: starfive - Correctly handle return of sg_nents_for_len
    6a17f898a8bf selftests/bpf: Improve reliability of test_perf_branches_no_hw()
    e5343f28814d selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
    3915c76df201 usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
    b6943283343b usb: dwc2: fix hang during suspend if set as peripheral
    bac021bf0733 usb: dwc2: fix hang during shutdown if set as peripheral
    7e993b9d6d24 usb: dwc2: disable platform lowlevel hw resources during shutdown
    b90c743a0a32 usb: chaoskey: fix locking for O_NONBLOCK
    cca3e7df3c0f ima: Handle error code returned by ima_filter_rule_match()
    dc153401fb26 wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
    06a5e91764ed cpuset: Treat cpusets in attaching as populated
    49dc43b25d34 net: phy: adin1100: Fix software power-down ready condition
    8d946fccf5b4 phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
    c23e0dfb05f1 mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
    eb09da83e409 mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
    19eda47ce3f1 wifi: mac80211: fix CMAC functions not handling errors
    7fce2c2ce881 wifi: mac80211: remove RX_DROP_UNUSABLE
    4bccd506a1f1 scsi: qla2xxx: Fix improper freeing of purex item
    6b4cd95bd746 pwm: bcm2835: Make sure the channel is enabled after pwm_request()
    f153fc44c760 perf arm_spe: Fix memset subclass in operation
    64378caea949 perf arm-spe: Extend branch operations
    cb2b0caa8ca9 ipv6: clear RA flags when adding a static route
    bd12abe294c7 net/ipv6: Remove expired routes with a separated list of routes.
    d258ebe7059a drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
    9068cfff4cab fs/ntfs3: Prevent memory leaks in add sub record
    ba125e8f8d11 fs/ntfs3: out1 also needs to put mi
    800153219f04 powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
    e95d7d5821f6 powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
    bf2c990b0121 bpf: Fix invalid prog->stats access when update_effective_progs fails
    c8201d1353c5 bpf: Improve program stats run-time calculation
    bf8513dfa31e wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
    5ed033c54133 drm/msm/a2xx: stop over-complaining about the legacy firmware
    9f7ab3fbadf3 NFSD/blocklayout: Fix minlength check in proc_layoutget
    07a031029201 tracefs: fix a leak in eventfs_create_events_dir()
    74f25cec6e26 watchdog: starfive: Fix resource leak in probe error path
    0592410b31f1 watchdog: wdat_wdt: Fix ACPI table leak in probe function
    97b876fa8832 bpf: Check skb->transport_header is set in bpf_skb_check_mtu
    67d295d202e2 selftests/bpf: Fix failure paths in send_signal test
    edcb09848a32 bpf: Handle return value of ftrace_set_filter_ip in register_fentry
    bf8f8528b762 ps3disk: use memcpy_{from,to}_bvec index
    f5391a065c15 arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
    6b73166d3b4b arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
    3800c97efff2 PCI: keystone: Exit ks_pcie_probe() for invalid mode
    994d6303ed0b bpf: Free special fields when update [lru_,]percpu_hash maps
    df38a4843ab5 leds: netxbig: Fix GPIO descriptor leak in error paths
    796037ca2fab scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
    39c754efb3e1 ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
    bcb94288d95c ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
    7c8a7d87af9d lib/vsprintf: Check pointer before dereferencing in time_and_date()
    43e2c9203d0f clk: renesas: r9a06g032: Fix memory leak in error path
    bb5f23ae16be coresight: etm4x: Add context synchronization before enabling trace
    289d9a2a98ba coresight: etm4x: Extract the trace unit controlling
    60f664206be2 coresight: etm4x: Correct polling IDLE bit
    2e5e0665a594 nbd: defer config unlock in nbd_genl_connect
    cbfcd8ee53c2 wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
    61abf8c3162d macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
    d5720e4045af powerpc/32: Fix unpaired stwcx. on interrupt exit
    a68afb6d6540 cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
    ef2bbc11b82b scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
    907bf69c6b6c ntfs3: init run lock for extend inode
    86322d5110ae ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
    d76abca88045 RDMA/rtrs: server: Fix error handling in get_or_create_srv
    841ccb2df19b dt-bindings: PCI: amlogic: Fix the register name of the DBI region
    6cbba9229348 staging: most: remove broken i2c driver
    bb0f288a2c4b staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0
    6d2390653d82 scsi: smartpqi: Fix device resources accessed after device removal
    1867723a98c8 scsi: stex: Fix reboot_notifier leak in probe error path
    1ba2ced2bbdf nbd: defer config put in recv_work
    e432944735ed regulator: core: disable supply if enabling main regulator fails
    313ab3b06f77 perf/x86/intel: Correct large PEBS flag check
    22b62f223c07 ext4: correct the checking of quota files before moving extents
    b5ed17a40909 mfd: da9055: Fix missing regmap_del_irq_chip() in error path
    e4d11160a77d efi/libstub: Fix page table access in 5-level to 4-level paging transition
    6f16ed9c8401 x86/boot: Fix page table access in 5-level to 4-level paging transition
    182b0cc9c6d5 ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
    4c1dd8da5386 ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
    2470624c4a21 ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
    c934e40246da spi: tegra210-quad: Fix timeout handling
    577d1ef18499 fs/9p: Don't open remote file with APPEND mode when writeback cache is used
    3b8431f15cdd scsi: target: Do not write NUL characters into ASCII configfs output
    4eee4a5b9b2e power: supply: apm_power: only unset own apm_get_power_status
    ea3bdf099e6e power: supply: wm831x: Check wm831x_set_bits() return value
    0fcbaf9e99dc power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
    5e9308f3539b power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
    1f309df63785 power: supply: cw2015: Check devm_delayed_work_autocancel() return code
    42c1d38de86e perf record: skip synthesize event when open evsel failed
    4dc555120afc perf lock contention: Load kernel map before lookup
    9dd3998165ea perf maps: Add maps__load_first()
    23411ba96edc interconnect: debugfs: Fix incorrect error handling for NULL path
    92087be48b6d arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
    7bfe9e5e31e3 interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
    bbd054492101 i3c: master: svc: Prevent incomplete IBI transaction
    82a09b9965ed i3c: fix refcount inconsistency in i3c_master_register
    4fc6af9d9e6d i3c: master: Inherit DMA masks and parameters from parent device
    5f133ebe6836 pinctrl: stm32: fix hwspinlock resource leak in probe function
    ea954e50d312 soc: qcom: smem: fix hwspinlock resource leak in probe error paths
    6135d225cca7 tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
    2d3e5c1e76e9 x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
    b2a39b1a3cde task_work: Fix NMI race condition
    1d733fcbfe61 mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
    4e6526697dcb mtd: nand: relax ECC parameter validation check
    9ce7cbd355ae Revert "mtd: rawnand: marvell: fix layouts"
    4a493d02ff46 ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
    eb8ac04f1036 ARM: dts: renesas: gose: Remove superfluous port property
    58aca869babd RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
    8f2602a83f66 sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
    85ede044f43d phy: mscc: Fix PTP for VSC8574 and VSC8572
    32d9c68af133 arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
    a649992b7eb3 firmware: imx: scu-irq: fix OF node leak in
    abdbffb6a087 arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
    bb04d3610f08 s390/ap: Don't leak debug feature files if AP instructions are not available
    772ded5a84e0 s390/smp: Fix fallback CPU detection
    4304bd7a334e wifi: ath11k: fix peer HE MCS assignment
    9484379c88e1 crypto: hisilicon/qm - restore original qos values
    5b8ac617c8da crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
    4a1535593fff clk: qcom: camcc-sm6350: Fix PLL config of PLL2
    77197835a735 clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
    285dadbb3cb0 uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
    433e72bf0f4e PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
    631786221875 arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
    5db023188615 arm64: dts: imx8mp-venice-gw702x: remove off-board uart
    e2060f8513b5 arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
    d553d5e13edb arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
    cf5cd55287a1 iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
    23b2b6af8dc6 inet: Avoid ehash lookup race in inet_ehash_insert()
    ad12d25edbbe rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
    dcb5e3cd96b7 ntfs3: Fix uninit buffer allocated by __getname()
    8bf729b96303 ntfs3: fix uninit memory after failed mi_read in mi_format_new
    3f8878c15753 crypto: authenc - Correctly pass EINPROGRESS back up to the caller
    2629742ccd3a irqchip/qcom-irq-combiner: Fix section mismatch
    c696fb981d7d irqchip/imx-mu-msi: Fix section mismatch
    1fbdca7341d9 irqchip/irq-brcmstb-l2: Fix section mismatch
    7a57553d2123 irqchip/irq-bcm7120-l2: Fix section mismatch
    f00b32894c51 irqchip/irq-bcm7038-l1: Fix section mismatch
    b0515a899ad1 sched/fair: Forfeit vruntime on yield
    a8fdcac66666 objtool: Fix weak symbol detection
    fe6ff6e24ae8 objtool: Fix standalone --hacks=jump_label
    c5f56b7faa80 HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
    c9a86c677b48 clk: renesas: cpg-mssr: Read back reset registers to assure values latched
    e8c730499293 clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
    224a0d7c8449 clk: renesas: Use str_on_off() helper
    d349d7dc3243 clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R()
    3cf222e052ca clk: renesas: rzg2l: Remove critical area
    73fcc27a9795 clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable()
    2ba9e39f1aed clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
    094b1827d2f7 USB: Fix descriptor count when handling invalid MBIM extended descriptor
    9dc3c78d21e1 drm/vgem-fence: Fix potential deadlock on release
    2f97ed8e88a3 drm/panel: visionox-rm69299: Don't clear all mode flags
    6245cce711e2 gpu: host1x: Fix race in syncpt alloc/free
    f8fd5491100f smack: fix bug: unprivileged task can create labels
    c173ce97d3f0 staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
    34620eb602aa staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
    30c558447e90 staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
    b975f91de5f8 comedi: check device's attached status in compat ioctls
    049f14557450 comedi: multiq3: sanitize config options in multiq3_attach()
    72b3627b0d3b comedi: c6xdigio: Fix invalid PNP driver unregistration
    24cb00b9804c wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
    2f5e6805246c samples: work around glibc redefining some of our defines wrong
    a32eddf2bb52 LoongArch: Mask all interrupts during kexec/kdump
    e9b3a97e852a HID: elecom: Add support for ELECOM M-XT3URBK (018F)
    e7915f55ab15 platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
    919a9f1422e3 platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
    f42f958c4f42 platform/x86: huawei-wmi: add keys for HONOR models
    db78f96e150a HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
    d046f04f223d platform/x86: acer-wmi: Ignore backlight event
    fc59674bb41f pinctrl: qcom: msm: Fix deadlock in pinmux configuration
    a505f0ba36ab nvme: fix admin request_queue lifetime
    37786f27ee0e HID: hid-input: Extend Elan ignore battery quirk to USB
    a9f626396bfe bfs: Reconstruct file type when loading from disk
    4943ed83f80e ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
    727197a77874 smb: fix invalid username check in smb3_fs_context_parse_param()
    2b37f5b27f13 Bluetooth: btrtl: Avoid loading the config file on security chips
    d6c24a5e6cdc drm/vmwgfx: Use kref in vmw_bo_dirty
    88edfeca040c spi: imx: keep dma request disabled before dma transfer setup
    5f061d0ed906 spi: xilinx: increase number of retries before declaring stall
    27b2a8f45ed1 ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
    3915997ad777 USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
    cae7aa183ca4 USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
    5a8c2136dc5e serial: add support of CPCI cards
    53a633786718 USB: serial: ftdi_sio: match on interface number for jtag
    510db76553c9 USB: serial: option: move Telit 0x10c7 composition in the right place
    63d6bf5b19bf USB: serial: option: add Telit Cinterion FE910C04 new compositions
    85e8739c5ce7 USB: serial: option: add Foxconn T99W760
    152289a51107 KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
    88d99ca5adbd comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
    144c48da33a0 ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
    39d2ef113416 locking/spinlock/debug: Fix data-race in do_raw_write_lock
    708a620b471a ksmbd: ipc: fix use-after-free in ipc_msg_send_request
    1687a055a555 ext4: refresh inline data size before write operations
    b4f8eabf6d99 jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
    46c73ff89d73 Documentation: process: Also mention Sasha Levin as stable tree maintainer
    732fe5cbd6ad leds: spi-byte: Use devm_led_classdev_register_ext()
    25f34fd52144 xfrm: flush all states in xfrm_state_fini
    763e5c351206 xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
    88ed2012b8c7 Revert "xfrm: destroy xfrm_state synchronously on net exit path"
    d0e0d1097118 xfrm: delete x->tunnel as we delete x

(From OE-Core rev: bdf9c70e0c6ddebb599c56ed9a4c17ba0db516c0)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield 2adde7bee1 linux-yocto/6.6: update to v6.6.119
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    5fa4793a2d2d Linux 6.6.119
    810189546cb6 HID: core: Harden s32ton() against conversion to 0 bits
    e7e8e9b1a1b1 net: dsa: microchip: Free previously initialized ports on init failures
    3b5a6115d6ea net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
    70ad6455139e ksmbd: fix use-after-free in session logoff
    3a13454fd098 mptcp: fix duplicate reset on fastclose
    b77075c08d7e selftests: mptcp: join: properly kill background tasks
    f12f4c657617 staging: rtl8712: Remove driver using deprecated API wext
    2b9719ccad38 net: macb: fix unregister_netdev call order in macb_remove()
    a395121fe29e iio: adc: rtq6056: Correct the sign bit index
    094f10f3f290 can: rcar_canfd: Fix CAN-FD mode as default
    eecd163fa6da usb: typec: ucsi: psy: Set max current to zero when disconnected
    f02a412c0a18 usb: gadget: udc: fix use-after-free in usb_gadget_state_work
    92234ee7fc23 usb: udc: Add trace event for usb_gadget_set_state
    0722d804f7ad nfsd: Replace clamp_t in nfsd4_get_drc_mem()
    5106da73b016 bonding: check xdp prog when set bond mode
    694a354ddf98 bonding: return detailed error when loading native XDP fails
    becc488a4d86 libceph: replace BUG_ON with bounds check for map->max_osd
    ccbccfba25e9 libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
    183ad6e3b651 libceph: fix potential use-after-free in have_mon_and_osd_map()
    1c6fb1cc5035 net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
    1759edf0e688 net: dsa: microchip: common: Fix checks on irq_find_mapping()
    9d1a65cbe3ec drm/amd/display: Check NULL before accessing
    748ed1b6a2ca drm: sti: fix device leaks at component probe
    28a385af4a94 USB: serial: option: add support for Rolling RW101R-GL
    17cab1f3aefb USB: serial: ftdi_sio: add support for u-blox EVK-M101
    b75d20301703 xhci: dbgtty: fix device unregister
    da7a52bcee3f xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
    afc0e34f161c usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
    5428c75e92e4 usb: dwc3: pci: Sort out the Intel device IDs
    9dab9859b10e usb: dwc3: pci: add support for the Intel Nova Lake -S
    e3a55221f4de usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
    04a8a6393f3f usb: storage: sddr55: Reject out-of-bound new_pba
    f5b6b214db12 USB: storage: Remove subclass and protocol overrides from Novatek quirk
    cb1401b5bcc2 usb: storage: Fix memory leak in USB bulk transport
    9d86bc8b188a usb: renesas_usbhs: Fix synchronous external abort on unbind
    41434488ca71 usb: gadget: f_eem: Fix memory leak in eem_unwrap
    730c13a9701c usb: cdns3: Fix double resource release in cdns3_pci_probe
    993bfdc38428 most: usb: fix double free on late probe failure
    41ae1203c5ab serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
    ce318ec9864b mptcp: clear scheduled subflows on retransmit
    71796c91ee8e firmware: stratix10-svc: fix bug in saving controller data
    87b3d0105192 slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
    c4ba90485bfd thunderbolt: Add support for Intel Wildcat Lake
    f62ffdfb431b smb: client: fix memory leak in cifs_construct_tcon()
    4c257170c81d drivers/usb/dwc3: fix PCI parent check
    f8d1f166289f dm-verity: fix unreliable memory allocation
    5a3f3e39b187 ceph: fix crash in process_v2_sparse_read() for encrypted directories
    61089dd37ccd can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    c952664fd54f can: sja1000: fix max irq loop handling
    9917ba597cf9 atm/fore200e: Fix possible data race in fore200e_open()
    5b88725e5ea1 ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
    b4abe6826926 ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
    231ac951faba MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
    135713cd0751 MIPS: mm: Prevent a TLB shutdown on initial uniquification
    ad70338c1b87 iio: adc: ad7280a: fix ad7280_store_balance_timer()
    a9fa254af33a iio: accel: fix ADXL355 startup race condition
    cdd4a9e98004 iio: accel: bmc150: Fix irq assumption regression
    a8f6a8256a68 iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    936e082a7c07 iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
    d59a7824444e Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
    c538dae04a4c spi: bcm63xx: fix premature CS deassertion on RX-only transactions
    01511983d7b8 spi: nxp-fspi: Propagate fwnode in ACPI case as well
    5fc6f8175b8b spi: nxp-fspi: Support per spi-mem operation frequency switches
    a25cc746f7d0 spi: spi-mem: Add a new controller capability
    f1ea0e8b4a15 spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
    94b3c7558748 spi: spi-mem: Allow specifying the byte order in Octal DTR mode
    99aff13bcc13 spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
    dbb60bd12950 spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
    f29b58e974c7 mailbox: pcc: don't zero error register
    ea621f472cfe mailbox: pcc: Refactor error handling in irq handler into separate function
    5550f9021895 mailbox: mailbox-test: Fix debugfs_create_dir error checking
    826785925627 usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
    cad94b17e276 iio: st_lsm6dsx: Fixed calibrated timestamp calculation
    21f867e3da98 net: fec: do not register PPS event for PEROUT
    2648b8b51992 net: fec: do not allow enabling PPS and PEROUT simultaneously
    b332c433489e net: fec: do not update PEROUT if it is enabled
    2d8f6acf5623 net: fec: cancel perout_timer when PEROUT is disabled
    3be37c3c96b1 net: atlantic: fix fragment overflow handling in RX path
    90daa70a4d62 net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
    d25c17507e80 net: dsa: sja1105: simplify static configuration reload
    0be4d79f8a1b drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
    7fd789d6ea49 net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    aa20dcff033c net/mlx5e: Fix validation logic in rate limiting
    58c411509141 net: lan966x: Fix the initialization of taprio
    30a1d3db72bc net: aquantia: Add missing descriptor cache invalidation on ATL2
    3e7442c58021 platform/x86: intel: punit_ipc: fix memory corruption
    ff45dd52bd18 net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
    fd6a1261d05d Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    fe68510fc99b Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
    4ffac725154c can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
    3433680b7596 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
    1a588c40a422 can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
    e9dd83a75a72 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers

(From OE-Core rev: 01535e428d4fbab6d467644339d37ff828ddfa88)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield 3ad8559850 linux-yocto/6.6: update to v6.6.118
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4791134e4aeb Linux 6.6.118
    c602cc344b4b mptcp: fix a race in mptcp_pm_del_add_timer()
    19de79aaea33 mm/mempool: fix poisoning order>0 pages with HIGHMEM
    0d40c4ef4b4b mm/mempool: replace kmap_atomic() with kmap_local_page()
    f38b91f7aded HID: amd_sfh: Stop sensor before starting
    4948db9c9ca8 selftests: mptcp: join: endpoints: longer transfer
    378e6136b8c0 pmdomain: imx: Fix reference count leak in imx_gpc_remove
    a5958b1bcf4a pmdomain: imx-gpc: Convert to platform remove callback returning void
    ad120c08b89a pmdomain: arm: scmi: Fix genpd leak on provider registration failure
    7ea2ea68df08 ftrace: Fix BPF fexit with livepatch
    f01f9c348d76 crash: fix crashkernel resource shrink
    b3d24038eb77 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
    29150018bf19 maple_tree: fix tracepoint string pointers
    bf07df375d20 uio_hv_generic: Set event for all channels on the device
    fc3139d9f4c1 KVM: arm64: Check the untrusted offset in FF-A memory share
    64332afa9f76 smb: client: fix incomplete backport in cfids_invalidation_worker()
    6917e894f86f tracing/tools: Fix incorrcet short option in usage text for --threads
    952637c5b9be net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
    1ee10e90e160 ALSA: usb-audio: fix uac2 clock source at terminal parser
    5d604d40cd32 f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
    e822e902f8e6 s390/mm: Fix __ptep_rdp() inline assembly
    4e9efe0d56e7 f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
    d0141cf6ab1f kconfig/nconf: Initialize the default locale at startup
    be46fa4de9da kconfig/mconf: Initialize the default locale at startup
    6ae0613ea6f5 net: tls: Cancel RX async resync request on rcd_delta overflow
    1bc765f0f75a selftests: net: use BASH for bareudp testing
    3ab328a0258f x86/microcode/AMD: Limit Entrysign signature checking to known generations
    5d778778b40b scsi: core: Fix a regression triggered by scsi_host_busy()
    1f8e4d6c1d20 cifs: fix typo in enable_gcm_256 module parameter
    d89ae707cfe6 bcma: don't register devices disabled in OF
    5998da5a8208 vsock: Ignore signal/timeout on connect() if already established
    7627864dc312 cifs: fix memory leak in smb3_fs_context_parse_param error path
    496d1383e441 LoongArch: Use UAPI types in ptrace UAPI header
    69e043bce09c net/mlx5: Clean up only new IRQ glue on request_irq() failure
    715d9cda646a devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
    6d9f0036d21e pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
    3b90bd8aaeb2 pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
    f0923011c126 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
    57752d523a3f kernel.h: Move ARRAY_SIZE() to a separate header
    9bbb4afff974 platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos
    3b177b2ded56 s390/ctcm: Fix double-kfree
    e2a897ad5f53 nvme-multipath: fix lockdep WARN due to partition scan work
    0b903f33c31c net: openvswitch: remove never-working support for setting nsh fields
    f8c496e20b7a net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()
    385fd7ec3214 net: dsa: hellcreek: fix missing error handling in LED registration
    2e78580e6e7d drm/tegra: Add call to put_pid()
    ddb483ce2136 mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    9026f31a520d pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
    a620b091c4df xfrm: Prevent locally generated packets from direct output in tunnel mode
    a2b61573e6a3 xfrm: Determine inner GSO type from packet inner protocol
    b3b27876f3be drm/amd/display: Move sleep into each retry for retrieve_link_cap()
    e688c20f088e drm/amd/display: Increase DPCD read retries
    06a79f1bffe7 drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
    8b57f8127086 drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    642561238c98 mptcp: do not fallback when OoO is present
    8a5d1ceef950 mptcp: decouple mptcp fastclose from tcp close
    28e4d5fd731e mptcp: avoid unneeded subflow-level drops
    d019cbb455ee mptcp: fix premature close in case of fallback
    3d513efe18a9 mptcp: fix ack generation for fallback msk
    8f9ba1a99a89 mptcp: fix race condition in mptcp_schedule_work()
    fe694895d3b7 LoongArch: Don't panic if no valid cache info for PCI
    6aa22377ef27 dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    5ea58bb47c50 MIPS: Malta: Fix !EVA SOC-it PCI MMIO
    a6ef60898dda scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
    b343cee5df7e scsi: sg: Do not sleep in atomic context
    33f64600a120 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
    5fe335a80548 nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
    7d1977b4ae5c nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
    d344ea1baf19 Input: pegasus-notetaker - fix potential out-of-bounds access
    ca9a08de9b29 Input: imx_sc_key - fix memory corruption on unload
    8a2d2a536c76 Input: goodix - add support for ACPI ID GDIX1003
    9cf59f4724a9 Input: cros_ec_keyb - fix an invalid memory access
    7419d8064dab Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
    00c56d55332c net: dsa: microchip: lan937x: Fix RGMII delay tuning
    ce0a3699244a be2net: pass wrb_params in case of OS2BMC
    5968bcf785c6 ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
    2a494b9e6364 smb: client: introduce close_cached_dir_locked()
    b8113c1ca469 ata: libata-scsi: Fix system suspend for a security locked drive
    037cc5058964 mptcp: Fix proto fallback detection with BPF
    2ecd37dae7a6 mptcp: Disallow MPTCP subflows from sockmap
    e65f1a2807c5 exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    583990e7dcea shmem: fix tmpfs reconfiguration (remount) when noswap is set
    457376c6fbf0 mtdchar: fix integer overflow in read/write ioctls
    b146e0b085d9 mtd: rawnand: cadence: fix DMA device NULL pointer dereference
    49365455a63c HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
    6665fbd7730b timers: Fix NULL function pointer race in timer_shutdown_sync()
    1e89a1be4fe9 Linux 6.6.117
    0fdb596476c0 memcg: fix data-race KCSAN bug in rstats
    541e85e1c9c9 ACPI: HMAT: Remove register of memory node for generic target
    41ea28dc3c0c mm: memcg: optimize parent iteration in memcg_rstat_updated()
    6b97ad92d932 mm/memory-tier: fix abstract distance calculation overflow
    206a8665f9cc memory tiers: use default_dram_perf_ref_source in log message
    e2f7c76758be cachestat: do not flush stats in recency check
    1f45e5c84684 net: netpoll: ensure skb_pool list is always initialized
    03695541b334 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
    42d486d35a41 mm/secretmem: fix use-after-free race in fault handler
    46185cdfc9ed mm/truncate: unmap large folio on split failure
    7e239675ae51 mm/memory: do not populate page table entries beyond i_size
    fe601b70eac6 filemap: cap PTE range to be created to allowed zero fill in folio_map_range()
    e5dffca89b4a mm: memcg: restore subtree stats flushing
    68849411ce9e mm: workingset: move the stats flush into workingset_test_recent()
    1b201161f34b mm: memcg: make stats flushing threshold per-memcg
    b68fc4f792bb mm: memcg: move vmstats structs definition above flushing code
    68e727bdb68b mm: memcg: change flush_next_time to flush_last_time
    b283ba3ddc9f mm: memcg: add per-memcg zswap writeback stat
    2c3568736912 mm: memcg: add THP swap out info for anonymous reclaim
    57692c303132 scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL
    aca6f63e803e scsi: ufs: core: Add a quirk to suppress link_startup_again
    753ca4b5beff scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register
    d1f293ee8dc3 scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
    aba8384b2311 scsi: ufs: core: Add fill_crypto_prdt variant op
    f108b6a34856 scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
    bd77a15c3a8d scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
    7e3bfaaf0208 scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
    960dab23f6d4 net: stmmac: Fix accessing freed irq affinity_hint
    ef49378864bb f2fs: fix to avoid overflow while left shift operation
    c645693180a9 net: netpoll: fix incorrect refcount handling causing incorrect cleanup
    a3a476cb65a4 net: netpoll: flush skb pool during cleanup
    dc67d67a995e net: netpoll: Individualize the skb pool
    e9ab9dec36bb netpoll: remove netpoll_srcu
    94b01ef5186c mm, percpu: do not consider sleepable allocations atomic
    4c8a4f1d34ec iommufd: Don't overflow during division for dirty tracking
    066ee13f05fb btrfs: ensure no dirty metadata is written back for an fs with errors
    df1ad5de2197 drm/mediatek: Disable AFBC support on Mediatek DRM driver
    a299478ac16f Revert "perf dso: Add missed dso__put to dso__load_kcore"
    ee59d88353e8 selftests: mptcp: connect: trunc: read all recv data
    8b644440d16a selftests: mptcp: join: rm: set backup flag
    b78aae82ea75 selftests: mptcp: connect: fix fallback note due to OoO
    4e833774cdc2 pmdomain: samsung: plug potential memleak during probe
    22330f5f0052 btrfs: do not update last_log_commit when logging inode due to a new name
    4020f18436ea btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
    4a351adbbd72 EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
    d58afbd05627 EDAC/altera: Handle OCRAM ECC enable after warm reset
    ca9f11fe0926 LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
    2612f0e0b8dc selftests/user_events: fix type cast for write_index packed member in perf_test
    21bedc6eeb51 x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
    70f73dde0ad7 spi: Try to get ACPI GPIO IRQ earlier
    ca2bd7a717d5 smb: client: fix cifs_pick_channel when channel needs reconnect
    bfdcd67e0fcb crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
    868fc62811d3 cifs: client: fix memory leak in smb3_fs_context_parse_param
    ece3b981bb66 ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
    082b6b511432 mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    159244b55095 mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    67272c11f379 fs/proc: fix uaf in proc_readdir_de()
    ad4a84daf6f8 wifi: mac80211: reject address change while connecting
    c3cbf016a697 selftests/tracing: Run sample events to clear page cache events
    041ab9ca6e80 ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
    c6201eb32371 LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
    f4b4146c1cf0 LoongArch: Use correct accessor to read FWPC/MWPC
    4c49fe089661 dma-mapping: benchmark: Restore padding to ensure uABI remained consistent
    b30421bc31c0 strparser: Fix signed/unsigned mismatch bug
    5746b2a0f5eb ksmbd: close accepted socket when per-IP limit rejects connection
    142b2990e64f gcov: add support for GCC 15
    29fbb3ad4018 NFSD: free copynotify stateid in nfs4_free_ol_stateid()
    e18c368d8611 KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
    79f851a65c47 HID: uclogic: Fix potential memory leak in error path
    9e8863f3fe34 ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
    57473eec8080 HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    6546dd0c6ad2 ARM: dts: imx51-zii-rdu1: Fix audmux node names
    adee209bb898 arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
    3f358a66a045 netfilter: nf_tables: reject duplicate device on updates
    dd3a38574f93 mtd: onenand: Pass correct pointer to IRQ handler
    7ce9bb0b95fc Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    c157fa22c400 lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
    d8d79cf8c2b7 espintcp: fix skb leaks
    2e93bf719462 net: dsa: improve shutdown sequence
    ed8a77fee461 net: allow small head cache usage with large MAX_SKB_FRAGS values
    52b44d8c6534 net: fix NULL pointer dereference in l3mdev_l3_rcv
    e91ecc2e30b4 irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
    64b12dca2b0a bpf: account for current allocated stack depth in widen_imprecise_scalars()
    baa61dcaa50b bpf: Add bpf_prog_run_data_pointers()
    872c04306b02 acpi/hmat: Fix lockdep warning for hmem_register_resource()
    6015ad3b210e base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
    356d4d79dc18 acpi: numa: Add setting of generic port system locality attributes
    e507071185fb acpi: Break out nesting for hmat_parse_locality()
    1fec7730896f acpi: numa: Add genport target allocation to the HMAT parsing
    d0e2cbe79e5d acpi: numa: Create enum for memory_target access coordinates indexing
    994c51070c95 base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates'
    519af3fa0263 acpi, hmat: calculate abstract distance with HMAT
    7e9fa5cdcc4f acpi, hmat: refactor hmat_register_target_initiators()
    9c8ffc4f91a8 memory tiering: add abstract distance calculation algorithms management
    57f607c11296 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
    c2d65ce1d035 NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    0ad6db4438ef NFS: sysfs: fix leak when nfs_client kobject add fails
    b6137b4906f4 pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
    45ea5a60adbc NFS: enable nconnect for RDMA
    275369632f6a pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
    b5de1eb5bc20 ASoC: tas2781: fix getting the wrong device number
    b5df9e06eed3 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
    aaaa8531896f ASoC: codecs: va-macro: fix resource leak in probe error path
    7fd65a5f9701 ASoC: cs4271: Fix regulator leak on probe failure
    34294379ea4e regulator: fixed: fix GPIO descriptor leak on register failure
    83475ce43fa7 acpi,srat: Fix incorrect device handle check for Generic Initiator
    25d6e7663932 cifs: Fix uncached read into ITER_KVEC iterator
    581c65fd0b0e cifs: stop writeback extension when change of size is detected
    ad141380d768 Bluetooth: L2CAP: export l2cap_chan_hold for modules
    335266ea359e ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
    4470b8bb9a8e ACPI: CPPC: Perform fast check switch only for online CPUs
    a851ebcdc2e2 ACPI: CPPC: Check _CPC validity for only the online CPUs
    f6a7808cadde hsr: Fix supervision frame sending on HSRv0
    873f985f3bdf virtio-net: fix incorrect flags recording in big mode
    14aba9bd583e net_sched: limit try_bulk_dequeue_skb() batches
    aa9f57c077f2 net/mlx5e: Fix potentially misleading debug message
    df953d41a579 net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    29f62b3d4466 net/mlx5e: Fix maxrate wraparound in threshold between units
    a676a296af65 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
    31e4aa93e2e5 net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
    a6d1bb631af9 net_sched: act_connmark: use RCU in tcf_connmark_dump()
    4cd8d755c7d4 af_unix: Initialise scc_index in unix_add_edge().
    f01f007c9cc9 wifi: mac80211: skip rate verification for not captured PSDUs
    2a5c3396f6d9 net: mdio: fix resource leak in mdiobus_register_device()
    c92dbf85627b tipc: Fix use-after-free in tipc_mon_reinit_self().
    e9800b8b77f2 net/handshake: Fix memory leak in tls_handshake_accept()
    e5afb55625ac net/smc: fix mismatch between CLC header and proposal
    ed71f801249d sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
    a5059df18988 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    2a9ff4086c26 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    c24ac6cfe4f9 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
    1c28c1e1522c Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
    2927ff643607 Bluetooth: MGMT: cancel mesh send timer when hdev removed
    65c74343da8e net: fec: correct rx_bytes statistic for the case SHIFT16 is set
    d6f93bba3d7d selftests: net: local_termination: Wait for interfaces to come up
    8085b6cdb0e0 wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
    4fbfef04d957 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    e671f9bb9780 smb/server: fix possible refcount leak in smb2_sess_setup()
    63d8706a2c09 smb/server: fix possible memory leak in smb2_read()
    113de3341728 HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
    a74a8be2652b NFS: check if suid/sgid was cleared after a write as needed
    dad9857bbe64 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    df712250acdd NFS4: Fix state renewals missing after boot
    1243e396148a drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
    21dbe5fa22df drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
    fdf2ea31ce40 riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
    7a635df5ef26 RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors
    ea5b1db5569c compiler_types: Move unused static inline functions warning to W=2
    36bc0502c2de drm/amd: Fix suspend failure with secure display TA
    e5a4b227bc6e iommufd: Make vfio_compat's unmap succeed if the range is already empty
    d6ab7ef52aaf smb: client: fix refcount leak in smb2_set_path_attr
    c63dc33e3794 drm/i915: Fix conversion between clock ticks and nanoseconds
    3dec22bde207 drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
    c6fc325d8434 selftests: netdevsim: set test timeout to 10 minutes
    885827bc1518 riscv: stacktrace: fix backtracing through exceptions
    8fa7f51d3725 drm/amd/display: Fix black screen with HDMI outputs
    f10a6f51984b drm/amdgpu: Fix function header names in amdgpu_connectors.c
    d96aa80f5f2e extcon: adc-jack: Cleanup wakeup source only if it was enabled
    3335f9054365 scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
    62b013354dcf lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
    946dec89c417 virtio-net: fix received length check in big packets
    cb52d9c86d70 smb: client: fix potential UAF in smb2_close_cached_fid()
    018179e955a8 smb: client: validate change notify buffer before copy
    24bef9ca5830 x86/microcode/AMD: Add more known models to entry sign checking
    193b2c5e5443 rtc: rx8025: fix incorrect register reference
    5f7350ff2b17 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
    70150b9443dd drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
    8bcadabc3c12 drm/amd/display: Enable mst when it's detected but yet to be initialized
    e70d2e1f876a tracing: Fix memory leaks in create_field_var()
    1b29b6898ed8 net: bridge: fix MST static key usage
    3b60ce334c1c net: bridge: fix use-after-free due to MST port state bypass
    5a5d2f772775 lan966x: Fix sleeping in atomic context
    8cb474cd65bf net: dsa: microchip: Fix reserved multicast address table programming
    8bf679ebbecd net/mlx5e: SHAMPO, Fix skb size check for 64K pages
    96d20e36c6df net/mlx5e: Fix return value in case of module EEPROM read error
    9b37f576d2c0 net/mlx5e: Use extack in get module eeprom by page callback
    c729f0049561 wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
    7ee2eb85755d bnxt_en: Fix a possible memory leak in bnxt_ptp_init
    dd03780c29f8 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
    2ad229bc61ba sctp: Hold sock lock while iterating over address list
    c9119f243d9c sctp: Prevent TOCTOU out-of-bounds write
    48d161b3c815 sctp: Hold RCU read lock while iterating over address list
    1ac40030b4e9 net: dsa: b53: stop reading ARL entries if search is done
    32e43d361bac net: dsa: b53: fix enabling ip multicast
    c95c731efee0 net: dsa: b53: fix resetting speed and pause on forced link
    ddf9fc39548e net: vlan: sync VLAN features with lower device
    d8a729fd4427 selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh
    f680e2eb8c21 netdevsim: add Makefile for selftests
    efad140b6284 selftests/net: use destination options instead of hop-by-hop
    28f2d15e27af selftests/net: fix GRO coalesce test and add ext header coalesce tests
    deff55caa564 selftests/net: fix out-of-order delivery of FIN in gro:tcp test
    cb5a4c715521 net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
    f44b8bbb1b7e Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
    779f83a91d4f Bluetooth: hci_event: validate skb length for unknown CC opcode
    59b9ed956c7d riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
    f34ba22989da riscv: stacktrace: Disable KASAN checks for non-current tasks
    19682d62547c riscv: Improve exception and system call latency
    d4187ec26410 net: libwx: fix device bus LAN ID
    6d7567cc0bc0 Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
    994ec06b7ba1 media: uvcvideo: Use heuristic to find stream entity
    85866cbd5edb ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
    ad71f31b62a4 ceph: refactor wake_up_bit() pattern of calling
    34353a0cd39b ceph: add checking of wait_for_completion_killable() return value
    068e002bc0b6 ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
    32df8c333071 kbuild: uapi: Strip comments before size type check
    05a378912231 rtc: pcf2127: fix watchdog interrupt mask on pcf2131
    86df8ade88d2 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
    81e829f699ee tools: lib: thermal: use pkg-config to locate libnl3
    fe6d58972d3d tools: lib: thermal: don't preserve owner in install
    fa7d0c8b2350 tools bitmap: Add missing asm-generic/bitsperlong.h include
    a1a09685874e ACPI: property: Return present device nodes only on fwnode interface
    6a1e5fa2d1fd scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
    ece711f11c0d 9p: sysfs_init: don't hardcode error to ENOMEM
    4f3926f060d7 cpufreq: tegra186: Initialize all cores to max frequencies
    cdd2b67dec44 9p: fix /sys/fs/9p/caches overwriting itself
    0ab9ef66a89e NTB: epf: Allow arbitrary BAR mapping
    751734d4cc7f clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
    824b92e6d24a clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
    7235f9969d9e clk: at91: clk-master: Add check for divide by 3
    544f8254c1fb ARM: at91: pm: save and restore ACR during PLL disable/enable
    9f9110995873 rtc: pcf2127: clear minute/second interrupt
    30e5bbcb98a9 clk: sunxi-ng: sun6i-rtc: Add A523 specifics
    3c5e016d2328 um: Fix help message for ssl-non-raw
    c34d6dd9ab35 fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
    da98803bccaf btrfs: mark dirty extent range for out of bound prealloc extents
    352056b6b669 RDMA/hns: Fix wrong WQE data when QP wraps around
    d4837e720ff0 RDMA/hns: Fix the modification of max_send_sge
    bc8c9b8f6387 RDMA/irdma: Set irdma_cq cq_num field during CQ create
    d559ddd687ed RDMA/irdma: Remove unused struct irdma_cq fields
    cd7e3bb8e200 RDMA/irdma: Fix SD index calculation
    57d352e198de ACPICA: Update dsmethod.c to get rid of unused variable warning
    f1d84a3d6521 char: misc: restrict the dynamic range to exclude reserved minors
    d2993a7e98eb ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
    c3e4a6de0d1f smb: client: transport: avoid reconnects triggered by pending task work
    a024cf4d9f84 ksmbd: use sock_create_kern interface to create kernel socket
    e81e6d6d99b1 ftrace: Fix softlockup in ftrace_module_enable
    e09a096104fc orangefs: fix xattr related buffer overflow...
    df7517553995 page_pool: Clamp pool size to max 16K pages
    2648c810a25f 6pack: drop redundant locking and refcounting
    e1806387c7f9 exfat: limit log print for IO error
    3a18f8ae062e ALSA: usb-audio: add mono main switch to Presonus S1824c
    799cd62cbcc3 Bluetooth: bcsp: receive data only if registered
    03371c021818 Bluetooth: SCO: Fix UAF on sco_conn_free
    c9d6e46c2fe8 Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames
    7eab99ffe36e net: macb: avoid dealing with endianness in macb_set_hwaddr()
    deb3d014d98c net/mlx5e: Don't query FEC statistics when FEC is disabled
    2bccb8072b28 ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
    91a5cec5b9d6 ASoC: stm32: sai: manage context in set_sysclk callback
    93f8d67ef8b5 amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
    d932fb292f83 ext4: increase IO priority of fastcommit
    199ab7b43c5e fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
    7ec8ac9f73d4 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
    f6108a8164c4 accel/habanalabs/gaudi2: read preboot status after recovering from dirty state
    a7d72a80e24a accel/habanalabs: return ENOMEM if less than requested pages were pinned
    193e269df045 scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
    88d6a9ea0688 accel/habanalabs/gaudi2: fix BMON disable configuration
    e30995ccd9b8 scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
    31116de5ee11 net: bridge: Install FDB for bridge MAC on VLAN 0
    eacfd08b26a0 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
    e30618333212 NFSv4.1: fix mount hang after CREATE_SESSION failure
    4e2f5f7e07f9 NFSv4: handle ERR_GRACE on delegation recalls
    1b65fb8723ed drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
    7f097986b342 wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
    a5cb7c982210 remoteproc: qcom: q6v5: Avoid handling handover twice
    221952c07b58 PCI/PM: Skip resuming to D0 if device is disconnected
    b679c74e5598 vfio: return -ENOTTY for unsupported device feature
    5561974e62e0 sparc64: fix prototypes of reads[bwl]()
    d170582b4bd4 sparc/module: Add R_SPARC_UA64 relocation handling
    1810b2fd7375 PCI: cadence: Check for the existence of cdns_pcie::ops before using it
    0b02dc2b4e78 r8169: set EEE speed down ratio to 1
    4e21e047a25c net: intel: fm10k: Fix parameter idx set but not used
    c9e7bb702b80 wifi: ath10k: Fix connection after GTK rekeying
    df0a0f229f73 iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
    4cacebe3dca9 net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
    855cd3a0c4d5 net: phy: clear link parameters on admin link down
    c5fa9fed6272 ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup()
    2a9575a37218 jfs: fix uninitialized waitqueue in transaction manager
    ce054a366c54 jfs: Verify inode mode when loading from disk
    ec2b3f83b4c8 ipv6: np->rxpmtu race annotation
    765f8816d395 f2fs: fix infinite loop in __insert_extent_tree()
    97e01c389402 usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
    8b21ba5da050 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
    2611313d3bf4 allow finish_no_open(file, ERR_PTR(-E...))
    3c0725aceb14 scsi: lpfc: Define size of debugfs entry for xri rebalancing
    1169f4f03fb1 scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
    a0eb7e8f8266 scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
    88ac95b17a03 scsi: ufs: core: Disable timestamp functionality if not supported
    58b8f44a64ed selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
    0df3da8888fa drm/amdgpu: reject gang submissions under SRIOV
    a7efc2b0359c HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
    0d0be8117eda ethernet: Extend device_get_mac_address() to use NVMEM
    7613c06ffa89 page_pool: always add GFP_NOWARN for ATOMIC allocations
    fe3f8b671618 drm/amd/display: Disable VRR on DCE 6
    ced20843717e drm/amd/display: Fix DVI-D/HDMI adapters
    eeb8ea76c912 drm/amd: Avoid evicting resources at S5
    19618f480cda drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
    a8a9f053e1d4 ALSA: serial-generic: remove shared static buffer
    59efb432c318 wifi: mt76: mt7996: Temporarily disable EPCS
    bf0b265fcb95 wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
    81f9b19af302 net/cls_cgroup: Fix task_get_classid() during qdisc run
    160b03e57e62 crypto: caam - double the entropy delay interval for retry
    01be9fad74e4 PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
    27598de36043 crypto: sun8i-ce - remove channel timeout field
    a3d9de6ac510 watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
    705c5a2f5517 HID: asus: add Z13 folio to generic group for multitouch to work
    c018a87942bf udp_tunnel: use netdev_warn() instead of netdev_WARN()
    ee957d6c0886 selftests: Replace sleep with slowwait
    518319c98097 eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
    c85be890e057 selftests: Disable dad for ipv6 in fcnal-test.sh
    2ddd6bf6b671 x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
    1a6ffaeddf76 netfilter: nf_reject: don't reply to icmp error messages
    b94b57fd7eb9 selftests: traceroute: Use require_command()
    5df7e8bc4d23 media: redrat3: use int type to store negative error codes
    d15b3e4107b4 selftests: net: replace sleeps in fcnal-test with waits
    f5781438ba04 net: sh_eth: Disable WoL if system can not suspend
    cedcc490241b phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
    f0cc4b6c443a phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet
    cf6781d97c69 phy: cadence: cdns-dphy: Enable lower resolutions in dphy
    9406ec01a077 wifi: mac80211: Fix HE capabilities element check
    17249b2a6527 ntfs3: pretend $Extend records as regular files
    b96d08ce3f72 scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes
    30220dda83f8 net: phy: marvell: Fix 88e1510 downshift counter errata
    5122665ca5f3 scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
    8fefca6a12e6 scsi: ufs: host: mediatek: Enhance recovery on resume failure
    5bde774bbfbf media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer
    f32fe18efc95 media: ov08x40: Fix the horizontal flip control
    81015dd217a4 char: Use list_del_init() in misc_deregister() to reinitialize list pointer
    d89343fce39a drm/msm: make sure to not queue up recovery more than once
    ea37884097a0 usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
    38c179c52d22 usb: gadget: f_hid: Fix zero length packet transfer
    3c66bc0acc08 drm/amdgpu: add support for cyan skillfish gpu_info
    65240044398e drm/amdgpu: don't enable SMU on cyan skillfish
    b17fe7f5a2de drm/amd: add more cyan skillfish PCI ids
    aa98b4c1f84c iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
    44a764aec64b iommu/amd: Skip enabling command/event buffers for kdump
    a5c425011c31 smsc911x: add second read of EEPROM mac when possible corruption seen
    170bd191fa6c net: call cond_resched() less often in __release_sock()
    194a056bdc6f ALSA: usb-audio: apply quirk for MOONDROP Quark2
    56384ec84c15 media: verisilicon: Explicitly disable selection api ioctls for decoders
    98dfcb4c287b media: adv7180: Only validate format in querystd
    20e3fe278b2f media: adv7180: Do not write format to device in set_fmt
    f195ac1e3542 media: adv7180: Add missing lock in suspend callback
    7ad7e582de8e net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
    7816b60922c8 ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
    2412c6aa42fc drm/amdgpu: Allow kfd CRIU with no buffer objects
    0d629175a7ee drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
    b093c81df23f drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
    196a75590f40 dmaengine: dw-edma: Set status for callback_result
    269d69a50f21 dmaengine: mv_xor: match alloc_wc and free_wc
    bb434f67b46b dmaengine: sh: setup_xref error handling
    a3eebe03da5f ptp: Limit time setting of PTP clocks
    ffdcbb30d3cd scsi: pm8001: Use int instead of u32 to store error codes
    c1751c5fdddf crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
    49d9ac3af3a1 mips: lantiq: danube: rename stp node on EASY50712 reference board
    e20d0efe03ea mips: lantiq: xway: sysctrl: rename stp clock
    98654c8434c6 mips: lantiq: danube: add missing device_type in pci node
    ae51686278ce mips: lantiq: danube: add model to EASY50712 dts
    6c7de5a8957f mips: lantiq: danube: add missing properties to cpu node
    f589021c3347 drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
    1a91de0fdbdf media: fix uninitialized symbol warnings
    3e283f38792e drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
    1de2e48b1f33 drm/amdkfd: fix vram allocation failure for a special case
    a7953bf98522 fuse: zero initialize inode private data
    bb9b505f02e2 net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
    4aa5acd88fb4 remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
    742f354124aa extcon: adc-jack: Fix wakeup source leaks on device unbind
    22c24c7c5e81 scsi: pm80xx: Fix race condition caused by static variables
    bbfe60eba369 scsi: mpi3mr: Fix controller init failure on fault during queue creation
    df64a4d69d3d rds: Fix endianness annotation for RDS_MPATH_HASH
    dcaec33d8deb ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
    31014c39d6d7 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
    9b8dfaea5cea net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
    63fbe0e64132 net: stmmac: Correctly handle Rx checksum offload errors
    c1d2b289b9fc net: When removing nexthops, don't call synchronize_net if it is not necessary
    7d4ad49ba0c1 char: misc: Does not request module for miscdevice with dynamic minor
    4a61f3eb8913 char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor
    9001552e105f usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
    9e2c2d3e7209 iio: adc: imx93_adc: load calibrated values even calibration failed
    8bbda8e00cde iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
    fdd587be5936 drm/amdkfd: Handle lack of READ permissions in SVM mapping
    2b5128caee83 drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
    8231e8011846 media: imon: make send_packet() more robust
    f28dde240160 net: ipv6: fix field-spanning memcpy warning in AH output
    b34fc4fe9a85 scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
    2d5551640dde scsi: ufs: host: mediatek: Change reset sequence for improved stability
    83a26fa18d47 scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change
    137dea7d7d00 scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
    68245d8fe2fa bridge: Redirect to backup port when port is administratively down
    86e4faf48539 s390/pci: Use pci_uevent_ers() in PCI recovery
    8a54de9609d8 powerpc/eeh: Use result of error_detected() in uevent
    74e9ec803b6d thunderbolt: Use is_pciehp instead of is_hotplug_bridge
    7d87c41061e8 ice: Don't use %pK through printk or tracepoints
    bbfcf5db8c08 net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
    7a500e923127 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
    79a27f405d02 media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR
    07f3f65682a9 drm/tidss: Set crtc modesetting parameters with adjusted mode
    1f950a449a4d drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
    be9fc98a4198 drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
    105ed683b400 drm/tidss: Use the crtc_* timings when programming the HW
    3f964091abb0 media: amphion: Delete v4l2_fh synchronously in .release()
    48bb7f8ab984 media: pci: ivtv: Don't create fake v4l2_fh
    b567d1c40c70 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
    153353da60d0 wifi: rtw88: sdio: use indirect IO for device registers before power-on
    da9d28d79342 selftests/net: Ensure assert() triggers in psock_tpacket.c
    517abdc57cfb selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
    d7f4354d3de9 PCI: Disable MSI on RDC PCI to PCIe bridges
    ce054c331334 drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
    cb02acebd3d0 drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
    a0a44b1e0873 drm/amd/pm: Use cached metrics data on arcturus
    d4b2c3a3bc01 drm/amd/pm: Use cached metrics data on aldebaran
    f17f0100f702 drm/amd/display: update dpp/disp clock from smu clock table
    8c05069ce157 drm/amd/display: add more cyan skillfish devices
    2728e38ac27e drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
    acb3c23080ca drm/amd/display: ensure committing streams is seamless
    f6bea0255090 mfd: da9063: Split chip variant reading in two bus transactions
    830c39871f16 mfd: madera: Work around false-positive -Wininitialized warning
    d9e793728021 mfd: stmpe-i2c: Add missing MODULE_LICENSE
    784f62e68a6c mfd: stmpe: Remove IRQ domain upon removal
    5ebb9bc9a662 tools/power x86_energy_perf_policy: Prefer driver HWP limits
    941ac2bcb1ac tools/power x86_energy_perf_policy: Enhance HWP enable
    91d267901aab tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
    5b69364cbef1 tools/cpupower: Fix incorrect size in cpuidle_state_disable()
    efa623350136 hwmon: (dell-smm) Add support for Dell OptiPlex 7040
    52d4d91db6f8 hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
    1721c2938d00 uprobe: Do not emulate/sstep original instruction when ip is changed
    1a8ca4b9b3e3 nvme: Use non zero KATO for persistent discovery connections
    9c55db583707 bpf: Clear pfmemalloc flag when freeing all fragments
    d8d03481351e riscv: bpf: Fix uninitialized symbol 'retval_off'
    e1729523759c blk-cgroup: fix possible deadlock while configuring policy
    8613bed1f283 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
    f3c6ae35a7e8 spi: rpc-if: Add resume support for RZ/G3E
    4aced32596ea futex: Don't leak robust_list pointer on exec race
    b8961542d2ae cpuidle: Fail cpuidle device registration if there is one already
    4b78d57b7dd3 bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
    c77fcb6cc6f0 power: supply: qcom_battmgr: handle charging state change notifications
    877d4689e546 pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
    5aeb8550e8c3 tools/cpupower: fix error return value in cpupower_write_sysfs()
    7d0e0563256f video: backlight: lp855x_bl: Set correct EPROM start for LP8556
    edf3b828871d bpf: Do not limit bpf_cgroup_from_id to current's namespace
    25f4bf1f7979 nvme-fc: use lock accessing port_state and rport state
    601ed47b2363 nvmet-fc: avoid scheduling association deletion twice
    5ca9367da5be tee: allow a driver to allocate a tee_device without a pool
    12296895e962 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
    8c1c0ac31949 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
    46fc8ad19ce9 ARM: tegra: transformer-20: fix audio-codec interrupt
    0c9a3917a61e ARM: tegra: transformer-20: add missing magnetometer interrupt
    ca7c230fff41 soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
    c7117d25e3db arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
    e60b141dfc93 irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
    552659030ab8 hwmon: sy7636a: add alias
    8161d9b78915 power: supply: sbs-charger: Support multiple devices
    0babd39ceb5d pinctrl: keembay: release allocated memory in detach path
    4f8d061ac497 hwmon: (sbtsi_temp) AMD CPU extended temperature range support
    5617c8165cf5 hwmon: (k10temp) Add device ID for Strix Halo
    44729682b694 hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
    3c4c5184631a power: supply: qcom_battmgr: add OOI chemistry
    dcba7b98dcb7 ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
    338f490a04c6 ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
    3e121479021d irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
    fea338c7e46f selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
    233317cc29dd arc: Fix __fls() const-foldability via __builtin_clzl()
    8d6791c480f2 cpufreq/longhaul: handle NULL policy in longhaul_exit
    854241f8e4ff selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
    d45325fc6a73 irqchip/sifive-plic: Respect mask state when setting affinity
    0f7149ac7691 memstick: Add timeout to prevent indefinite waiting
    4cfc3b63ea09 mmc: host: renesas_sdhi: Fix the actual clock
    fa7c118e0b83 pinctrl: single: fix bias pull up/down handling in pin_config_set
    667789d3e29f bpf: Don't use %pK through printk
    8c8f8f7f84e8 spi: loopback-test: Don't use %pK through printk
    3f274df8526e soc: qcom: smem: Fix endian-unaware access of num_entries
    2a0db48dd8c2 soc: aspeed: socinfo: Add AST27xx silicon IDs
    fc1141a530df usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
    b63c061be622 s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
    b61ed8005bd3 drm/sysfb: Do not dereference NULL pointer in plane reset
    b5493968ac7a drm/sched: Fix race in drm_sched_entity_select_rq()
    7088465f1081 s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
    a2ae01c674e1 sched/fair: Use all little CPUs for CPU-bound workloads
    4ced68c43a15 sched/pelt: Avoid underestimation of task utilization
    fe04654ecb65 net: phy: dp83867: Disable EEE support as not implemented
    a60be7339353 cpuidle: governors: menu: Select polling state in some more cases
    58c347aa881d cpuidle: governors: menu: Rearrange main loop in menu_select()
    6e43d5f0e593 s390/pci: Restore IRQ unconditionally for the zPCI device
    49888b3b457b mptcp: fix MSG_PEEK stream corruption
    a5a896f8315d drm/mediatek: Fix device use-after-free on unbind
    2664bfd8969d regmap: slimbus: fix bus_context pointer in regmap init calls
    482b568e8680 block: make REQ_OP_ZONE_OPEN a write operation
    37089e2258d6 block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
    02a16148f842 drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
    e69d5d11ed0c drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
    224932faac5c drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
    ca5dc7ef4c1a sfc: fix potential memory leak in efx_mae_process_mport()
    25191342d576 net: hns3: return error code when function fails
    1cd109318d69 drm/etnaviv: fix flush sequence logic
    83312609ff32 Bluetooth: hci_core: Fix tracking of periodic advertisement
    e3ba2b1f7d1a Bluetooth: ISO: Fix another instance of dst_type handling
    48d31ac5af5f Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
    504554dbcbb4 Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset
    932c0a4f77ac Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
    9a579d6a3951 usbnet: Prevents free active kevent
    5d8f28a8b50e libbpf: Fix powerpc's stack register definition in bpf_tracing.h
    2e97da83839f ASoC: fsl_sai: fix bit order for DSD format
    06d711b4d620 ASoC: Intel: avs: Unprepare a stream when XRUN occurs
    0dd6474ced33 crypto: aspeed - fix double free caused by devm
    8e8bcd7b2925 crypto: aspeed-acry - Convert to platform remove callback returning void
    42f848f8e5ea bpf: Do not audit capability check in do_jit()
    5b81a79bada2 scsi: ufs: core: Initialize value of an attribute returned by uic cmd
    645114110354 bpf: Sync pending IRQ work before freeing ring buffer
    c898547ed64e ALSA: usb-audio: fix control pipe direction
    431da7f85430 drm/msm/a6xx: Fix GMU firmware parser
    ad5852941409 wifi: ath12k: free skb during idr cleanup callback
    0ec88db40ce0 wifi: ath11k: Add missing platform IDs for quirk table
    b8850b4370fa wifi: ath10k: Fix memory leak on unsupported WMI command
    1811c610653c x86/fpu: Ensure XFD state on signal delivery
    939c4e33005e smb: client: fix potential cfid UAF in smb2_query_info_compound
    6dbd3d9573e1 ASoC: qdsp6: q6asm: do not sleep while atomic
    aa826b05c68f mptcp: restore window probe
    f7e5fc50791b mptcp: drop bogus optimization in __mptcp_check_push()
    4a28d1898392 fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
    e097cdbac72e fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
    64e3175d1c8a wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
    e059b0560040 Bluetooth: rfcomm: fix modem control handling
    9ba1a7802ca9 fbdev: bitblit: bound-check glyph index in bit_putcs*
    e992faffa846 ACPI: button: Call input_free_device() on failing input device registration
    4e85246ec0d0 ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
    3fe5494db5fe fbdev: atyfb: Check if pll_ops->init_pll failed
    468f78276a37 fbcon: Set fb_display[i]->mode to NULL when the mode is released
    814a55f44d8a net: usb: asix_devices: Check return value of usbnet_get_endpoints
    03524ccff698 NFSD: Fix crash in nfsd4_read_release()

(From OE-Core rev: 8af342d12598e3d7c3aca6a81ca4e16aee4b639b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield 2c30acaf10 linux-yocto/6.6: update to v6.6.116
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0a805b6ea8cda Linux 6.6.116
    63dde0eec59b4 gpio: idio-16: Define fixed direction of the GPIO lines
    92a15817f0fbd gpio: regmap: add the .fixed_direction_output configuration parameter
    38f50558b50cf gpio: regmap: Allow to allocate regmap-irq device
    ddd31f5a5ff39 bits: introduce fixed-type GENMASK_U*()
    739aa67ef147b bits: add comments and newlines to #if, #else and #endif directives
    0e660d8224d07 xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
    3aa367e6aae7a xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
    dae8555062cf0 xhci: dbc: Improve performance by removing delay in transfer event polling.
    6f126ef0117c9 xhci: dbc: Allow users to modify DbC poll interval via sysfs
    1c5cec6625a3f xhci: dbc: poll at different rate depending on data transfer activity
    afdf4f5108513 serial: sc16is7xx: remove useless enable of enhanced features
    74c8eafd42b48 serial: sc16is7xx: refactor EFR lock
    7db1a5451bcb9 serial: sc16is7xx: reorder code to remove prototype declarations
    2f7592e0bdfc6 serial: sc16is7xx: remove unused to_sc16is7xx_port macro
    39a7305e2abad selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported
    f87c246d7c1ef selftests: mptcp: disable add_addr retrans in endpoint_tests
    1f1632dd97dae mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
    4784326cb26a4 arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
    797f15c2b15e9 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
    93bcd360c503e btrfs: use level argument in log tree walk callback replay_one_buffer()
    ef64d81fb7ddd btrfs: always drop log root tree reference in btrfs_replay_log()
    3b838f39f4be8 btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
    fb6ceb6cde7bc btrfs: zoned: refine extent allocator hint selection
    8fabf4d56fd8f btrfs: zoned: return error from btrfs_zone_finish_endio()
    625aecafb1bd2 EDAC/mc_sysfs: Increase legacy channel support to 16
    0956cdef60de8 x86/bugs: Fix reporting of LFENCE retpoline
    077823b06f1cc x86/bugs: Report correct retbleed mitigation status
    5c63fb0b382f9 perf: Skip user unwind if the task is a kernel thread
    89fbfc799e1d5 perf: Have get_perf_callchain() return NULL if crosstask and user are set
    34b5aba8511a1 perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL
    a61ed1fb165b0 audit: record fanotify event regardless of presence of rules
    6ffa9d6618718 net/sched: sch_qfq: Fix null-deref in agg_dequeue
    e5bbb12db2c75 Linux 6.6.115
    2dc125f5da134 ksmbd: transport_ipc: validate payload size before reading handle
    2ae71c3770c39 gpio: ljca: Initialize num before accessing item in ljca_gpio_config
    bfd17b6138df0 fuse: fix livelock in synchronous file put from fuseblk workers
    c7ec75f3cbf73 fuse: allocate ff->release_args only if release is needed
    c34b09cbd6fc0 s390/cio: Update purge function to unregister the unused subchannels
    41fe20cfbcd43 x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
    bc1c6b803e14e fs/notify: call exportfs_encode_fid with s_umount
    df75bfc287029 xfs: always warn about deprecated mount options
    b89e20a365442 devcoredump: Fix circular locking dependency with devcd->mutex.
    7c691e10ca958 serial: 8250_mtk: Enable baud clock and manage in runtime PM
    a8527907f28d7 serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
    f354f7510ff0e serial: 8250_dw: handle reset control deassert error
    928a9c9b97ea2 dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
    91b2d5fcde526 tcpm: switch check for role_sw device with fw_node
    6fb8fbc0aa542 most: usb: hdm_probe: Fix calling put_device() before device initialization
    72427dc6f8752 most: usb: Fix use-after-free in hdm_disconnect
    9a297a68c3ba4 misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
    a068cbe71c1cb mei: me: add wildcat lake P DID
    d4854eff25efb comedi: fix divide-by-zero in comedi_buf_munge()
    c055480e04561 binder: remove "invalid inc weak" check
    3a25640814ff8 x86/microcode: Fix Entrysign revision check for Zen1/Naples
    03d7e8c749428 xhci: dbc: enable back DbC in resume if it was enabled before suspend
    2c217d0e86885 usb: raw-gadget: do not limit transfer length
    cbf278c90c64a usb/core/quirks: Add Huawei ME906S to wakeup quirk
    102b9b8942e11 USB: serial: option: add Telit FN920C04 ECM compositions
    da06de8f1656f USB: serial: option: add Quectel RG255C
    7070c31465f1c USB: serial: option: add UNISOC UIS7720
    6d63703bec0c1 sched: Remove never used code in mm_cid_get()
    770b33a1a8e46 io_uring: correct __must_hold annotation in io_install_fixed_file
    5ba12858b664f gpio: ljca: Fix duplicated IRQ mapping
    7efa69e0688b5 gpio: update Intel LJCA USB GPIO driver
    d11f2156a93e3 hwmon: (sht3x) Fix error handling
    dc1ac7c1a355b RISC-V: Don't print details of CPUs disabled in DT
    00b58d2c25d10 RISC-V: Define pgprot_dmacoherent() for non-coherent devices
    c7849e8cb22a9 firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode
    d719ce9f286c4 firmware: arm_scmi: Account for failed debug initialization
    e42ec4eccebe2 spi: spi-nxp-fspi: add extra delay after dll locked
    18d1c06b72d56 selftests: mptcp: join: mark implicit tests as skipped if not supported
    c8aa3fd5b4a03 selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
    5e46e4dc829e1 net: ravb: Ensure memory write completes before ringing TX doorbell
    d064092c3fc34 net: ravb: Enforce descriptor type ordering
    36838ece81545 net: usb: rtl8150: Fix frame padding
    9f2db04c21cff net: stmmac: dwmac-rk: Fix disabling set_clock_selection
    42ed0784d11ad vsock: fix lock inversion in vsock_assign_transport()
    aa6a21409dd62 ocfs2: clear extent cache after moving/defragmenting extents
    c7ae6b99c982d MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
    fa41d6f4b1382 cifs: Fix TCP_Server_Info::credits to be signed
    356c7fdf684cd can: netlink: can_changelink(): allow disabling of automatic restart
    a9da00c9cee99 ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
    29d96bcc14952 Revert "cpuidle: menu: Avoid discarding useful information"
    a0c16f20d23cf gpio: 104-idio-16: Define maximum valid register address offset
    67adc5500ad7c gpio: pci-idio-16: Define maximum valid register address offset
    3373f263bb647 arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
    941096f618c50 dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC
    15b80f63269d3 net: bonding: fix possible peer notify event loss or dup issue
    cb9055ba30306 sctp: avoid NULL dereference when chunk data buffer is missing
    4f32f754343a8 arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    8b051d7f530e8 net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
    72328f25755ee net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ
    9d7bc56c550eb net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
    b411759b9c1a9 selftests: net: fix server bind failure in sctp_vrf.sh
    bbcbbb9d68626 selftests/net: convert sctp_vrf.sh to run it in unique namespace
    dd2a7aba7f8d8 can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb()
    05e2c6ef4a9da dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    050732ace1dbd net: enetc: correct the value of ENETC_RXB_TRUESIZE
    2781ca82ce8ca net: enetc: fix the deadlock of enetc_mdio_lock
    74c94df40ede9 net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush().
    6993a51388bdc rtnetlink: Allow deleting FDB entries in user namespace
    362f4c52efd05 net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size()
    550e311e1b16f Unbreak 'make tools/*' for user-space targets
    6aef39551e60a smb: server: let smb_direct_flush_send_list() invalidate a remote key first
    6ef6ac49fdf1d drivers/perf: hisi: Relax the event ID check in the framework
    99bdd0580d7f2 powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
    6aee82d0bfeee m68k: bitops: Fix find_*_bit() signatures
    5f43ab41ddab1 lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
    24cac083a76b9 hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
    cfafefcb0e1fc hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
    8c18c84ecbfa3 dlm: check for defined force value in dlm_lockspace_release
    2bb8bc99b1a7a hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
    4f40a2b3969da hfs: validate record offset in hfsplus_bmap_alloc
    a5bfb13b4f406 hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
    714e70f603bee hfs: make proper initalization of struct hfs_find_data
    7870fbdce00ef hfs: clear offset and space out of valid records in b-tree node
    b1ec9faef7e36 nios2: ensure that memblock.current_limit is set when setting pfn limits
    813d3d18cfe47 exec: Fix incorrect type for ret

(From OE-Core rev: 99d8bdc07f708158cc98dfce11739e1fbaa08d31)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield 7754aa3731 linux-yocto/6.6: update to v6.6.114
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    4a243110dc88 Linux 6.6.114
    d060f49771b5 PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    ed518734a3c1 PCI: j721e: Fix programming sequence of "strap" settings
    d763fffd4284 PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
    92b82e232b8d mm/ksm: fix flag-dropping behavior in ksm_madvise
    499089376206 ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
    65dc89d5cf40 PCI/sysfs: Ensure devices are powered for config reads (part 2)
    9c1c7edfea46 nfsd: decouple the xprtsec policy check from check_nfsd_access()
    2e0aab9ddaf1 ixgbevf: fix mailbox API compatibility by negotiating supported features
    8aebc9367911 ixgbevf: fix getting link speed data for E610 devices
    52ffb51de64f ixgbevf: Add support for Intel(R) E610 device
    6d4597351818 PCI: Add PCI_VDEVICE_SUB helper macro
    247d1fff85e0 phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
    01829af7656b ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
    cebfbf40056a vfs: Don't leak disconnected dentries on umount
    f7353208c91a NFSD: Define a proc_layoutcommit for the FlexFiles layout type
    f846eacde280 fs: quota: create dedicated workqueue for quota_release_work
    d7d942c9a182 quota: remove unneeded return value of register_quota_format
    6c79b23f1c52 padata: Reset next CPU when reorder sequence wraps around
    5fb3328e927c xfs: use deferred intent items for reaping crosslinked blocks
    a4970f5087e2 iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
    353c69c7898e iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
    0af89c7e640a phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
    3594108460db phy: cdns-dphy: Store hs_clk_rate and return it
    11d10382a4df iio: imu: inv_icm42600: Simplify pm_runtime setup
    cbdd55050b78 PM: runtime: Add new devm functions
    2c3f01bb6ee4 xfs: fix log CRC mismatches between i386 and other architectures
    4245f6c66a3c xfs: rename the old_crc variable in xlog_recover_process
    c896618807a2 NFSD: Fix last write offset handling in layoutcommit
    4138321e9d41 NFSD: Minor cleanup in layoutcommit processing
    daa0ff1780c9 NFSD: Rework encoding and decoding of nfsd4_deviceid
    30a6a61c5828 nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
    a0caf1de97e1 block: fix race between set_blocksize and read paths
    8fdd0ad43977 arm64: errata: Apply workarounds for Neoverse-V3AE
    d9d3e9ff1e2a arm64: cputype: Add Neoverse-V3AE definitions
    4f5ab4a9c6ab hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
    b1ec27375dea selftests: arg_parsing: Ensure data is flushed to disk before reading.
    a0ed8ae58a83 HID: multitouch: fix name of Stylus input devices
    ef45e08141f8 HID: hid-input: only ignore 0 battery events for digitizers
    576312eb4363 ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
    d776af255d19 selftests/bpf: make arg_parsing.c more robust to crashes
    48b1d42286bf accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
    af7e3989e241 ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    66c29d9fc1dc sched/fair: Fix pelt lost idle time detection
    3359a93f45c3 sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    8942165d0c3f drm/rockchip: vop2: use correct destination rectangle height check
    025db46dbcf8 drm/amd/powerplay: Fix CIK shutdown temperature
    7a4482d59fcb drm/i915/guc: Skip communication warning on reset in progress
    b82efea81a15 ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
    1746416e885c ASoC: nau8821: Generalize helper to clear IRQ status
    ce1aa07aea2b ASoC: nau8821: Cancel jdet_work before handling jack ejection
    9e32cb91bfb3 ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
    001f1fb0e4e3 drm/bridge: lt9211: Drop check for last nibble of version register
    706ed11aa9e8 riscv: kprobes: Fix probe address validation
    06da9b0f87da nvme-multipath: Skip nr_active increments in RETRY disposition
    a22c03011dac net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
    db00e3bdf69a net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    9c470a536556 tls: don't rely on tx_work during send()
    c61d4368197d tls: wait for pending async decryptions if tls_strp_msg_hold fails
    b9e21d676def tls: always set record_type in tls_process_cmsg
    f6c40bf4078d tls: wait for async encrypt in case of error during latter iterations of sendmsg
    f61dfccc5a3e net: tls: wait for async completion on last message
    071377a13834 tls: trim encrypted message to match the plaintext on short splice
    3dd3aa80e5af tg3: prevent use of uninitialized remote_adv and local_adv variables
    2bd8352df493 tcp: fix tcp_tso_should_defer() vs large RTT
    939a7d837167 amd-xgbe: Avoid spurious link down messages during interface toggle
    48294a67863c net/ip6_tunnel: Prevent perpetual tunnel growth
    932f7cd27905 r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    deb6ab171fd1 doc: fix seg6_flowlabel path
    3f4a318dec64 net: dlink: handle dma_map_single() failure properly
    e3fdc2b2c61e can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    627a7ebd8954 dax: skip read lock assertion for read-only filesystems
    d280c138e66b HID: multitouch: fix sticky fingers
    5f65c8ad8c72 usb: gadget: f_rndis: Refactor bind path to use __free()
    1cde4516295a usb: gadget: f_ncm: Refactor bind path to use __free()
    e348d18fb012 usb: gadget: f_acm: Refactor bind path to use __free()
    070f341d86cf usb: gadget: f_ecm: Refactor bind path to use __free()
    70a766743173 usb: gadget: Introduce free_usb_request helper
    167ac21abb82 usb: gadget: Store endpoint pointer in usb_request
    50c721be2cff media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
    211728b9b282 media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
    7a27f07948ef drm/exynos: exynos7_drm_decon: remove ctx->suspended
    cbbe08268a13 drm/exynos: exynos7_drm_decon: properly clear channels during bind
    98c15dc95009 drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
    fbc8589975ef drm/msm/a6xx: Fix PDC sleep sequence
    8e245d3a2ab8 drm/msm/adreno: De-spaghettify the use of memory barriers
    eb0d280c2751 eventpoll: Replace rwlock with spinlock
    f72553935a53 epoll: Remove ep_scan_ready_list() in comments
    dfacd00818ce Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
    e19e401b059a cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    59a6e61863e2 drm/amd: Check whether secure display TA loaded successfully
    db4bdb550ce1 drm/amdgpu: use atomic functions with memory barriers for vm fault info
    57239762aa90 drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
    15c73964da9d cifs: parse_dfs_referrals: prevent oob on malformed input
    00e7da6ca640 can: gs_usb: increase max interface to U8_MAX
    be19fcf0baed can: gs_usb: gs_make_candev(): populate net_device->dev_port
    289498da343b btrfs: do not assert we found block group item when creating free space tree
    ebbf0d45be41 btrfs: fix incorrect readahead expansion length
    7c068bcc12d2 btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
    cb6039b68efa ext4: detect invalid INLINE_DATA + EXTENTS flag combination
    6e85cc404a7e ext4: wait for ongoing I/O to complete before freeing blocks
    870e14104978 jbd2: ensure that all ongoing I/O complete before freeing blocks
    f13ef730370b f2fs: fix wrong block mapping for multi-devices
    67a664eebf11 r8152: add error handling in rtl8152_driver_init
    d7dd034c1492 smb: client: Fix refcount leak for cifs_sb_tlink
    f231f248323d Linux 6.6.113
    99c704e44cab perf test stat: Avoid hybrid assumption when virtualized
    163f15370c55 writeback: Avoid excessively long inode switching times
    7594dae6cc95 writeback: Avoid softlockup when switching many inodes
    ab0d0138803c cramfs: Verify inode mode when loading from disk
    5a7602d64e1c fs: Add 'initramfs_options' to set initramfs mount options
    09d227c59d97 pid: Add a judgment for ns null in pid_nr_ns
    d47cdfddeb49 minixfs: Verify inode mode when loading from disk
    030a01fbcc42 irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
    6d09bbbca3e5 irqchip/sifive-plic: Make use of __assign_bit()
    63c44fa29ef2 mptcp: pm: in-kernel: usable client side with C-flag
    06d82c3a1f7f selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled
    ef8a0b37f11d s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
    1527222f3549 s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
    2c768a9d1c17 s390/bpf: Describe the frame using a struct instead of constants
    10358217e30c s390/bpf: Centralize frame offset calculations
    9b378246e7ef s390/bpf: Change seen_reg to a mask
    63d2008affae ACPI: property: Do not pass NULL handles to acpi_attach_data()
    af0ff085cd56 ACPI: property: Add code comments explaining what is going on
    156819a04732 ACPI: property: Disregard references in data-only subnode lists
    1ed161347ad9 ACPI: battery: Add synchronization between interface updates
    8f03b1bf2bcd ACPI: battery: Check for error code from devm_mutex_init() call
    e6c83bbb0119 ACPI: battery: initialize mutexes through devm_ APIs
    346975d62660 ACPI: battery: allocate driver data through devm_ APIs
    b8c7d40b4cb3 arm64: mte: Do not flag the zero page as PG_mte_tagged
    7f4f031e66ad arm64: kprobes: call set_memory_rox() for kprobe page
    ca603d157694 ipmi: Fix handling of messages with provided receive message pointer
    348121b29594 ipmi: Rework user message limit handling
    aafae78e6d79 KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2
    d0d9fa88d7ab rseq: Protect event mask against membarrier IPI
    1810b6084aea btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    0c5ce6b6ccc2 PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
    93b8a612db29 PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()
    0fa2185104df misc: fastrpc: Save actual DMA size in fastrpc_map structure
    78e5fa79ed7c misc: fastrpc: Add missing dev_err newlines
    bc718d0bd87e ksmbd: add max ip connections parameter
    cd3efb93677c KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
    ad25061d1d73 mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
    1a301228c0a8 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference
    8d2a77ccefee mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    3cb4b35687a9 mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    d7b038045ea0 mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
    7bd4e5367d09 media: mc: Clear minor number before put device
    8c7aad767518 Squashfs: reject negative file sizes in squashfs_read_inode()
    f5a1b04e5df2 Squashfs: add additional inode sanity checking
    edb6425f5935 lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    abdfc4704e0b ext4: free orphan info with kvfree
    f775f821de46 ACPICA: Allow to skip Global Lock initialization
    720a66fdaa6c ext4: validate ea_ino and size in check_xattrs
    79ea7f3e11ef ext4: guard against EA inode refcount underflow in xattr update
    9e642ab8e5b2 ext4: fix an off-by-one issue during moving extents
    d1e681c0bb03 ext4: correctly handle queries for metadata mappings
    871b6894a3fa ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
    304fc34ff6fc ext4: verify orphan file size is not too big
    e7e0e3eae0c1 nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    925ed83efbe7 NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    677ebfe5d00f mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
    bb5ef60ee84f mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0
    81a6d6011acb mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    69336589df5d wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
    d0ca2f9fbb96 wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    3454c79780dd selftests: mptcp: join: validate C-flag + def limit
    1264edbed45e x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases)
    c5bceeb4c569 x86/umip: Check that the instruction opcode is at least two bytes
    d7760884ee3f spi: cadence-quadspi: Flush posted register writes before DAC access
    8bf417e1d36c spi: cadence-quadspi: Flush posted register writes before INDAC access
    eef57e03d5c1 PCI: tegra194: Handle errors in BPMP response
    315001252acd PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    a1a7a80dbe08 PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    f5770bba83d1 PCI: rcar-host: Drop PMSR spinlock
    608ab627d966 PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
    61aeab7178aa PCI/AER: Support errors introduced by PCIe r6.0
    741b78395083 PCI/AER: Fix missing uevent on recovery when a reset is requested
    a3a52f85a211 PCI/ERR: Fix uevent on failure to recover
    36039348bca7 PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
    bd27ddb68a42 PCI/sysfs: Ensure devices are powered for config reads
    7a9dee3e4c9d PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
    a5f1934fea37 rseq/selftests: Use weak symbol reference, not definition, to link with glibc
    9f16da9b549a rtc: interface: Fix long-standing race when setting alarm
    31a81d9ad81b rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    5dd821744377 memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    587b819fbcbf mmc: core: SPI mode remove cmd7
    6a5b401c745f mtd: rawnand: fsmc: Default to autodetect buswidth
    151bd8885947 xtensa: simdisk: add input size check in proc_write_simdisk
    3572290dfa7c sparc: fix error handling in scan_one_device()
    612d10ce8490 sparc64: fix hugetlb for sun4u
    ed3044b9c810 sctp: Fix MAC comparison to be constant-time
    04181645643d scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    ebf2b91a09fd sched/deadline: Fix race in push_dl_task()
    f4aab940ae9e Revert "ipmi: fix msg stack when IPMI is disconnected"
    dc3a1c6237e7 pwm: berlin: Fix wrong register in suspend/resume
    9f88a6fd9748 powerpc/pseries/msi: Fix potential underflow and leak issue
    83319fa81e60 powerpc/powernv/pci: Fix underflow and leak issue
    4307297a5fe4 power: supply: max77976_charger: fix constant current reporting
    fc6ce639b9a7 pinctrl: samsung: Drop unused S3C24xx driver data
    4bfba41d80d3 nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    62fcb12c1f80 parisc: Remove spurious if statement from raw_copy_from_user()
    eb67aaf2c2f3 parisc: don't reference obsolete termio struct for TC* constants
    dd21dc8d7451 openat2: don't trigger automounts with RESOLVE_NO_XDEV
    ff770d10cfeb of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
    babe2b53fa7d lib/genalloc: fix device leak in of_gen_pool_get()
    db2fcc8189bf KEYS: trusted_tpm1: Compare HMAC values in constant time
    132f827e7bac kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
    8d982bdd5dfd iommu/vt-d: PRS isn't usable if PDS isn't supported
    ff416637ef07 iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
    dad6e796b10f init: handle bootloader identifier in kernel parameters
    759329336a77 iio: xilinx-ams: Unmask interrupts after updating alarms
    26242971663d iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
    54e7b86d1ab0 iio: frequency: adf4350: Fix prescaler usage.
    3f88f4e8f178 iio: dac: ad5421: use int type to store negative error codes
    a832682cf6c9 iio: dac: ad5360: use int type to store negative error codes
    f7fed2af0ad8 fs/ntfs3: Fix a resource leak bug in wnd_extend()
    feac989493ca fbdev: Fix logic error in "offb" name match
    41b17a237e1e crypto: rockchip - Fix dma_unmap_sg() nents value
    4b3770692262 crypto: atmel - Fix dma_unmap_sg() direction
    11bb6f3cc21b crypto: aspeed - Fix dma_unmap_sg() direction
    69a18ff6c60e cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
    2e9ae62b1ca3 copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
    ed9cf7c460e8 bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
    108c50494c2b bus: mhi: ep: Fix chained transfer handling in read path
    0276c8582488 btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
    f74a135c5617 blk-crypto: fix missing blktrace bio split events
    fd7b6b31475e drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    07c0125e21a6 drm/rcar-du: dsi: Fix 1/2/3 lane support
    b4ba1c81de30 media: lirc: Fix error handling in lirc_register()
    ec02275a6317 media: venus: firmware: Use correct reset sequence for IRIS2
    f9d61ee68937 media: pci: ivtv: Add missing check after DMA map
    4c656fd59e9e media: mc: Fix MUST_CONNECT handling for pads with no links
    d429c3bb06fa media: i2c: mt9v111: fix incorrect type for ret
    c0ad66984750 media: cx18: Add missing check after DMA map
    dbcbac8c47cb firmware: meson_sm: fix device leak at probe
    135eacbb111f xen/events: Update virq_to_irq on migration
    612ef6056855 xen/events: Return -EEXIST for bound VIRQs
    536a7e676fbe xen/manage: Fix suspend error path
    9ac86c75148f xen/events: Cleanup find_virq() return codes
    76165e048c1b dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required
    4d74d17ab18e ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
    61683c2e7019 arm64: dts: ti: k3-am62a-main: Fix main padcfg length
    d9560998550d arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    ac7ce5c869f8 arm64: dts: qcom: msm8939: Add missing MDSS reset
    0a5e8961cd0f arm64: dts: qcom: msm8916: Add missing MDSS reset
    9cfc586847fa ACPI: debug: fix signedness issues in read/write helpers
    debf3c347330 ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    1ae9cdd6b479 ACPI: property: Fix buffer properties extraction for subnodes
    b6e9645be9eb bpf: Avoid RCU context warning when unpinning htab with internal structs
    c14f73ecc365 gpio: wcd934x: mark the GPIO controller as sleeping
    380c23baf030 tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    436cfdbc57d9 cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points
    a133e2699f8e smb: client: fix missing timestamp updates after utime(2)
    f37e7860dc5e crypto: essiv - Check ssize for decryption and in-place encryption
    46362cdd9df6 bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    0028e0134c64 netfilter: nft_objref: validate objref and objrefmap expressions
    df0ffc4b51e9 netfilter: nf_tables: drop unused 3rd argument from validate callback ops
    71fe3c3381de drm/amd/display: Properly disable scaling on DCE6
    914b1f47fb6a drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    9973e4ee0e93 drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    0e69ecbbd562 drm/amdgpu: Add additional DCE6 SCL registers
    b6bfe44b6dbb bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
    d3f97bef535e mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    c6cdac3cb34f mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    8078f8570e86 tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
    5e51bb7ffca1 perf python: split Clang options when invoking Popen
    44f838a60551 tools build: Align warning options with perf
    988519923e33 net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    422c1c173c39 tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    c21f45cfa4a9 net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()
    77e402b0af5e drm/vmwgfx: Fix copy-paste typo in validation
    867bda5d95d3 drm/vmwgfx: Fix Use-after-free in validation
    299cfb5a7dea drm/vmwgfx: Fix a null-ptr access in the cursor snooper
    2646a49e6286 net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    e9aff0d0b173 LoongArch: Init acpi_gbl_use_global_lock to false
    d243aaafddea LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
    2d02309c2f05 ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
    3c90f583d679 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
    949545ef80f7 cpufreq: tegra186: Set target frequency for all cpus in policy
    d497fef5b957 clk: tegra: do not overallocate memory for bpmp clocks
    58f9a3f0acf9 clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    586211feb242 clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    5c2213b9aa44 clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()
    9ea18c668db0 clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
    fbfd0ae59013 perf evsel: Ensure the fallback message is always written to
    4a1f44e54664 perf tools: Add fallback for exclude_guest
    f6b458071302 perf test: Add a test for default perf stat command
    4163822f8c03 perf test: Don't leak workload gopipe in PERF_RECORD_*
    1501f779e794 perf session: Fix handling when buffer exceeds 2 GiB
    398657434c61 perf arm_spe: Correct memory level for remote access
    6f6ab20a6a3d perf arm-spe: Rename the common data source encoding
    ec2cc8ed15fd perf arm_spe: Correct setting remote access
    3966ea7d5405 rtc: optee: fix memory leak on driver removal
    0decf468c71e rtc: x1205: Fix Xicor X1205 vendor prefix
    41eac6ed9e2a perf util: Fix compression checks returning -1 as bool
    64419ecff19f clk: at91: peripheral: fix return value
    afa0b258e073 libperf event: Ensure tracing data is multiple of 8 sized
    52571a05bcd2 perf evsel: Avoid container_of on a NULL leader
    fdd428149a88 asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
    ed30811fbed4 media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
    8ea08bcab31d iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    cc1216f33ad4 clocksource/drivers/clps711x: Fix resource leaks in error paths
    9f13f727bed6 fscontext: do not consume log entries when returning -EMSGSIZE
    bc7372c05a07 fs: always return zero on success from replace_fd()

(From OE-Core rev: 7f47c7812a2e08dce8c9a379b540fa5ed37ecfd4)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Bruce Ashfield 40a0b2c80d linux-yocto/6.6: update to v6.6.112
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    0bbbd97a442d Linux 6.6.112
    acad20578817 usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    5c25a2a403b3 arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
    540aaab034b5 usb: typec: tipd: Clear interrupts first
    724a9db84188 net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    78e87b8a3cf8 bus: fsl-mc: Check return value of platform_get_resource()
    1a2ea887a5cd pinctrl: check the return value of pinmux_ops::get_function_name()
    66821fdb723d remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
    81cec07d3031 sunrpc: fix null pointer dereference on zero-length checksum
    fd8a23ecbc60 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak
    bbd8f90c3bf4 Input: atmel_mxt_ts - allow reset GPIO to sleep
    d7513b47082c misc: fastrpc: Skip reference for DMA handles
    3ad42dc66445 misc: fastrpc: fix possible map leak in fastrpc_put_args
    6e0d6cc39f41 misc: fastrpc: Fix fastrpc_map_lookup operation
    b808a3590c28 nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    964598e6f70a mm: hugetlb: avoid soft lockup when mprotect to large memory area
    c6effaab2427 ext4: fix checks for orphan inodes
    c6b15a82a56c ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    7eca645917bc LoongArch: Automatically disable kaslr if boot from kexec_file
    846cafc4725c dm: fix NULL pointer dereference in __dm_suspend()
    ed6877417298 dm: fix queue start/stop imbalance under suspend/load/resume races
    2647603d42d9 mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    6c21c4a425d3 mfd: rz-mtu3: Fix MTU5 NFCR register offset
    0ba68bea1e35 net: nfc: nci: Add parameter validation for packet data
    a70dcfa8d0a0 fs: udf: fix OOB read in lengthAllocDescs handling
    28d0e8af8c0a ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
    e04aa0b00107 ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    2af39ab5e6dc uio_hv_generic: Let userspace take care of interrupt mask
    c28b0ca029ed Squashfs: fix uninit-value in squashfs_get_parent
    3bce44b34404 bpf: Reject negative offsets for ALU ops
    78dc7362662f vhost: vringh: Modify the return value check
    aa57822ade41 Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
    ba905a567105 smb: client: fix crypto buffers in non-linear memory
    3311f0d15bb3 net/mlx5: fw reset, add reset timeout work
    3df251a65b4e net/mlx5: pagealloc: Fix reclaim race during command interface teardown
    dda27f370cde net/mlx5: Stop polling for command response if interface goes down
    ea87151df398 net: dlink: handle copy_thresh allocation failure
    5e627ae572b2 net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
    07a92ab8b479 nfp: fix RSS hash key size when RSS is not supported
    75287554a92e mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands
    53683b4d3740 drivers/base/node: fix double free in register_one_node()
    7e76fe9dfadb ocfs2: fix double free in user_cluster_connect()
    f4238064379a hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    96ca6913042e KEYS: X.509: Fix Basic Constraints CA flag parsing
    2ef583b45fe7 Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
    8fd355f54a62 Bluetooth: ISO: don't leak skb in ISO_CONT RX
    5319145a07d8 Bluetooth: ISO: Fix possible UAF on iso_conn_free
    868196cc8ba8 Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
    781226e11d5b vhost: vringh: Fix copy_to_iter return value check
    6394bade9daa net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    7c853408ee24 RDMA/siw: Always report immediate post SQ errors
    48edf187fdd4 usb: vhci-hcd: Prevent suspending virtually attached devices
    6459dba4f350 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    8cbe2a21d857 ipvs: Defer ip_vs_ftp unregister during netns cleanup
    0901fa02ccf7 NFSv4.1: fix backchannel max_resp_sz verification check
    9768536f8260 coresight: trbe: Return NULL pointer for allocation failures
    e926dfde8ad1 coresight: etm4x: Support atclk
    4960e17a3543 coresight-etm4x: Conditionally access register TRCEXTINSELR
    db1261fe50ff remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    f321de0b3847 PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert()
    f22d898e080a wifi: rtw89: avoid circular locking dependency in ser_state_run()
    85288bcf7ffe RDMA/rxe: Fix race in do_task() when draining
    1750f1ec143e crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
    f0e6e7b43511 vfio/pds: replace bitmap_free with vfree
    e7979228b3bd sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    9cbb5ebf409e sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    8cdeb5e482d3 sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
    dc766c4830a7 sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
    674ff598148a sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
    77fe706ff086 wifi: mac80211: fix Rx packet handling when pubsta information is not available
    15bd3f0d0e99 wifi: ath10k: avoid unnecessary wait for service ready message
    12ff1858301e Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
    8410e7d65b16 IB/sa: Fix sa_local_svc_timeout_ms read race
    925ff361460b RDMA/core: Resolve MAC of next-hop device without ARP support
    eb976d02c889 Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running"
    e0a9a737c9a2 f2fs: fix zero-sized extent for precache extents
    8eb6dacd5c23 scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
    111b64b98874 scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    19a09c909372 scsi: qla2xxx: edif: Fix incorrect sign of error code
    8012e298b968 ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    7d9b97e61350 f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
    83a8e4efea02 f2fs: fix to truncate first page in error path of f2fs_truncate()
    045375172dd4 f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
    ec4a608bca40 wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    dac556dd2d44 RDMA/cm: Rate limit destroy CM ID timeout error message
    4a594f5c64bf drivers/base/node: handle error properly in register_one_node()
    d12f4499585a watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
    54f4da8629cf ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
    a2e10d05f5c3 netfilter: ipset: Remove unused htable_bits in macro ahash_region
    9170730674cf iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    289cbdb27afb iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed()
    978aac54e93e fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
    a86c8b9d03f7 fs: ntfs3: Fix integer overflow in run_unpack()
    528807934790 drm/msm/dpu: fix incorrect type for ret
    f197894de2f4 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    29a41bf64226 ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    d75a561ba1ea ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    cf71834a0cfc pps: fix warning in pps_register_cdev when register device fail
    b859d612303a misc: genwqe: Fix incorrect cmd field being reported in error
    c36785f9de03 tty: n_gsm: Don't block input queue by waiting MSC
    0924d8563043 usb: gadget: configfs: Correctly set use_os_string at bind
    f0c98b011e01 usb: phy: twl6030: Fix incorrect type for ret
    a7d262359018 drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    18897db75121 tcp: fix __tcp_close() to only send RST when required
    8120c4638416 PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    1fc4717f5190 wifi: mwifiex: send world regulatory domain to driver
    531a50b2db6d drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
    5e64cc74159c drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
    4e27e18f64a2 drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
    1320d1e834c1 drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
    dd3d6befe7db drm/amd/pm: Fix si_upload_smc_data (v3)
    2f68f6f7cec4 drm/amd/pm: Disable ULV even if unsupported (v3)
    d0e0b2c9a2b7 drm/amdgpu: Power up UVD 3 for FW validation (v2)
    553af70d3d68 coresight: Only register perf symlink for sinks with alloc_buffer
    91e487452d5a inet: ping: check sock_net() in ping_get_port() and ping_lookup()
    3a7802716da2 crypto: hisilicon/qm - check whether the input function and PF are on the same device
    c9035e9ba528 crypto: hisilicon - re-enable address prefetch after device resuming
    94b09b0ac0b8 crypto: hisilicon/zip - remove unnecessary validation for high-performance mode configurations
    30a4e81edb15 media: st-delta: avoid excessive stack usage
    6e41267d52ec ALSA: lx_core: use int type to store negative error codes
    ca61e32fcf27 RDMA/mlx5: Fix vport loopback forcing for MPV device
    f891dce0d397 media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    f97f08b9351d scsi: myrs: Fix dma_alloc_coherent() error check
    e62251954a12 scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    c1a15609eade hwrng: nomadik - add ARM_AMBA dependency
    c5d08ff97cdb crypto: keembay - Add missing check after sg_nents_for_len()
    9c5cfe544a63 drm/amd/display: Remove redundant semicolons
    ef3600c6fec3 serial: max310x: Add error checking in probe()
    ac4d189aaa93 usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
    b0439e3762ac usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    8de227e62a53 phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
    20f744fea1b1 media: zoran: Remove zoran_fh structure
    d2e29c36eb5f drm/bridge: it6505: select REGMAP_I2C
    32270c3a65bd f2fs: fix condition in __allow_reserved_blocks()
    08eb6043c9e5 drm/radeon/r600_cs: clean up of dead code in r600_cs
    9c704b291d5d drm/panel: novatek-nt35560: Fix invalid return value
    08cb3dc9d2b4 bpf: Enforce expected_attach_type for tailcall compatibility
    44045b107a4e i2c: designware: Add disabling clocks when probe fails
    6d621778e378 i2c: designware: Fix clock issue when PM is disabled
    59d467bd07ee i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    a4b5eac932ca thermal/drivers/qcom/lmh: Add missing IRQ includes
    d2e0755412bf thermal/drivers/qcom: Make LMH select QCOM_SCM
    c07e759b3f53 hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems
    c38998ed0e88 once: fix race by moving DO_ONCE to separate section
    2158121117c9 tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
    748bbe2c1673 smp: Fix up and expand the smp_call_function_many() kerneldoc
    cdeafacb4f9f bpf: Explicitly check accesses to bpf_sock_addr
    ec9a5b4f0eee selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    5477b0045056 i3c: master: svc: Recycle unused IBI slot
    20ff7004c9a0 i3c: master: svc: Use manual response for IBI events
    060ecc81240e nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    8963484b7e15 ACPICA: Fix largest possible resource descriptor index
    c3202fce0cea pwm: tiehrpwm: Fix corner case in clock divisor calculation
    6926fc62b777 arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    8063e535a5a2 arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
    7e538e84ca7d arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
    2af05a03b1d2 cpuidle: qcom-spm: fix device and OF node leaks at probe
    aa30d3077298 firmware: firmware: meson-sm: fix compile-test default
    4f9e6ff6319d nbd: restrict sockets to TCP and UDP
    37e5190d4bfe arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
    341a1b62a024 null_blk: Fix the description of the cache_size module argument
    70d4e6996a5d pinctrl: renesas: Use int type to store negative error codes
    82b71f330cd0 power: supply: cw2015: Fix a alignment coding style issue
    80eab6a9df7e PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
    585499f17d1d ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property
    396ee23da443 ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS
    dcc72335190c ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax
    96adc664ff27 PM: sleep: core: Clear power.must_resume in noirq suspend error path
    fa2a1c33e081 block: use int to store blk_stack_limits() return value
    12ef6fe2b4ea selftests/nolibc: fix EXPECT_NZ macro
    aac29a895144 regulator: scmi: Use int type to store negative error codes
    5ce4e7a5fe46 arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
    e9d02b09ded8 ARM: at91: pm: fix MCKx restore routine
    06c4826b1d90 blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
    299cd1f5fdaa pinctrl: meson-gxl: add missing i2c_d pinmux
    3433843693e0 soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    5b8ac5689739 ACPI: processor: idle: Fix memory leak when register cpuidle device failed
    24a67e7dfd03 cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    64db56dc1fe5 leds: flash: leds-qcom-flash: Update torch current clamp setting
    ca782b2a61d6 ARM: dts: renesas: porter: Fix CAN pin group
    5c6246bc147d libbpf: Fix reuse of DEVMAP
    ab8b2403103f bpf: Remove migrate_disable in kprobe_multi_link_prog_run
    7db2f54be7d5 bpf/selftests: Fix test_tcpnotify_user
    c99c6c593ee2 regmap: Remove superfluous check for !config in __regmap_init()
    0401de6d1665 arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
    db82a94b0c10 x86/vdso: Fix output operand size of RDPID
    8100b6c0f908 EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
    a993be82c512 smb: server: fix IRD/ORD negotiation with the client
    379cae2cb982 perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    35e5f3759010 coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    239c49a99d63 gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
    69e2a7c30750 selftests: arm64: Check fread return value in exec_target
    00f1726e6412 seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast
    9d8b6c9f18e5 init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
    a312ec6d768a filelock: add FL_RECLAIM to show_fl_flags() macro

(From OE-Core rev: af6ac5a200e41b6de6e32b258ccae222948b989b)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-27 17:45:06 +00:00
Ankur Tyagi bc0e06b3b1 wireless-regdb: upgrade 2024.10.07 -> 2025.10.07
(From OE-Core rev: e0bdf9b4134b1c1f90687fb6e12e33bf77d4192c)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Yannic Moog b33a8abe77 perf: add arm64 source files for unistd_64.h
kernel commit bfb713ea53c7 ("perf tools: Fix arm64 build by generating unistd_64.h")
introduces a new dependency on source files for arm64, specifically
include/uapi/asm-generic.

Build fails with:
[..]/perf/1.0/perf-1.0/scripts/Makefile.asm-headers:33: [...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild: No such file or directory
make[4]: *** No rule to make target '[...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild'.  Stop.

Add the directory to PERF_SRC.
Fix whitespace error while at it.

(From OE-Core rev: 06d4981313ce67a8d53b1c14be9845b4b5a9f4cf)

Signed-off-by: Yannic Moog <y.moog@phytec.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Bruce Ashfield dba2d4436d linux-yocto/6.6: update to v6.6.111
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    655054d2c3c1 Linux 6.6.111
    3d3abf3f7e8b KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
    284e67a93b8c net/9p: fix double req put in p9_fd_cancelled
    ab172f4f4262 crypto: rng - Ensure set_ent is always present
    f5f235be7612 riscv: mm: Do not restrict mmap address based on hint
    1602c9b4578a riscv: mm: Use hint address in mmap if available
    e242e52fdfe4 driver core/PM: Set power.no_callbacks along with power.no_pm
    e857421992ce staging: axis-fifo: flush RX FIFO on read errors
    a3c71d6c8332 staging: axis-fifo: fix TX handling on copy_from_user() failure
    6d953e9d3981 staging: axis-fifo: fix maximum TX packet length check
    bfeea103cad9 serial: stm32: allow selecting console when the driver is module
    cb7630e714d6 hid: fix I2C read buffer overflow in raw_event() for mcp2221
    dc4874366cf6 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
    647410a7da46 ALSA: usb-audio: Kill timer properly at removal
    97e87f367c91 platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list
    bf28f5db40d5 can: rcar_canfd: Fix controller mode setting
    e93af787187e can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
    03510f5fce33 btrfs: ref-verify: handle damaged extent root tree
    bcccd0220751 ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
    081f14b9a3eb perf subcmd: avoid crash in exclude_cmds when excludes is empty
    6d59f7467f83 platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
    4b91d0c5781a dm-integrity: limit MAX_TAG_SIZE to 255
    7f7187118bb5 ASoC: amd: acp: Adjust pdm gain value
    8281c2a63bbc wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    96dc17ae64b1 USB: serial: option: add SIMCom 8230C compositions
    228d06c4cbfc media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
    71ed8b81a490 media: tuner: xc5000: Fix use-after-free in xc5000_release
    f82dc869220d media: tunner: xc5000: Refactor firmware load
    250b6e009ff9 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence

(From OE-Core rev: 2a947cb13d0d46747f14aa6a1aa39a486459ee8a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield 787bcb1b6f linux-yocto/6.6: update to v6.6.110
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    e617101e5626 Linux 6.6.110
    70e1e5fe9f7e ASoC: qcom: audioreach: fix potential null pointer dereference
    f617d515d66c media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
    71da40648741 media: rc: fix races with imon_disconnect()
    bb10a9ddc8d6 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
    f03aa5e39da7 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
    e28d05370969 gcc-plugins: Remove TODO_verify_il for GCC >= 16
    5d646a763232 crypto: sha256 - fix crash at kexec

(From OE-Core rev: 42854520a9476ce5ac210097a5f6ce18ecc66c80)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield c4fd9fd38f linux-yocto/6.6: update to v6.6.109
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    f34f16e5c6323 Linux 6.6.109
    eb53056323f13 drm/i915/backlight: Return immediately when scale() finds invalid parameters
    4529bb0b6be3d minmax.h: remove some #defines that are only expanded once
    1a899044a0f5a minmax.h: simplify the variants of clamp()
    9955044f552b5 minmax.h: move all the clamp() definitions after the min/max() ones
    26c3d697becf3 minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
    511e7d2e4d51f minmax.h: reduce the #define expansion of min(), max() and clamp()
    85d619594313e minmax.h: update some comments
    6012f69bf7495 minmax.h: add whitespace around operators and after commas
    46648b94e6ebb minmax: fix up min3() and max3() too
    f0be4c5dc213d minmax: improve macro expansion and type checking
    7194a302345da minmax: don't use max() in situations that want a C constant expression
    bb63c996c2db0 minmax: simplify min()/max()/clamp() implementation
    6183c6579356a minmax: make generic MIN() and MAX() macros available everywhere
    c0c83f4cd074b i40e: add validation for ring_len param
    6e4251690710d i40e: increase max descriptors for XL710
    7ea47a560a7a3 drm/ast: Use msleep instead of mdelay for edid read
    ed6fa21f68973 gpiolib: Extend software-node support to support secondary software-nodes
    457d2c5e112fd loop: Avoid updating block size under exclusive owner
    78f579cb7d825 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
    e7a85efb873fa mm: migrate_device: use more folio in migrate_device_finalize()
    684a9a995748c ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
    53888cd32a3f6 s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
    09e3bda3a7ba2 fbcon: Fix OOB access in font allocation
    adac90bb1aaf4 fbcon: fix integer overflow in fbcon_do_set_font
    c9c2a51f91aea mm/hugetlb: fix folio is still mapped when deleted
    df1fa034c0fc2 kmsan: fix out-of-bounds access to shadow memory
    cab278cead49a afs: Fix potential null pointer dereference in afs_put_server
    58d304a89178d ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
    3887f3814c0e7 tracing: dynevent: Add a missing lockdown check on dynevent
    8703940bd30b5 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
    b769490521cf9 i40e: improve VF MAC filters accounting
    b247cdd04750e i40e: add mask to apply valid bits for itr_idx
    edecce7abd715 i40e: add max boundary check for VF filters
    e748f1ee493f8 i40e: fix validation of VF state in get resources
    3883e9702b6a4 i40e: fix input validation logic for action_meta
    2cc26dac0518d i40e: fix idx validation in config queues msg
    50a1e2f50f6c2 i40e: fix idx validation in i40e_validate_queue_map
    3cefd898b7aa1 HID: asus: add support for missing PX series fn keys
    ba7bcfd52c66d smb: client: fix wrong index reference in smb2_compound_op()
    348736955ed6c futex: Prevent use-after-free during requeue-PI
    6ffa6b5bc861a drm/gma500: Fix null dereference in hdmi teardown
    df2c071061ed5 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
    7b209698e648b net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
    816d30afbad52 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
    a7a2b29c1ee44 net: dsa: lantiq_gswip: do also enable or disable cpu port
    be0bd592298f8 selftests: fib_nexthops: Fix creation of non-FDB nexthops
    24046d31f6f92 nexthop: Forbid FDB status change while nexthop is in a group
    31ae2fbc9fcb9 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
    98a76bd96f382 bnxt_en: correct offset handling for IPv6 destination address
    82a1463c968b1 vhost: Take a reference on the task in struct vhost_task.
    bcce99f613163 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
    6a0070c5c3ad3 Bluetooth: hci_sync: Fix hci_resume_advertising_sync
    c957284701353 ethernet: rvu-af: Remove slash from the driver name
    17edec1830e48 can: peak_usb: fix shift-out-of-bounds issue
    3664ae91b26d1 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
    2e423e1990f39 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
    be1b25005fd0f can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
    cbc1de71766f3 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
    0baf92d0b1590 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
    f64abeebf763c bpf: Reject bpf_timer for PREEMPT_RT
    865eec09b6e44 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
    210b91bfe355b wifi: virt_wifi: Fix page fault on connect
    c5be7edd42602 smb: server: don't use delayed_work for post_recv_credits_work
    6017196aabf1d cpufreq: Initialize cpufreq-based invariance before subsys
    35bb271de241d ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
    ebe7a2e46d189 arm64: dts: imx8mp: Correct thermal sensor index
    1744aff07b833 mm: folio_may_be_lru_cached() unless folio_test_large()
    d37ec803b2813 mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
    768c44cc8b638 mm/gup: check ref_count instead of lru before migration
    dc58ab1eb90c9 mm: add folio_expected_ref_count() for reference count calculation
    4ed203f79821c mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
    df2580fbcedea IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
    943754ad81131 ALSA: usb-audio: Add mute TLV for playback volumes on more devices
    0aac2fa4d0c75 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
    ea6016c9ec61d ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
    b61b90b07416f i2c: designware: Add quirk for Intel Xe
    41ea28a2de255 mmc: sdhci-cadence: add Mobileye eyeQ support
    306697a775fbc usb: core: Add 0x prefix to quirks debug output
    dc77154e83048 ALSA: usb-audio: Fix build with CONFIG_INPUT=n
    a3961b1f7f79e ALSA: usb-audio: Convert comma to semicolon
    d04d301614630 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
    8fa69bd18148e ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
    9db2614986bd0 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
    e8c605fece5b9 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
    bafc648b82c3b ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
    08a96e22bd37f ALSA: usb-audio: Fix block comments in mixer_quirks
    18f9e77de5272 firewire: core: fix overlooked update of subsystem ABI version
    ca3e48e96816c scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE

(From OE-Core rev: 5234d795417f97cfce7bcd891e7bdeabc6f36e9e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield 623cf58e62 linux-yocto/6.6: update to v6.6.108
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    147338df3487 Linux 6.6.108
    42a6aeb4b238 Revert "loop: Avoid updating block size under exclusive owner"
    06146c26f5cf minmax: add a few more MIN_T/MAX_T users
    af8b531ecfd4 minmax: simplify and clarify min_t()/max_t() implementation
    2d396aa8264d minmax: avoid overly complicated constant expressions in VM code
    532733ff82b9 mptcp: propagate shutdown to subflows when possible
    3ef938f6f0b3 rtc: pcf2127: fix SPI command byte for PCF2131 backport
    075abf0b1a95 iommu/amd/pgtbl: Fix possible race while increase page table level
    564f2312e2ff xhci: dbc: Fix full DbC transfer ring after several reconnects
    3c6dd29a460f xhci: dbc: decouple endpoint allocation from initialization
    27b04564f7a3 phy: ti: omap-usb2: fix device leak at unbind
    34a8d5a198bb phy: Use device_get_match_data()
    0ee0ef483aae selftests: mptcp: userspace pm: validate deny-join-id0 flag
    650150cc9a3e mptcp: pm: nl: announce deny-join-id0 flag
    a6157484bee3 vmxnet3: unregister xdp rxq info in the reset path
    e7b7a9387955 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
    2374c11189ef crypto: af_alg - Set merge to zero early in af_alg_sendmsg
    6a075f80f303 drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
    15a77e1ab0a9 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
    e6b0616a360f ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
    7740da20a3a0 ASoC: wm8974: Correct PLL rate rounding
    b4e8741955dc ASoC: wm8940: Correct typo in control name
    b7e4884dd853 ASoC: wm8940: Correct PLL rate rounding
    abc9f859a9ea io_uring: include dying ring in task_work "should cancel" state
    c8e69b783bc4 io_uring: backport io_should_terminate_tw()
    115e7d4d5ee8 ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
    0a3d5a4d4adc selftests: mptcp: avoid spurious errors on TCP disconnect
    9ef1af5d4040 selftests: mptcp: connect: catch IO errors on listen side
    666b49c848f1 rds: ib: Increment i_fastreg_wrs before bailing out
    689aee35ce67 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
    7e4c3cd7f0a1 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
    6584e7ecfa7d mmc: mvsdio: Fix dma_unmap_sg() nents value
    ac4e940dc7da ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
    411f7d4f7038 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
    468bb23472b7 ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
    fc7bd02dadb8 btrfs: tree-checker: fix the incorrect inode ref size check
    090b61b87420 iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
    561eef41aaa3 LoongArch: Check the return value when creating kobj
    2ff7ef2f71b4 LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
    fb6ee62d3082 LoongArch: Update help info of ARCH_STRICT_ALIGN
    90c0ffa1e0d9 power: supply: bq27xxx: restrict no-battery detection to bq27000
    84ac57c4bbfd power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
    7c4491b5644e crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
    ee74d69af170 nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
    d3cb3f209d35 ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
    eb0378dde086 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
    d2cfefa14ce8 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
    8eeb2091e72d cnic: Fix use-after-free bugs in cnic_delete_task
    cd093e8bdcfe net: liquidio: fix overflow in octeon_init_instr_queue()
    13f57d484676 Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
    4cefe5be7388 tls: make sure to abort the stream if headers are bogus
    dfd06131107e tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
    97d797c5fc6f bonding: don't set oif to bond dev when getting NS target destination
    2cb17c88edd3 net/mlx5e: Harden uplink netdev access against device unbind
    fd74bd40f1a4 net/mlx5e: Consider aggregated port speed during rate configuration
    a7f10a466d36 i40e: remove redundant memory barrier when cleaning Tx descs
    0255c5100470 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
    af114ef225e5 selftests: mptcp: sockopt: fix error messages
    dedaa9bcf79c mptcp: tfo: record 'deny join id0' info
    36d9f72e5d66 mptcp: set remote_deny_join_id0 on SYN recv
    29a5fd482cd5 bonding: set random address only when slaves already exist
    ea53e6a47e14 qed: Don't collect too many protection override GRC elements
    2f4b68e7905e dpaa2-switch: fix buffer pool seeding for control traffic
    4f364023ddcf um: virtio_uml: Fix use-after-free after put_device in probe
    5d2c34ff78b8 btrfs: fix invalid extref key setup when replaying dentry
    4a1e3ec28e80 cgroup: split cgroup_destroy_wq into 3 workqueues
    9ba2b399dee2 pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
    eae22a2573a0 wifi: mac80211: fix incorrect type for ret
    93e063f15e17 wifi: mac80211: increase scan_ies_len for S1G
    0ffb49ba247c ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
    6085291a1a58 wifi: wilc1000: avoid buffer overflow in WID string configuration

(From OE-Core rev: 0b5c6e21160e54b3b571343d932614b23231e273)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield 0eb11e9267 linux-yocto/6.6: update to v6.6.107
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    af1544b5d072 Linux 6.6.107
    f075a33ef204 x86: disable image size check for test builds
    23f24d0a538e drm/i915/power: fix size for for_each_set_bit() in abox iteration
    0a87bf8bd5d7 drm/amdgpu: fix a memory leak in fence cleanup when unloading
    d70b5910ca31 net: mdiobus: release reset_gpio in mdiobus_unregister_device()
    cce57cd8c5de ksmbd: fix null pointer dereference in alloc_preauth_hash()
    ce807c4c88d2 phy: ti-pipe3: fix device leak at unbind
    7c89ea3ab302 phy: tegra: xusb: fix device and OF node leak at probe
    221f6739369b dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
    ebf6c7c908e5 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
    e0727853992a usb: gadget: midi2: Fix MIDI2 IN EP max packet size
    a04b32b0ec1b usb: gadget: midi2: Fix missing UMP group attributes initialization
    bea1946b6919 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
    26f296e4c497 xhci: fix memory leak regression when freeing xhci vdev devices depth first
    0d861bc0b5c4 RISC-V: Remove unnecessary include from compat.h
    156677ea10ba hrtimers: Unconditionally update target CPU base after offline timer migration
    b1fa39fb3026 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
    6276a6b2c84e hrtimer: Remove unused function
    c504b5aaaaa5 regulator: sy7636a: fix lifecycle of power good gpio
    1baed10553fc dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
    df82c7901513 dmaengine: idxd: Fix double free in idxd_setup_wqs()
    f0e460925679 dmaengine: idxd: Fix refcount underflow on module unload
    0e95ee7f532b dmaengine: idxd: Remove improper idxd_free
    608c14c671a8 hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
    b072e32e0874 hsr: use rtnl lock when iterating over ports
    72dbae1f2f21 net: hsr: Add VLAN CTAG filter support
    64a58ae64da5 net: hsr: Add support for MC filtering at the slave device
    94b050726288 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
    deedea599e87 can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
    1e1adfffd3fe can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
    23431998a377 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
    ff00b2ed7c64 igb: fix link test skipping when interface is admin down
    e450b4966f72 docs: networking: can: change bcm_msg_head frames member to support flexible array
    e6867c0ae100 tunnels: reset the GSO metadata before reusing the skb
    5e84e18f6727 net: bridge: Bounce invalid boolopts
    fe78891f296a net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
    092e5703d400 Disable SLUB_TINY for build testing
    8a8f093e621c USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
    e88b7810b43e USB: serial: option: add Telit Cinterion FN990A w/audio compositions
    bb3498089f86 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
    a0da801d3ea0 serial: sc16is7xx: fix bug in flow control levels init
    1e92afef6061 tty: hvc_console: Call hvc_kick in hvc_write unconditionally
    af253b1a5daa Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
    7bd41f9c96dd Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
    27e126072ee0 Input: iqs7222 - avoid enabling unused interrupts
    854baafc00c4 kernfs: Fix UAF in polling when open file is released
    5de7b4141af1 cifs: fix pagecache leak when do writepages
    9f4b38ad41d6 mm/khugepaged: fix the address passed to notifier on testing young
    c95c22402b00 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios
    394547b9113f btrfs: fix corruption reading compressed range when block size is smaller than page size
    a29f891d4f37 btrfs: use readahead_expand() on compressed extents
    7bb675c9f025 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
    9fe0415156fb mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
    60d7a3d2b985 mm/damon/sysfs: fix use-after-free in state_show()
    23538cfbeed8 libceph: fix invalid accesses to ceph_connection_v1_info
    b97edd195442 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
    252bc25d7aac mtd: nand: raw: atmel: Fix comment in timings preparation
    cfdde9197ecd drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
    9adb902be26b drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
    b2fbe0f9f80b drm/mediatek: fix potential OF node use-after-free
    6632845292a4 mm/damon/core: set quota->charged_from to jiffies at first charge window
    3d278e89c2ea mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
    8577ded2ee3d fuse: prevent overflow in copy_file_range return value
    01e1eba64860 fuse: check if copy_file_range() returns larger than requested size
    c50336dfcb24 mtd: rawnand: stm32_fmc2: fix ECC overwrite
    06d8ef8f8537 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
    31dc1603aa43 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
    9d55370cc4e2 i2c: i801: Hide Intel Birch Stream SoC TCO WDT
    0709bc11b942 ocfs2: fix recursive semaphore deadlock in fiemap call
    8345a93b9bda mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
    e69f61b8c08e compiler-clang.h: define __SANITIZE_*__ macros only when undefined
    deedce87471e Revert "SUNRPC: Don't allow waiting for exiting tasks"
    6f628d7dd8ac EDAC/altera: Delete an inappropriate dma_free_coherent() call
    2089d8a316f4 KVM: SVM: Set synthesized TSA CPUID flags
    2b8a1969cae5 rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
    d89abc4fbee8 rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
    4e86206b6967 rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
    8be3d52101b0 proc: fix type confusion in pde_set_flags()
    66bcb04a441f tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
    449682e76f32 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
    d660c8d8142e s390/cpum_cf: Deny all sampling events by counter PMU
    1262bda871da tracing: Silence warning when chunk allocation fails in trace_pid_write
    69d99a936f00 NFSv4/flexfiles: Fix layout merge mirror check.
    c288e4c39d21 NFSv4.2: Serialise O_DIRECT i/o and copy range
    9f2fdb18d0bf NFSv4.2: Serialise O_DIRECT i/o and clone range
    4089fd70a508 NFSv4.2: Serialise O_DIRECT i/o and fallocate()
    320a0954e2c8 NFS: Serialise O_DIRECT i/o and truncate()
    275d9fd06d96 fs/nfs/io: make nfs_start_io_*() killable
    06c26a679029 ftrace/samples: Fix function size computation
    f7ec68cc74d8 tracing: Fix tracing_marker may trigger page fault during preempt_disable
    781ec30354e6 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
    b39234ede545 NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
    a022c9a46455 NFSv4: Don't clear capabilities that won't be reset
    9339b4e75a81 SUNRPC: call xs_sock_process_cmsg for all cmsg
    fd00ae04c5aa flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
    0214b96a6a63 ima: limit the number of ToMToU integrity violations
    905d43b8ad24 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
    9da2a9d3ccd8 media: i2c: imx214: Fix link frequency validation
    817a962db3f3 NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
    913ff520714f nfsd: Fix a regression in nfsd_setattr()
    392260eb8e67 kasan: fix GCC mem-intrinsic prefix with sw tags
    d699575d00ff mm: introduce and use {pgd,p4d}_populate_kernel()
    3f8810b2d22d kunit: kasan_test: disable fortify string checker on kasan_strings() test

(From OE-Core rev: 4964bdf8bf8b4c889928478db3e0d901e748fe55)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield d78bf37c9c linux-yocto/6.6: update to v6.6.106
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    60a9e718726f Linux 6.6.106
    3b9e7e5c5298 x86/vmscape: Add old Intel CPUs to affected list
    1e1dc1f9edb9 x86/vmscape: Warn when STIBP is disabled with SMT
    a5d029f1152a x86/bugs: Move cpu_bugs_smt_update() down
    34e566704105 x86/vmscape: Enable the mitigation
    f866eef8d1c6 x86/vmscape: Add conditional IBPB mitigation
    813cb831439c x86/vmscape: Enumerate VMSCAPE bug
    9d1677060428 Documentation/hw-vuln: Add VMSCAPE documentation
    fe9731e10004 Linux 6.6.105
    be4e6a221467 spi: fsl-qspi: Fix double cleanup in probe error path
    054a444b4c17 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
    b718de5904a6 cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
    d0b26a9f5742 cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
    a44d0904d673 cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
    524ee2606a30 riscv: use lw when reading int cpu in asm_per_cpu
    522ffe298627 mm: slub: avoid wake up kswapd in set_track_prepare
    ad2df864033e slub: Reflow ___slab_alloc()
    c866c40d07c4 tools: gpio: remove the include directory on make clean
    3c331f7fc5b6 tools: gpio: rm .*.cmd on make clean
    7e4f8e09d577 drm/amd/amdgpu: Fix missing error return on kzalloc failure
    718c248902dd drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
    c9c4635a6d55 perf bpf-event: Fix use-after-free in synthesis
    85da7f36d9a0 drm/bridge: ti-sn65dsi86: fix REFCLK setting
    1a7d3947a5dd spi: spi-fsl-lpspi: Clear status register after disabling the module
    cd53048e7460 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
    a339956545a5 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
    a786ef5f693b spi: spi-fsl-lpspi: Fix transmissions when using CONT
    2313baff36d0 hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
    8699358b6ac9 pcmcia: Add error handling for add_interval() in do_validate_mem()
    3ee8f5c8938f pcmcia: omap: Add missing check for platform_get_resource
    8d7ee56bf530 Revert "drm/amdgpu: Avoid extra evict-restore process."
    b9cf42a8f034 ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
    5f46882be912 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
    7d98166183d6 drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
    2c6c9d319017 drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
    13d0854e3538 drm/mediatek: Add crtc path enum for all_drm_priv array
    d5875a478b1b vmxnet3: update MTU after device quiesce
    5174ea81d6ca net: dsa: microchip: linearize skb for tail-tagging switches
    3b6a5df36604 net: dsa: microchip: update tag_ksz masks for KSZ9477 family
    16fea5067092 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
    dd2b7abd0da3 ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
    7df63b5ddd07 ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
    47aba94a924c iio: pressure: mprls0025pa: use aligned_s64 for timestamp
    e791bf216c9e iio: light: opt3001: fix deadlock due to concurrent flag access
    91da53307391 iio: chemical: pms7003: use aligned_s64 for timestamp
    fb6a7c1da207 iio: imu: inv_mpu6050: align buffer for timestamp
    977849e8acd2 btrfs: adjust subpage bit start based on sectorsize
    b088ae4e4184 PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
    30d201ee3a37 thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
    50ae352c1848 spi: fsl-qspi: use devm function instead of driver remove
    0ef7058b4dc6 mm/slub: avoid accessing metadata when pointer is invalid in object_err()
    ba0ccc1be52c nouveau: fix disabling the nonstall irq due to storm code
    033f09b647db cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
    83440514ef2a cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
    86cade7791a2 cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
    e7f4f16ff167 cpufreq: intel_pstate: Revise global turbo disable check
    de6b545bcdba Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"
    94f7d9070382 Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"
    f4f7cde70f59 net: pcs: rzn1-miic: Correct MODCTRL register offset
    50a84d5c8140 e1000e: fix heap overflow in e1000_set_eeprom
    1cfa5dd05847 cifs: prevent NULL pointer dereference in UTF16 conversion
    bb37252c9af1 batman-adv: fix OOB read/write in network-coding decode
    d96cc9a1b577 scsi: lpfc: Fix buffer free/clear order in deferred receive path
    abab31c377cb platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
    350bfdd2841f drm/amdgpu: drop hw access in non-DC audio fini
    9e4293766e4f wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
    9df29aa5637d wifi: mwifiex: Initialize the chan_stats array to zero
    bc983b834354 soc: qcom: mdt_loader: Deal with zero e_shentsize
    698abcf08818 proc: fix missing pde_set_flags() for net proc files
    e9188f66e949 ocfs2: prevent release journal inode after journal shutdown
    f9b8d4dba8e7 sched: Fix sched_numa_find_nth_cpu() if mask offline
    6797a8b3f71b mm: move page table sync declarations to linux/pgtable.h
    26ff568f390a x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
    2ee32c4c4f63 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
    50f2f392eb6e arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
    90e9372ec0b0 ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
    ad17940a6618 ALSA: usb-audio: Add mute TLV for playback volumes on some devices
    a4e366fbec8a phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
    9b035445b7c9 selftest: net: Fix weird setsockopt() in bind_bhash.c.
    85c1c86a67e0 ppp: fix memory leak in pad_compress_skb
    01d2690c09e6 net: atm: fix memory leak in atm_register_sysfs when device_register fail
    7d449b7a6c8e ax25: properly unshare skbs in ax25_kiss_rcv()
    5852cee1d8f6 mctp: return -ENOPROTOOPT for unknown getsockopt options
    7f8869586dd6 net/smc: Remove validation of reserved bits in CLC Decline message
    90ab05ed47c1 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
    bee1e19cf1fa net: thunder_bgx: decrement cleanup index before use
    4535729550cf net: thunder_bgx: add a missing of_node_put
    e472f59d02c8 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
    609f6debdff3 wifi: libertas: cap SSID len in lbs_associate()
    ccb839602a82 wifi: cw1200: cap SSID length in cw1200_do_join()
    61b80fbdc072 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
    5d7b2d45770e wifi: ath11k: fix group data packet drops during rekey
    6bf934426760 wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
    38b86b0a37df wifi: ath11k: rename ath11k_start_vdev_delay()
    14ed9f84c7c0 wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
    fb216d980fae i40e: Fix potential invalid access when MAC list is empty
    f18d9b3abf9c net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
    668f4f6382c3 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
    1cf0b558cbb7 netlink: add variable-length / auto integers
    5430388a8111 net: macb: Fix tx_ptr_lock locking
    8d09b13789ba icmp: fix icmp_ndo_send address translation for reply direction
    1dda64fb3f5e mISDN: Fix memory leak in dsp_hwec_enable()
    9a4abe262df9 xirc2ps_cs: fix register access when enabling FullDuplex
    6077d16b5c0f Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
    bd75eba88e88 Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
    2acc8d3f0a3c netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
    50db11e2bbb6 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
    f1150153c4e5 wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
    b7d08929178c wifi: cfg80211: fix use-after-free in cmp_bss()
    4a05520d12a7 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
    f7a48ef44576 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
    5b94a825945a tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
    0383e172435f arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
    add1ecc8f3ad tee: fix NULL pointer dereference in tee_shm_put
    bf89b1f87c72 fs: writeback: fix use-after-free in __mark_inode_dirty()
    41e168db5942 Bluetooth: hci_sync: Avoid adding default advertising on startup
    703ea9e34f96 cpupower: Fix a bug where the -t option of the set subcommand was not working.
    2b21fd1cf77e drm/amd/display: Don't warn when missing DCE encoder caps
    235a4c0a8aaa cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
    ee58a0a35378 LoongArch: Save LBT before FPU in setup_sigcontext()
    dc4a024b1990 btrfs: avoid load/store tearing races when checking if an inode was logged
    48545620ca8f btrfs: fix race between setting last_dir_index_offset and inode logging
    9f76a2e19baf btrfs: fix race between logging inode and checking if it was logged before
    7acfa07c585e bpf: Fix oob access in cgroup local storage
    dbd8ec2261b8 bpf: Move bpf map owner out of common struct
    8e573ac21fcd bpf: Move cgroup iterator helpers to bpf.h
    3eeefeb9d62d bpf: Add cookie object to bpf maps
    355bd0b51d2f Linux 6.6.104
    d3cc7476b89f xfs: do not propagate ENODATA disk errors into xattr code
    0699faf70413 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
    6c9552de7f7e HID: mcp2221: Handle reads greater than 60 bytes
    5a809b34250c HID: mcp2221: Don't set bus speed on every transfer
    1b3ccc394807 net/mlx5: SF, Fix add port error handling
    ea687c003663 net: rose: fix a typo in rose_clear_routes()
    4e86e5ba325e drm/nouveau/disp: Always accept linear modifier
    1424f6132fc8 smb3 client: fix return code mapping of remap_file_range
    3c3321091733 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
    4191ea1f0bb3 fs/smb: Fix inconsistent refcnt update
    4f43a6d376da dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
    8911ec881cd7 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
    e422370e6ab2 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
    b9166ea27d0a HID: wacom: Add a new Art Pen 2
    88d3c2790c33 HID: logitech: Add ids for G PRO 2 LIGHTSPEED
    8783b2a0b740 HID: quirks: add support for Legion Go dual dinput modes
    d4e6e2680807 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
    5f3c0839b173 HID: asus: fix UAF via HID_CLAIMED_INPUT validation
    c84ba4cdf4c6 x86/microcode/AMD: Handle the case of no BIOS microcode
    f49161646e03 KVM: x86: use array_index_nospec with indices that come from guest
    925599eba460 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
    463aa96fca62 sctp: initialize more fields in sctp_v6_from_sk()
    9c547c8eee9d net: rose: include node references in rose_neigh refcount
    f8c29fc437d0 net: rose: convert 'use' field to refcount_t
    4998ab3eb2b8 net: rose: split remove and free operations in rose_remove_neigh()
    b0f8725196ae net: stmmac: Set CIC bit only for TX queues with COE
    dc38d0111c16 net: stmmac: xgmac: Correct supported speed modes
    d02d635fc03d net: stmmac: Rename phylink_get_caps() callback to update_caps()
    ce006b60fc49 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
    9b0acd3bb291 net/mlx5e: Set local Xoff after FW update
    dec9d873bdf7 net/mlx5e: Update and set Xon/Xoff upon port speed set
    cdd96ed12524 net/mlx5e: Update and set Xon/Xoff upon MTU set
    3e07c623fbc5 net/mlx5: Nack sync reset when SFs are present
    a623e80aaa85 net/mlx5: Convert SF port_indices xarray to function_ids xarray
    a7e9da4d3afb net/mlx5: Use devlink port pointer to get the pointer of container SF struct
    25659835c7af net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc()
    ddac9d0fe249 net/mlx5: Fix lockdep assertion on sync reset unload event
    8da591ae2614 net/mlx5: Add support for sync reset using hot reset
    6292688e07d0 net/mlx5: Add device cap for supporting hot reset in sync reset flow
    09fd27c8621e net/mlx5: Reload auxiliary drivers on fw_activate
    7acefa4c66aa phy: mscc: Fix when PTP clock is register and unregister
    b3c70f6fc258 net: dlink: fix multicast stats being counted incorrectly
    589edd3dc8fb dt-bindings: display/msm: qcom,mdp5: drop lut clock
    dc70ea942fcd ice: fix incorrect counter for buffer allocation failures
    05fc7307e352 ice: stop storing XDP verdict within ice_rx_buf
    29bcd31ace16 ice: gather page_count()'s of each frag right before XDP prog call
    40a9f217cde1 ice: Introduce ice_xdp_buff
    4de399767ddc drm/nouveau: remove unused memory target test
    32a498445641 drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
    3c80c230d6e3 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
    4bd2866db002 Bluetooth: hci_sync: fix set_local_name race condition
    961abec8184a Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
    f356ed87c78c Bluetooth: hci_event: Mark connection as closed during suspend disconnect
    4c549d87f016 Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
    430786612abe HID: input: report battery status changes immediately
    61d733a568d8 HID: input: rename hidinput_set_battery_charge_status()
    e7d0bd359f4c powerpc/kvm: Fix ifdef to remove build warning
    6de90c2a3b6c drm/msm: Defer fd_install in SUBMIT ioctl
    a208d67cb44b net: ipv4: fix regression in local-broadcast routes
    9b2700151660 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
    181feb41f0b2 NFS: Fix a race when updating an existing write
    9a1963404cc2 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
    b15342e09644 ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
    612527136e0c erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
    8f8e6a781783 ASoC: codecs: tx-macro: correct tx_macro_component_drv name
    24b9ed739c8c smb: client: fix race with concurrent opens in rename(2)
    bc1427a48371 smb: client: fix race with concurrent opens in unlink(2)
    43662b846c7a scsi: core: sysfs: Correct sysfs attributes access rights
    28c8fb7ae2ad ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
    9e0743eb6dcf of: dynamic: Fix use after free in of_changeset_add_prop_helper()
    749137b41e70 of: Add a helper to free property struct
    d3be2b8cff6f mips: lantiq: xway: sysctrl: rename the etop node
    e877b861dab9 mips: dts: lantiq: danube: add missing burst length property
    6e59b8483e6e pinctrl: STMFX: add missing HAS_IOMEM dependency
    43e3118c677a of: dynamic: Fix memleak when of_pci_add_properties() failed

(From OE-Core rev: 212df1778245f7b299b549285ea0994234e163fa)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield 7b08b57feb linux-yocto/6.6: update to v6.6.103
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    cc1a1c5b404a Linux 6.6.103
    40b36d9a612b alloc_fdtable(): change calling conventions.
    a0a3ace2a578 netfilter: nf_reject: don't leak dst refcount for loopback packets
    c1aa819059b8 s390/hypfs: Enable limited access during lockdown
    972d84075e3b s390/hypfs: Avoid unnecessary ioctl registration in debugfs
    81a0f002e4fd ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
    7d67d591ecb0 net/mlx5e: Preserve shared buffer capacity during headroom updates
    dacf1ca11735 net/mlx5: Base ECVF devlink port attrs from 0
    c71a3e2b02e7 Octeontx2-af: Skip overlap check for SPI field
    2919ca876e15 bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
    45b70352d186 bonding: Add independent control state machine
    f0c7885ef8d3 bonding: update LACP activity flag after setting lacp_active
    ca88ac44368c net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
    aa12ee1c1bd2 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
    ee7134481ff7 igc: fix disabling L1.2 PCI-E link substate on I226 on init
    d10f670b6f86 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
    5189c0b7c251 LoongArch: Optimize module load time by optimizing PLT/GOT counting
    070b4af44c4b net/smc: fix UAF on smcsk after smc_listen_out()
    ba51d73408ed gve: prevent ethtool ops after shutdown
    748da8083122 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    3a4eeea79a46 phy: mscc: Fix timestamping for vsc8584
    ca18d751bcc9 ppp: fix race conditions in ppp_fill_forward_path
    06a7acd45a8f net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
    87f78799e358 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
    2156d9e9f2e4 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
    857b8387a977 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
    b79027f7ebb7 ALSA: usb-audio: Fix size validation in convert_chmap_v3()
    f93032e5d68f drm/hisilicon/hibmc: fix the hibmc loaded failed bug
    e50599adc966 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
    469c45c8a16a Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
    ae1d9779f089 Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
    8f80c633cba1 iommu/amd: Avoid stack buffer overflow from kernel cmdline
    f5ad0819f902 scsi: qla4xxx: Prevent a potential error pointer dereference
    96476b043efb net: bridge: fix soft lockup in br_multicast_query_expired()
    7aee3d519d63 RDMA/bnxt_re: Fix to initialize the PBL array
    5d3f018fc09a RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
    7b044e925aba RDMA/bnxt_re: Fix to do SRQ armena by default
    acf0dea8dc90 RDMA/erdma: Fix ignored return value of init_kernel_qp
    76588276fcf8 iosys-map: Fix undefined behavior in iosys_map_clear()
    34c3bc762bc4 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
    72553fe19317 drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
    ad994eda5d95 spi: spi-fsl-lpspi: Clamp too high speed_hz
    7207923d8453 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
    4986548825fe usb: typec: maxim_contaminant: disable low power mode when reading comparator values
    f56e75b85b54 usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
    e600de541c37 usb: xhci: Fix slot_id resource race conflict
    8d2b63fbfd4d iio: imu: inv_icm42600: change invalid data error to -EBUSY
    0af5812acfac iio: imu: inv_icm42600: Convert to uXX and sXX integer types
    ec3310a5168b iio: imu: inv_icm42600: use = { } instead of memset()
    f52d8ba43259 iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
    f13768b9b829 iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
    99b508340d0d iio: light: as73211: Ensure buffer holes are zeroed
    58ff8064cb4c tracing: Limit access to parser->buffer when trace_get_user failed
    648e01a023cb tracing: Remove unneeded goto out logic
    c09dd3773b59 tls: fix handling of zero-length records on the rx_list
    93879b3ba967 powerpc/boot: Fix build with gcc 15
    5c67f7e4330e mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
    03695cdfcb5e compiler: remove __ADDRESSABLE_ASM{_STR,}() again
    fa833df2ba9e drm/amd/display: Don't overclock DCE 6 by 15%
    7660124e6506 usb: dwc3: pci: add support for the Intel Wildcat Lake
    84c95dbf5bec usb: dwc3: Remove WARN_ON for device endpoint command timeouts
    319aba29a486 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
    dbfaa79103b4 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
    bf29c9618160 usb: storage: realtek_cr: Use correct byte order for bcs->Residue
    adfdc6ed189b USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
    cd3bace9c9a3 usb: renesas-xhci: Fix External ROM access timeouts
    3b4a57b5cc3b usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
    d84f6e77ebe3 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
    0eb4ed2aa261 comedi: pcl726: Prevent invalid irq number
    842f307a1d11 comedi: Make insn_rw_emulate_bits() do insn->n samples
    decaa5401cb4 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
    20729b825914 cdx: Fix off-by-one error in cdx_rpmsg_probe()
    4de009fc0a3a most: core: Drop device reference after usage in get_channel()
    bc4e3186a2e2 iio: proximity: isl29501: fix buffered read on big-endian systems
    6a605d307b02 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
    3b114a3282ab ftrace: Also allocate and copy hash for reading of filter files
    bb912a20fab0 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
    65e46aeaf84a drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
    d404824f3d25 cpuidle: governors: menu: Avoid selecting states with too much latency
    3a92598c3e55 cpuidle: menu: Remove iowait influence
    f0aa8591ba0c mmc: sdhci-pci-gli: Add a new function to simplify the code
    1eae029f79b6 mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
    fd269466abe6 selftests: mptcp: pm: check flush doesn't reset limits
    a9cf4362d4d0 mptcp: disable add_addr retransmission when timeout is 0
    ebe3d8cf1ee6 mptcp: remove duplicate sk_reset_timer call
    1982e18bbcc1 use uniform permission checks for all mount propagation changes
    c5aa6ba11273 fs/buffer: fix use-after-free when call bh_read() helper
    212eb86f75b4 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
    740ccba37a12 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
    342f7a1dda77 ext4: preserve SB_I_VERSION on remount
    047b4cb30e42 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
    c065c8d20dd0 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
    6d53b2a134da scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
    0c3333f7bfee PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
    d0252e69b932 PCI: imx6: Delay link start until configfs 'start' written
    cee067ef2055 PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
    7b688b365ace PCI: rockchip: Use standard PCIe definitions
    72ff3acf0044 soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
    ef2f64dff281 drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
    a98aa702c74f drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
    e95f4fd56f6c drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
    5b011264c5da drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
    36a6b43573d1 drm/amd/display: Avoid a NULL pointer dereference
    86c2825791c3 s390/sclp: Fix SCCB present check
    50db1ab0f3ec ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
    0a1385336970 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
    63962ff932ef mm/debug_vm_pgtable: clear page table entries at destroy_args()
    8d03bce0dcb2 squashfs: fix memory leak in squashfs_fill_super
    92c9689646c8 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
    0207d8faa1fb memstick: Fix deadlock by moving removing flag earlier
    28b82be094e2 KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
    d1446050a29a sched/fair: Fix frequency selection for non-invariant case
    858e035ea448 topology: Set capacity_freq_ref in all cases
    68df021d3cfa arm64/amu: Use capacity_ref_freq() to set AMU ratio
    cf4faefd3a7b cpufreq/cppc: Set the frequency used for computing the capacity
    11da2b1ae4c9 energy_model: Use a fixed reference frequency
    6688eb926932 cpufreq/schedutil: Use a fixed reference frequency
    9771732ab39c cpufreq: Use the fixed and coherent frequency for scaling capacity
    46db6d4797f1 sched/topology: Add a new arch_scale_freq_ref() method
    0ed2068de1f9 kbuild: userprogs: use correct linker when mixing clang and GNU ld
    5b7912d83962 ata: libata-scsi: Return aborted command when missing sense and result TF
    9e9b1fa7ecaa PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
    ac2e62cab097 PM: runtime: Simplify pm_runtime_get_if_active() usage
    c0f179c1547f ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
    dc35f594b0d2 usb: dwc3: imx8mp: fix device leak at unbind
    1636b5e9c354 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    365771ee3dc8 wifi: mac80211: check basic rates validity in sta_link_apply_parameters
    b59bea60396c KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
    65b6b10fc005 s390/mm: Remove possible false-positive warning in pte_free_defer()
    0852c97fec9c btrfs: send: make fs_path_len() inline and constify its argument
    8f3aae5fd76d btrfs: send: use fallocate for hole punching with send stream v2
    f942e47453a8 btrfs: send: avoid path allocation for the current inode when issuing commands
    dbda681a0a93 btrfs: send: keep the current inode's path cached
    ffc19fe2a7ad btrfs: send: add and use helper to rename current inode when processing refs
    bfed58ed10f1 btrfs: send: only use boolean variables at process_recorded_refs()
    253557254f8d btrfs: send: factor out common logic when sending xattrs
    b1947464c041 btrfs: populate otime when logging an inode item
    d7badc2ba4da btrfs: constify more pointer parameters
    9dfdea89ceb3 btrfs: fix ssd_spread overallocation
    9c64d6b07cbb btrfs: open code timespec64 in struct btrfs_inode
    8f85af32692d xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
    4734255ef39b btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
    467dcf7e4a61 btrfs: always abort transaction on failure to add block group to free space tree
    8c5bf13905f3 btrfs: move transaction aborts to the error site in add_block_group_free_space()
    b172535ccba1 btrfs: qgroup: fix race between quota disable and quota rescan ioctl
    d6f1a6c2f567 btrfs: don't ignore inode missing when replaying log tree
    a779d1dd7f2d usb: typec: fusb302: cache PD RX state
    827f7b4fe051 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
    80617b3926b6 block: Make REQ_OP_ZONE_FINISH a write operation
    6c77d4e0f6ad block: reject invalid operation in submit_bio_noacct
    3bbd52a413fc fscrypt: Don't use problematic non-inline crypto engines
    c8a1e1f02921 leds: flash: leds-qcom-flash: Fix registry access after re-bind
    71230248a711 leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
    84a24fb446ee net/sched: ets: use old 'nbands' while purging unused classes
    81505f137b3a net_sched: sch_ets: implement lockless ets_dump()
    00dc616e6cb5 smb: client: fix netns refcount leak after net_passive changes
    2668e038800b net: better track kernel sockets lifetime
    ac90037bf398 net: Add net_passive_inc() and net_passive_dec().
    5dd481868eb1 selftests/memfd: add test for mapping write-sealed memfd read-only
    2e4179698f84 mm: reinstate ability to map write-sealed memfd mappings read-only
    87a75f68eaba mm: update memfd seal write check to include F_SEAL_WRITE
    17c5d49beb6c mm: drop the assumption that VM_SHARED always implies writable
    440d36847a12 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
    253b7d8bafe6 mptcp: drop skb if MPTCP skb extension allocation fails
    cf0a88124e35 ACPI: pfr_update: Fix the driver update version check
    3ddd55cf19ed ipv6: sr: Fix MAC comparison to be constant-time
    b117c41b0090 net, hsr: reject HSR frame if skb can't hold tag
    3afdeb96dc5f drm/amd/display: Don't overwrite dce60_clk_mgr
    39f187cbf7ed drm/amd/display: Add primary plane to commits for correct VRR handling
    74ee7445c3b6 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
    627f30a328f2 drm/amdgpu: update mmhub 3.0.1 client id mappings
    a3201e3b7cf1 drm/amdgpu: Avoid extra evict-restore process.
    0e7f5f9aa498 drm/amd: Restore cached power limit during resume
    002860142ceb media: venus: venc: Clamp param smaller than 1fps and bigger than 240
    f866778583b6 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
    f54be97bc69b media: venus: protect against spurious interrupts during probe
    041015a46597 media: venus: hfi: explicitly release IRQ during teardown
    ba567c2e52fb media: venus: Add a check for packet size after reading from shared memory
    03c0e00ccf59 media: qcom: camss: cleanup media device allocated resource on error path
    3c0e4cc4f55f media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
    61f267b77dbc media: ov2659: Fix memory leaks in ov2659_probe()
    1c2769dc8025 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
    3d83d0b5ae50 media: usbtv: Lock resolution while streaming
    ecb7382089bc media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
    b3433cffee8d media: verisilicon: Fix AV1 decoder clock frequency
    6a41dc143e3c media: vivid: fix wrong pixel_array control size
    8ad57bd4a952 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
    c231d1964878 media: hi556: correct the test pattern configuration
    0148fcdd9140 media: gspca: Add bounds checking to firmware parser
    85bfcb0e40fe parisc: Update comments in make_insert_tlb
    9827b2b0c64e parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
    8bccf47adbf6 parisc: Revise gateway LWS calls to probe user read access
    4c981077255a parisc: Revise __get_user() to probe user read access
    d6ac1e11c4a0 parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
    033605fb20a3 parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
    69cf90e5aa50 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
    0199adb6d1f2 parisc: Define and use set_pte_at()
    b334724f6b31 parisc: Check region is readable by user in raw_copy_from_user()
    fe0886c98b63 soc/tegra: pmc: Ensure power-domains are in a known state
    41f40038de62 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
    92ef491b506a f2fs: fix to avoid out-of-boundary access in dnode page
    5d109edb38c9 phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
    adb482170045 vhost/vsock: Avoid allocating arbitrarily-sized SKBs
    ee438c492b2e vsock/virtio: Validate length in packet header before skb_put()
    6ee4578274d1 PCI: endpoint: Fix configfs group removal on driver teardown
    0758862386f1 PCI: endpoint: Fix configfs group list head handling
    d1f59c792c6f mtd: rawnand: renesas: Add missing check after DMA map
    fcb12d1e4163 mtd: rawnand: fsmc: Add missing check after DMA map
    9de4819feef9 mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
    b9e9afc35a89 mtd: spi-nor: Fix spi_nor_try_unlock_all()
    749ccc175ca5 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
    747977aeefd4 pwm: mediatek: Fix duty and period setting
    070236488cc9 pwm: mediatek: Handle hardware enable and clock enable separately
    cbf3815d8c11 pwm: imx-tpm: Reset counter if CMOD is 0
    aa48271f7bef wifi: ath11k: fix dest ring-buffer corruption when ring is full
    ee3c10c9738b wifi: ath11k: fix source ring-buffer corruption
    069819aa84d2 wifi: ath11k: fix dest ring-buffer corruption
    daa2b66fa569 wifi: ath12k: fix dest ring-buffer corruption when ring is full
    bfd4918b2b9b wifi: ath12k: fix source ring-buffer corruption
    b5b6201a2b75 wifi: ath12k: fix dest ring-buffer corruption
    97e07460ba85 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
    296bcff76d41 iio: adc: ad_sigma_delta: change to buffer predisable
    50e823a23816 iio: imu: bno055: fix OOB access of hw_xlate array
    e22e5ac22736 zynq_fpga: use sgtable-based scatterlist wrappers
    981c845f2983 soc: qcom: mdt_loader: Ensure we don't read past the ELF header
    bfa87a2cafb5 ata: libata-scsi: Fix CDL control
    6f5d34088250 scsi: ufs: ufs-pci: Fix default runtime and system PM levels
    03d559670ccd scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
    8247c4269acb ata: libata-scsi: Fix ata_to_sense_error() status handling
    728abc895294 scsi: mpi3mr: Fix race between config read submit and interrupt completion
    78f1d313442c dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
    c4adc491a326 dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
    745c9b114eaf arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
    d1aca165c1f1 arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
    06c3fda2bda8 arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
    2fdddc181262 btrfs: zoned: fix write time activation failure for metadata block group
    5fc0345e1af3 ext4: fix hole length calculation overflow in non-extent inodes
    e0bb195aea7a ext4: use kmalloc_array() for array space allocation
    173270d9fe86 ext4: don't try to clear the orphan_present feature block device is r/o
    d387cee49cfe ext4: fix reserved gdt blocks handling in fsmap
    052cd20d8d75 ext4: fix fsmap end of range reporting with bigalloc
    ab1cc862e55e ext4: check fast symlink for ea_inode correctly
    d0570a5b9ccc tracing: fprobe-event: Sanitize wildcard for fprobe event name
    d9e157fcfebc ksmbd: extend the connection limiting mechanism to support IPv6
    a1d2bab4d533 ksmbd: fix refcount leak causing resource not released
    820949bbf33f Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
    5858448a6c65 crypto: qat - flush misc workqueue during device shutdown
    fd2844179567 crypto: qat - lower priority for skcipher and aead algorithms
    ea95d4e8a263 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
    c82ad93be639 vt: defkeymap: Map keycodes above 127 to K_HOLE
    c0942ce38843 vt: keyboard: Don't process Unicode characters in K_OFF mode
    5e17429679a8 bus: mhi: host: Detect events pointing to unexpected TREs
    38de63c2876e bus: mhi: host: Fix endianness of BHI vector table
    e192ebb7521c usb: dwc3: meson-g12a: fix device leaks at unbind
    d52ad077933f usb: musb: omap2430: fix device leak at unbind
    21c400de1079 usb: gadget: udc: renesas_usb3: fix device leak at unbind
    295425f52052 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
    e06e9ef1912c m68k: Fix lost column on framebuffer debug console
    b4b21367cb9c platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
    1bf5cc1edb37 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
    cb7b3633ed74 serial: 8250: fix panic due to PSLVERR
    2328010117d0 rcu: Fix racy re-initialization of irq_work causing hangs
    049874a185aa HID: apple: avoid setting up battery timer for devices without battery
    05a40e70ff5a HID: magicmouse: avoid setting up battery timer when not needed
    5661fdd218c2 RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
    b9669bedc63d tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
    fdd1c9f78c24 media: uvcvideo: Do not mark valid metadata as invalid
    8f274e2b05fd media: venus: Fix OOB read due to missing payload bound check
    a97e062e4ff3 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
    1da95d3d4b7b mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
    e21a3ddd5873 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
    74fb3b1b335b parisc: Makefile: fix a typo in palo.conf
    2a70cbd1aef8 hv_netvsc: Fix panic during namespace deletion with VF
    27b118aebdd8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    f83d4c81bda3 btrfs: do not allow relocation of partially dropped subvolumes
    77e07f7226f4 btrfs: zoned: do not select metadata BG as finish target
    6b801da8e146 btrfs: fix log tree replay failure due to file with 0 links and extents
    a002525b2fd7 btrfs: clear dirty status from extent buffer on error at insert_new_root()
    99e36ff41a74 btrfs: zoned: do not remove unwritten non-data block group
    e02bdb223399 btrfs: abort transaction during log replay if walk_log_tree() failed
    ec5bfcfb6e0d btrfs: zoned: use filesystem size not disk size for reclaim decision
    9dfe40cb6c2c cdc-acm: fix race between initial clearing halt and open
    729ac69a3e81 thunderbolt: Fix copy+paste error in match_service_id()
    5c4a2ffcbd05 comedi: fix race between polling and detaching
    e613904fa419 usb: typec: ucsi: Update power_supply on power role change
    ca9fb654f89b misc: rtsx: usb: Ensure mmc child device is active when card is present
    5badd56c711e usb: core: config: Prevent OOB read in SS endpoint companion parsing
    492207cf8372 ext4: fix largest free orders lists corruption on mb_optimize_scan switch
    88d02c333989 ext4: fix zombie groups in average fragment size lists
    d19b817540c0 iommufd: Prevent ALIGN() overflow
    2ccccb0e4178 iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
    a11b6ee7cab8 iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
    7e0c0664e9aa cifs: reset iface weights when we cannot find a candidate
    1b6310d14b13 drm/amdgpu: fix incorrect vm flags to map bo
    3fbc2e43ab12 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
    8270fbcc1ec4 scsi: lpfc: Remove redundant assignment to avoid memory leak
    063fe9b16be1 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
    24334f3cf8a2 pNFS: Fix uninited ptr deref in block/scsi layout
    198f26c55779 pNFS: Handle RPC size limit for layoutcommits
    2c5b079bcb31 pNFS: Fix disk addr range check in block/scsi layout
    cf949a960653 pNFS: Fix stripe mapping in block/scsi layout
    3b9d69f0e68a block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
    1df5970cd93d ASoC: Intel: avs: Fix uninitialized pointer error in probe()
    f2e480950d1c net: phy: smsc: add proper reset flags for LAN8710A
    6b93ab1ad84a ipmi: Fix strcpy source and destination the same
    9da4d5c3ea6b kconfig: lxdialog: fix 'space' to (de)select options
    44337363300f kconfig: gconf: fix potential memory leak in renderer_edited()
    e55c6f052032 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
    933992c60c07 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
    2e07a9fe5117 vfio/mlx5: fix possible overflow in tracking max message size
    48d7bdd8759c scsi: aacraid: Stop using PCI_IRQ_AFFINITY
    0787a522cc9c scsi: target: core: Generate correct identifiers for PR OUT transport IDs
    a40c4af8083d scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
    28d64271510e kconfig: nconf: Ensure null termination where strncpy is used
    106ab3cd026f vfio/type1: conditional rescheduling while pinning
    98b7b47cebe3 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
    b45134f72642 f2fs: check the generic conditions first
    868f23286c1a exfat: add cluster chain loop check for dir
    6af18148675f i2c: Force DLL0945 touchpad i2c freq to 100khz
    f8c001884bb4 apparmor: use the condition in AA_BUG_FMT even with debug disabled
    dd45d42ab290 dm-table: fix checking for rq stackable devices
    f4133dc2b93d dm-mpath: don't print the "loaded" message if registering fails
    cf4a40ad2116 i3c: master: Initialize ret in i3c_i2c_notifier_call()
    4e24a6a42d91 i3c: don't fail if GETHDRCAP is unsupported
    2e487c0fdeb9 apparmor: shift ouid when mediating hard links in userns
    ef8814a9d64a rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
    6e3733fe88a0 i3c: add missing include to internal header
    6dd90afb3945 module: Prevent silent truncation of module name in delete_module(2)
    d386c8e4e587 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
    b0cab3d9c70d soundwire: Move handle_nested_irq outside of sdw_dev_lock
    1e3697578567 soundwire: amd: serialize amd manager resume sequence during pm_prepare
    d2974cfd4fa6 crypto: octeontx2 - add timeout for load_fvc completion poll
    ae5a0993f1e4 media: uvcvideo: Fix bandwidth issue for Alcor camera
    6bbaec6a0369 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
    09906650484a media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
    77ac2addb1dc media: usb: hdpvr: disable zero-length read messages
    1512ced62c87 media: tc358743: Increase FIFO trigger level to 374
    9b023149b97a media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    5c809ef89e1b media: tc358743: Check I2C succeeded during probe
    815cb5818eef pinctrl: stm32: Manage irq affinity settings
    67bca5b04313 scsi: mpi3mr: Correctly handle ATA device errors
    80726da54c29 scsi: mpt3sas: Correctly handle ATA device errors
    924226822419 power: supply: qcom_battmgr: Add lithium-polymer entry
    7925dd68807c scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
    8c449e588d81 RDMA/core: reduce stack using in nldev_stat_get_doit()
    89fdac333a17 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
    773612b1edf3 dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
    01c412e31d98 leds: leds-lp50xx: Handle reg to get correct multi_index
    07cba8891f2c media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
    f54eacb5b7f8 MIPS: lantiq: falcon: sysctrl: fix request memory check logic
    f22de2027b20 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
    9021924d8893 crypto: jitter - fix intermediary handling
    173cfd741ad7 jfs: upper bound check of tree index in dbAllocAG
    78989af5bbf5 jfs: Regular file corruption check
    34d8e982bac4 jfs: truncate good inode pages when hard link is 0
    39cfe2c83146 scsi: bfa: Double-free fix
    2b98d2c23317 watchdog: iTCO_wdt: Report error if timeout configuration fails
    7fe9533fb069 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
    6caa737a77a5 clk: qcom: ipq5018: keep XO clock always on
    16e245176777 hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
    d202efb10a4b watchdog: dw_wdt: Fix default timeout
    478bd3bc4e7f fs/orangefs: use snprintf() instead of sprintf()
    66a373f50b42 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
    4db46a83d817 phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
    41368857a354 mfd: axp20x: Set explicit ID for AXP313 regulator
    6c9e12fef997 clk: tegra: periph: Fix error handling and resolve unsigned compare warning
    d960f4b79391 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    de6af003239a crypto: hisilicon/hpre - fix dma unmap sequence
    cbe740de32bb fbdev: fix potential buffer overflow in do_register_framebuffer()
    6daa13c20190 cifs: Fix calling CIFSFindFirst() for root path without msearch
    74e7af8334c9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
    3a5236c610e2 drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
    8708914f05ec drm/amd/display: Only finalize atomic_obj if it was initialized
    110822d339a0 vhost: fail early when __vhost_add_used() fails
    c2bdb45f366a vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
    bc9ef9783c6b net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
    e7a375453cca rcu: Fix rcu_read_unlock() deadloop due to IRQ work
    58ed3ac8538c drm/ttm: Respect the shrinker core free target
    39de3ce65635 drm/amd/display: Avoid trying AUX transactions on disconnected ports
    d02ee5eebbcf selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
    c03a532fe1d3 bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
    86f3cff54956 uapi: in6: restore visibility of most IPv6 socket options
    3c9ca275100e drm/ttm: Should to return the evict error
    e4b67ceb8634 drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
    1df5e6eb71e4 net: ncsi: Fix buffer overflow in fetching version id
    859c54bb0120 ionic: clean dbpage in de-init
    ec33caca7662 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
    c2e719bcaa26 ptp: Use ratelimite for freerun error message
    868b52651f69 bpftool: Fix JSON writer resource leak in version command
    d930e738c0a8 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
    8609f3c44e27 net: dsa: b53: prevent DIS_LEARNING access on BCM5325
    bc0e01d663f4 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
    668280aa65fc net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
    7f36d13d5243 gve: Return error for unknown admin queue command
    a1172cbfe51c net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
    8d1f4798c876 net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
    63acb8e26620 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
    50dbeff47178 dpaa_eth: don't use fixed_phy_change_carrier
    7c299d0bc983 neighbour: add support for NUD_PERMANENT proxy entries
    a70c31416ddd wifi: iwlegacy: Check rate_idx range after addition
    ad8742e2d1da netmem: fix skb_frag_address_safe with unreadable skbs
    88517afa7401 powerpc: floppy: Add missing checks after DMA map
    eb1e1526b82b wifi: ath12k: Decrement TID on RX peer frag setup error handling
    9874a00ba22b wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
    afb39537d894 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
    c387d8fcd330 wifi: mac80211: update radar_required in channel context after channel switch
    cf48c230a17a drm/amd/display: Fix 'failed to blank crtc!'
    c43b6b0a8342 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
    83aba958e33f wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
    5c942d80f3e8 wifi: ath12k: Add memset and update default rate value in wmi tx completion
    9febff30eb52 drm/amd/display: Separate set_gsl from set_gsl_source_select
    f2a4ca5397f5 net: fec: allow disable coalescing
    b3472b9d9d42 net: atlantic: add set_power to fw_ops for atl2 to fix wol
    3d8090bb5342 xfrm: Duplicate SPI Handling
    81667abecebc net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
    99f142ec75dd net: thunderbolt: Enable end-to-end flow control also in transmit
    bdd66b918215 kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
    b6c39aaa85c4 wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
    51eb6a5f209b wifi: rtw89: Disable deep power saving for USB/SDIO
    ecf449ef73a5 wifi: rtw89: Fix rtw89_mac_power_switch() for USB
    f3d4fa12d6b0 drm/msm: use trylock for debugfs
    e457e0560b55 wifi: mac80211: fix rx link assignment for non-MLO stations
    f7bc50927b4e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
    5a9b21808323 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
    ffa3a8007d2f wifi: mac80211: don't complete management TX on SAE commit
    c73e54dba107 sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
    3f8bcc32050e s390/stp: Remove udelay from stp_sync_clock()
    11238e68cb68 wifi: iwlwifi: mvm: fix scan request validation
    6cd174be9239 um: Re-evaluate thread flags repeatedly
    dae6099edf91 wifi: iwlwifi: mvm: set gtk id also in older FWs
    8baba93e2e95 perf/cxlpmu: Remove unintended newline from IRQ name format string
    05ee035af6d8 net: phy: micrel: Add ksz9131_resume()
    fd6a21638a1e net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
    c133a9327d2d net: ipv4: fix incorrect MTU in broadcast routes
    606908835bc4 wifi: cfg80211: Fix interface type validation
    a4d2cdb31cf4 net: mctp: Prevent duplicate binds
    b55947b725f1 rcu: Protect ->defer_qs_iw_pending from data race
    e424653498e4 arm64: Mark kernel as tainted on SAE and SError panic
    ac361868f134 net/mlx5e: Properly access RCU protected qdisc_sleeping variable
    d1c8d2426a63 net: ag71xx: Add missing check after DMA map
    b0862e88b887 et131x: Add missing check after DMA map
    72cdcaeaa95b wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
    b16dfa7b4c94 be2net: Use correct byte order and format string for TCP seq and ack_seq
    d46484e9dbb2 s390/time: Use monotonic clock in get_cycles()
    65b7c838736d wifi: cfg80211: reject HTC bit for management frames
    7eb1e485bc84 ktest.pl: Prevent recursion of default variable options
    30cad8797805 wifi: ath12k: Correct tid cleanup when tid setup fails
    5d3559880e9c net: usb: cdc-ncm: check for filtering capability
    8f5015143227 xen/netfront: Fix TX response spurious interrupts
    5ac23fc080be Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
    b84f88749ecf powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
    245d23754f5b ASoC: qcom: use drvdata instead of component to keep id
    c3d3492b12dd ASoC: codecs: rt5640: Retry DEVICE_ID verification
    70b3c831cfea iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
    2925edfa98f7 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
    2f81d6e98f32 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
    0de69bc9b366 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
    7731b7d596c5 platform/chrome: cros_ec_typec: Defer probe on missing EC parent
    8c046583a234 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
    c2c252d2c180 soc: qcom: mdt_loader: Actually use the e_phoff
    7589729947aa imx8m-blk-ctrl: set ISI panic write hurry level
    ac62b8f82b24 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
    454a27cbab9b usb: core: usb_submit_urb: downgrade type check
    0455858931ff usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
    41f53afe53a5 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
    789aa0b98854 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
    2828f2c4f2e9 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
    b80d6972859b x86/bugs: Avoid warning when overriding return thunk
    16cdf4f5b959 ALSA: hda: Disable jack polling at shutdown
    240e611b784d ALSA: hda: Handle the jack polling always via a work
    d54d1405f2c6 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
    24f4ceeaeee7 mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
    a29868db6dcf char: misc: Fix improper and inaccurate error code returned by misc_init()
    f8818e29d268 reset: brcmstb: Enable reset drivers for ARCH_BCM2835
    ff28f5dc3872 pps: clients: gpio: fix interrupt handling order in remove path
    d9d611639bea ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
    d3dd520206bd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
    f95174d4d5c4 ACPI: processor: fix acpi_object initialization
    e656c2db4922 PM: sleep: console: Fix the black screen issue
    753cd9f3d396 thermal: sysfs: Return ENODATA instead of EAGAIN for reads
    64d78290599a PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
    5aa770f45da7 firmware: tegra: Fix IVC dependency problems
    ab3bf61d9351 ACPI: PRM: Reduce unnecessary printing to avoid user confusion
    783a726d509e selftests: tracing: Use mutex_unlock for testing glob filter
    6ec6282acd89 tools/build: Fix s390(x) cross-compilation with clang
    46b3a7a3a36d ARM: tegra: Use I/O memcpy to write to IRAM
    149b733d5f80 gpio: tps65912: check the return value of regmap_update_bits()
    3c3454b02c62 iio: adc: ad_sigma_delta: don't overallocate scan buffer
    0a4757bf988e tools/nolibc: define time_t in terms of __kernel_old_time_t
    58a39eda7f95 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
    cfa9b873a29c ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
    7423fc4da94d EDAC/synopsys: Clear the ECC counters on init
    f53e16dde8ad PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
    d7d6d076ee95 ARM: rockchip: fix kernel hang during smp initialization
    6a8b0c7e93df cpufreq: Exit governor when failed to start old governor
    20bbe54f454f gpio: wcd934x: check the return value of regmap_update_bits()
    6b8a8eac58a9 remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
    082735fbcdb6 ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
    84518ec7f928 soc: qcom: rpmh-rsc: Add RSC version 4 support
    16a5088670e6 usb: xhci: Avoid showing errors during surprise removal
    dabf502ee893 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
    4a62f49f3d04 usb: xhci: Avoid showing warnings for dying controller
    6cd81d4ffbaa usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
    b2ba2ad06d8a selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
    146262a48be2 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
    f5611a58f7af platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
    2d32f522c33a usb: xhci: print xhci->xhc_state when queue_command failed
    839312bff2c9 tracefs: Add d_delete to remove negative dentries
    d7e28036b0e9 securityfs: don't pin dentries twice, once is enough...
    270ea0b61725 fix locking in efi_secret_unlink()
    327276cb8a7e ext2: Handle fiemap on empty files to prevent EINVAL
    6c7fadac6cbc fs/ntfs3: correctly create symlink for relative path
    3572737a768d fs/ntfs3: Add sanity check for file name
    934065fd3024 ata: libata-sata: Disallow changing LPM state if not supported
    847a204d3067 better lockdep annotations for simple_recursive_removal()
    cb7b59560400 hfs: fix not erasing deleted b-tree node issue
    9f53b2433ad2 drbd: add missing kref_get in handle_write_conflicts
    5a1e1ab83796 udf: Verify partition map count
    ce8da5d13d8c loop: Avoid updating block size under exclusive owner
    3d2c05cbc6a3 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
    524ce0f943d7 nvme-pci: try function level reset on init failure
    1e858a7a51c7 smb/server: avoid deadlock when linking with ReplaceIfExists
    61ad294996c0 arm64: Handle KCOV __init vs inline mismatches
    b3359392b753 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
    291bb5d931c6 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    8583d067ae22 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    384a66b89f95 hfs: fix slab-out-of-bounds in hfs_bnode_read()
    4f032979b63a hfs: fix general protection fault in hfs_find_init()
    f1fe99919f62 tls: handle data disappearing from under the TLS ULP
    acfb4da42fc4 ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
    7337a6356dff cpuidle: governors: menu: Avoid using invalid recent intervals data
    c11f3802d349 intel_idle: Allow loading ACPI tables for any family
    ea094f38d387 sctp: linearize cloned gso packets in sctp_rcv
    7f94af487c7f net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
    30cf81105855 netfilter: ctnetlink: fix refcount leak on table dump
    19e01bc8c1ac udp: also consider secpath when evaluating ipsec use for checksumming
    e65ad9a14256 KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
    91fa23d5b9e5 KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
    8867d91ef824 KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
    d1e28ef79b43 KVM: VMX: Extract checking of guest's DEBUGCTL into helper
    48ebed8bd66b KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
    ec70c3f25777 KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
    0d87da9d6065 KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
    d5aa9bb5e348 KVM: x86: Fully defer to vendor code to decide how to force immediate exit
    62f586df29ca KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
    ca3cc405a3bc KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
    1c1158aceaf2 KVM: VMX: Handle forced exit due to preemption timer in fastpath
    1fc288e74cf3 KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
    baf9c96e4e9d KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
    a1d4091f94c6 KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
    76025761e8f3 KVM: x86: Snapshot the host's DEBUGCTL in common x86
    cf04778ae1b5 KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
    ebc281bf14aa KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
    abe3d6a559f9 KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
    d5784ea45663 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
    edc450030b20 smb: client: don't wait for info->send_pending == 0 on error
    429112e9709b smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
    19849010c9e1 ACPI: processor: perflib: Move problematic pr->performance check
    cb2e6e275d19 ACPI: processor: perflib: Fix initial _PPC limit application
    8c09ad855fbf Documentation: ACPI: Fix parent device references
    2a0c0c974bea eventpoll: Fix semi-unbounded recursion
    237e416eb621 fs: Prevent file descriptor table allocations exceeding INT_MAX
    a5ff67c66208 sunvdc: Balance device refcount in vdc_port_mpgroup_check
    17c010fe45de LoongArch: BPF: Fix jump offset calculation in tailcall
    d89d47abbad2 PCI: Extend isolated function probing to LoongArch
    987c20428f06 NFS: Fix the setting of capabilities when automounting a new filesystem
    f0b89916d2fe NFSD: detect mismatch of file handle and delegation stateid in OPEN op
    d71abd1ae4e0 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    3b53dc1c641f io_uring/net: commit partial buffers on retry
    ccef5ee4adf5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    eb2d79333f79 net: dpaa: fix device leak when querying time stamp info
    fd5c51a187ba net: ti: icss-iep: fix device and OF node leaks at probe
    5daff127b292 net: mtk_eth_soc: fix device leak at probe
    9adaf9a04f9a net: enetc: fix device and OF node leak at probe
    dc395c838610 net: gianfar: fix device leak when querying time stamp info
    8dae82f81e34 net: phy: micrel: fix KSZ8081/KSZ8091 cable test
    346c820ef513 netlink: avoid infinite retry looping in netlink_unicast()
    c66caf21b1d0 Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
    16a46f2e84d7 gpio: mlxbf3: use platform_get_irq_optional()
    c1aa0743e54b Revert "gpio: mlxbf3: only get IRQ for device instance 0"
    a157478521b3 gpio: mlxbf2: use platform_get_irq_optional()
    50ae9f2d90b2 gpio: virtio: Fix config space reading.
    217e18011663 smb: client: remove redundant lstrp update in negotiate protocol
    a0620e152566 smb3: fix for slab out of bounds on mount to ksmbd
    d63e929bac53 ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
    fb5000cfd7bc ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
    1034719fdefd ALSA: usb-audio: Validate UAC3 cluster segment descriptors
    07c8d78dbb5e ALSA: usb-audio: Validate UAC3 power domain descriptors, too
    17a66aef7ddc io_uring: don't use int for ABI

(From OE-Core rev: f9c140c4856790ae7b752849f4df6533ca5d0027)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield a9224824c3 linux-yocto/6.6: update to v6.6.102
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    bb9c90ab9c5a Linux 6.6.102
    aada327a9f80 usb: gadget : fix use-after-free in composite_dev_cleanup()
    e1ee74b9eeb2 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    d98b34c40dc7 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    ab85071a0354 x86/fpu: Delay instruction pointer fixup until after warning
    575b71627529 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    48a8a2dfc3f5 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    1fb873971e23 x86/sev: Evict cache lines during SNP memory validation
    fdf6959b700b net: usbnet: Fix the wrong netif_carrier_on() call
    3c6236588dc8 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    2b98a1539736 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    ae591cf2348a sched,freezer: Remove unnecessary warning in __thaw_task
    036bdae8c985 freezer,sched: Clean saved_state when restoring it during thaw
    2e62985121b7 freezer,sched: Do not restore saved_state of a thawed task
    e241ca2f0ec3 freezer,sched: Use saved_state to reduce some spurious wakeups
    8afa818c7733 sched/core: Remove ifdeffery for saved_state
    2c9a096e202c i2c: stm32f7: unmap DMA mapped buffer
    bab0986dc045 i2c: stm32f7: simplify status messages in case of errors
    d786b6592030 i2c: stm32f7: perform most of irq job in threaded handler
    9bfaaa964014 i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
    de7c7caea59b i2c: stm32f7: Use devm_clk_get_enabled()
    66bf243531ee USB: serial: option: add Foxconn T99W709
    2f4d88f5e5ee smb: server: Fix extension string in ksmbd_extract_shortname()
    fa1c47af4ff6 ksmbd: limit repeated connections from clients with the same IP
    62d136d30621 ksmbd: fix corrupted mtime and ctime in smb2_open
    b69fd87076da ksmbd: fix Preauh_HashValue race condition
    d79c8bebaa62 ksmbd: fix null pointer dereference error in generate_encryptionkey
    44bd006d5c93 vsock: Do not allow binding to VMADDR_PORT_ANY
    88caf46db823 net/packet: fix a race in packet_set_ring() and packet_notifier()
    29d417b1a0d5 selftests/perf_events: Add a mmap() correctness test
    6757a31a8e29 perf/core: Prevent VMA split of buffer mappings
    f41e9eba77bf perf/core: Exit early on perf_mmap() fail
    f07ab7a4b572 perf/core: Don't leak AUX buffer refcount on allocation failure
    b1df39462171 sunrpc: fix handling of server side tls alerts
    d2622f38652c smb: client: return an error if rdma_connect does not return within 5 seconds
    bd7f84df5436 pptp: fix pptp_xmit() error path
    4e5cf39e4064 smb: client: let recv_done() cleanup before notifying the callers.
    83d2a4185f5a smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    f069f7c14204 smb: client: make use of common smbdirect_socket
    947569b95987 smb: smbdirect: add smbdirect_socket.h
    61f0a6849005 smb: client: Correct typos in multiple comments across various files
    91d7e6cbb3f8 smb: client: Use min() macro
    c29dbc44fbf7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
    66110b35bebc smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
    e67aff50476f smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    28db0cb8a0da smb: server: remove separate empty_recvmsg_queue
    2e4463f44e9b ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    cd2a7f950038 irqchip: Build IMX_MU_MSI only on ARM
    39491e859fd4 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    c377ba2be943 benet: fix BUG when creating VFs
    a55b3d153318 sunrpc: fix client side handling of tls alerts
    a7176675c39a net/sched: taprio: enforce minimum value for picos_per_byte
    0d45954034f8 net: drop UFO packets in udp_rcv_segment()
    ef05007b403d ipv6: reject malicious packets in ipv6_gso_segment()
    194cd28c889a net/mlx5: Correctly set gso_segs when LRO is used
    97ed92a23f0b netlink: specs: ethtool: fix module EEPROM input/output arguments
    5005d2437737 pptp: ensure minimal skb length in pptp_xmit()
    5fde6e016004 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    b80353a72958 phy: mscc: Fix parsing of unicast frames
    b0cf318f5cc6 netpoll: prevent hanging NAPI when netcons gets enabled
    227154eb7567 md/md-cluster: handle REMOVE message earlier
    75ed1f6ed8ee NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    1116e66111f8 NFSv4.2: another fix for listxattr
    12ad3def2e5e NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    30a739931ed8 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    147216030e46 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
    3bdb29df2f0d pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    6e7b24c71e53 PCI: pnv_php: Fix surprise plug detection and recovery
    a426e8a6ae16 powerpc/eeh: Make EEH driver device hotplug safe
    3f49abdf88b6 powerpc/eeh: Export eeh_unfreeze_pe()
    17dabd7efb28 PCI: pnv_php: Work around switches with broken presence detection
    32173edf3fe2 PCI: pnv_php: Clean up allocated IRQs on unplug
    9184a2bb522c sched/psi: Fix psi_seq initialization
    9ea1cc8b0e95 kconfig: qconf: fix ConfigList::updateListAllforAll()
    05b450da93c6 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    450b2a5cf6e4 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
    4933567ef9e6 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    087a8a7ca354 scsi: mpt3sas: Fix a fw_event memory leak
    349436bf11b8 vfio/pci: Separate SR-IOV VF dev_set
    7dbfae90c5a3 vfio/pds: Fix missing detach_ioas op
    9546b26d391f vfio: Prevent open_count decrement to negative
    a6c5e25861e3 vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    f289690f50a0 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
    704613681c1c f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    e33c22f2eeba f2fs: fix to update upper_p in __get_secs_required() correctly
    1023836d1b94 f2fs: vm_unmap_ram() may be called from an invalid context
    345fc8d1838f f2fs: fix to avoid out-of-boundary access in devs.path
    880ef748e78a f2fs: fix to avoid panic in f2fs_evict_inode
    3d37cadaac1a f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    a96f2bf49fbd f2fs: doc: fix wrong quota mount option description
    dabfa3952c8e f2fs: fix KMSAN uninit-value in extent_info usage
    c1c818b636d4 rtc: rv3028: fix incorrect maximum clock rate handling
    f5790cc2ee6f rtc: pcf8563: fix incorrect maximum clock rate handling
    e337c72b17c6 rtc: pcf85063: fix incorrect maximum clock rate handling
    8456b3e28acf rtc: nct3018y: fix incorrect maximum clock rate handling
    17827903802b rtc: hym8563: fix incorrect maximum clock rate handling
    bb94a96374db rtc: ds1307: fix incorrect maximum clock rate handling
    15da236904ec ucount: fix atomic_long_inc_below() argument type
    f9bd692540d8 module: Restore the moduleparam prefix length check
    7500ba6533ab apparmor: fix loop detection used in conflicting attachment resolution
    fad01f7e0d3e apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    4795bcafe9a8 bpf: Check netfilter ctx accesses are aligned
    f56f6054791e bpf: Check flow_dissector ctx accesses are aligned
    d3bf3088f7e9 vhost-scsi: Fix log flooding with target does not exist errors
    ebc6e1d0e97a mtd: rawnand: atmel: set pmecc data setup time
    a01bc4245e43 mtd: rawnand: rockchip: Add missing check after DMA map
    7d0b53a6d199 mtd: rawnand: atmel: Fix dma_mapping_error() address
    505f4111dd98 jfs: fix metapage reference count leak in dbAllocCtl
    4b5d36cc3014 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    0aa273dbcf53 crypto: qat - fix seq_file position update in adf_ring_next()
    1c178ccb6caf crypto: qat - fix DMA direction for compression on GEN2 devices
    9ff4de5bd11a perf tools: Remove libtraceevent in .gitignore
    106891c7bdbc sh: Do not use hyphen in exported variable name
    f658f3676538 ASoC: fsl_xcvr: get channel status data when PHY is not exists
    3187ffe08ff0 dmaengine: nbpfaxi: Add missing check after DMA map
    06ddbb28b72b dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    25d15b0d2b42 fs/orangefs: Allow 2 more characters in do_c_string()
    b93d06499b6f PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
    bdbaa1041816 soundwire: stream: restore params when prepare ports fail
    ac961f6c6dc5 crypto: img-hash - Fix dma_unmap_sg() nents value
    06bc14f9d047 crypto: keembay - Fix dma_unmap_sg() nents value
    5d481d4bea06 hwrng: mtk - handle devm_pm_runtime_enable errors
    9c590ae73c3e watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    a23fa17e6bec scsi: isci: Fix dma_unmap_sg() nents value
    401fcb7e557d scsi: mvsas: Fix dma_unmap_sg() nents value
    cf9c5b15c4ab scsi: elx: efct: Fix dma_unmap_sg() nents value
    214f94ee5d77 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    5b63d6dec556 clk: sunxi-ng: v3s: Fix de clock definition
    c07e017a56d6 perf tests bp_account: Fix leaked file descriptor
    9b2a3e718902 pinmux: fix race causing mux_owner NULL with active mux_usecount
    33c778ea0bd0 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
    adf2da0bf119 kernel: trace: preemptirq_delay_test: use offstack cpu mask
    5449e60e1cbb RDMA/hns: Fix -Wframe-larger-than issue
    db1114685317 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    a762bbe11269 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    b86fd2e61a2c perf sched: Fix memory leaks in 'perf sched latency'
    282d4b34694f perf sched: Fix memory leaks for evsel->priv in timehist
    16ce5ce11145 perf sched: Free thread->priv using priv_destructor
    e5de9ea7796e perf dso: Add missed dso__put to dso__load_kcore
    9fe9f9459951 perf tools: Fix use-after-free in help_unknown_cmd()
    a99cae46ab16 Fix dma_unmap_sg() nents value
    8724a228be43 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    45338af03ff3 fanotify: sanitize handle_type values when reporting fid
    e8b4c9e60a7a pinctrl: sunxi: Fix memory leak on krealloc failure
    85a7746a05ea PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
    3f5186fd43be crypto: arm/aes-neonbs - work around gcc-15 warning
    f693be157c59 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    8e9bdb563916 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
    51990eecf22f clk: xilinx: vcu: unregister pll_post only if registered correctly
    a2b437a88370 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    1d92608a2925 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    530d4db6fb89 mtd: fix possible integer overflow in erase_xfer()
    aff3e6eacef2 crypto: marvell/cesa - Fix engine load inaccuracy
    be1e15938a16 crypto: qat - use unmanaged allocation for dc_data
    25c161a8bed1 crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    0c93cd98d0c8 PCI: rockchip-host: Fix "Unexpected Completion" log message
    e1c3d14c8252 bpf/preload: Don't select USERMODE_DRIVER
    3bb72c2e9622 ipv6: annotate data-races around rt->fib6_nsiblings
    9cb6de8ee144 ipv6: fix possible infinite loop in fib6_info_uses_dev()
    e1b7932af47f ipv6: prevent infinite loop in rt6_nlmsg_size()
    f237664113fe vrf: Drop existing dst reference in vrf_ip6_input_dst
    dddfc5a996af selftests: rtnetlink.sh: remove esp4_offload after test
    314f568b84b0 net/mlx5e: Remove skb secpath if xfrm state is not found
    4d81205d27c3 net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    58004aa21e79 netfilter: xt_nfacct: don't assume acct name is null-terminated
    9705b8b92d6a can: kvaser_usb: Assign netdev.dev_port based on device channel index
    56a17d28c3dd can: kvaser_pciefd: Store device channel index
    2ac7efc5deef can: peak_usb: fix USB FD devices potential malfunction
    c9be5abdaf2e tools/rv: Do not skip idle in trace
    ee2502485702 bpf: Disable migration in nf_hook_run_bpf().
    9d5aecb57e93 Bluetooth: hci_event: Mask data status from LE ext adv reports
    cdb509f59aaf kcsan: test: Initialize dummy variable
    bf88b7c114d4 wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    50e98be435df wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
    21e317484d3b wifi: ath12k: fix endianness handling while accessing wmi service bit
    dde152043f6d Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    9c8e9da118a8 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
    f74d4525ebad wifi: mac80211: Don't call fq_flow_idx() for management frames
    bc6f35967d9a wifi: mac80211: Do not schedule stopped TXQs
    2874717012d1 wifi: plfxlc: Fix error handling in usb driver probe
    378ae9ccaea3 wifi: mac80211: reject TDLS operations when station is not associated
    df51cc1e965a iommu/amd: Fix geometry.aperture_end for V2 tables
    03df73480547 mwl8k: Add missing check after DMA map
    5cb4349d0c35 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    20a1e6536424 tcp: call tcp_measure_rcv_mss() for ooo packets
    9a20c9da5ff1 xen/gntdev: remove struct gntdev_copy_batch from stack
    c9eeae9639ea net_sched: act_ctinfo: use atomic64_t for three counters
    103c4e27ec9f net/sched: Restrict conditions for adding duplicating netems to qdisc tree
    0967ee88ec1e um: rtc: Avoid shadowing err in uml_rtc_start()
    98f1a97d8627 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    9ac58afb0cca netfilter: nf_tables: adjust lockdep assertions handling
    b488bee5e92f netfilter: nf_tables: Drop dead code from fill_*_info routines
    f56a863397f5 fbcon: Fix outdated registered_fb reference in comment
    b1c6b13f48a8 sched/psi: Optimize psi_group_change() cpu_clock() usage
    dabe5fc2ee7a drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    6e2f7903241c m68k: Don't unregister boot console needlessly
    7f0377ca6993 drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    6d029d85aa2b kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    f73c0bc2d1d3 net: dst: annotate data-races around dst->output
    e0b8b6687b7d net: dst: annotate data-races around dst->input
    62d7cf455c88 net/mlx5: Check device memory pointer before usage
    c45a33903e24 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    5bf201c55fdf wifi: ath11k: clear initialized flag for deinit-ed srng lists
    ca980f1911a7 iwlwifi: Add missing check for alloc_ordered_workqueue
    d5491ff785f4 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    14ca6952691f wifi: rtl818x: Kill URBs before clearing tx status queue
    892b29eab44b wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
    655e3f51de5a caif: reduce stack size, again
    0abd1f48cd25 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    0f18414f1d6b drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    cc7af1b89c55 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    3ca8e73c58bb selftests/bpf: fix signedness bug in redir_partial()
    0e853c1464bc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    c69d06498ea2 bpf, sockmap: Fix psock incorrectly pointing to sk
    c4a298ae0d36 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    8b0285fbbd81 selftests/tracing: Fix false failure of subsystem event test
    faa45887a63c staging: nvec: Fix incorrect null termination of battery manufacturer
    cc03984d7035 interconnect: qcom: sc8180x: specify num_nodes
    37dfd6d6c9e4 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    2fffa72282ed soc: qcom: pmic_glink: fix OF node leak
    272cd1f24741 samples: mei: Fix building on musl libc
    f7e5ae0ddd12 cpufreq: Init policy->rwsem before it may be possibly used
    39a0d418b321 cpufreq: Initialize cpufreq-based frequency-invariance later
    1bc35f9a50e1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    81f506193700 PM / devfreq: Check governor before using governor->name
    759b918c8f2e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    1661ee5c2a41 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    d7b49f4f0da7 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    4f886798e1a4 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    632c151355ba arm: dts: ti: omap: Fixup pinheader typo
    40ff7460a9a6 usb: early: xhci-dbc: Fix early_ioremap leak
    c6ec27091cf5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    91a177aafc53 Revert "vmci: Prevent the dispatching of uninitialized payloads"
    7ed42b79118d pps: fix poll support
    6696a46f4ebd vmci: Prevent the dispatching of uninitialized payloads
    b31cf6f7716a staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    6031a54f4eac spi: stm32: Check for cfg availability in stm32_spi_probe
    490877203b40 usb: misc: apple-mfi-fastcharge: Make power supply names unique
    f24e5b445ab9 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
    448800900925 ARM: dts: vfxxx: Correctly use two tuples for timer address
    964db8725937 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    e1b4ca59f633 arm64: dts: qcom: sc7180: Expand IMEM region
    2f4bad6b27c3 arm64: dts: qcom: sdm845: Expand IMEM region
    603df70062fb soc: qcom: QMI encoding/decoding for big endian
    41917d9ce43a selftests: Fix errno checking in syscall_user_dispatch test
    aa771d2928fe ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    4c39fc79ae25 ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    ee1c30d7c6fc ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    1a91ba12abef gfs2: No more self recovery
    a936be9b5f51 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    084933961ecd hfsplus: remove mutex_lock check in hfsplus_free_extents
    0926e13a47fc hfs: make splice write available again
    1de5895fe68d hfsplus: make splice write available again
    d89f71aece34 ublk: use vmalloc for ublk_device's __queues
    b35a50d639ca fs/ntfs3: cancle set bad inode after removing name fails
    8d1bfdd30d17 fs_context: fix parameter name in infofc() macro
    15da73210929 audit,module: restore audit logging in load failure case
    5974c913d6d9 ASoC: amd: yc: add DMI quirk for ASUS M6501RM
    61e5aeff2424 ASoC: Intel: fix SND_SOC_SOF dependencies
    7e98b00615c6 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
    18196a40af52 ethernet: intel: fix building with large NR_CPUS
    5f577d47bba6 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx

(From OE-Core rev: 9c0af64f5b688d89349a80cb27bbbc451abfab38)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield d0302e3d94 linux-yocto/6.6: update to v6.6.101
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    3a8ababb8b6a Linux 6.6.101
    41d3c751fcb4 Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
    1af6d1696ca4 spi: cadence-quadspi: fix cleanup of rx_chan on failure paths
    aed4053c506b drm/sched: Remove optimization that causes hang when killing dependent jobs
    79c8d935147c ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
    3277cf433815 mptcp: reset fallback status gracefully at disconnect() time
    7c96d519ee15 mptcp: plug races between subflow fail and subflow creation
    75a4c9ab8a7a mptcp: make fallback action and fallback decision atomic
    23a5773a5da5 arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 register
    52f5a52dc17a ksmbd: add free_transport ops in ksmbd connection
    034adb78fc43 wifi: mt76: mt7921: prevent decap offload config before STA initialization
    79e2dd573116 perf/x86/intel: Fix crash in icl_update_topdown_event()
    9ef6abbb2868 mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec()
    1da8bd9a10ec ksmbd: fix use-after-free in __smb2_lease_break_noti()
    5ea224eaf636 iio: hid-sensor-prox: Restore lost scale assignments
    a56b79a43f83 iio: hid-sensor-prox: Fix incorrect OFFSET calculation
    796c96cf6685 crypto: qat - add shutdown handler to qat_dh895xcc
    4b5e07702b67 crypto: powerpc/poly1305 - add depends on BROKEN for now
    da3e9f0fac60 erofs: address D-cache aliasing
    1d117f79b5c6 mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
    37c7f0f24b8e drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
    c383033b0ac8 ALSA: hda: Add missing NVIDIA HDA codec IDs
    0a776c273e71 ALSA: hda/tegra: Add Tegra264 support
    4e954080d218 comedi: comedi_test: Fix possible deletion of uninitialized timers
    45fd8421081e jfs: reject on-disk inodes of an unsupported type
    98be604d96a6 x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
    f9377bdf86ea usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
    457d02e71ae9 usb: typec: tcpm: allow switching to mode accessory to mux properly
    8f65f4565cab usb: typec: tcpm: allow to use sink in accessory mode
    145a56bd68f4 drm/amdkfd: Don't call mmput from MMU notifier callback
    cc690930cb24 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
    325325923a1d selftests: mptcp: connect: also cover checksum
    5cdfb402bae9 selftests: mptcp: connect: also cover alt modes
    a2cd4dcbb725 resource: fix false warning in __request_region()
    bf585ee198bb nilfs2: reject invalid file types when reading inodes
    57104237cd6c kasan: use vmalloc_dump_obj() for vmalloc error reports
    3028f2a4e746 ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
    eaf242ea6fca gve: Fix stuck TX queue for DQ queue format
    c229192417d4 e1000e: ignore uninitialized checksum word on tgp
    1624f9de4432 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
    04d098fbca47 dpaa2-switch: Fix device reference count leak in MAC endpoint handling
    1c135ff95167 dpaa2-eth: Fix device reference count leak in MAC endpoint handling
    9433a5f437b0 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
    140ca2cac147 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
    e5354899f625 sprintf.h requires stdarg.h
    72584a9178af bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
    6e7836c83635 i2c: virtio: Avoid hang by using interruptible completion wait
    68ceeb06316e i2c: tegra: Fix reset error handling with ACPI
    0d33913fce67 i2c: qup: jump out of the loop in case of timeout
    60962eed62b9 platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
    989b2c5322dc net: hns3: default enable tx bounce buffer when smmu enabled
    adbf6f476cd1 net: hns3: fixed vf get max channels bug
    f377792c4186 net: hns3: disable interrupt when ptp init failed
    3cc42004f65b net: hns3: fix concurrent setting vlan filter issue
    faf44487dfc8 s390/ism: fix concurrency management in ism_cmd()
    42e42d64d851 drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
    cf81a60a9733 can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
    359492c2024a can: dev: can_restart(): move debug message and stats after successful restart
    71a2dc442e12 can: dev: can_restart(): reverse logic to remove need for goto
    0ede6ce4fcf2 net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
    e4f1564c5b69 net: appletalk: Fix use-after-free in AARP proxy probe
    d989748e9dbb i40e: When removing VF MAC filters, only check PF-set MAC
    0c399fd6ac5a i40e: report VF tx_dropped with tx_errors instead of tx_discards
    a05b3883083b i40e: Add rx_missed_errors for buffer exhaustion
    e4ca597d3116 net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
    c3d8a80d9557 net/mlx5: Fix memory leak in cmd_exec()
    bfebdb85496e xfrm: interface: fix use-after-free after changing collect_md xfrm interface
    2e18442d22c6 staging: vchiq_arm: Make vchiq_shutdown never fail
    6758f73f172d platform/x86: Fix initialization order for firmware_attributes_class
    d72c97b6160d x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
    0915f1856c48 regmap: fix potential memory leak of regmap_bus
    881f3066fd8d iio: adc: ad7949: use spi_is_bpw_supported()
    6a85c96e61c1 interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
    fb93e41ecc75 RDMA/core: Rate limit GID cache warning messages
    233d3c54c962 regulator: core: fix NULL dereference on unbind due to stale coupling data
    0e8c65939ba2 virtio_ring: Fix error reporting in virtqueue_resize
    fa53beab4740 Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

(From OE-Core rev: 40092b395a04921dd8f0f54f352d958084167227)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield 6d4a516d71 linux-yocto/6.6: update to v6.6.100
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    dbcb8d8e4163 Linux 6.6.100
    3ee59c38ae73 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
    48e879184320 nvmem: layouts: u-boot-env: remove crc32 endianness conversion
    35542cbe66c6 i2c: omap: fix deprecated of_property_read_bool() use
    056b65a02edc Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable params"
    c148b7282808 Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional error"
    b9e50a5169b0 ASoC: fsl_sai: Force a software reset when starting in consumer mode
    8f2852c1d7aa regulator: pwm-regulator: Manage boot-on with disabled PWM channels
    cad3ec23e398 regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
    7e5ec0059e4d i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
    a7b84035baa8 i2c: omap: Fix an error handling path in omap_i2c_probe()
    caa86f8b6c30 i2c: omap: Add support for setting mux
    6cfbff5f8dc9 usb: dwc3: qcom: Don't leave BCR asserted
    824fa25c85e8 usb: hub: Don't try to recover devices lost during warm reset.
    668c7b47a5ee usb: hub: Fix flushing of delayed work used for post resume purposes
    71f5c98d2931 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
    15fea75a7886 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    d5024dc5e644 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
    dc6a664089f1 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
    4cb17b11c8af ipv6: make addrconf_wq single threaded
    496efa228f0d sched: Change nr_uninterruptible type to unsigned long
    f371ad6471ee Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
    74bb4de32d92 rxrpc: Fix transmission of an abort in response to an abort
    7692bde89006 rxrpc: Fix recv-recv race of completed call
    7ff2d83ecf26 net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
    7b0d42318393 net: bridge: Do not offload IGMP/MLD messages
    bb515c413064 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
    1f3a429c21e0 tls: always refresh the queue when reading sock
    007142a263db hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
    bd3051a81621 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
    76179961c423 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
    dcbc346f50a0 ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
    6a213143e0ea net/mlx5: Correctly set gso_size when LRO is used
    ab94e7af363a Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
    4ceefc9c31e7 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
    f3323b18e3cc Bluetooth: SMP: If an unallowed command is received consider it a failure
    32e624912eed Bluetooth: hci_sync: fix connectable extended advertising when using static random address
    c4f16f6b071a Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
    5dd6a441748d usb: net: sierra: check for no status endpoint
    27591d926191 ice: add NULL check in eswitch lag check
    eda5e38cc4dd hwmon: (corsair-cpro) Validate the size of the received input buffer
    c18726607c8a selftests: net: increase inter-packet timeout in udpgro.sh
    167006f73005 wifi: cfg80211: remove scan request n_channels counted_by
    a2f02a87fe21 nvme: fix misaccounting of nvme-mpath inflight I/O
    ec158d05eaa9 net: phy: Don't register LEDs for genphy
    5d95fbbfaa8f nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
    2baaf5bbab2a smb: client: fix use-after-free in cifs_oplock_break
    62dcd9d6e61c rpl: Fix use-after-free in rpl_do_srh_inline().
    fbe48f06e641 net/sched: sch_qfq: Fix race condition on qfq_aggregate
    21033b49cf09 block: fix kobject leak in blk_unregister_queue
    c20dd7e8f359 net: emaclite: Fix missing pointer increment in aligned_read()
    bc016b7842f6 cachefiles: Fix the incorrect return value in __cachefiles_write()
    e7be679124ba bpf: Reject %p% format string in bprintf-like helpers
    12e023df10b6 soundwire: amd: fix for clearing command status register
    84830e033bd2 soundwire: amd: fix for handling slave alerts after link is down
    673ee92bd2d3 comedi: Fix initialization of data for instructions that write to subdevice
    10f9024a8c82 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
    63390b856178 comedi: Fix some signed shift left operations
    c9d3d9667443 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
    8a3637027cee comedi: das6402: Fix bit shift out of bounds
    adb7df8a8f9d comedi: das16m1: Fix bit shift out of bounds
    955e8835855f comedi: aio_iiro_16: Fix bit shift out of bounds
    7e470d8efd10 comedi: pcl812: Fix bit shift out of bounds
    8d8519aedbf1 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
    6471d4b4ac61 iio: adc: max1363: Reorder mode_list[] entries
    edff26d038d2 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
    dda42f23a8f5 iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
    329a80adc0e5 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
    d93b20c88e5e soc: aspeed: lpc-snoop: Cleanup resources in stack-order
    15a0a5de4950 smb: client: fix use-after-free in crypt_message when using async crypto
    0c7b20f7785c s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
    600f55da8d90 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
    d510116c80b3 net: libwx: properly reset Rx ring descriptor
    027701180a7b net: libwx: fix the using of Rx buffer DMA
    3c91a56762b1 net: libwx: remove duplicate page_pool_put_full_page()
    e30c5fa723dc mmc: sdhci_am654: Workaround for Errata i2312
    7ac120c00c5a mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
    5bfd0078f738 mmc: bcm2835: Fix dma_unmap_sg() nents value
    4206824af6dd memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
    928f3a277f2c isofs: Verify inode mode when loading from disk
    4bb016438335 dmaengine: nbpfaxi: Fix memory corruption in probe()
    2bae35acbb6e af_packet: fix soft lockup issue caused by tpacket_snd()
    67ea5f37b203 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
    e51cf5d4aa98 arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
    645af2f069d6 arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
    bec18ebcf05c arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
    33eba752d9de net/mlx5: Update the list of the PCI supported devices
    29db3339db0e phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
    d48845afa083 io_uring/poll: fix POLLERR handling
    c855b9aa093a ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
    56f99fdb0b8d drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
    823d79890048 tracing/osnoise: Fix crash in timerlat_dump_stack()
    6bc94f20a4c3 tracing: Add down_write(trace_event_sem) when adding trace event
    6ba89b382be4 tracing/probes: Avoid using params uninitialized in parse_btf_arg()
    0e5017d84d65 HID: core: do not bypass hid_hw_raw_request
    a1c0b87b7682 HID: core: ensure __hid_request reserves the report ID as the first byte
    fcda39a9c5b8 HID: core: ensure the allocated report buffer can contain the reserved report ID
    469a39a33a99 dm-bufio: fix sched in atomic context
    82b29ee8ba90 spi: Add check for 8-bit transfer with 8 IO mode support
    415d4966cb54 pch_uart: Fix dma_sync_sg_for_device() nents value
    db44a558b3af Input: xpad - set correct controller type for Acer NGR200
    0f6f30f5b01a nvmem: imx-ocotp: fix MAC address byte length
    0cd051cb5852 thunderbolt: Fix bit masking in tb_dp_port_set_hops()
    dc52aff53465 thunderbolt: Fix wake on connect at runtime
    e6a2ff56b06e i2c: stm32: fix the device used for the DMA map
    58bdd5160184 usb: gadget: configfs: Fix OOB read on empty string write
    ec35a7125d94 usb: musb: fix gadget state on disconnect
    311c434f5d76 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
    909d80414869 USB: serial: option: add Foxconn T99W640
    84c320060d53 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
    ad2437f4abca phy: tegra: xusb: Disable periodic tracking on Tegra234
    491175c139e5 phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
    5367cdeb75cb phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode

(From OE-Core rev: cf70911ca46d3f9980d475369d9f15343b6e52e2)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield a65c2420fd linux-yocto/6.6: update to v6.6.99
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    d96eb99e2f0e Linux 6.6.99
    eaf112069a90 rseq: Fix segfault on registration when rseq_cs is non-zero
    f02f0218be41 crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
    97c355989928 ksmbd: fix potential use-after-free in oplock/lease break ack
    8377d7744bdc kasan: remove kasan_find_vm_area() to prevent possible deadlock
    d3927e55c959 smb: client: fix potential race in cifs_put_tcon()
    a4bb7ced4e8f selftests/bpf: adapt one more case in test_lru_map to the new target_free
    f35c825a012d Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
    3ce1d87d1f5d HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
    ae915b38e262 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
    b71a75739af9 bpf: Adjust free target to avoid global starvation of LRU map
    cd5b424d8322 vt: add missing notification when switching back to text mode
    f4428b2d4c68 btrfs: fix assertion when building free space tree
    2cc5ef01ea03 net: mana: Record doorbell physical address in PF mode
    9f460b235ef3 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
    cd4df14f6180 net: usb: qmi_wwan: add SIMCom 8230C composition
    e07c2feb4916 ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
    ee287cf30ffb ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
    50b1e01aa123 io_uring: make fallocate be hashed work
    825088c90357 um: vector: Reduce stack usage in vector_eth_configure()
    8cafaba2f275 atm: idt77252: Add missing `dma_map_error()`
    0d8a9b6dd321 ublk: sanity check add_dev input for underflow
    5909679a82cd bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
    e644935d40cb bnxt_en: Fix DCB ETS validation
    7d4d1993517b net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
    5aa8b3a1d8ab can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
    10946f834638 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
    9fa29314eba1 ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
    4a17370da6e4 net: appletalk: Fix device refcount leak in atrtr_create()
    9fbc49429a23 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
    d46186eb7bbd nbd: fix uaf in nbd_genl_connect() error path
    8fc3d7b23d13 raid10: cleanup memleak at raid10_make_request
    df5894014a92 md/raid1: Fix stack memory use after return in raid1_reshape
    d1240029f97a drm/tegra: nvdec: Fix dma_alloc_coherent error check
    5420de65efbe wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
    739296467a59 cifs: all initializations for tcon should happen in tcon_info_alloc
    03c3cd0c3b67 smb: client: fix DFS interlink failover
    d043b5da37fc smb: client: avoid unnecessary reconnects when refreshing referrals
    609a617a97c0 usb: dwc3: Abort suspend on soft disconnect failure
    e3f79e2c9ad1 usb: cdnsp: Fix issue with CV Bad Descriptor test
    ae5b191184ce usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
    7227a8229f43 usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
    fd79927c8191 btrfs: fix inode lookup error handling during log replay
    6aea26dc23d5 btrfs: return a btrfs_inode from btrfs_iget_logging()
    e6031107f397 btrfs: remove redundant root argument from fixup_inode_link_count()
    28a36e75d196 btrfs: remove redundant root argument from btrfs_update_inode_fallback()
    ddead3c5ca18 btrfs: remove noinline from btrfs_update_inode()
    c31ee1695b6d netlink: make sure we allow at least one dump skb
    ce2ac2e46719 netlink: Fix rmem check in netlink_broadcast_deliver().
    5b1b8f06b179 erofs: fix to add missing tracepoint in erofs_read_folio()
    4c4f931676b6 ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
    d903a0fe324e smb: server: make use of rdma_destroy_qp()
    3c0994a3fd93 x86/mm: Disable hugetlb page table sharing on 32-bit
    ee21fbcb87a0 x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
    ad9d4db5a8ac pwm: mediatek: Ensure to disable clocks in error path
    37e2911d2ec1 mm/vmalloc: leave lazy MMU mode on PTE mapping error
    f64046ae3401 scripts/gdb: fix interrupts.py after maple tree conversion
    ecf16604f3f0 scripts/gdb: de-reference per-CPU MCE interrupts
    e2e200c98e9f scripts/gdb: fix interrupts display after MCP on x86
    56995226431a mm: fix the inaccurate memory statistics issue for users
    167134042418 maple_tree: fix mt_destroy_walk() on root leaf node
    688bf63ee6ba kallsyms: fix build without execinfo
    c23a41086899 Revert "ACPI: battery: negate current when discharging"
    2e2e9b3d7084 drm/framebuffer: Acquire internal references on GEM handles
    dec7774d0ef9 Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
    c6eb4a05af3d usb: gadget: u_serial: Fix race condition in TTY wakeup
    8c290a9d629b drm/gem: Fix race in drm_gem_handle_create_tail()
    db7402d78e7c drm/ttm: fix error handling in ttm_buffer_object_transfer
    c64f5310530b drm/sched: Increment job count before swapping tail spsc queue
    cb4c956a15f8 drm/gem: Acquire references on GEM handles for framebuffers
    ec6392061de6 wifi: prevent A-MSDU attacks in mesh networks
    1d57f7132662 pinctrl: qcom: msm: mark certain pins as invalid for interrupts
    3d82a729530b md/md-bitmap: fix GPF in bitmap_get_stats()
    2ca1db269a8d gre: Fix IPv6 multicast route creation.
    8c8e8d4d7544 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
    20d1d9e7ce69 KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
    a18776abc592 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
    f536f3b09773 x86/mce: Don't remove sysfs if thresholding sysfs init fails
    cc058adb9beb x86/mce/amd: Fix threshold limit reset
    8e5058a5812e x86/mce/amd: Add default names for MCA banks and blocks
    e2d5c005dfc9 ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
    efc1b2b7c1a3 rxrpc: Fix oops due to non-existence of prealloc backlog struct
    ddc4fe078948 Bluetooth: HCI: Set extended advertising data synchronously
    eb952372bf48 perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
    e63032e66bca maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
    432c5363cd6f rxrpc: Fix bug due to prealloc collision
    4c691d1b6b6d net/sched: Abort __tc_modify_qdisc if parent class does not exist
    07b585ae3699 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
    3f61b997fe01 atm: clip: Fix infinite recursive call of clip_push().
    1fb9fb5a4b5c atm: clip: Fix memory leak of struct clip_vcc.
    06935c50cfa3 atm: clip: Fix potential null-ptr-deref in to_atmarpd().
    36cf9bcf09bd net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
    0a0d040f12fe net: phy: smsc: Force predictable MDI-X state on LAN87xx
    72c62b4991a2 net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
    791c8d6b76c5 net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
    d437e8e7dcb9 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
    9d24bb678028 vsock: Fix transport_* TOCTOU
    401239811fa7 vsock: Fix transport_{g2h,h2g} TOCTOU
    81373cd1d72d tcp: Correct signedness in skb remaining space calculation
    be4b8392da79 tipc: Fix use-after-free in tipc_conn_close().
    42262bc4e8ef vsock: fix `vsock_proto` declaration
    55baecb9eb90 netlink: Fix wraparounds of sk->sk_rmem_alloc.
    f9b3d28f1f62 fix proc_sys_compare() handling of in-lookup dentries
    82c0f15c26be pinctrl: amd: Clear GPIO debounce for suspend
    a219fcea8e8e Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
    51e082108345 Bluetooth: hci_sync: Fix not disabling advertising instance
    c604dd2c5e6b ASoC: cs35l56: probe() should fail if the device ID is not recognized
    183bdb89af1b perf: Revert to requiring CAP_SYS_ADMIN for uprobes
    71eb118baf6e perf/core: Fix the WARN_ON_ONCE is out of lock protected region
    407f1073ea23 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
    391e5ea5b877 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
    521e9ff0b67c eventpoll: don't decrement ep refcount while still holding the ep mutex

(From OE-Core rev: 5504778cd1c538b6f3c40d3106a3423abdac3203)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield 574cc67a0d linux-yocto/6.6: update to v6.6.98
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    9247f4e6573a Linux 6.6.98
    20aa3d519806 x86/CPU/AMD: Properly check the TSA microcode
    59a2de10b81a Linux 6.6.97
    897761d16564 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
    8c1944905855 x86/process: Move the buffer clearing before MONITOR
    6fb766d53f61 x86/microcode/AMD: Add TSA microcode SHAs
    276499bb6944 KVM: SVM: Advertise TSA CPUID bits to guests
    90293047df18 x86/bugs: Add a Transient Scheduler Attacks mitigation
    2b6a5fbe9dc1 x86/bugs: Rename MDS machinery to something more generic
    8a7ac2737211 powerpc/kernel: Fix ppc_save_regs inclusion in build
    63cff9f57e86 usb: typec: displayport: Fix potential deadlock
    4b91b77af24c platform/x86: think-lmi: Fix sysfs group cleanup
    98002f1ac947 platform/x86: think-lmi: Fix kobject cleanup
    cb3e3244d88d platform/x86: think-lmi: Create ksets consecutively
    360546362865 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
    73d43c215007 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
    6052862ba31c Logitech C-270 even more broken
    6358cb9c2a31 i2c/designware: Fix an initialization issue
    d8eab407c08d dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    59205a3e93ef smb: client: fix readdir returning wrong type with POSIX extensions
    937f49be49d6 usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
    afbec8c34428 usb: cdnsp: do not disable slot for disabled slot
    c9a841fd2ec2 Input: iqs7222 - explicitly define number of external channels
    2cd5e7c16942 Input: xpad - support Acer NGR 200 Controller
    c16b75aa6fb6 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    881c9274246c xhci: dbc: Flush queued requests before stopping dbc
    897d1170c249 xhci: dbctty: disable ECHO flag by default
    7609899eb6b7 usb: xhci: quirk for data loss in ISOC transfers
    204bdc7a8b7b NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    e3eed0134772 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
    adb29b437fe5 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
    a6069306f4e1 platform/x86: hp-bioscfg: Fix class device unregistration
    8570c219cd59 platform/x86: hp-bioscfg: Directly use firmware_attributes_class
    387da3b6d1a9 drm/v3d: Disable interrupts before resetting the GPU
    817662f9bdf8 rcu: Return early if callback is not specified
    d5c1e3f32902 mtd: spinand: fix memory leak of ECC engine conf
    d547779e72ce ACPICA: Refuse to evaluate a method if arguments are missing
    347827bd0c56 wifi: ath6kl: remove WARN on bad firmware input
    5aebb9aa538a wifi: mac80211: drop invalid source address OCB frames
    270d637100f9 aoe: defer rexmit timer downdev work to workqueue
    55dfffc5e947 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
    7b9203afeb37 regulator: fan53555: add enable_time support and soft-start times
    a1d10fee0783 ASoC: amd: yc: update quirk data for HP Victus
    871beab5b4f9 powerpc: Fix struct termio related ioctl macros
    ba9117312795 platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
    785200516552 ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
    69283b3fd463 ata: pata_cs5536: fix build on 32-bit UML
    71f89fab5cc9 ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
    6766316c1a9f ALSA: sb: Force to disable DMAs once when DMA mode is changed
    c7922052c6f2 ALSA: sb: Don't allow changing the DMA mode during operations
    c40ad1c04d30 drm/msm: Fix another leak in the submit error path
    fe2695b2f63b drm/msm: Fix a fence leak in submit error path
    5df2087c9a1e drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
    ad09bb7cbd14 drm/simpledrm: Do not upcast in release helpers
    51ba65860457 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
    847af89aa163 scsi: ufs: core: Add OPP support for scaling clocks and regulators
    95ffe734518d scsi: ufs: core: Fix abnormal scale up after last cmd finish
    9e67044aa9a7 f2fs: fix to zero post-eof page
    d1ccd98eddba f2fs: convert f2fs_vm_page_mkwrite() to use folio
    7ac8a61e5503 f2fs: prevent writing without fallocate() for pinned files
    b43c3050d211 f2fs: add tracepoint for f2fs_vm_page_mkwrite()
    bceae1daf302 x86/traps: Initialize DR6 by writing its architectural reset value
    16254aa985d1 bnxt: properly flush XDP redirect lists
    6310aafd4267 wifi: mac80211: finish link init before RCU publish
    ebca4264c648 wifi: mac80211: Add link iteration macro for link data
    32d0b58079ed wifi: mac80211: chan: chandef is non-NULL for reserved
    bc0819a25e04 Bluetooth: hci_core: Fix use-after-free in vhci_flush()
    64d07a40f853 smb: client: remove \t from TP_printk statements
    3499dcb6c507 btrfs: fix qgroup reservation leak on failure to allocate ordered extent
    ccdd3eaec689 Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
    ca7d5aa7ccf0 smb: client: fix race condition in negotiate timeout by using more precise timing
    70b32cba5cfd amd-xgbe: do not double read link status
    f680a4643c6f net/sched: Always pass notifications when child class becomes empty
    5ea2a10be7d7 nui: Fix dma_mapping_error() check
    7a1841c96093 rose: fix dangling neighbour pointers in rose_rt_device_down()
    744cd8baffe8 enic: fix incorrect MTU comparison in enic_change_mtu()
    a133683c0567 amd-xgbe: align CL37 AN sequence as per databook
    f2ca04cbf01d lib: test_objagg: Set error message in check_expect_hints_stats()
    8f4652848b36 igc: disable L1.2 PCI-E link substate to avoid performance issue
    832058110a1d drm/i915/gsc: mei interrupt top half should be in irq disabled context
    40e09506aea1 drm/i915/gt: Fix timeline left held on VMA alloc error
    968a419c9513 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
    0cee638d92ac smb: client: fix warning when reconnecting channel
    33713f7cda3d platform/mellanox: mlxreg-lc: Fix logic error in power state check
    421672fb7f13 platform/x86: dell-wmi-sysman: Fix class device unregistration
    dba37f72aae3 platform/x86: dell-sysman: Directly use firmware_attributes_class
    4074f6a15e95 platform/x86: think-lmi: Fix class device unregistration
    093ee65bdafb platform/x86: think-lmi: Directly use firmware_attributes_class
    ee813c62af62 platform/x86: firmware_attributes_class: Simplify API
    e52b896d5fb7 platform/x86: firmware_attributes_class: Move include linux/device/class.h
    9143d22a09b5 platform/x86: make fw_attr_class constant
    3df1e72b7bfe arm64: dts: qcom: sm8550: add UART14 nodes
    0deb3eb78ebf platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
    55a90f82d4ff drm/i915/selftests: Change mock_request() to return error pointers
    822c05444ffa spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    1fc5dc930137 drm/exynos: fimd: Guard display clock control with runtime PM calls
    7e6423f80bd6 dpaa2-eth: fix xdp_rxq_info leak
    31afd307975f ethernet: atl1: Add missing DMA mapping error checks and count errors
    2a7ac29f10d8 btrfs: use btrfs_record_snapshot_destroy() during rmdir
    d77a16802896 btrfs: propagate last_unlink_trans earlier when doing a rmdir
    65d7f92db8a9 btrfs: rename err to ret in btrfs_rmdir()
    2d11d274e2e1 btrfs: fix iteration of extrefs during log replay
    79b025ebc1c0 btrfs: fix missing error handling when searching for inode refs during log replay
    529281206f11 Bluetooth: Prevent unintended pause by checking if advertising is active
    e373354ecfbf platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
    d8a1ad180c24 RDMA/mlx5: Fix vport loopback for MPV device
    efb3413f6ba9 RDMA/mlx5: Fix CC counters query for MPV
    301303d14da6 RDMA/mlx5: Fix HW counters query for non-representor devices
    ee9cb28675a5 scsi: ufs: core: Fix spelling of a sysfs attribute name
    39dac98aca12 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    c3ec87fbb00d scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    8ca65fa71024 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
    d0877c479f44 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
    23a3b32a274a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
    edca475158f7 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    3962e5a3845d arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
    b935c1e734d2 mtk-sd: reset host->mrq on prepare_data() error
    61cdd6635646 mtk-sd: Prevent memory corruption from DMA map failure
    b3b00e9b03d3 mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    45e9444b3b97 usb: typec: altmodes/displayport: do not index invalid pin_assignments
    24418bc77a66 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
    0506547f6e3d Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
    8af1406949c1 Bluetooth: MGMT: set_mesh: update LE scan interval and window
    7e88ad41b63e Bluetooth: hci_sync: revert some mesh modifications
    3c0c18ef4c79 mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    c4fad2460c17 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
    3855b7ace3f9 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
    94d0c326cb3e vsock/vmci: Clear the vmci transport packet properly when initializing it
    e7191481d6ae s390/pci: Do not try re-enabling load/store if device is disabled
    80b971be4c37 virtio-net: ensure the received length does not exceed allocated size
    39617dc3fafe rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    5cdd1f73401d rtc: pcf2127: fix SPI command byte for PCF2131
    1cb814dbb03d rtc: pcf2127: add missing semicolon after statement

(From OE-Core rev: b9041a3e6ddc8917eba2af45a8e57f2e48998dc9)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Jinfeng Wang 838a12c621 systemtap: Fix task_work_cancel build
Backport a patch to fix:
 107 |         twork = task_work_cancel(task, func);
      |                                        ^~~~
      |                                        |
      |                                        task_work_func_t {aka void (*)(struct callback_head *)}
/work/rad/wrs/wrl-systemtap-demo/qemux86-64-std-23p17/build/tmp-glibc/work/x86_64-linux/systemtap-native/4.8-r0/recipe-sysroot-native/usr/share/systemtap/runtime/stp_task_work.c:107:40: note: expected 'struct callback_head *' but argument is of type 'task_work_func_t' {aka 'void (*)(struct callback_head *)'}
/work/rad/wrs/wrl-systemtap-demo/qemux86-64-std-23p17/build/tmp-glibc/work/x86_64-linux/systemtap-native/4.8-r0/recipe-sysroot-native/usr/share/systemtap/runtime/stp_task_work.c:13:26: error: incompatible types when assigning to type 'struct callback_head *' from type 'bool' {aka '_Bool'}
   13 | #define task_work_cancel (* (task_work_cancel_fn)kallsyms_task_work_cancel)
      |                          ^
/work/rad/wrs/wrl-systemtap-demo/qemux86-64-std-23p17/build/tmp-glibc/work/x86_64-linux/systemtap-native/4.8-r0/recipe-sysroot-native/usr/share/systemtap/runtime/stp_task_work.c:107:17: note: in expansion of macro 'task_work_cancel'
  107 |         twork = task_work_cancel(task, func);
      |                 ^~~~~~~~~~~~~~~~

(From OE-Core rev: 58509b54a464cd5b692ad4ef8dd333eb9c14abfa)

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-09-22 13:17:52 -07:00
Fabio Berton c82f7a0577 linux-libc-headers: Fix invalid conversion in cn_proc.h
Backport 'connector: Fix invalid conversion in cn_proc.h' commit to fix
error:
/
|/usr/include/linux/cn_proc.h: In function 'proc_cn_event
| valid_event(proc_cn_event)':
|/usr/include/linux/cn_proc.h:72:17: error: invalid conversion from
| 'unsigned int' to 'proc_cn_event' [-fpermissive]
|   72 |         ev_type &= PROC_EVENT_ALL;
|      |                 ^
|      |                 |
|      |                 unsigned int
\

Change is already merged in kernel branch linux-6.6.y [1].

1 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.6.y&id=06e785aeb9ea8a43d0a3967c1ba6e69d758e82d4

(From OE-Core rev: f023779af6c0e5c838bdacbd6d9765d1c6740575)

Signed-off-by: Fabio Berton <fbberton@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-08-04 07:55:07 -07:00
Bruce Ashfield 37058c37c0 linux-yocto/6.6: update to v6.6.96
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    a5df3a702b2c Linux 6.6.96
    18d3f9b8e4b9 ARM: 9354/1: ptrace: Use bitfield helpers
    f9917821c527 firmware: arm_scmi: Ensure that the message-id supports fastchannel
    67a50f572178 firmware: arm_scmi: Add a common helper to check if a message is supported
    6f27bbf3de0d nvme: always punt polled uring_cmd end_io work to task_work
    cdfb20e4b34a spi: spi-cadence-quadspi: Fix pm runtime unbalance
    c46358d02759 Revert "ipv6: save dontfrag in cork"
    1583d908cc77 x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
    ed1f395ea5c0 Kunit to check the longest symbol length
    5f4787834cb7 s390/entry: Fix last breaking event handling in case of stack corruption
    56aa7679c9f3 media: uvcvideo: Rollback non processed entities on error
    f165d04c41a3 kbuild: rpm-pkg: simplify installkernel %post
    cca5bb42b736 scripts: clean up IA-64 code
    b90dc5d67b68 ksmbd: remove unsafe_memcpy use in session setup
    107a48df3f94 ksmbd: Use unsafe_memcpy() for ntlm_negotiate
    8302adf60aba drm/amdgpu: switch job hw_fence to amdgpu_fence
    a5d7cc1647f9 drm/amdgpu: Add kicker device detection
    f640d011080d drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
    a8ceffaeb780 drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
    5148c7ea69e9 drm/amd/display: Add null pointer check for get_first_active_display()
    ede04b471596 drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
    252e6e96f9b6 drm/bridge: cdns-dsi: Check return value when getting default PHY config
    c4ee1b31a540 drm/bridge: cdns-dsi: Fix connecting to next bridge
    f9b819c39d13 drm/bridge: cdns-dsi: Fix phy de-init and flag it so
    2565ff3ac3f5 drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
    76115eafad12 drm/amdkfd: Fix race in GWS queue scheduling
    7946a10f8da7 drm/msm/gpu: Fix crash when throttling GPU immediately during boot
    50e48e940329 drm/udl: Unregister device before cleaning up on disconnect
    5ff3636bcc32 drm/tegra: Fix a possible null pointer dereference
    23134a522758 drm/tegra: Assign plane type before registration
    9ec447c23753 drm/etnaviv: Protect the scheduler's pending list with its lock
    6d7b814c527c drm/cirrus-qemu: Fix pitch programming
    66f122e67261 drm/ast: Fix comment on modeset lock
    bf2c1643abc3 scsi: megaraid_sas: Fix invalid node index
    42cf4f016173 HID: wacom: fix kobject reference count leak
    f531651c394e HID: wacom: fix memory leak on sysfs attribute creation failure
    33acbeeb5ad6 HID: wacom: fix memory leak on kobject creation failure
    f0ffc8076d39 HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
    8a89e9c27b77 net: libwx: fix the creation of page_pool
    9052c7bca391 btrfs: update superblock's device bytes_used when dropping chunk
    aeeae8feeaae btrfs: fix a race between renames and directory logging
    6ad80378f928 dm-raid: fix variable in journal device check
    e395e34b0652 Bluetooth: L2CAP: Fix L2CAP MTU negotiation
    f90d78d65ccc serial: imx: Restore original RXTL for console to fix data loss
    40f62f8cf854 dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
    f89c40520fa1 staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
    e5e6a5aa3915 EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
    c82c7041258d smb: client: fix potential deadlock when reconnecting channels
    ced8eff11a4f drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
    1c9a8a84c5a8 drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
    ee800ff711c9 drm/i915: fix build error some more
    0804d77fd6e6 net: selftests: fix TCP packet checksum
    5b63793da82a ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
    cabed6ba92a9 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
    63528d60673a net: enetc: Correct endianness handling in _enetc_rd_reg64
    ad9c4941d32e libbpf: Fix possible use-after-free for externs
    c61e284d72d6 um: ubd: Add missing error check in start_io_thread()
    8f96a2ae16b5 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
    d58343f81354 af_unix: Don't set -ECONNRESET for consumed OOB skb.
    86136c670569 wifi: mac80211: fix beacon interval calculation overflow
    9b9a87f0bd18 libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
    591f79625702 attach_recursive_mnt(): do not lock the covering tree when sliding something under it
    74fcb3852a2f ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
    3c709dce1699 atm: clip: prevent NULL deref in clip_push()
    64a99eff8dcf lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
    88f3869649ed s390/pkey: Prevent overflow in size calculation for memdup_user()
    db33aa6c5c93 ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
    490a43d07f16 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
    c9036b6390af i2c: robotfuzz-osif: disable zero-length read messages
    4841060d2e7a i2c: tiny-usb: disable zero-length read messages
    fad0a2c16062 af_unix: Don't leave consecutive consumed OOB skbs.
    aabb458c33d9 af_unix: Don't call skb_get() for OOB skb.
    0919388ac44f af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb().
    fd3af69c14ed af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock().
    b7904e2fccd0 af_unix: Define locking order for unix_table_double_lock().
    47847495a6ea platform/x86: ideapad-laptop: use usleep_range() for EC polling
    6e7af3d4f67f platform/x86: ideapad-laptop: move ACPI helpers from header to source file
    f8761b11f1c0 platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
    d19ae7b033b2 platform/x86: ideapad-laptop: introduce a generic notification chain
    b6b5bcae7aa5 dummycon: Trigger redraw when switching consoles with deferred takeover
    8853bad7634f tty: vt: make consw::con_switch() return a bool
    e9ba8c528b8f tty: vt: sanitize arguments of consw::con_clear()
    0b10b5ab7d1d tty: vt: make init parameter of consw::con_init() a bool
    7bf946a284c3 PCI: apple: Set only available ports up
    b8704eef56c5 PCI: apple: Use helper function for_each_child_of_node_scoped()
    df1d7e879edd uio_hv_generic: Align ring size to system page
    ca0198894bf9 uio_hv_generic: Query the ringbuffer size for device
    ebba6cc0781c Drivers: hv: vmbus: Add utility function for querying ring size
    3bc5abf8e75a f2fs: don't over-report free space or inodes in statvfs
    9830ef1803a5 ASoC: codecs: wcd9335: Fix missing free of regulator supplies
    28b6ef1ab65d ASoC: codec: wcd9335: Convert to GPIO descriptors
    99d696842287 ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
    0c40fa81f850 jfs: validate AG parameters in dbMount() to prevent crashes
    7747d3f9a506 fs/jfs: consolidate sanity checking in dbMount
    fc97a116dc49 btrfs: handle csum tree error with rescue=ibadroots correctly
    2cbeb47ea983 ovl: Check for NULL d_inode() in ovl_dentry_upper()
    d120737a6da7 scsi: ufs: core: Don't perform UFS clkscaling during host async scan
    acc1d4cc47f1 ceph: fix possible integer overflow in ceph_zero_objects()
    f3465bb32050 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
    789a3f63bd60 ALSA: hda: Add new pci id for AMD GPU display HD audio controller
    b8cd384c53ae ALSA: hda: Ignore unsol events for cards being shut down
    23fe269bfab3 usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
    8851e4058701 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
    00626325dba7 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
    433cb3e70dc9 usb: Add checks for snprintf() calls in usb_alloc_dev()
    0aaf810416c9 usb: common: usb-conn-gpio: use a unique name for usb connector device
    8e958d10dd0c tty: serial: uartlite: register uart driver in init
    a33f507f36d5 usb: potential integer overflow in usbg_make_tpg()
    a8d1b4f219e8 misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
    1063c586a35c iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
    41732f9febdc usb: dwc2: also exit clock_gating when stopping udc while suspended
    8217fa7d92f0 coresight: Only check bottom two claim bits
    8dbc01f09cad um: use proper care when taking mmap lock during segfault
    265ca1741075 um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
    462215a2a3f4 iio: pressure: zpa2326: Use aligned_s64 for the timestamp
    c5734f9bab6f drm/scheduler: signal scheduled fence when kill job
    553f560e0a74 bcache: fix NULL pointer in cache_set_flush()
    9d578589e3ec amd/amdkfd: fix a kfd_process ref leak
    2fb2470bc683 md/md-bitmap: fix dm-raid max_write_behind setting
    aaef4f1f44b3 PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
    969c9646f0d0 PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane
    7d942dbcd155 dmaengine: xilinx_dma: Set dma_device directions
    e0051a3daa8b dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
    c765f592adc7 rust: module: place cleanup_module() in .exit.text section
    efe5db9d98b1 ksmbd: provide zero as a unique ID to the Mac client
    f72093f270ea ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
    ad804e3648d3 hwmon: (pmbus/max34440) Fix support for max34451
    2d8b3898caf5 NFSv4: xattr handlers should check for absent nfs filehandles
    9d90ab45d3d3 cxl/region: Add a dev_err() on missing target list entries
    96715eb1a120 fuse: fix race between concurrent setattrs from multiple nodes
    a13b2634dd66 leds: multicolor: Fix intensity setting while SW blinking
    c3616dfddf1d sunrpc: don't immediately retransmit on seqno miss
    f0ba7e6d06f2 mfd: max14577: Fix wakeup source leaks on device unbind
    35cda8619d97 mailbox: Not protect module_put with spin_lock_irqsave
    7d03b140af33 NFSv4.2: fix listxattr to return selinux security label
    cad6f283f6a6 NFSv4: Always set NLINK even if the server doesn't support it
    670c1c546cda cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode
    0e7f0e6e14ba cifs: Fix cifs_query_path_info() for Windows NT servers
    4a6499ffc84c cifs: Correctly set SMB1 SessionKey field in Session Setup Request
    3f5b4c104b7d Linux 6.6.95
    218c3629fb8f cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function
    6b4311f78a13 gpio: mlxbf3: only get IRQ for device instance 0
    f6071c3cfe3a perf evsel: Missed close() when probing hybrid core PMUs
    2a673aca82fe RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
    e20f0f44ec59 RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
    a77d0a14ed47 scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
    21da6d3561f3 arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
    7c631e5cd38e perf/core: Fix WARN in perf_cgroup_switch()
    bddec730501b perf: Fix cgroup state vs ERROR
    2ee6044a6937 perf: Fix sample vs do_exit()
    4ca4f418b761 s390/pci: Fix __pcilg_mio_inuser() inline assembly
    d7094ad35104 platform/loongarch: laptop: Add backlight power control support
    7b47919aff63 smb: client: fix first command failure during re-negotiation
    cc77844d61f7 Revert "cpufreq: tegra186: Share policy per cluster"
    eb74c6f1b209 ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
    94ec33e9600b ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    2f38986e93d3 platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
    e9a011fc6b04 serial: sh-sci: Increment the runtime usage counter for the earlycon device
    cfa7fa02078d net: make for_each_netdev_dump() a little more bug-proof
    b8ced2b9a23a smb: Log an error when close_all_cached_dirs fails
    aaaa689aa29d dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
    6377977485f7 EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
    a5e3a1442688 net: atm: fix /proc/net/atm/lec handling
    dffd03422ae6 net: atm: add lec_mutex
    bde8833eb075 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
    3162d8235c8c ublk: santizize the arguments from userspace when adding a device
    66bba1fd5bad net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
    7382b6f7d102 net: microchip: lan743x: Reduce PTP timeout on HW failure
    235aa081e2d9 tcp: fix passive TFO socket having invalid NAPI ID
    d3dfe821dfe0 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
    9d0ddfb574a2 tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
    3261c017a7c5 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
    a06078164001 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
    4e9ab5c48ad5 wifi: carl9170: do not ping device which has failed to load firmware
    43e3433a48c3 ptp: allow reading of currently dialed frequency to succeed on free-running clocks
    a8c669bbc831 ptp: fix breakage after ptp_vclock_in_use() rework
    aaef8e3a54b9 e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
    f4c19a8e51ee net: ice: Perform accurate aRFS flow match
    8662ac79a634 aoe: clean device rq_list in aoedev_downdev()
    9311d6d1a54f pldmfw: Select CRC32 when PLDMFW is selected
    4c8f5b0483ac hwmon: (occ) fix unaligned accesses
    1312d9bf88be hwmon: (occ) Rework attribute registration for stack usage
    ff3dcf7f8184 drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
    af2f5f21599a drm/nouveau/bl: increase buffer size to avoid truncate warning
    b599b310380a ionic: Prevent driver/fw getting out of sync on devcmd(s)
    002aa3ed19f3 drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
    77087a79779c drm/msm/disp: Correct porch timing for SDM845
    7e6980c225c1 smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels
    599c489eea79 sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
    5e5d2ad9765a erofs: remove unused trace event erofs_destroy_inode
    2536810df13f bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
    f6393e5cb913 net: Fix checksum update for ILA adj-transport
    3977946f61cd mm/huge_memory: fix dereferencing invalid pmd migration entry
    af6cfcd0efb7 mm/hugetlb: unshare page tables during VMA split, not before
    39c86833f973 iio: accel: fxls8962af: Fix temperature calculation
    3d849cc3dfd3 ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
    f80e551050e4 ALSA: hda/intel: Add Thinkpad E15 to PM deny list
    d61975567d9d ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
    6562806f3200 arm64: Restrict pagetable teardown to avoid false warning
    66bde385a1d3 wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
    eeacfbab9842 wifi: cfg80211: init wiphy_work before allocating rfkill fails
    6d60d822809b Input: sparcspkr - avoid unannotated fall-through
    3902205eadf3 atm: Revert atm_account_tx() if copy_from_iter_full() fails.
    c1a2081f0347 platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
    2753481c40af selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
    0902625a24ee ksmbd: fix null pointer dereference in destroy_previous_session
    2a03531c00b2 selftests/x86: Add a test to detect infinite SIGTRAP handler loop
    372b511e9345 udmabuf: use sgtable-based scatterlist wrappers
    bfa4d86e130a net: clear the dst when changing skb protocol
    0357da9149ea net_sched: sch_sfq: reject invalid perturb period
    bb9d4ffff6d8 scsi: s390: zfcp: Ensure synchronous unit_add
    8d60df50e62f scsi: storvsc: Increase the timeouts to storvsc_timeout
    a504536c2923 smb: improve directory cache reuse for readdir operations
    202d7e838967 cifs: do not disable interface polling on failure
    58021a32f25e cifs: serialize other channels when query server interfaces is pending
    b530c44e1f38 cifs: deal with the channel loading lag while picking channels
    cd42ddddd70a jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
    3f46644a5131 jffs2: check that raw node were preallocated before writing summary
    b427d98d5521 LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
    099cfcb98fb4 LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
    782baee5d917 platform/loongarch: laptop: Unregister generic_sub_drivers on exit
    3bce9e6be030 platform/loongarch: laptop: Get brightness setting from EC on probe
    1921781ec4a8 drivers/rapidio/rio_cm.c: prevent possible heap overwrite
    675d90ee874c io_uring: fix task leak issue in io_wq_create()
    3c3c7c66bdfa Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
    af4ed5262d30 powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
    a7f3cfc1eb99 powerpc/vdso: Fix build of VDSO32 with pcrel
    dd95b3e00346 platform/x86: dell_rbu: Stop overwriting data buffer
    f3b840fb1508 platform/x86: dell_rbu: Fix list usage
    523e2f8a7f83 platform/x86/amd: pmc: Clear metrics table at start of cycle
    7d71ba5b0a01 fs/xattr.c: fix simple_xattr_list()
    897e6d88f0e3 Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
    cdc1b9b47bc5 tee: Prevent size calculation wraparound on 32-bit kernels
    59b7304d0dff ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
    bca6fe52bd95 bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
    c85311a73d74 watchdog: da9052_wdt: respect TWDMIN
    519ba75728ee fbcon: Make sure modelist not set on unregistered console
    8df53ee74cac wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz
    2304e2b5e470 wifi: ath12k: fix incorrect CE addresses
    9db1bf90147c wifi: ath12k: fix link valid field initialization in the monitor Rx
    6bd0f2e71b15 wifi: ath11k: determine PM policy based on machine model
    42d0bfbe0296 octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
    a37888a435b0 net: ethernet: cortina: Use TOE/TSO on all TCP
    38c4106cb4e9 bpf, sockmap: Fix data lost during EAGAIN retries
    bdb4da9e1921 f2fs: fix to set atomic write status more clear
    a3c32f17acbf usbnet: asix AX88772: leave the carrier control to phylink
    e036d648773c ice: fix check for existing switch rule
    8cde755f5616 i40e: fix MMIO write access to an invalid page in i40e_clear_hw
    52a16bafda0e sock: Correct error checking condition for (assign|release)_proto_idx()
    34c0a670556b scsi: lpfc: Use memcpy() for BIOS version
    79dc5e78d13d wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping
    5cf32cef3a38 pinctrl: mcp23s08: Reset all pins to input at probe
    f9397cf7bfb6 software node: Correct a OOB check in software_node_get_reference_args()
    03545901ec09 net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
    c0d8c14d9bf2 vxlan: Do not treat dst cache initialization errors as fatal
    b4c83b37490d net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions
    cd97899361bc net: bridge: mcast: update multicast contex when vlan state is changed
    a0ab9e9148dd wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
    172d1e4a6804 wifi: mac80211: VLAN traffic in multicast path
    4fc2b3c0657b wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
    2077cef44d33 wifi: iwlwifi: pcie: make sure to lock rxq->read
    920fcc7adc73 iommu/amd: Ensure GA log notifier callbacks finish running before module unload
    32f25633f366 scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
    c697dac96937 libbpf: Add identical pointer detection to btf_dedup_is_equiv()
    f11cfb48f2d2 clk: rockchip: rk3036: mark ddrphy as critical
    dfec43c50376 wifi: mac80211: do not offer a mesh path if forwarding is disabled
    efa7997ce846 wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
    187829fb0c35 net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
    84d34bd55d6a net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
    ae48bc0b8be8 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
    8a15a5438c58 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
    02c966a8869b pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
    14a26f669206 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
    79f3e44df6e6 net: atlantic: generate software timestamp just before the doorbell
    9121c2ddd177 ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
    62b62a2a6dc5 x86/sgx: Prevent attempts to reclaim poisoned pages
    c1025a54289b tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
    156b6bac7645 tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
    969d61aa168c wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
    f11520c6174c wifi: ath11k: Fix QMI memory reuse logic
    dcf7bb4397de wifi: ath12k: fix a possible dead lock caused by ab->base_lock
    7c4b6d8bd72d wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
    6f79eb2e6816 net: dlink: add synchronization for stats update
    04fa1bef29d5 i2c: npcm: Add clock toggle recovery
    be5f6a65509c i2c: tegra: check msg length in SMBUS block read
    762325441e3a cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
    a620f66675e5 sctp: Do not wake readers in __sctp_write_space()
    a0b91fa813d4 wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
    bf3dcb53ba32 wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
    2c1a2d863b24 emulex/benet: correct command version selection in be_cmd_get_stats()
    24900688ee47 wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
    775fdb4042b2 i2c: designware: Invoke runtime suspend on quick slave re-registration
    7bf4461f1c97 bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
    61fc32485d64 f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
    92dbc2a2e2ec tipc: use kfree_sensitive() for aead cleanup
    088279ff18cd net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
    d2a25ca4134c net: macb: Check return value of dma_set_mask_and_coherent()
    c148af1f398b ACPI: battery: negate current when discharging
    6635356483b8 PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
    6a7c583f56b9 gpiolib: of: Add polarity quirk for s5m8767
    5505ec191f77 ASoC: tegra210_ahub: Add check to of_device_get_match_data()
    cf961a38e450 ACPICA: utilities: Fix overflow check in vsnprintf()
    558ba4afdfe5 power: supply: bq27xxx: Retrieve again when busy
    1fee4324b566 ACPICA: fix acpi parse and parseext cache leaks
    8621fbeb4db9 ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
    0ab90839bf6c ACPI: bus: Bail out if acpi_kobj registration fails
    7d346ca11a6e ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
    30e11a8cff73 ACPICA: Avoid sequence overread in call to strncmp()
    58cf7ba36b94 mmc: Add quirk to disable DDR50 tuning
    74f765e85d4b power: supply: collie: Fix wakeup source leaks on device unbind
    1c24a738971c clocksource: Fix the CPUs' choice in the watchdog per CPU verification
    28ecaebbed55 ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
    755a8006b767 ACPICA: fix acpi operand cache leak in dswstate.c
    3175377e8ee1 iio: adc: ad7606_spi: fix reg write value mask
    f6a5b84f450b iio: imu: inv_icm42600: Fix temperature calculation
    fe684290418e mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
    6a860536306e iio: accel: fxls8962af: Fix temperature scan element sign
    a9f6c1ad6c93 PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit()
    0b522796a80f PCI: Fix lock symmetry in pci_slot_unlock()
    7f6a2d378425 PCI: Add ACS quirk for Loongson PCIe
    9895f9d9b515 PCI: cadence-ep: Correct PBA offset in .set_msix() callback
    7ca06d696a2f uio_hv_generic: Use correct size for interrupt and monitor pages
    6f824cdd8209 Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
    37166d63e42c smb: client: add NULL check in automount_fullpath
    39ff3774693f cifs: dns resolution is needed only for primary channel
    5713127da855 cifs: update dstaddr whenever channel iface is updated
    9d80e1d37e85 cifs: reset connections for all channels when reconnect requested
    3ee979709e16 remoteproc: core: Release rproc->clean_table after rproc_attach() fails
    9515d74c9d1a remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
    a4df96e2e81c regulator: max14577: Add error check for max14577_read_reg()
    231f6a1de15b mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
    dfa9ef978d9c staging: iio: ad5933: Correct settling cycles encoding per datasheet
    cc3cc41ed670 video: screen_info: Relocate framebuffers behind PCI bridges
    fa2118e9e233 KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
    6bd2569d0b2f net: ch9200: fix uninitialised access during mii_nway_restart
    b1bf167f46dd phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
    83a692a9792a ftrace: Fix UAF when lookup kallsym after ftrace disabled
    6737c4551d2b mtd: rawnand: qcom: Fix read len for onfi param page
    df4918c0bb49 dm-verity: fix a memory leak if some arguments are specified multiple times
    61850a1b2673 dm-mirror: fix a tiny race condition
    fe0ff7d801fb KVM: VMX: Flush shadow VMCS on emergency reboot
    0d7a2ea4351b KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
    7775ab2d53b3 mtd: nand: sunxi: Add randomizer configuration before randomizer enable
    e06a1dadc481 mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
    d3abf0066b5e mm: fix ratelimit_pages update error in dirty_ratio_handler()
    23a707bbcbea RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
    442e80dcf6fe watchdog: fix watchdog may detect false positive of softlockup
    5180561afff8 ipc: fix to protect IPCS lookups using RCU
    f24d42245239 clk: meson-g12a: add missing fclk_div2 to spicc
    ebb8060561d5 parisc: fix building with gcc-15
    2f4040a5855a vgacon: Add check for vc_origin address range in vgacon_scroll()
    7f27859721ae parisc/unaligned: Fix hex output to show 8 hex chars
    3ca78032a388 fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
    e32a40db6796 EDAC/altera: Use correct write width with the INTTEST register
    0909b2b49c45 fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
    061a5dd66608 net: ftgmac100: select FIXED_PHY
    8c5713ce1ced net/sched: fix use-after-free in taprio_dev_notifier
    a8acc7080ad5 NFC: nci: uart: Set tty->disc_data only in success path
    d95d87841d2a hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
    79ef8a6c4ec5 f2fs: fix to do sanity check on sit_bitmap_size
    a87cbcc909cc f2fs: prevent kernel warning due to negative i_nlink from corrupted image
    aaddc6c696bd f2fs: fix to do sanity check on ino and xnid
    0f7100e8d9f0 Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer()
    17474a56acf7 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
    cf6a4c4ac7b6 ext4: only dirty folios when data journaling regular files
    3e8a5163bcd3 ext4: ensure i_size is smaller than maxbytes
    68cea04f1fb2 ext4: factor out ext4_get_maxbytes()
    223091c9897c ext4: fix calculation of credits for extent tree modification
    26e09d18599d ext4: inline: fix len overflow in ext4_prepare_inline_data
    55995f172598 bus: fsl-mc: fix GET/SET_TAILDROP command ids
    1e474b5fab51 bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
    8edfed4439b1 ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
    48f35a32947b cgroup,freezer: fix incomplete freezing when attaching tasks
    96707ff5818f ceph: set superblock s_magic for IMA fsmagic matching
    636391e8c98c can: tcan4x5x: fix power regulator retrieval during probe
    d5d4be47e06c bus: mhi: host: Fix conflict between power_up and SYSERR
    44b9620e82bb bus: mhi: ep: Update read pointer only after buffer is written
    838d63de34a9 ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
    c592d3ceca1a ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
    12cffd5bd1da arm64/mm: Close theoretical race where stale TLB entry remains valid
    a31dce9b561d media: uvcvideo: Fix deferred probing error
    c51c0a0be239 media: uvcvideo: Send control events for partial succeeds
    d314f99b6f19 media: uvcvideo: Return the number of processed controls
    ec26be7d6355 media: imx-jpeg: Cleanup after an allocation error
    20a6db0ef356 media: imx-jpeg: Reset slot data pointers when freed
    683a1db6800e media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
    350d4af0493a media: imx-jpeg: Drop the first error frames
    f6b1b0f8ba0b media: vivid: Change the siize of the composing
    9824e1732a16 media: vidtv: Terminating the subsequent process of initialization failure
    17cb043ea133 media: videobuf2: use sgtable-based scatterlist wrappers
    36318ff3d6bf media: venus: Fix probe error handling
    ae7b143e05b3 media: v4l2-dev: fix error handling in __video_register_device()
    dfb2add0baa7 media: omap3isp: use sgtable-based scatterlist wrappers
    ac3a8e37cb8e media: mediatek: vcodec: Correct vsi_core framebuffer size
    025a943c49c7 media: gspca: Add error handling for stv06xx_read_sensor()
    ec5c328606ba media: davinci: vpif: Fix memory leak in probe error path
    04354c529c82 media: cxusb: no longer judge rbuf when the write fails
    4425db511b9d media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
    1e4b3f166795 media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
    b9e314231ffc media: ccs-pll: Start OP pre-PLL multiplier search from correct value
    ae2fe6606511 media: ccs-pll: Start VT pre-PLL multiplier search from correct value
    eb7a4ea0a18c media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
    ecaf904a55c1 media: nxp: imx8-isi: better handle the m2m usage_count
    585acb354977 media: ov5675: suppress probe deferral errors
    ce4a5a34a2bf media: ov8856: suppress probe deferral errors
    aaf516bb732c wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
    d4356ce8f826 wifi: rtw88: usb: Reduce control message timeout to 500 ms
    2e7c64d7a92c jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
    1eeecd9be9fe wifi: ath12k: fix ring-buffer corruption
    14f5549ad163 fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
    5ee9a07b456d SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
    5060e1a5fef1 nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
    e7e943ddd1c6 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
    f08689fe3153 wifi: ath11k: fix ring-buffer corruption
    68b29235778b wifi: ath11k: fix rx completion meta data corruption
    0e4dc150423b wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
    782b3aff6763 net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
    477e4319c371 net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
    278a92b87463 regulator: max20086: Change enable gpio to optional
    420f6942f109 regulator: max20086: Fix MAX200086 chip id
    bf70b3c3df5f powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states
    0257c26bbca5 io_uring/kbuf: account ring io_buffer_list memory
    a8b5ef355477 io_uring: account drain memory to cgroup
    abf80985f4d6 ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
    3895a7590e6e ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
    40aefac870c1 gfs2: move msleep to sleepable context
    f5b9144715da crypto: marvell/cesa - Do not chain submitted requests
    0df5e4c7de27 configfs: Do not override creating attribute file failure in populate_attrs()

(From OE-Core rev: 7365af988da35e67e4463a0fd802b93a47d05a77)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Bruce Ashfield 2fb7e02924 linux-yocto/6.6: update to v6.6.94
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    6282921b6825 Linux 6.6.94
    d0e22b854ac6 drm/meson: Use 1000ULL when operating with mode->clock
    65e20c5d99d1 net: usb: aqc111: debug info before sanitation
    0fcfc93576bc regulator: dt-bindings: mt6357: Drop fixed compatible requirement
    1380f68517a7 calipso: unlock rcu before returning -EAFNOSUPPORT
    2cfcbe1554c1 x86/iopl: Cure TIF_IO_BITMAP inconsistencies
    8884c41bae39 xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
    b0e35d563917 usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
    3c7e52cfa86d usb: Flush altsetting 0 endpoints before reinitializating them after reset.
    c40b5e0aad1f usb: cdnsp: Fix issue with detecting USB 3.2 speed
    81dc3db4c3ac usb: cdnsp: Fix issue with detecting command completion event
    6e3af836805e VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
    97f5b57eca7d usb: usbtmc: Fix read_stb function and get_stb ioctl
    b0630d18451a kbuild: Disable -Wdefault-const-init-unsafe
    2c72fe18cc5f posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
    99bc5248a479 Revert "io_uring: ensure deferred completions are posted for multishot"
    029d39ae7ecf io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
    62d5d980b513 io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
    90e11232a62b io_uring: add io_file_can_poll() helper
    4fa7831cf0ac HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
    dd4b8e05f2a2 ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
    37a75cd83dde tools/resolve_btfids: Fix build when cross compiling kernel with clang.
    c9a2e81583d9 block: Fix bvec_set_folio() for very large folios
    9e263d94593b bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
    51c695986fa1 perf: Ensure bpf_perf_link path is properly serialized
    efcd52ba648b nvmet-fcloop: access fcpreq only when holding reqlock
    84ead78a3cf8 fs/filesystems: Fix potential unsigned integer underflow in fs_name()
    0383b25488a5 net_sched: ets: fix a race in ets_qdisc_change()
    057f7a61b04b net_sched: tbf: fix a race in tbf_change()
    2a71924ca4af net_sched: red: fix a race in __red_change()
    46c15c9d0f65 net_sched: prio: fix a race in prio_tune()
    77a72d749701 net/mlx5e: Fix leak of Geneve TLV option object
    a810e484778d net/mlx5: Fix return value when searching for existing flow group
    5953ae44dfe5 net/mlx5: Fix ECVF vports unload on shutdown flow
    7fb33ed59867 net/mlx5: Ensure fw pages are always allocated on same NUMA
    3c40cfcbf18a Bluetooth: MGMT: Fix sparse errors
    c621211b3088 Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
    4bf299105706 Bluetooth: Fix NULL pointer deference on eir_get_service_data
    abb0605ca009 net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
    bab6bca0834c net/mdiobus: Fix potential out-of-bounds read/write access
    7bafe26d7314 macsec: MACsec SCI assignment for ES = 0
    ff55c85a923e net: Fix TOCTOU issue in sk_is_readable()
    c6dad167aade ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
    987c3b8859d6 i40e: retry VFLR handling if there is ongoing VF reset
    dd184939f41e i40e: return false from i40e_reset_vf if reset is in progress
    dc5fc562f1c4 drm/meson: fix more rounding issues with 59.94Hz modes
    81331229971a drm/meson: use vclk_freq instead of pixel_freq in debug print
    e9a5fe781748 drm/meson: fix debug log statement when setting the HDMI clocks
    1f8d03fb90ed drm/meson: use unsigned long long / Hz for frequency types
    d2fc85c90b41 powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
    8635e325b85d powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
    b4e9bab6011b net_sched: sch_sfq: fix a potential crash on gso_skb handling
    d4cbcf274c51 scsi: iscsi: Fix incorrect error path labels for flashnode operations
    581b7c3d8025 pinctrl: qcom: pinctrl-qcm2290: Add missing pins
    de2adfaa9514 regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
    6e329771144c wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready
    e8e405757004 wifi: ath11k: don't wait when there is no vdev started
    a0ec9e39cbf7 wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process()
    e57c74d76076 wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
    452f55761513 wifi: ath11k: convert timeouts to secs_to_jiffies()
    d66fd9591ff4 wifi: ath11k: fix soc_dp_stats debugfs file permission
    748da2fc1c3c ath10k: snoc: fix unbalanced IRQ enable in crash recovery
    259119595227 ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
    bdd56875c692 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
    5e64376da212 Bluetooth: MGMT: Remove unused mgmt_pending_find_data
    9f66b6531c2b Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    6edb171845ed Bluetooth: hci_core: fix list_for_each_entry_rcu usage
    21f071261f94 scsi: core: ufs: Fix a hang in the error handler
    44ab21d74f61 serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    9d50955bf215 serial: sh-sci: Move runtime PM enable to sci_probe_single()
    f8f07ea23116 serial: sh-sci: Check if TX data was written to device in .tx_empty()
    6b60251cab3f arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
    9333ced86ca7 arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
    b18568bae6c7 arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
    1e3db0a98cbd arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
    869aafe49c6b arm64: dts: ti: k3-am65-main: Fix sdhci node properties
    c789d2c138ca kasan: use unchecked __memset internally
    91d14d9961b7 Input: synaptics-rmi - fix crash with unsupported versions of F34
    73b8f31337fb pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
    4f091ad0862b do_change_type(): refuse to operate on unmounted/not ours mounts
    3d1ea8e048ac fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
    3b699b94727a path_overmount(): avoid false negatives
    3aed255ae4a3 ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
    cc03c899e6d9 ASoC: Intel: avs: Verify content returned by parse_int_array()
    ea739a5492bd ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
    9836cc310ec1 ASoC: codecs: hda: Fix RPM usage count underflow
    0fd2ae401720 scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
    d2507aeea45b seg6: Fix validation of nexthop addresses
    8c9e9cd39877 wireguard: device: enable threaded NAPI
    a21a4937726f net: dsa: b53: allow RGMII for bcm63xx RGMII ports
    02c03865d26a net: dsa: b53: do not enable RGMII delay on bcm63xx
    1c7a023b0cc9 netfilter: nf_nat: also check reverse tuple to obtain clashing entry
    39bab2d3517b netfilter: nf_set_pipapo_avx2: fix initial map fill
    7f6265fce3bd gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
    9c49728b61e1 PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
    c07c61ef703a vmxnet3: correctly report gso type for UDP tunnels
    cc89f457d913 net: wwan: t7xx: Fix napi rx poll issue
    85eef1748c02 net: fix udp gso skb_segment after pull from frag_list
    b263088ee8ab net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
    2e02edb66427 net: dsa: tag_brcm: legacy: fix pskb_may_pull length
    18e648163016 ice: fix rebuilding the Tx scheduler tree for large queue counts
    d78e538b65e4 ice: create new Tx scheduler nodes for new queues only
    1d3c5d0dec67 ice: fix Tx scheduler error handling in XDP callback
    55dd7225217c Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
    59d5f3134b5c spi: bcm63xx-hsspi: fix shared reset
    29abb7fc8244 spi: bcm63xx-spi: fix shared reset
    d88839739701 net: lan966x: Make sure to insert the vlan tags also in host mode
    1b2e54f447af net/mlx4_en: Prevent potential integer overflow calculating Hz
    2e3d96ad9549 driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
    acab7ca5ff19 net: tipc: fix refcount warning in tipc_aead_encrypt
    633a80216a44 gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
    6ee70ca1fded net: stmmac: platform: guarantee uniqueness of bus_id
    7a8e87568575 vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
    b3b4efa2e623 coresight: prevent deactivate active config while enabling the config
    e69e2cfd8b38 fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
    32b3f3382d6c counter: interrupt-cnt: Protect enable/disable OPs with mutex
    72166de0a1a5 MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
    ec20928ecb1c iio: adc: ad7124: Fix 3dB filter frequency reading
    ca0012a63261 iio: filter: admv8818: Support frequencies >= 2^32
    786cdbd4da1b iio: filter: admv8818: fix range calculation
    61b3b2d62888 iio: filter: admv8818: fix integer overflow
    31fa7dd09a25 iio: filter: admv8818: fix band 4, state 15
    f2829faa3fd5 thunderbolt: Fix a logic error in wake on connect
    a6c7c365734c serial: Fix potential null-ptr-deref in mlb_usio_probe()
    db96a4fd8614 usb: renesas_usbhs: Reorder clock handling and power management in probe
    63df0a22dabc rtc: loongson: Add missing alarm notifications for ACPI RTC events
    56035627865e PCI/DPC: Initialize aer_err_info before using it
    b79e10050d9d dmaengine: ti: Add NULL check in udma_probe()
    127dfb4f1c5a phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
    248f52ad6e82 PCI: apple: Use gpiod_set_value_cansleep in probe flow
    004316d2de7e PCI: cadence: Fix runtime atomic count underflow
    92d879eff459 PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
    2e6d9128fe9b rtc: sh: assign correct interrupts with DT
    848d78e3625f cifs: Fix validation of SMB1 query reparse point response
    c050dc2669c2 nfs: ignore SB_RDONLY when remounting nfs
    c9d9a8995f69 nfs: clear SB_RDONLY before getting superblock
    7101de239633 perf trace: Always print return value for syscalls returning a pid
    494395071e85 perf record: Fix incorrect --user-regs comments
    5ec729bc5b03 perf tests switch-tracking: Fix timestamp comparison
    a20bbd91622f mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
    611efa317b70 mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
    85322ddd449a rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
    3b726bc12624 remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick}
    f1a3c8ceb21d remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
    41581d392c81 perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
    53385a400af6 perf intel-pt: Fix PEBS-via-PT data_src
    1737865a12f8 perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
    84126960357d dm-flakey: make corrupting read bios work
    1aef0e1083bb dm-flakey: error all IOs when num_features is absent
    4e9e45746b86 hwmon: (asus-ec-sensors) check sensor index in read_string()
    a0d9d9b5a463 mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
    fde314445332 backlight: pm8941: Add NULL check in wled_configure()
    06f41679d35e dm: free table mempools if not used in __bind
    679d40ca030a dm: don't change md if dm_table_set_restrictions() fails
    e431cc956d67 perf ui browser hists: Set actions->thread before calling do_zoom_thread()
    34e124dc2189 perf build: Warn when libdebuginfod devel files are not available
    655d3c6f8ce7 randstruct: gcc-plugin: Fix attribute addition
    c64a16344c52 randstruct: gcc-plugin: Remove bogus void member
    ab91647acdf4 fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
    8312b1f776f7 soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
    b828083b3d7d soc: aspeed: lpc: Fix impossible judgment condition
    fc5a7a966466 ARM: aspeed: Don't select SRAM
    e774ce479f62 arm64: dts: mt6359: Rename RTC node to match binding expectations
    5b91fc48dcbb arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
    0d5dd35f7a73 arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
    867dd8a356a1 arm64: defconfig: mediatek: enable PHY drivers
    978991404adc ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
    9337a54bc620 ARM: dts: qcom: apq8064: add missing clocks to the timer node
    4ca90f54bc65 dt-bindings: vendor-prefixes: Add Liontron name
    4b23c46eb2d8 bus: fsl-mc: fix double-free on mc_dev
    8b8e2966477e nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
    9ab3008bf984 nilfs2: add pointer check for nilfs_direct_propagate()
    681a35b1dcf1 ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
    4f99357dadbf Squashfs: check return result of sb_min_blocksize
    2d4ad56428ed arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
    38caeda97b5d arm64: tegra: Drop remaining serial clock-names and reset-names
    1aaffafdd44b arm64: dts: rockchip: Update eMMC for NanoPi R5 series
    850fd99f22fc arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
    ac25c30462a5 arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
    6145c491d649 arm64: dts: mt6359: Add missing 'compatible' property to regulators node
    018324818ad5 arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
    d6d756d3ea21 arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio
    2eb09d84a00a arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio
    7a276effd506 arm64: dts: imx8mp-beacon: Fix RTC capacitive load
    75b985ef1e64 arm64: dts: imx8mn-beacon: Fix RTC capacitive load
    986c6c52d4aa arm64: dts: imx8mm-beacon: Fix RTC capacitive load
    c8658f43df4f arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO
    62f142f9b863 arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
    8af84ebd27fc ARM: dts: at91: at91sam9263: fix NAND chip selects
    e6ef5b282e33 ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
    3c9472989031 arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
    b1253f7c65d1 arm64: dts: qcom: sm8250: Fix CPU7 opp table
    ac0df85cc591 arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
    072b6f8e39ce arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
    618060fc563b arm64: dts: qcom: sdm845-starqltechn: refactor node order
    2bf235c5dddf arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
    8218e21030bd arm64: dts: qcom: sdm845-starqltechn: remove wifi
    c4f2f90ebbad f2fs: fix to correct check conditions in f2fs_cross_rename
    67b800b6d772 f2fs: use d_inode(dentry) cleanup dentry->d_inode
    857b4d2bbeb4 net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
    8ebcd311b486 net: openvswitch: Fix the dead loop of MPLS parse
    946bfdfcb76a calipso: Don't call calipso functions for AF_INET sk.
    5df8db01d6a4 octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
    0b40aeaf83ca net: phy: mscc: Fix memory leak when using one step timestamping
    6486f11ccef4 net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
    4744a5d71d2a net: phy: fix up const issues in to_mdio_device() and to_phy_device()
    363fdf277742 net: phy: clear phydev->devlink when the link is deleted
    6f639c25bfad bpf: Avoid __bpf_prog_ret0_warn when jit fails
    8d5bc5ec6c94 net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
    ac7897c01240 RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
    60790d287c1a net: usb: aqc111: fix error handling of usbnet read calls
    333262e5dd8c RISC-V: KVM: lock the correct mp_state during reset
    68b69b50dfba netfilter: nft_tunnel: fix geneve_opt dump
    4c6fa65ab2ae bpf, sockmap: Avoid using sk_socket after free when sending
    9c73afd7f1c9 Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
    801677040bb2 vfio/type1: Fix error unwind in migration dirty bitmap allocation
    cf008d9a08a7 netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
    1e8b2048f9e9 wifi: mt76: mt7996: fix RX buffer size of MCU event
    800f7e73a679 wifi: mt76: mt7996: set EHT max ampdu length capability
    e9f9cef1877a wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
    6c81f1c7812c kernfs: Relax constraint in draining guard
    713b9bfa939d scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
    5482ef9875ea wifi: ath9k_htc: Abort software beacon handling if disabled
    b5ef128926cd hisi_acc_vfio_pci: bugfix live migration function without VF device driver
    5be5cd86d1e9 hisi_acc_vfio_pci: add eq and aeq interruption restore
    f0423873e7ae hisi_acc_vfio_pci: fix XQE dma address error
    99dbad1b01d3 wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
    4b1cf1f040a0 iommu: remove duplicate selection of DMAR_TABLE
    74e18211c2c8 wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
    f61b8fecec96 s390/bpf: Store backchain even for leaf progs
    fbd4d6293b53 clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
    6d8f39875a10 bpf: Fix WARN() in get_bpf_raw_tp_regs
    eb435bc4c74a pinctrl: at91: Fix possible out-of-boundary access
    b44672c17ca0 libbpf: Use proper errno value in nlattr
    07680e38b78d ktls, sockmap: Fix missing uncharge operation
    94ade4147a09 tracing: Fix error handling in event_trigger_parse()
    ae015964d7ff tracing: Rename event_trigger_alloc() to trigger_data_alloc()
    3f7724fcc193 efi/libstub: Describe missing 'out' parameter in efi_load_initrd
    3c1adc2f8c73 clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
    012fd5987309 clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
    7c95e4a31fc4 clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
    f2692b21774d clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
    a1383eb9d6c4 clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
    ac7ab38c271b tracing: Move histogram trigger variables from stack to per CPU structure
    c60f57a49619 bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
    7c4c84cdcc19 RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
    5e4519d8cdd8 netfilter: nft_quota: match correctly when the quota just depleted
    585c9ed565c5 netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
    50bbbd25597d bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
    1066c5a7d083 libbpf: Use proper errno value in linker
    1c005c53cf8e f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
    43cec280496a f2fs: clean up w/ fscrypt_is_bounce_page()
    4b88a4dfbea0 bonding: assign random address if device address is same as bond
    8fa998b842f2 iommu: Protect against overflow in iommu_pgsize()
    cb4b9369463e Use thread-safe function pointer in libbpf_print
    79669facfe92 libbpf: Remove sample_period init in perf_buffer
    624b4cf6c49c scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
    5edd80d4b9c8 RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
    be049199dec9 wifi: ath12k: fix node corruption in ar->arvifs list
    c9c9107ffa0e wifi: ath12k: Add MSDU length validation for TKIP MIC error
    f76f399004c6 wifi: rtw88: do not ignore hardware read error during DPK
    7b63e52a8bab wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
    446fcc230d9f wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
    6aa81fc0d67a xfrm: Use xdo.dev instead of xdo.real_dev
    18eb7b5f1e51 libbpf: Fix buffer overflow in bpf_object__init_prog
    0e9c13ed852e net: ncsi: Fix GCPS 64-bit member variables
    a39cc43efc1b f2fs: fix to do sanity check on sbi->total_valid_block_count
    a93db61dfa92 wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
    db1d15a26f21 bpf, sockmap: Fix panic when calling skb_linearize
    34837ae8cded bpf, sockmap: fix duplicated data transmission
    2e36a81d388e bpf: fix ktls panic with sockmap
    7c969106a8ba selftests/bpf: Fix bpf_nf selftest failure
    b524baecb01b IB/cm: use rwlock for MAD agent lock
    f50ba7e7b607 wifi: ath11k: fix node corruption in ar->arvifs list
    3d6e3849b691 xen/x86: fix initial memory balloon target
    7810600b06cb drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
    a2502fd0fa9f drm/mediatek: Fix kobject put for component sub-drivers
    8126855798b0 drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
    77511c2d2d1c perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
    ee96502062ec scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
    e500dff1e4e5 arm64/fpsimd: Do not discard modified SVE state
    99d4011a0a32 firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
    3215e000eff6 drm/tegra: rgb: Fix the unbound reference count
    01f73e104288 drm/vkms: Adjust vkms_state->active_planes allocation type
    4715d2959d3b drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
    5e99bcff7cb5 selftests/seccomp: fix syscall_restart test for arm compat
    cf08a1cba004 arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
    0052f10c25e4 firmware: psci: Fix refcount leak in psci_dt_init
    569829f8fde0 m68k: mac: Fix macintosh_config for Mac II
    428d865fec68 watchdog: exar: Shorten identity name to fit correctly
    701340a25b1a fs/ntfs3: handle hdr_first_de() return value
    94be75619e8c drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
    2f6e645ce64e arm64/fpsimd: Fix merging of FPSIMD state during signal return
    43be952e8854 arm64/fpsimd: Discard stale CPU state when handling SME traps
    8bf6491dab8c arm64/fpsimd: Avoid RES0 bits in the SME trap handler
    0d271c53009a media: rkvdec: Fix frame size enumeration
    cdf7e1ff99ab drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
    079cc1fa46e0 drm/vc4: tests: Use return instead of assert
    83cc36371af8 drm/vmwgfx: Add seqno waiter for sync_files
    8b263e8ab2d3 ASoC: apple: mca: Constrain channels according to TDM mask
    42f7dd4bf5e0 spi: sh-msiof: Fix maximum DMA transfer size
    5174ac310ae7 ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
    fca08cfadd45 PM: sleep: Print PM debug messages during hibernation
    aa7b90057bc3 x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
    2b5459380613 PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
    5b71469d77fd ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
    d46af758f63d power: reset: at91-reset: Optimize at91_reset()
    c6c142267952 spi: tegra210-quad: modify chip select (CS) deactivation
    41de2c9e30b7 spi: tegra210-quad: remove redundant error handling code
    04034d43e9b6 spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
    3ff2422442de EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
    3f5d06590009 EDAC/skx_common: Fix general protection fault
    4191b7669e00 ASoC: tas2764: Enable main IRQs
    8b94e19adae3 ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
    f6941e72d352 kunit: Fix wrong parameter to kunit_deactivate_static_stub()
    5810e9d402c4 crypto: sun8i-ce - move fallback ahash_request to the end of the struct
    04a39a3c7d37 crypto: xts - Only add ecb if it is not already there
    ba2af6855c4d crypto: lrw - Only add ecb if it is not already there
    ec91ab135cf0 rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
    402fd6a6fe57 btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
    7cfb9086b6d3 btrfs: scrub: update device stats when an error is detected
    3cf4d9cae435 crypto: marvell/cesa - Avoid empty transfer descriptor
    5e9666ac8b94 crypto: marvell/cesa - Handle zero-length skcipher requests
    62af7780054f x86/cpu: Sanitize CPUID(0x80000000) output
    ce167ff4cd17 x86/microcode/AMD: Do not return error when microcode update is not necessary
    4fb22310892c powerpc/crash: Fix non-smp kexec preparation
    fdc39b3ad8a7 powerpc: do not build ppc_save_regs.o always
    cb1e26f53e59 crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
    c62b79c1c513 crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
    6ce08b3ba52c perf/core: Fix broken throttling when max_samples_per_tick=1
    eec0dd17db02 gfs2: gfs2_create_inode error handling fix
    76c7b1407a7a crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
    5dea6398f2dd x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
    cc5cd8a1719e tools/x86/kcpuid: Fix error handling
    e9019e2214fa Revert "drm/amd/display: more liberal vmin/vmax update for freesync"
    9f837b359d1c dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property
    68c504243737 dt-bindings: usb: cypress,hx3: Add support for all variants
    5a057f261539 thunderbolt: Do not double dequeue a configuration request
    259e4d6e10cd usb: usbtmc: Fix timeout value in get_stb
    3258d7ff8ebf serial: jsm: fix NPE during jsm_uart_port_init
    e2e38c5211b1 Bluetooth: hci_qca: move the SoC type check to the right place
    b63f23fb0ad2 usb: typec: ucsi: fix Clang -Wsign-conversion warning
    5ec1200da929 USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
    ff835ab115f0 usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
    73c50fa3ff02 usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
    32a5f643ce54 rtc: Fix offset calculation for .start_secs < 0
    b836d94be852 rtc: Make rtc_time64_to_tm() support dates before 1970
    dbd568a30597 acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
    39ed85ae485d pinctrl: armada-37xx: set GPIO output value before setting direction
    8f0f45a31215 pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
    4afa9d57ed5e tracing: Fix compilation warning on arm32

(From OE-Core rev: e92b90ade0b0c3bbb4e2a9d29c7b85e32a161279)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00
Bruce Ashfield 25cc9eae17 linux-yocto/6.6: update to v6.6.93
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    c2603c511feb4 Linux 6.6.93
    c78abb646ff82 ksmbd: use list_first_entry_or_null for opinfo_get_list()
    106451492d74c net: ethernet: ti: am65-cpsw: Lower random mac address error print to info
    513b27dbd126b platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
    871e44494f5d5 platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
    af7243148f2eb NFS: Avoid flushing data while holding directory locks in nfs_rename()
    f83097445b7ec nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
    e99de95033051 spi: spi-sun4i: fix early activation
    b8435b76971dc phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
    eae121397e278 drm/amd/display: fix link_set_dpms_off multi-display MST corner case
    4728d56dc56f0 um: let 'make clean' properly clean underlying SUBARCH as well
    af288d8e14058 platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
    764f8cd8aadcd nfs: don't share pNFS DS connections between net namespaces
    98f7c351a11a1 HID: quirks: Add ADATA XPG alpha wireless mouse support
    46a6ce4812555 dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
    cdb61a705f5f3 coredump: hand a pidfd to the usermode coredump helper
    1846a7b92b863 coredump: fix error handling for replace_fd()
    0ec1e98bf5366 perf/arm-cmn: Initialise cmn->cpu earlier
    10778e2f49a2c perf/arm-cmn: Fix REQ2/SNP2 mixup
    295f7c579b07b net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
    ee1209b9f57ba arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
    cf27046208bd8 arm64: dts: qcom: sm8550: Add missing properties for cryptobam
    feadf31790331 arm64: dts: qcom: sm8450: Add missing properties for cryptobam
    5dd982ff67d1e arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
    abf3ffaeef603 arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
    ea61eda1f4b45 af_unix: Fix uninit-value in __unix_walk_scc()
    ed14f8ae9bcf7 af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
    c0c8d419dade9 af_unix: Add dead flag to struct scm_fp_list.
    a288920ff9dab af_unix: Don't access successor in unix_del_edges() during GC.
    3600729b7fc05 af_unix: Try not to hold unix_gc_lock during accept().
    7b1ffbd3b22e7 af_unix: Remove lock dance in unix_peek_fds().
    de7921631ff32 af_unix: Replace garbage collection algorithm.
    2c2d0c662d842 af_unix: Detect dead SCC.
    324005012f65e af_unix: Assign a unique index to SCC.
    d23802221f675 af_unix: Avoid Tarjan's algorithm if unnecessary.
    cdaa3499a8519 af_unix: Skip GC if no cycle exists.
    e0e23fc499920 af_unix: Save O(n) setup of Tarjan's algo.
    27a07364cefdf af_unix: Fix up unix_edge.successor for embryo socket.
    36f924e4bf4e7 af_unix: Save listener for embryo socket.
    3ee9b24bd6f70 af_unix: Detect Strongly Connected Components.
    856aacbe2c520 af_unix: Iterate all vertices by DFS.
    494accabb56e2 af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
    d2d9f382e2db6 af_unix: Link struct unix_edge when queuing skb.
    4fc7df1c6da14 af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
    9e98ba0c73529 af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
    8eb55b667a0e2 af_unix: Remove CONFIG_UNIX_SCM.
    c0d56c028d90f af_unix: Remove io_uring code for GC.
    36f1f6ac53889 af_unix: Replace BUG_ON() with WARN_ON_ONCE().
    acc97866c1eae af_unix: Try to run GC async.
    328840c93bd6a af_unix: Run GC on only one CPU.
    4be073d59068e af_unix: Return struct unix_sock from unix_get_socket().
    c7b1bd52a031a btrfs: check folio mapping after unlock in relocate_one_folio()
    63815bef47ec2 hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
    5a9c0d5cbd02d can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
    f968f28cd14bb drm/gem: Internally test import_attach for imported objects
    10aecdc1c30c7 x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers
    367b8b91de2a0 i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
    1f9170737480d pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
    4a5e6e798ec77 watchdog: aspeed: fix 64-bit division
    a9e4ee7f12886 serial: sh-sci: Save and restore more registers
    517f928cc0c13 pds_core: Prevent possible adminq overflow/stuck condition
    77192e9cfe1b3 highmem: add folio_test_partial_kmap()
    bc133e43cb565 x86/boot: Compile boot code with -std=gnu11 too
    5cdce62dd929a spi: spi-fsl-dspi: Reset SR flags before sending a new message
    7cf42e5f406a5 spi: spi-fsl-dspi: Halt the module after a new message transfer
    9df00bd4769a0 spi: spi-fsl-dspi: restrict register range for regmap access
    0e7efc9acbb56 ksmbd: fix stream write failure
    fa68d5c14a70d Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
    f391043332e38 mm/page_alloc.c: avoid infinite retries caused by cpuset race
    363fd868d7a71 memcg: always call cond_resched() after fn()
    f33001a7c1e8f Input: xpad - add more controllers
    ed7d24b0c375f Revert "drm/amd: Keep display off while going into S4"
    bee465c0c464b smb: client: Reset all search buffer pointers when releasing buffer
    17d096c485b89 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
    73cadde98f67f smb: client: Fix use-after-free in cifs_fill_dirent
    7227fc0692d53 drm/edid: fixed the bug that hdr metadata was not reset
    7093887a11fe4 thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
    f86465626917d platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
    dde5400dad7e7 can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
    4cfe30f681a3d llc: fix data loss when reading from a socket in llc_ui_recvmsg()
    6764329675f94 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
    74d90875f3d43 ALSA: pcm: Fix race of buffer access at PCM OSS layer
    b5bada85c181f ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction
    1beb8c26b1fb1 ASoc: SOF: topology: connect DAI to a single DAI link
    e8be784d30b44 ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
    1f912f8484e9c can: bcm: add missing rcu read protection for procfs content
    76c84c3728178 can: bcm: add locking for bcm_op runtime updates
    e80f4f9c64b0f can: slcan: allow reception of short error messages
    584a729615fa9 padata: do not leak refcount in reorder_work
    134daaba93193 crypto: algif_hash - fix double free in hash_accept
    0c605de7edd68 clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe()
    35016086ae593 octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
    cc797adde644d octeontx2-af: Set LMT_ENA bit for APR table entries
    b19fc1d0be3c3 net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
    a3d24e4a835cb octeontx2-pf: Add AF_XDP non-zero copy support
    93c276942e75d sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    c844ace5b88d0 io_uring: fix overflow resched cqe reordering
    dbcd0909a1e2c net: lan743x: Restore SGMII CTRL register on resume
    0b4cde7284869 net: dwmac-sun8i: Use parsed internal PHY address instead of 1
    52b2e5579266f pinctrl: qcom: switch to devm_register_sys_off_handler()
    78b70388ca0ec pinctrl: qcom/msm: Convert to platform remove callback returning void
    df941e11772b3 ice: Fix LACP bonds without SRIOV environment
    c8a1a805e6d27 ice: fix vf->num_mac count with port representors
    fa942824b9f4a bridge: netfilter: Fix forwarding of fragmented packets
    feb6bde1a3241 Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
    c331a616a0b10 Bluetooth: L2CAP: Fix not checking l2cap_chan security level
    2b82d8e483bf0 dmaengine: fsl-edma: Fix return code for unhandled interrupts
    55f3c97fcba84 dmaengine: idxd: Fix ->poll() return value
    dcdc1aca6880d xfrm: Sanitize marks before insert
    a1fad2da94f00 clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
    c2b52d947c3dd remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
    5ff1a234fa4ee kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
    1b388afe88163 dmaengine: idxd: Fix allowing write() from different address spaces
    05298c30b7d9f dmaengine: idxd: add wq driver name support for accel-config user tool
    b58a295d10065 espintcp: remove encap socket caching to avoid reference leak
    3cf3d4f11254e soundwire: bus: Fix race on the creation of the IRQ domain
    d8ece4ced3b05 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
    e6d703b693b4c xenbus: Allow PVH dom0 a non-local xenstore
    85d12487d90ab wifi: iwlwifi: add support for Killer on MTL
    4e3401aa6e447 tools: ynl-gen: validate 0 len strings from kernel
    50d0de59f66cb btrfs: avoid NULL pointer dereference if no valid csum tree
    7a97f961a568a btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
    225cc549ed23f cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function
    fc460c12cd1e9 cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
    b72952c8c3668 io_uring/fdinfo: annotate racy sq/cq head/tail reads
    3a982ada411b8 nvmet-tcp: don't restore null sk_state_change
    a7a2315d8d0dc nvme-pci: add quirks for WDC Blue SN550 15b7:5009
    0a3f5efd1c545 nvme-pci: add quirks for device 126f:1001
    1c0d7792cfc71 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
    dbb47cbdbe2ad ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
    4c017ff3d73dd ASoC: cs42l43: Disable headphone clamps during type detection
    0ab50f622f202 pinctrl: meson: define the pull up/down resistor value as 60 kOhm
    534794c719231 book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
    442a247361f8b ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
    fe4a7145f048c drm: Add valid clones check
    1c58b332bc435 drm/panel-edp: Add Starry 116KHD024006
    e585f4f44a102 drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
    5d4951bad74bf drm: bridge: adv7511: fill stream capabilities
    a7e7cf538939d wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
    2dbcaddcf8eab wifi: ath9k: return by of_get_mac_address
    a21971b4be60f accel/qaic: Mask out SR-IOV PCI resources
    fbdf410d3bd2e wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
    b658e144a0922 regulator: ad5398: Add device tree support
    df76df11fd8be spi: zynqmp-gqspi: Always acknowledge interrupts
    ccf4a818d8c31 wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
    5e479af4999b0 wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
    ee71c34d4f415 wifi: rtl8xxxu: retry firmware download on error
    419988f4d0efb perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
    0cb6a1292aaef perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
    9610a67963506 firmware: arm_scmi: Relax duplicate name constraint across protocol ids
    38d906f1c54b9 bpftool: Fix readlink usage in get_fd_type
    0e8eb91a4950f drm/ast: Find VBIOS mode from regular display size
    e190ed2c12e77 ASoC: rt722-sdca: Add some missing readable registers
    48c78cf634dba ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
    123ac614e5b34 arm64: zynqmp: add clock-output-names property in clock nodes
    23b0b86ad1db2 HID: usbkbd: Fix the bit shift number for LED_KANA
    c317b0694a6eb wifi: ath12k: Avoid napi_sync() before napi_enable()
    32bcf54138acf scsi: st: Restore some drive settings after reset
    1960bb56a9c83 scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
    3dfeee957aaf3 scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
    c34ab75adde53 net/mana: fix warning in the writer of client oob
    1d10624a42437 ice: count combined queues using Rx/Tx count
    948664b92e571 perf: Avoid the read if the count is already updated
    f47d605c5e2a6 rcu: fix header guard for rcu_all_qs()
    9abec90c85b22 rcu: handle unstable rdp in rcu_read_unlock_strict()
    4a36d93a01758 rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
    cae56998162cc ice: treat dyn_allowed only as suggestion
    9ed3c1b11d7ef bridge: mdb: Allow replace of a host-joined group
    961ee132104b0 r8169: don't scan PHY addresses > 0
    2cb57a887a435 ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
    13cba3f837903 vxlan: Annotate FDB data races
    090c0ba179eaf net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
    f312bd5cf2067 media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
    6fed5e23d2a92 f2fs: introduce f2fs_base_attr for global sysfs entries
    9af429febfedf hwmon: (xgene-hwmon) use appropriate type for the latency value
    70e7df6f69073 clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
    ba02bb3a01328 wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
    0b660a7f296b5 wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
    23fe8aa8cc1a8 ext4: remove writable userspace mappings before truncating page cache
    73e7c65b21274 ext4: don't write back data before punch hole in nojournal mode
    3648ddabcdc25 leds: trigger: netdev: Configure LED blink interval for HW offload
    7ef54a11c199d pstore: Change kmsg_bytes storage size to u32
    09c3a82664d8f r8152: add vendor/device ID pair for Dell Alienware AW1022z
    cc1d408e7c9e2 ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
    22ee8dabec1a2 arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
    fa5d374f6bacb powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
    6758d09763f62 net: fec: Refactor MAC reset to function
    2caf52c072059 wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
    bb1f9d63127e8 wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
    9ef9ecabc6b55 drm/v3d: Add clock handling
    76016797e7f96 net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
    dce57841d93de net/mlx5e: reduce rep rxq depth to 256 for ECPF
    9411c965e4e6a net/mlx5e: set the tx_queue_len for pfifo_fast
    c31e839649547 net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
    353cd6804ea85 scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
    991970293ff8a drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
    26b6548dc7417 drm/amdgpu: enlarge the VBIOS binary size limit
    de67e80ab48f1 drm/amd/display: Increase block_sequence array size
    16c26a6404454 drm/amd/display: Initial psr_version with correct setting
    c59c96b850ea6 drm/amd/display: Update CR AUX RD interval interpretation
    af2d36316a193 drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
    6881a3a58852f drm/amd/display: Don't try AUX transactions on disconnected link
    ab83ed96f7587 drm/amdgpu: Set snoop bit for SDMA for MI series
    929cda8e4b75d soundwire: amd: change the soundwire wake enable/disable sequence
    6a7b7e98fec0a phy: core: don't require set_mode() callback for phy_get_mode() to work
    3bf3eae909914 serial: sh-sci: Update the suspend/resume support
    e9bed533ec803 sched: Reduce the default slice to avoid tasks getting an extra tick
    5024d8e58a080 x86/traps: Cleanup and robustify decode_bug()
    cc50c7c1a9898 clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
    fba6e5d44fb8d clk: qcom: ipq5018: allow it to be bulid on arm32
    d655dbd82b555 net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
    f8a9f45f75ab3 media: v4l: Memset argument to 0 before calling get_mbus_config pad op
    0b9d2468c3d88 media: i2c: imx219: Correct the minimum vblanking value
    868c3d8cfcff6 kunit: tool: Use qboot on QEMU x86_64
    3d6d13540f776 smack: Revert "smackfs: Added check catlen"
    e30f31434e9c3 smack: recognize ipv4 CIPSO w/o categories
    de4332d7a5f6f pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
    b3d2a8809ef07 ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
    35160eda61e74 ASoC: tas2764: Power up/down amp on mute ops
    c1045e770256c ASoC: tas2764: Mark SW_RESET as volatile
    7ac84ee5eec85 ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
    9dcce3f40d54d ASoC: ops: Enforce platform maximum on initial value
    3da8088afd13a firmware: arm_ffa: Reject higher major version as incompatible
    3ec539f1e9195 net/mlx5: Apply rate-limiting to high temperature warning
    69f453ccb9e47 net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
    a9b2bb8a4f25b media: test-drivers: vivid: don't call schedule in loop
    ddddd806ba7de vxlan: Join / leave MC group after remote changes
    d97c38275d12c ACPI: HED: Always initialize before evged
    0d398ed850df9 PCI: Fix old_size lower bound in calculate_iosize() too
    d8afc25580735 eth: mlx4: don't try to complete XDP frames in netpoll
    242272c953e3b bpf: don't do clean_live_states when state->loop_entry->branches > 0
    00e59d1495fba can: c_can: Use of_property_present() to test existence of DT property
    ef7ee9b815345 pmdomain: imx: gpcv2: use proper helper for property detection
    7c5e73608302a RDMA/core: Fix best page size finding when it can cross SG entries
    c504c11b94d6e serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
    df8970a270add drm/amd/display: Add support for disconnected eDP streams
    671fea645a71b i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA)
    398351dcdb631 EDAC/ie31200: work around false positive build warning
    c81c2ee1c3b05 net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
    35434d1c93c73 wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
    5ce1f780a3bce wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
    1b1daafd2e974 wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
    a95813193ab78 wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
    f38a1b35c8f4e scsi: mpt3sas: Send a diag reset if target reset fails
    06abee685cc97 clocksource: mips-gic-timer: Enable counter when CPUs start
    2e1b3650f5691 MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
    ba41e4e627db5 genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
    2ed497f369b2e MIPS: Use arch specific syscall name match function
    b2ea189a958a6 crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
    3a0c8429ab1e4 crypto: ahash - Set default reqsize from ahash_alg
    b1d1b09698e99 x86/kaslr: Reduce KASLR entropy on most x86 systems
    b0556ba85a0f3 net/mlx5: Change POOL_NEXT_SIZE define value and make it global
    52aa28f7b1708 dm: fix unconditional IO throttle caused by REQ_PREFLUSH
    ecd205a5241df libbpf: Fix out-of-bound read
    e17a6ba07929b media: tc358746: improve calculation of the D-PHY timing registers
    ca9f3ab612c62 media: adv7180: Disable test-pattern control on adv7180
    3cd2aa93674ee cpuidle: menu: Avoid discarding useful information
    48fd80f7d7b48 vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
    f5121d5ba7ce4 vhost-scsi: Return queue full for page alloc failures during copy
    de4469a90075b x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
    01768d1564650 ASoC: mediatek: mt8188: Add reference for dmic clocks
    6dadc66f6cf3e ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
    ec6f764ab7009 drm/amd/display: handle max_downscale_src_width fail check
    7472e0da47716 x86/build: Fix broken copy command in genimage.sh when making isoimage
    f32344bf957b4 Octeontx2-af: RPM: Register driver with PCI subsys IDs
    3314310b3f3e6 soc: ti: k3-socinfo: Do not use syscon helper to build regmap
    f4e35b2c5f5cc wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
    fed3038a80bbc bonding: report duplicate MAC address in all situations
    7819a7dcf0412 net: xgene-v2: remove incorrect ACPI_PTR annotation
    7b8fe48cc86b6 net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
    ff01e0d0a61e4 leds: pwm-multicolor: Add check for fwnode_property_read_u32
    2059e6ea11c0d drm/amdkfd: KFD release_work possible circular locking
    0759d154654a8 selftests/net: have `gro.sh -t` return a correct exit code
    b3c8449484848 net/mlx5: Avoid report two health errors on same syndrome
    e2de76c34a8a9 firmware: arm_ffa: Set dma_mask for ffa devices
    a1a5e783d7cab PCI: brcmstb: Add a softdep to MIP MSI-X driver
    1f27e708e36ea PCI: brcmstb: Expand inbound window size up to 64GB
    f6dfaf5905ad6 wifi: ath12k: Report proper tx completion status to mac80211
    c7c729d7a85a9 soc: apple: rtkit: Implement OSLog buffers properly
    78b6b2fe17a2e soc: apple: rtkit: Use high prio work queue
    1ae981c91dc26 perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
    372ed2171031d fpga: altera-cvp: Increase credit timeout
    7b851d6a02da0 drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
    d8e57904dc269 ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
    a9dd5d748c87d hwmon: (gpio-fan) Add missing mutex locks
    7adb96687ce88 x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
    ca16d144d1f0a clk: imx8mp: inform CCF of maximum frequency of clocks
    032f3bf6471cd media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
    faa24692f7041 media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
    9459abd770107 drm/rockchip: vop2: Add uv swap for cluster window
    9778a91827272 ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
    2be4a7d53261b ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
    30ae895966221 perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
    2a9a7d2f19cca net: pktgen: fix mpls maximum labels list parsing
    cf81dae86bf6b net: ethernet: ti: cpsw_new: populate netdev of_node
    2cbe6d551b4a9 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
    5c9eca180a423 media: cx231xx: set device_caps for 417
    a7b8f0addf84f drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
    3af9db78423c5 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
    fef1e1487dea8 remoteproc: qcom_wcnss: Handle platforms with only single power domain
    c5b23df98a925 net: phylink: use pl->link_interface in phylink_expects_phy()
    b27be76f35010 drm/gem: Test for imported GEM buffers with helper
    121f0335d91e4 orangefs: Do not truncate file size
    3986ef4a9b6a0 dm cache: prevent BUG_ON by blocking retries on failed device resumes
    d5f8c8ec1e783 media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
    74eea50b7afa1 ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
    da74e11cedd1e ieee802154: ca8210: Use proper setters and getters for bitwise types
    c0acbeac2b287 rtc: ds1307: stop disabling alarms on probe
    fb69189023279 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
    8c1a16d612ef7 ALSA: seq: Improve data consistency at polling
    7b1bb4d40dab8 powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
    d0e3e19564f03 arm64: tegra: Resize aperture for the IGX PCIe C5 slot
    988770bf312cf arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
    ab13c8a5f777b drm/amdkfd: Set per-process flags only once cik/vi
    0acdc4d6e679b crypto: lzo - Fix compression buffer overrun
    ab4545a2540b7 watchdog: aspeed: Update bootstatus handling
    ac64f0e893ff3 cpufreq: tegra186: Share policy per cluster
    3123b3d445d16 iommu/amd/pgtbl_v2: Improve error handling
    8c305588bab71 ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
    5b518c452ff58 auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
    769d1bccd1cac gfs2: Check for empty queue in run_queue
    2e37d331c00c0 drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
    1da3dc73724bb drm/amd/display: calculate the remain segments for all pipes
    4c2a348875646 drm/amd/display: remove minimum Dispclk and apply oem panel timing.
    8ebf2709fe4dc ipv6: save dontfrag in cork
    2b790fe67ed48 wifi: iwlwifi: fix debug actions order
    386a1a0d558d7 printk: Check CON_SUSPEND when unblanking a console
    8a7f2e84f85ad hwmon: (dell-smm) Increment the number of fans
    def5f5bc83ee7 usb: xhci: Don't change the status of stalled TDs on failed Stop EP
    903c4a0c2aff4 mmc: sdhci: Disable SD card clock before changing parameters
    5ae75245939c6 mmc: dw_mmc: add exynos7870 DW MMC support
    110f701e60f98 arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
    89947eea8ff91 netfilter: conntrack: Bound nf_conntrack sysctl writes
    da36c3ad7c177 timer_list: Don't use %pK through printk()
    6df3855868eb8 posix-timers: Add cond_resched() to posix_timer_add() search loop
    1bef1811651bc RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
    ba841627308a3 ext4: do not convert the unwritten extents if data writeback fails
    d7f3c874ea707 ext4: reject the 'data_err=abort' option in nojournal mode
    baf667f23f609 ASoC: sun4i-codec: support hp-det-gpios property
    f8d946034765a drm/amdgpu: Update SRIOV video codec caps
    2e290e9cf6a17 mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
    aa97ea576a3f2 pinctrl-tegra: Restore SFSEL bit when freeing pins
    0fb6c439d265f xen: Add support for XenServer 6.1 platform device
    3ecfb92c019f2 net/smc: use the correct ndev to find pnetid by pnetid table
    ba8354a613a57 dm: restrict dm device size to 2^63-512 bytes
    44a82d2495e36 crypto: octeontx2 - suppress auth failure screaming due to negative tests
    3edb08b6c21ef kbuild: fix argument parsing in scripts/config
    bc8023ef3b114 bpf: Allow pre-ordering for bpf cgroup progs
    aed5bd3a84e87 ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
    bf9cfc7fbe742 thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer
    4beb1e55f6b08 objtool: Fix error handling inconsistencies in check()
    72d9ccdcfce24 rtc: rv3032: fix EERD location
    a7b7bc510e9ea tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
    ed88717950ba9 jbd2: do not try to recover wiped journal
    5741b9d7bb873 bpf: Return prog btf_id without capable check
    743bb753255d3 vfio/pci: Handle INTx IRQ_NOTCONNECTED
    9f51fa1971239 scsi: st: ERASE does not change tape location
    01195aa1d694b scsi: st: Tighten the page format heuristics with MODE SELECT
    3011cdc5cb46c hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
    4eda8a85d4d01 ext4: reorder capability check last
    57a2882cd4f35 um: Update min_low_pfn to match changes in uml_reserved
    7638182277867 um: Store full CSGSFS and SS register from mcontext
    61225b3395c21 dlm: make tcp still work in multi-link env
    0541822045ae0 i3c: master: svc: Fix missing STOP for master request
    398c541ed0495 drm/amd/display: Guard against setting dispclk low for dcn31x
    3192d59fb7b78 btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
    a7f1c5fb7dd90 btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
    4dc7dcb919f36 btrfs: fix non-empty delayed iputs list on unmount due to async workers
    de635f9bba32e btrfs: run btrfs_error_commit_super() early
    1a012fd4eb9d0 btrfs: avoid linker error in btrfs_find_create_tree_block()
    4e74f91a6f70a btrfs: make btrfs_discard_workfn() block_group ref explicit
    a4666a812792d i2c: pxa: fix call balance of i2c->clk handling routines
    4fc8e3fb8efa8 i2c: qup: Vote for interconnect bandwidth to DRAM
    bffd5f2815c52 x86/mm: Check return value from memblock_phys_alloc_range()
    7124a9b6824e1 x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
    1752ceaa72d37 wifi: mt76: mt7996: revise TXS size
    d9776ce1733c7 wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
    17e3ab067dfb6 mmc: host: Wait for Vdd to settle on card power off
    ea3d95e05e97e libnvdimm/labels: Fix divide error in nd_label_data_init()
    f29eb4c63bf4e ext4: on a remount, only log the ro or r/w state when it has changed
    44acbc14ea28d PCI: vmd: Disable MSI remapping bypass under Xen
    aa59ccacf8f33 pNFS/flexfiles: Report ENETDOWN as a connection error
    ec59dfbc1ba2f tools/build: Don't pass test log files to linker
    e4510552c297c PCI: dwc: ep: Ensure proper iteration over outbound map windows
    a74286d17e751 objtool: Properly disable uaccess validation
    454a770aea9fd lockdep: Fix wait context check on softirq for PREEMPT_RT
    0c2aa72f4f352 dql: Fix dql->limit value when reset.
    3854f4e98ef22 thermal/drivers/qoriq: Power down TMU on system suspend
    4a120221661fc spi-rockchip: Fix register out of bounds access
    4a8ebc45f2021 SUNRPC: rpcbind should never reset the port to the value '0'
    3ef02a05c86b4 SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
    6b8beb8104d73 NFSv4: Treat ENETUNREACH errors as fatal for state recovery
    ee68e068cf92f cifs: Fix establishing NetBIOS session for SMB2+ connection
    89bcd83f67d22 cifs: add validation check for the fields in smb_aces
    88bf6295f065a fbdev: core: tileblit: Implement missing margin clearing for tileblit
    1714afc14dbe6 fbcon: Use correct erase colour for clearing in fbcon
    7f370b7e6fa03 fbdev: fsl-diu-fb: add missing device_remove_file()
    bbf3bb6ddea47 riscv: Allow NOMMU kernels to access all of RAM
    09096ead92f39 mailbox: use error ret code of of_parse_phandle_with_args()
    5641f6b3a4cd5 mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
    7d5b227875fb7 ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
    c1ab9f008ed40 tracing: Mark binary printing functions with __printf() attribute
    50702e7b47ed7 arm64: Add support for HIP09 Spectre-BHB mitigation
    e0b05cd9ece6e SUNRPC: Don't allow waiting for exiting tasks
    c72826efbb5eb NFS: Don't allow waiting for exiting tasks
    a81dd69f859b6 NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
    2371143e41735 fuse: Return EPERM rather than ENOSYS from link()
    209a4da04a27d smb: client: Store original IO parameters and prevent zero IO sizes
    5194597b9cde7 cifs: Fix negotiate retry functionality
    d50f7ce2fc32a cifs: Fix querying and creating MF symlinks over SMB1
    18066188eb90c cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
    f08641cd2152d s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log
    a6f24a41ef527 kconfig: merge_config: use an empty file as initfile
    adbb39eca39d1 samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
    38aa3cf1545f3 bpf: fix possible endless loop in BPF map iteration
    f5f169cd90769 selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
    f7292fbb41840 drm/amdgpu: Allow P2P access through XGMI
    722a6972defd8 ima: process_measurement() needlessly takes inode_lock() on MAY_READ
    91ba964a752bb net: enetc: refactor bulk flipping of RX buffers to separate function
    c36f5f659ad9c scsi: mpi3mr: Add level check to control event logging
    ca85c2d0db5f8 vhost-scsi: protect vq->log_used with vq->mutex
    20fb292ab5d5d cgroup: Fix compilation issue due to cgroup_mutex not being exported
    c15dc980ffc5a dma-mapping: avoid potential unused data compilation warning
    2cab5ea2f5ab6 intel_th: avoid using deprecated page->mapping, index fields
    b49b5132e4c73 virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
    42d15918da268 scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
    fe8421e853ef2 scsi: target: iscsi: Fix timeout on deleted connection
    beb6382add07a nvmem: qfprom: switch to 4-byte aligned reads
    35d77c8d887e1 nvmem: core: update raw_len if the bit reading is required
    497f19cacb3f8 nvmem: core: verify cell's raw_len
    04c81ac33a607 nvmem: rockchip-otp: add rk3576 variant data
    266e5f4813808 nvmem: rockchip-otp: Move read-offset into variant-data
    b3145041e990a cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
    1efbe2c7a0f44 phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
    cf60d19721bc4 phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
    e992f2581b794 phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
    eb4fdee1d6303 phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
    e668cbeb9590a i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
    ad40588df1820 i2c: designware: Use temporary variable for struct device
    0ef9396a7da7a i2c: designware: Remove ->disable() callback
    33378973d843b i2c: designware: Uniform initialization flow for polling mode
    d1954e7aa1313 gpio: pca953x: fix IRQ storm on system wake up
    58e34598436f8 gpio: pca953x: Simplify code with cleanup helpers
    475d6ebc91a24 gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context()

(From OE-Core rev: ab51811f918bcf5a72133c5e855949e0c347d093)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-11 08:11:53 -07:00