diff --git a/debian.master/changelog b/debian.master/changelog index dc09e88418cc..a31531850f91 100644 --- a/debian.master/changelog +++ b/debian.master/changelog @@ -1,10 +1,5098 @@ -linux (6.11.0-17.17) UNRELEASED; urgency=medium +linux (6.11.0-17.17) oracular; urgency=medium - CHANGELOG: Do not edit directly. Autogenerated at release. - CHANGELOG: Use the printchanges target to see the curent changes. - CHANGELOG: Use the insertchanges target to create the final log. + * oracular/linux: 6.11.0-17.17 -proposed tracker (LP: #2093643) - -- Stefan Bader Thu, 16 Jan 2025 22:28:09 +0100 + * Packaging resync (LP: #1786013) + - [Packaging] debian.master/dkms-versions -- update from kernel-versions + (main/2025.01.13) + + * When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744) + - [Packaging] disable hv-kvp-daemon if needed + + * Backport "netkit: Add option for scrubbing skb meta data" to 6.8 + (LP: #2091184) + - netkit: Add option for scrubbing skb meta data + + * KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM- + Exit (LP: #2093146) + - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init + + * [SRU] add support of QCA BT 0489:e0fc (LP: #2085406) + - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x + + * oracular: ubuntu_boot lib/dynamic_queue_limits.c:99! (LP: #2089684) + - virtio_net: correct netdev_tx_reset_queue() invocation point + - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize() + - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize + + * Failed to probe for OVTI02C1: chip id mismatch: 560243!=0 (LP: #2090932) + - SAUCE: ACPI: scan: Update HID for new platform + + * Bluetooth[8086:a876] crash with "hci0: Failed to read MSFT supported + features (-110)" (LP: #2085485) + - Bluetooth: btintel_pcie: Add recovery mechanism + + * Poor bluetooth performance on Lenovo X13s (LP: #2089357) + - SAUCE: Bluetooth: qca: Support downloading board ID specific NVM for WCN6855 + + * vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306) + - SAUCE: Revert "mm: use rwsem assertion macros for mmap_lock" + - SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault" + - SAUCE: Revert "vfio/pci: Use unmap_mapping_range()" + + * Oracular update: v6.11.11 upstream stable release (LP: #2091655) + - wifi: mac80211: Fix setting txpower with emulate_chanctx + - wifi: cfg80211: Add wiphy_delayed_work_pending() + - wifi: mac80211: Convert color collision detection to wiphy work + - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings + - spi: stm32: fix missing device mode capability in stm32mp25 + - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() + - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec + - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet + - ASoC: Intel: sst: Support LPE0F28 ACPI HID + - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend + - wifi: iwlwifi: mvm: SAR table alignment + - mac80211: fix user-power when emulating chanctx + - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver + - usb: typec: use cleanup facility for 'altmodes_node' + - selftests/watchdog-test: Fix system accidentally reset after watchdog-test + - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 + - ASoC: codecs: wcd937x: add missing LO Switch control + - ASoC: codecs: wcd937x: relax the AUX PDM watchdog + - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB + - bpf: fix filed access without lock + - net: usb: qmi_wwan: add Quectel RG650V + - soc: qcom: Add check devm_kasprintf() returned value + - firmware: arm_scmi: Reject clear channel request on A2P + - regulator: rk808: Add apply_bit for BUCK3 on RK809 + - platform/x86: dell-smbios-base: Extends support to Alienware products + - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events + - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys + - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip + - tools/lib/thermal: Remove the thermal.h soft link when doing make clean + - can: j1939: fix error in J1939 documentation. + - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect + fan speed + - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 + - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() + - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() + - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less + strict + - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width + - integrity: Use static_assert() to check struct sizes + - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes + - LoongArch: For all possible CPUs setup logical-physical CPU mapping + - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS + - ASoC: max9768: Fix event generation for playback mute + - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry + - ARM: 9420/1: smp: Fix SMP for xip kernels + - ARM: 9434/1: cfi: Fix compilation corner case + - ipmr: Fix access to mfc_cache_list without lock held + - f2fs: fix fiemap failure issue when page size is 16KB + - drm/amd/display: Skip Invalid Streams from DSC Policy + - drm/amd/display: Fix incorrect DSC recompute trigger + - s390/facilities: Fix warning about shadow of global variable + - efs: fix the efs new mount api implementation + - arm64: probes: Disable kprobes/uprobes on MOPS instructions + - kselftest/arm64: hwcap: fix f8dp2 cpuinfo name + - kselftest/arm64: mte: fix printf type warnings about __u64 + - kselftest/arm64: mte: fix printf type warnings about longs + - block/fs: Pass an iocb to generic_atomic_write_valid() + - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid() + - s390/cio: Do not unregister the subchannel based on DNV + - s390/pageattr: Implement missing kernel_page_present() + - x86/pvh: Set phys_base when calling xen_prepare_pvh() + - x86/pvh: Call C code via the kernel virtual mapping + - brd: defer automatic disk creation until module initialization succeeds + - ext4: avoid remount errors with 'abort' mount option + - mips: asm: fix warning when disabling MIPS_FP_SUPPORT + - arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers + - kselftest/arm64: Fix encoding for SVE B16B16 test + - nvme-pci: fix freeing of the HMB descriptor table + - m68k: mvme147: Fix SCSI controller IRQ numbers + - m68k: mvme147: Reinstate early console + - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG + - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() + - loop: fix type of block size + - cachefiles: Fix incorrect length return value in + cachefiles_ondemand_fd_write_iter() + - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter() + - cachefiles: Fix NULL pointer dereference in object->file + - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING + - block: constify the lim argument to queue_limits_max_zone_append_sectors + - block: properly handle REQ_OP_ZONE_APPEND in __bio_split_to_limits + - block: take chunk_sectors into account in bio_split_write_zeroes + - block: fix bio_split_rw_at to take zone_write_granularity into account + - s390/syscalls: Avoid creation of arch/arch/ directory + - hfsplus: don't query the device logical block size multiple times + - ext4: pipeline buffer reads in mext_page_mkuptodate() + - ext4: remove array of buffer_heads from mext_page_mkuptodate() + - ext4: fix race in buffer_head read fault injection + - nvme-pci: reverse request order in nvme_queue_rqs + - virtio_blk: reverse request order in virtio_queue_rqs + - crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys + - crypto: caam - Fix the pointer passed to caam_qi_shutdown() + - crypto: qat - remove check after debugfs_create_dir() + - crypto: qat/qat_420xx - fix off by one in uof_get_name() + - crypto: qat/qat_4xxx - fix off by one in uof_get_name() + - firmware: google: Unregister driver_info on failure + - EDAC/bluefield: Fix potential integer overflow + - crypto: qat - remove faulty arbiter config reset + - thermal: core: Initialize thermal zones before registering them + - thermal: core: Drop thermal_zone_device_is_enabled() + - thermal: core: Rearrange PM notification code + - thermal: core: Represent suspend-related thermal zone flags as bits + - thermal: core: Mark thermal zones as initializing to start with + - thermal: core: Fix race between zone registration and system suspend + - EDAC/fsl_ddr: Fix bad bit shift operations + - EDAC/skx_common: Differentiate memory error sources + - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator + - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return + -EBUSY + - crypto: cavium - Fix the if condition to exit loop after timeout + - cpufreq/amd-pstate: Don't update CPPC request in + amd_pstate_cpu_boost_update() + - amd-pstate: Set min_perf to nominal_perf for active mode performance gov + - crypto: hisilicon/qm - disable same error report before resetting + - EDAC/igen6: Avoid segmentation fault on module unload + - crypto: qat - Fix missing destroy_workqueue in adf_init_aer() + - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() + - sched/cpufreq: Ensure sd is rebuilt for EAS check + - doc: rcu: update printed dynticks counter bits + - rcu/srcutiny: don't return before reenabling preemption + - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu + - hwmon: (pmbus/core) clear faults after setting smbalert mask + - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes + - ACPI: CPPC: Fix _CPC register setting issue + - crypto: caam - add error check to caam_rsa_set_priv_key_form + - crypto: bcm - add error check in the ahash_hmac_init function + - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() + - rcuscale: Do a proper cleanup if kfree_scale_init() fails + - tools/lib/thermal: Make more generic the command encoding function + - thermal/lib: Fix memory leak on error in thermal_genl_auto() + - x86/unwind/orc: Fix unwind for newly forked tasks + - Revert "scripts/faddr2line: Check only two symbols when calculating symbol + size" + - cleanup: Remove address space of returned pointer + - time: Partially revert cleanup on msecs_to_jiffies() documentation + - time: Fix references to _msecs_to_jiffies() handling of values + - locking/atomic/x86: Use ALT_OUTPUT_SP() for __alternative_atomic64() + - locking/atomic/x86: Use ALT_OUTPUT_SP() for __arch_{,try_}cmpxchg64_emu() + - kcsan, seqlock: Support seqcount_latch_t + - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() + - clocksource/drivers:sp804: Make user selectable + - clocksource/drivers/timer-ti-dm: Fix child node refcount handling + - regulator: qcom-smd: make smd_vreg_rpm static + - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() + - arm64: dts: qcom: qcs6390-rb3gen2: use modem.mbn for modem DSP + - ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash + - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() + - microblaze: Export xmb_manager functions + - arm64: dts: mediatek: mt8188: Fix wrong clock provider in MFG1 power domain + - arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy + - arm64: dts: mt8195: Fix dtbs_check error for mutex node + - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node + - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() + - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() + - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins + - arm64: dts: qcom: sda660-ifc6560: fix l10a voltage ranges + - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode + - mmc: mmc_spi: drop buggy snprintf() + - scripts/kernel-doc: Do not track section counter across processed files + - arm64: dts: qcom: x1e80100-slim7x: Drop orientation-switch from USB SS[0-1] + QMP PHYs + - arm64: dts: qcom: x1e80100-vivobook-s15: Drop orientation-switch from USB + SS[0-1] QMP PHYs + - openrisc: Implement fixmap to fix earlycon + - efi/libstub: fix efi_parse_options() ignoring the default command line + - tpm: fix signed/unsigned bug when checking event logs + - media: i2c: vgxy61: Fix an error handling path in vgxy61_detect() + - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call + - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 + - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 + - arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region + - kernel-doc: allow object-like macros in ReST output + - arm64: dts: ti: k3-am62x-phyboard-lyra: Drop unnecessary McASP AFIFOs + - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source + trackpad + - arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status + - arm64: dts: mediatek: mt8195-cherry: Use correct audio codec DAI + - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" + - cgroup/bpf: only cgroup v2 can be attached by bpf programs + - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only + - power: sequencing: make the QCom PMU pwrseq driver depend on CONFIG_OF + - [Config] updateconfigs for POWER_SEQUENCING_QCOM_WCN + - arm64: dts: rockchip: Remove 'enable-active-low' from two boards + - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns + - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns + - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns + - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns + - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle + - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints + - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx + - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances + - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances + - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances + - watchdog: Add HAS_IOPORT dependency for SBC8360 and SBC7240 + - arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers + - dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries + - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify + - pmdomain: ti-sci: Add missing of_node_put() for args.np + - spi: tegra210-quad: Avoid shift-out-of-bounds + - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ + - regmap: irq: Set lockdep class for hierarchical IRQ domains + - arm64: dts: renesas: hihope: Drop #sound-dai-cells + - arm64: dts: imx8mn-tqma8mqnl-mba8mx-usbot: fix coexistence of output-low and + output-high in GPIO + - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs + - arm64: dts: mediatek: mt6358: fix dtbs_check error + - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names + - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed + regulators + - selftests/resctrl: Print accurate buffer size as part of MBM results + - selftests/resctrl: Fix memory overflow due to unhandled wraparound + - selftests/resctrl: Protect against array overrun during iMC config parsing + - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware + - media: ipu6: Fix DMA and physical address debugging messages for 32-bit + - media: ipu6: not override the dma_ops of device in driver + - pwm: Assume a disabled PWM to emit a constant inactive output + - media: atomisp: Add check for rgby_data memory allocation failure + - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova + - HID: hyperv: streamline driver probe to avoid devres issues + - platform/x86: panasonic-laptop: Return errno correctly in show callback + - drm/imagination: Convert to use time_before macro + - drm/imagination: Use pvr_vm_context_get() + - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused + - drm/vc4: hvs: Don't write gamma luts on 2711 + - drm/vc4: hdmi: Avoid hang with debug registers when suspended + - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer + - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function + - drm/vc4: hvs: Correct logic on stopping an HVS channel + - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() + - drm/omap: Fix possible NULL dereference + - drm/omap: Fix locking in omap_gem_new_dmabuf() + - drm/v3d: Appease lockdep while updating GPU stats + - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() + - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() + - udmabuf: change folios array from kmalloc to kvmalloc + - udmabuf: fix vmap_udmabuf error page set + - [Config] updateconfigs for VMAP_PFN + - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() + - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() + - drm/panel: nt35510: Make new commands optional + - drm/v3d: Address race-condition in MMU flush + - drm/v3d: Flush the MMU before we supply more memory to the binner + - drm/amdgpu: Fix JPEG v4.0.3 register write + - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 + - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 + - wifi: ath12k: Skip Rx TID cleanup for self peer + - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc + - ASoC: fsl_micfil: fix regmap_write_bits usage + - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode + - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios + - drm/bridge: anx7625: Drop EDID cache on bridge power off + - drm/bridge: it6505: Drop EDID cache on bridge power off + - libbpf: Fix expected_attach_type set handling in program load callback + - libbpf: Fix output .symtab byte-order during linking + - dlm: fix swapped args sb_flags vs sb_status + - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled + - drm/amd/display: fix a memleak issue when driver is removed + - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() + - wifi: ath12k: fix one more memcpy size error + - bpf: Fix the xdp_adjust_tail sample prog issue + - selftests/bpf: netns_new() and netns_free() helpers. + - selftests/bpf: Fix backtrace printing for selftests crashes + - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR + - selftests/bpf: add missing header include for htons + - wifi: cfg80211: check radio iface combination for multi radio per wiphy + - ice: consistently use q_idx in ice_vc_cfg_qs_msg() + - drm/vc4: hdmi: Increase audio MAI fifo dreq threshold + - drm/vc4: Introduce generation number enum + - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load + - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush + - drm/vc4: Correct generation check in vc4_hvs_lut_load + - libbpf: fix sym_is_subprog() logic for weak global subprogs + - accel/ivpu: Prevent recovery invocation during probe and resume + - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c + - libbpf: never interpret subprogs in .text as entry programs + - netdevsim: copy addresses for both in and out paths + - drm/bridge: tc358767: Fix link properties discovery + - selftests/bpf: Fix msg_verify_data in test_sockmap + - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap + - wifi: wilc1000: Set MAC after operation mode + - wifi: mwifiex: Fix memcpy() field-spanning write warning in + mwifiex_config_scan() + - drm: fsl-dcu: enable PIXCLK on LS1021A + - drm: panel: nv3052c: correct spi_device_id for RG35XX panel + - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block + - drm/msm/dpu: drop LM_3 / LM_4 on SDM845 + - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 + - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c + - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c + - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c + - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c + - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c + - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c + - selftests/bpf: fix test_spin_lock_fail.c's global vars usage + - libbpf: move global data mmap()'ing into bpf_object__load() + - drm/panfrost: Remove unused id_mask from struct panfrost_model + - bpf, arm64: Remove garbage frame for struct_ops trampoline + - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() + - drm/msm/gpu: Check the status of registration to PM QoS + - drm/xe/hdcp: Fix gsc structure check in fw check status + - drm/etnaviv: Request pages from DMA32 zone on addressing_limited + - drm/etnaviv: hold GPU lock across perfmon sampling + - drm/amd/display: Increase idle worker HPD detection time + - drm/amd/display: Reduce HPD Detection Interval for IPS + - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() + - drm: zynqmp_kms: Unplug DRM device before removal + - drm: xlnx: zynqmp_disp: layer may be null while releasing + - wifi: wfx: Fix error handling in wfx_core_init() + - wifi: cw1200: Fix potential NULL dereference + - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() + - bpf, bpftool: Fix incorrect disasm pc + - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable + - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() + - drm/amdgpu: Fix the memory allocation issue in + amdgpu_discovery_get_nps_info() + - bpf: Support __nullable argument suffix for tp_btf + - selftests/bpf: Add test for __nullable suffix in tp_btf + - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL + - drm: use ATOMIC64_INIT() for atomic64_t + - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion + - netfilter: nf_tables: must hold rcu read lock while iterating expression + type list + - netfilter: nf_tables: must hold rcu read lock while iterating object type + list + - netlink: typographical error in nlmsg_type constants definition + - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() + - drm/panfrost: Add missing OPP table refcnt decremental + - drm/panthor: introduce job cycle and timestamp accounting + - drm/panthor: record current and maximum device clock frequencies + - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation + - isofs: avoid memory leak in iocharset + - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap + - selftests/bpf: Fix SENDPAGE data logic in test_sockmap + - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap + - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap + - bpf, sockmap: Several fixes to bpf_msg_push_data + - bpf, sockmap: Several fixes to bpf_msg_pop_data + - bpf, sockmap: Fix sk_msg_reset_curr + - ipv6: release nexthop on device removal + - selftests: net: really check for bg process completion + - wifi: cfg80211: Remove the Medium Synchronization Delay validity check + - wifi: iwlwifi: allow fast resume on ax200 + - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending + - drm/amdgpu: fix ACA bank count boundary check error + - drm/amdgpu: Fix map/unmap queue logic + - drm/amdkfd: Fix wrong usage of INIT_WORK() + - bpf: Allow return values 0 and 1 for kprobe session + - bpf: Force uprobe bpf program to always return 0 + - selftests/bpf: skip the timer_lockup test for single-CPU nodes + - ipv6: Fix soft lockups in fib6_select_path under high next hop churn + - net: rfkill: gpio: Add check for clk_enable() + - Revert "wifi: iwlegacy: do not skip frames with bad FCS" + - bpf: Use function pointers count as struct_ops links count + - bpf: Add kernel symbol for struct_ops trampoline + - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection + - ALSA: us122l: Use snd_card_free_when_closed() at disconnection + - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection + - ALSA: 6fire: Release resources at card release + - i2c: dev: Fix memory leak when underlying adapter does not support I2C + - selftests: netfilter: Fix missing return values in conntrack_dump_flush + - Bluetooth: btintel_pcie: Add handshake between driver and firmware + - Bluetooth: btintel: Do no pass vendor events to stack + - Bluetooth: btmtk: adjust the position to init iso data anchor + - Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name() + - Bluetooth: ISO: Use kref to track lifetime of iso_conn + - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending + - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending + - Bluetooth: ISO: Send BIG Create Sync via hci_sync + - Bluetooth: fix use-after-free in device_for_each_child() + - xsk: Free skb when TX metadata options are invalid + - erofs: handle NONHEAD !delta[1] lclusters gracefully + - dlm: fix dlm_recover_members refcount on error + - eth: fbnic: don't disable the PCI device twice + - net: txgbe: remove GPIO interrupt controller + - net: txgbe: fix null pointer to pcs + - netpoll: Use rcu_access_pointer() in netpoll_poll_lock + - wireguard: selftests: load nf_conntrack if not present + - bpf: fix recursive lock when verdict program return SK_PASS + - unicode: Fix utf8_load() error path + - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged + - RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages + - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset + - clk: mediatek: drop two dead config options + - [Config] drop COMMON_CLK_MT8195_{AUDSYS,MSDC} + - trace/trace_event_perf: remove duplicate samples on the first tracepoint + event + - pinctrl: zynqmp: drop excess struct member description + - pinctrl: renesas: Select PINCTRL_RZG2L for RZ/V2H(P) SoC + - clk: qcom: videocc-sm8550: depend on either gcc-sm8550 or gcc-sm8650 + - iommu/s390: Implement blocking domain + - scsi: hisi_sas: Enable all PHYs that are not disabled by user during + controller reset + - powerpc/vdso: Flag VDSO64 entry points as functions + - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race + - mfd: da9052-spi: Change read-mask to write-mask + - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device + - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device + - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices + - irqdomain: Simplify simple and legacy domain creation + - irqdomain: Cleanup domain name allocation + - irqdomain: Allow giving name suffix for domain + - regmap: Allow setting IRQ domain name suffix + - mfd: intel_soc_pmic_bxtwc: Fix IRQ domain names duplication + - cpufreq: loongson2: Unregister platform_driver on failure + - powerpc/fadump: Refactor and prepare fadump_cma_init for late init + - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() + - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE + - mtd: rawnand: atmel: Fix possible memory leak + - powerpc/mm/fault: Fix kfence page fault reporting + - clk: sophgo: avoid integer overflow in sg2042_pll_recalc_rate() + - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in + RD_ANY_REG_OP + - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore + - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() + - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() + - iommu/amd: Remove amd_iommu_domain_update() from page table freeing + - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related + - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl + - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain + - iommu/amd: Narrow the use of struct protection_domain to invalidation + - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB + - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci + - RDMA/hns: Fix flush cqe error when racing with destroy qp + - RDMA/hns: Modify debugfs name + - RDMA/hns: Use dev_* printings in hem code instead of ibdev_* + - RDMA/hns: Fix cpu stuck caused by printings during reset + - RDMA/rxe: Fix the qp flush warnings in req + - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey + - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset + - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk + - RDMA/rxe: Set queue pair cur_qp_state when being queried + - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation + - riscv: kvm: Fix out-of-bounds array access + - clk: imx: lpcg-scu: SW workaround for errata (e10858) + - clk: imx: fracn-gppll: correct PLL initialization flow + - clk: imx: fracn-gppll: fix pll power up + - clk: imx: clk-scu: fix clk enable state save and restore + - clk: imx: imx8-acm: Fix return value check in + clk_imx_acm_attach_pm_domains() + - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes() + - iommu/vt-d: Fix checks and print in pgtable_walk() + - checkpatch: always parse orig_commit in fixes tag + - mfd: rt5033: Fix missing regmap_del_irq_chip() + - leds: max5970: Fix unreleased fwnode_handle in probe function + - leds: ktd2692: Set missing timing properties + - fs/proc/kcore.c: fix coccinelle reported ERROR instances + - scsi: target: Fix incorrect function name in pscsi_create_type_disk() + - scsi: bfa: Fix use-after-free in bfad_im_module_exit() + - scsi: fusion: Remove unused variable 'rc' + - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() + - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() + - scsi: sg: Enable runtime power management + - x86/tdx: Introduce wrappers to read and write TD metadata + - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() + - x86/tdx: Dynamically disable SEPT violations from causing #VEs + - powerpc/fadump: allocate memory for additional parameters early + - fadump: reserve param area if below boot_mem_top + - RDMA/hns: Fix out-of-order issue of requester when setting FENCE + - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() + - cpufreq: loongson3: Check for error code from devm_mutex_init() call + - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() + - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() + - kasan: move checks to do_strncpy_from_user + - kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL + - ocfs2: fix uninitialized value in ocfs2_file_read_iter() + - dax: delete a stale directory pmem + - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests + - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending + doorbells + - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static + - RDMA/hns: Fix different dgids mapping to the same dip_idx + - KVM: PPC: Book3S HV: Fix kmv -> kvm typo + - powerpc/kexec: Fix return of uninitialized variable + - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() + - RDMA/mlx5: Move events notifier registration to be after device registration + - clk: clk-apple-nco: Add NULL check in applnco_probe + - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883 + - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs + - clk: en7523: remove REG_PCIE*_{MEM,MEM_MASK} configuration + - clk: en7523: move clock_register in hw_init callback + - clk: en7523: introduce chip_scu regmap + - clk: en7523: fix estimation of fixed rate for EN7581 + - dt-bindings: clock: axi-clkgen: include AXI clk + - clk: clk-axi-clkgen: make sure to enable the AXI bus clock + - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw + - pinctrl: k210: Undef K210_PC_DEFAULT + - rtla/timerlat: Do not set params->user_workload with -U + - smb: cached directories can be more than root file handle + - mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks() + - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() + - x86: fix off-by-one in access_ok() + - perf cs-etm: Don't flush when packet_queue fills up + - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE + - gfs2: Allow immediate GLF_VERIFY_DELETE work + - gfs2: Fix unlinked inode cleanup + - perf test: Add test for Intel TPEBS counting mode + - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC} + - PCI: Fix reset_method_store() memory leak + - perf stat: Close cork_fd when create_perf_stat_counter() failed + - perf stat: Fix affinity memory leaks on error path + - perf trace: Keep exited threads for summary + - perf test attr: Add back missing topdown events + - f2fs: compress: fix inconsistent update of i_blocks in + release_compress_blocks and reserve_compress_blocks + - f2fs: fix null-ptr-deref in f2fs_submit_page_bio() + - f2fs: fix to account dirty data in __get_secs_required() + - perf dso: Fix symtab_type for kmod compression + - perf probe: Fix libdw memory leak + - perf probe: Correct demangled symbols in C++ program + - rust: kernel: fix THIS_MODULE header path in ThisModule doc comment + - rust: macros: fix documentation of the paste! macro + - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads + - PCI: cpqphp: Fix PCIBIOS_* return value confusion + - rust: block: fix formatting of `kernel::block::mq::request` module + - perf disasm: Use disasm_line__free() to properly free disasm_line + - virtiofs: use pages instead of pointer for kernel direct IO + - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec + - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin + - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block + - f2fs: check curseg->inited before write_sum_page in change_curseg + - f2fs: Fix not used variable 'index' + - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason() + - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or + GC_URGENT_MID + - PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert() + - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() + - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() + - PCI: cadence: Set cdns_pcie_host_init() global + - PCI: j721e: Add reset GPIO to struct j721e_pcie + - PCI: j721e: Use T_PERST_CLK_US macro + - PCI: j721e: Add suspend and resume support + - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds + - perf build: Add missing cflags when building with custom libtraceevent + - f2fs: fix race in concurrent f2fs_stop_gc_thread + - f2fs: fix to map blocks correctly for direct write + - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data + inode + - perf trace: avoid garbage when not printing a trace event's arguments + - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x + - m68k: coldfire/device.c: only build FEC when HW macros are defined + - svcrdma: Address an integer overflow + - nfsd: drop inode parameter from nfsd4_change_attribute() + - perf list: Fix topic and pmu_name argument order + - perf trace: Fix tracing itself, creating feedback loops + - perf trace: Do not lose last events in a race + - perf trace: Avoid garbage when not printing a syscall's arguments + - remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe() + - remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe() + - remoteproc: qcom: pas: add minidump_id to SM8350 resources + - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length + - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region + - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' + - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() + - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() + - nfsd: release svc_expkey/svc_export with rcu_work + - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() + - NFSD: Fix nfsd4_shutdown_copy() + - f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS + - f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow + - hwmon: (tps23861) Fix reporting of negative temperatures + - hwmon: (aquacomputer_d5next) Fix length of speed_input array + - phy: airoha: Fix REG_CSR_2L_PLL_CMN_RESERVE0 config in + airoha_pcie_phy_init_clk_out() + - phy: airoha: Fix REG_PCIE_PMA_TX_RESET config in + airoha_pcie_phy_init_csr_2l() + - phy: airoha: Fix REG_CSR_2L_JCPLL_SDM_HREN config in + airoha_pcie_phy_init_ssc_jcpll() + - phy: airoha: Fix REG_CSR_2L_RX{0,1}_REV0 definitions + - vdpa/mlx5: Fix suboptimal range on iotlb iteration + - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() + - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() + - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels + - gpio: zevio: Add missed label initialisation + - vfio/pci: Properly hide first-in-list PCIe extended capability + - fs_parser: update mount_api doc to match function signature + - LoongArch: Fix build failure with GCC 15 (-std=gnu23) + - LoongArch: BPF: Sign-extend return values + - power: supply: core: Remove might_sleep() from power_supply_put() + - power: supply: bq27xxx: Fix registers of bq27426 + - power: supply: rt9471: Fix wrong WDT function regfield declaration + - power: supply: rt9471: Use IC status regfield to report real charger status + - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation + - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device + - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets + - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL + configuration + - net: microchip: vcap: Add typegroup table terminators in kunit tests + - netlink: fix false positive warning in extack during dumps + - exfat: fix file being changed by unaligned direct write + - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() + - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged + - net: mdio-ipq4019: add missing error check + - marvell: pxa168_eth: fix call balance of pep->clk handling routines + - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken + - octeontx2-af: RPM: Fix mismatch in lmac type + - octeontx2-af: RPM: Fix low network performance + - octeontx2-af: RPM: fix stale RSFEC counters + - octeontx2-af: RPM: fix stale FCFEC counters + - octeontx2-af: Quiesce traffic before NIX block reset + - spi: atmel-quadspi: Fix register name in verbose logging function + - net: hsr: fix hsr_init_sk() vs network/transport headers. + - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down + - bnxt_en: Set backplane link modes correctly for ethtool + - bnxt_en: Fix receive ring space parameters when XDP is active + - bnxt_en: Refactor bnxt_ptp_init() + - bnxt_en: Unregister PTP during PCI shutdown and suspend + - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync + - Bluetooth: MGMT: Fix possible deadlocks + - llc: Improve setsockopt() handling of malformed user input + - rxrpc: Improve setsockopt() handling of malformed user input + - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). + - ip6mr: fix tables suspicious RCU usage + - ipmr: fix tables suspicious RCU usage + - iio: light: al3010: Fix an error handling path in al3010_probe() + - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() + - usb: yurex: make waiting on yurex_write interruptible + - USB: chaoskey: fail open after removal + - USB: chaoskey: Fix possible deadlock chaoskey_list_lock + - misc: apds990x: Fix missing pm_runtime_disable() + - devres: Fix page faults when tracing devres from unloaded modules + - usb: gadget: uvc: wake pump everytime we update the free list + - interconnect: qcom: icc-rpmh: probe defer incase of missing QoS clock + dependency + - phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe + - phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe + - counter: stm32-timer-cnt: Add check for clk_enable() + - counter: ti-ecap-capture: Add check for clk_enable() + - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian + - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() + - firmware_loader: Fix possible resource leak in fw_log_firmware_info() + - ALSA: hda/realtek: Update ALC256 depop procedure + - drm/radeon: add helper rdev_to_drm(rdev) + - drm/radeon: change rdev->ddev to rdev_to_drm(rdev) + - drm/radeon: Fix spurious unplug event on radeon HDMI + - drm/amd/display: Fix null check for pipe_ctx->plane_state in + dcn20_program_pipe + - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp + - ASoC: imx-audmix: Add NULL check in imx_audmix_probe + - drm/xe/ufence: Wake up waiters after setting ufence->signalled + - apparmor: fix 'Do simple duplicate message elimination' + - ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() + - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry + - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe + - s390/pci: Fix potential double remove of hotplug slot + - net_sched: sch_fq: don't follow the fast path if Tx is behind now + - xen: Fix the issue of resource not being properly released in + xenbus_dev_probe() + - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox + devices + - ALSA: usb-audio: Fix out of bounds reads when finding clock sources + - usb: ehci-spear: fix call balance of sehci clk handling routines + - usb: typec: ucsi: glink: fix off-by-one in connector_status + - dm-cache: fix warnings about duplicate slab caches + - dm-bufio: fix warnings about duplicate slab caches + - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error + - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() + - irqdomain: Always associate interrupts for legacy domains + - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() + - ext4: fix FS_IOC_GETFSMAP handling + - jfs: xattr: check invalid xattr size more strictly + - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 + 21MES00B00 + - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() + - ASoC: da7213: Populate max_register to regmap_config + - perf/x86/intel/pt: Fix buffer full but size is 0 case + - crypto: x86/aegis128 - access 32-bit arguments as 32-bit + - KVM: x86: switch hugepage recovery thread to vhost_task + - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE + - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector + - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR + - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status + - KVM: arm64: Don't retire aborted MMIO instruction + - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE + - KVM: arm64: Get rid of userspace_irqchip_in_use + - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* + - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device + - Compiler Attributes: disable __counted_by for clang < 19.1.3 + - PCI: Fix use-after-free of slot->bus on hot remove + - LoongArch: Explicitly specify code model in Makefile + - clk: clk-loongson2: Fix memory corruption bug in struct + loongson2_clk_provider + - clk: clk-loongson2: Fix potential buffer overflow in flexible-array member + access + - fsnotify: fix sending inotify event with unexpected filename + - comedi: Flush partial mappings in error case + - apparmor: test: Fix memory leak for aa_unpack_strdup() + - iio: dac: adi-axi-dac: fix wrong register bitfield + - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler + - locking/lockdep: Avoid creating new name string literals in + lockdep_set_subclass() + - tools/nolibc: s390: include std.h + - pinctrl: qcom: spmi: fix debugfs drive strength + - dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with + fallbacks + - dt-bindings: iio: dac: ad3552r: fix maximum spi speed + - exfat: fix uninit-value in __exfat_get_dentry_set + - exfat: fix out-of-bounds access of directory entries + - xhci: Fix control transfer error on Etron xHCI host + - xhci: Combine two if statements for Etron xHCI host + - xhci: Don't perform Soft Retry for Etron xHCI host + - xhci: Don't issue Reset Device command to Etron xHCI host + - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() + - usb: xhci: Limit Stop Endpoint retries + - usb: xhci: Fix TD invalidation under pending Set TR Dequeue + - usb: xhci: Avoid queuing redundant Stop Endpoint commands + - ARM: dts: omap36xx: declare 1GHz OPP as turbo again + - wifi: ath12k: fix warning when unbinding + - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of + failures + - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan + - wifi: ath12k: fix crash when unbinding + - wifi: brcmfmac: release 'root' node in all execution paths + - Revert "fs: don't block i_writecount during exec" + - Revert "f2fs: remove unreachable lazytime mount option parsing" + - Revert "usb: gadget: composite: fix OS descriptors w_value logic" + - serial: sh-sci: Clean sci_ports[0] after at earlycon exit + - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" + - io_uring: fix corner case forgetting to vunmap + - io_uring: check for overflows in io_pin_pages + - blk-settings: round down io_opt to physical_block_size + - gpio: exar: set value when external pull-up or pull-down is present + - spi: Fix acpi deferred irq probe + - mtd: spi-nor: core: replace dummy buswidth from addr to data + - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() + - cifs: support mounting with alternate password to allow password rotation + - parisc/ftrace: Fix function graph tracing disablement + - RISC-V: Scalar unaligned access emulated on hotplug CPUs + - RISC-V: Check scalar unaligned access on all CPUs + - ksmbd: fix use-after-free in SMB request handling + - smb: client: fix NULL ptr deref in crypto_aead_setkey() + - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement + - irqchip/irq-mvebu-sei: Move misplaced select() callback to SEI CP domain + - x86/CPU/AMD: Terminate the erratum_1386_microcode array + - ubi: wl: Put source PEB into correct list if trying locking LEB failed + - um: ubd: Do not use drvdata in release + - um: net: Do not use drvdata in release + - dt-bindings: serial: rs485: Fix rs485-rts-delay property + - serial: 8250_fintek: Add support for F81216E + - serial: 8250: omap: Move pm_runtime_get_sync + - serial: amba-pl011: Fix RX stall when DMA is used + - serial: amba-pl011: fix build regression + - mtd: ubi: fix unreleased fwnode_handle in find_volume_fwnode() + - block: Prevent potential deadlock in blk_revalidate_disk_zones() + - um: vector: Do not use drvdata in release + - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK + - iio: gts: Fix uninitialized symbol 'ret' + - ublk: fix ublk_ch_mmap() for 64K page size + - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled + - block: fix missing dispatching request when queue is started or unquiesced + - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding + - block: fix ordering between checking BLK_MQ_S_STOPPED request adding + - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long + - gve: Flow steering trigger reset only for timeout error + - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values + - i40e: Fix handling changed priv flags + - media: wl128x: Fix atomicity violation in fmc_send_cmd() + - media: intel/ipu6: do not handle interrupts when device is disabled + - arm64: dts: mediatek: mt8186-corsola-voltorb: Merge speaker codec nodes + - netdev-genl: Hold rcu_read_lock in napi_get + - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() + - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result + - ALSA: rawmidi: Fix kvfree() call in spinlock + - ALSA: ump: Fix evaluation of MIDI 1.0 FB info + - ALSA: pcm: Add sanity NULL check for the default mmap fault handler + - ALSA: hda/realtek: Update ALC225 depop procedure + - ALSA: hda/realtek: Set PCBeep to default value for ALC274 + - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max + - ALSA: hda/realtek: Apply quirk for Medion E15433 + - smb3: request handle caching when caching directories + - smb: client: handle max length for SMB symlinks + - smb: Don't leak cfid when reconnect races with open_cached_dir + - smb: prevent use-after-free due to open_cached_dir error paths + - smb: During unmount, ensure all cached dir instances drop their dentry + - usb: misc: ljca: set small runtime autosuspend delay + - usb: misc: ljca: move usb_autopm_put_interface() after wait for response + - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED + - usb: musb: Fix hardware lockup on first Rx endpoint request + - usb: dwc3: gadget: Fix checking for number of TRBs left + - usb: dwc3: gadget: Fix looping of queued SG entries + - staging: vchiq_arm: Fix missing refcount decrement in error path for fw_node + - counter: stm32-timer-cnt: fix device_node handling in probe_encoder() + - ublk: fix error code for unsupported command + - lib: string_helpers: silence snprintf() output truncation warning + - f2fs: fix to do sanity check on node blkaddr in truncate_node() + - ipc: fix memleak if msg_init_ns failed in create_ipc_ns + - Input: cs40l50 - fix wrong usage of INIT_WORK() + - NFSD: Prevent a potential integer overflow + - SUNRPC: make sure cache entry active before cache_show + - um: Fix potential integer overflow during physmem setup + - um: Fix the return value of elf_core_copy_task_fpregs + - kfifo: don't include dma-mapping.h in kfifo.h + - um: ubd: Initialize ubd's disk pointer in ubd_add + - um: Always dump trace for specified task in show_stack + - NFSv4.0: Fix a use-after-free problem in the asynchronous open() + - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() + - rtc: abx80x: Fix WDT bit position of the status register + - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() + - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty + - ubifs: Correct the total block count by deducting journal reservation + - ubi: fastmap: Fix duplicate slab cache names while attaching + - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit + - jffs2: fix use of uninitialized variable + - rtc: rzn1: fix BCD to rtc_time conversion errors + - Revert "nfs: don't reuse partially completed requests in + nfs_lock_and_join_requests" + - nvme-multipath: avoid hang on inaccessible namespaces + - nvme/multipath: Fix RCU list traversal to use SRCU primitive + - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs + - block: model freeze & enter queue as lock for supporting lockdep + - block: fix uaf for flush rq while iterating tags + - block: return unsigned int from bdev_io_min + - nvme-fabrics: fix kernel crash while shutting down controller + - 9p/xen: fix init sequence + - 9p/xen: fix release of IRQ + - perf/arm-smmuv3: Fix lockdep assert in ->event_init() + - perf/arm-cmn: Ensure port and device id bits are set properly + - smb: client: disable directory caching when dir_cache_timeout is zero + - x86/Documentation: Update algo in init_size description of boot protocol + - cifs: Fix parsing native symlinks relative to the export + - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE + session + - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification + - Rename .data.unlikely to .data..unlikely + - Rename .data.once to .data..once to fix resetting WARN*_ONCE + - kbuild: deb-pkg: Don't fail if modules.order is missing + - smb: Initialize cfid->tcon before performing network ops + - block: Don't allow an atomic write be truncated in blkdev_write_iter() + - modpost: remove incorrect code in do_eisa_entry() + - cifs: during remount, make sure passwords are in sync + - cifs: unlock on error in smb3_reconfigure() + - nfs: ignore SB_RDONLY when mounting nfs + - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport + - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT + - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket + - nfs/blocklayout: Don't attempt unregister for invalid block device + - nfs/blocklayout: Limit repeat device registration on failure + - block, bfq: fix bfqq uaf in bfq_limit_depth() + - brd: decrease the number of allocated pages which discarded + - sh: intc: Fix use-after-free bug in register_intc_controller() + - tools/power turbostat: Fix trailing '\n' parsing + - tools/power turbostat: Fix child's argument forwarding + - block: always verify unfreeze lock on the owner task + - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq() + - Linux 6.11.11 + + * Oracular update: v6.11.11 upstream stable release (LP: #2091655) // + CVE-2024-53141 + - netfilter: ipset: add missing range check in bitmap_ip_uadt + + * Oracular update: v6.11.11 upstream stable release (LP: #2091655) // + CVE-2024-50010 + - Revert "exec: don't WARN for racy path_noexec check" + + * Oracular update: v6.11.11 upstream stable release (LP: #2091655) // + CVE-2024-53143 + - fsnotify: Fix ordering of iput() and watched_objects decrement + + * Oracular update: v6.11.11 upstream stable release (LP: #2091655) // + CVE-2024-53142 + - initramfs: avoid filename buffer overrun + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) + - net: vertexcom: mse102x: Fix tx_bytes calculation + - net/mlx5: Fix msix vectors to respect platform limit + - net/mlx5e: clear xdp features on non-uplink representors + - net/mlx5e: Disable loopback self-test on multi-PF netdev + - drm/i915/gsc: ARL-H and ARL-U need a newer GSC FW. + - drivers: perf: Fix wrong put_cpu() placement + - Bluetooth: hci_core: Fix calling mgmt_device_connected + - Bluetooth: btintel: Direct exception event to bluetooth stack + - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for + hnodes. + - net: phylink: ensure PHY momentary link-fails are handled + - samples: pktgen: correct dev to DEV + - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol + - net: Make copy_safe_from_sockptr() match documentation + - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines + - net: ti: icssg-prueth: Fix 1 PPS sync + - bonding: add ns target multicast address to slave device + - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels + - tools/mm: fix compile error + - drm/amd/display: Run idle optimizations at end of vblank handler + - drm/amd/display: Change some variable name of psr + - drm/amd/display: Fix Panel Replay not update screen correctly + - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y + - x86/stackprotector: Work around strict Clang TLS symbol requirements + - crash, powerpc: default to CRASH_DUMP=n on PPC_BOOK3S_32 + - [Config] enable ARCH_DEFAULT_CRASH_DUMP + - mm: revert "mm: shmem: fix data-race in shmem_getattr()" + - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map + - evm: stop avoidably reading i_writecount in evm_file_release + - KVM: selftests: Disable strict aliasing + - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled + - KVM: x86: Unconditionally set irr_pending when updating APICv state + - tpm: Disable TPM on tpm2_create_primary() failure + - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue + - ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 + - mptcp: update local address flags when setting it + - mptcp: hold pm lock when deleting entry + - mptcp: pm: use _rcu variant under rcu_read_lock + - ocfs2: fix UBSAN warning in ocfs2_verify_volume() + - LoongArch: Fix early_numa_add_cpu() usage for FDT systems + - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits + - LoongArch: Add WriteCombine shadow mapping in KASAN + - LoongArch: Fix AP booting issue in VM mode + - LoongArch: Make KASAN work with 5-level page-tables + - selftests: hugetlb_dio: fixup check for initial conditions to skip in the + start + - btrfs: fix incorrect comparison for delayed refs + - mailbox: qcom-cpucp: Mark the irq with IRQF_NO_SUSPEND flag + - firmware: arm_scmi: Skip opp duplicates + - firmware: arm_scmi: Report duplicate opps as firmware bugs + - mmc: sunxi-mmc: Fix A100 compatible description + - drm/bridge: tc358768: Fix DSI command tx + - drm/xe: handle flat ccs during hibernation on igpu + - pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names + - pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag + - nouveau: fw: sync dma after setup is called. + - nouveau: handle EBUSY and EAGAIN for GSP aux errors. + - nouveau/dp: handle retries for AUX CH transfers with GSP. + - drm/amd: Fix initialization mistake for NBIO 7.7.0 + - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() + - drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size + - drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0 + - drm/amdgpu: enable GTT fallback handling for dGPUs only + - drm/amdgpu/mes12: correct kiq unmap latency + - drm/amd/display: Require minimum VBlank size for stutter optimization + - drm/amd/display: Fix failure to read vram info due to static BP_RESULT + - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling + - drm/xe: Restore system memory GGTT mappings + - drm/xe: improve hibernation on igpu + - lib/buildid: Fix build ID parsing logic + - net: sched: u32: Add test case for systematic hnode IDR leaks + - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set + - Linux 6.11.10 + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53133 + - drm/amd/display: Handle dml allocation failure to avoid crash + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53108 + - drm/amd/display: Adjust VSDB parser for replay feature + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53134 + - pmdomain: imx93-blk-ctrl: correct remove path + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53132 + - drm/xe/oa: Fix "Missing outer runtime PM protection" warning + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53127 + - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53130 + - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53105 + - mm: page_alloc: move mlocked flag clearance into free_pages_prepare() + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53109 + - nommu: pass NULL argument to vma_iter_prealloc() + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53131 + - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53135 + - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind + CONFIG_BROKEN + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53106 + - ima: fix buffer overrun in ima_eventdigest_init_common + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53110 + - vp_vdpa: fix id_table array not null terminated error + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53126 + - vdpa: solidrun: Fix UB bug with devres + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53111 + - mm/mremap: fix address wraparound in move_page_tables() + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53107 + - fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53128 + - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53112 + - ocfs2: uncache inode which has failed entering the group + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53113 + - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53114 + - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53137 + - ARM: fix cacheflush with PAN + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53115 + - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53116 + - drm/panthor: Fix handling of partial GPU mapping of BOs + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53117 + - virtio/vsock: Improve MSG_ZEROCOPY error handling + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53118 + - vsock: Fix sk_error_queue memory leak + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53119 + - virtio/vsock: Fix accept_queue memory leak + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53120 + - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53138 + - net/mlx5e: kTLS, Fix incorrect page refcounting + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53121 + - net/mlx5: fs, lock FTE when checking if active + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53122 + - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53123 + - mptcp: error out earlier on disconnect + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53124 + - net: fix data-races around sk->sk_forward_alloc + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53129 + - drm/rockchip: vop: Fix a dereferenced before check warning + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53139 + - sctp: fix possible UAF in sctp_v6_available() + + * Oracular update: v6.11.10 upstream stable release (LP: #2091650) // + CVE-2024-53140 + - netlink: terminate outstanding dump on socket close + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) + - nvme/host: Fix RCU list traversal to use SRCU primitive + - 9p: v9fs_fid_find: also lookup by inode if not found dentry + - 9p: Avoid creating multiple slab caches with the same name + - selftests/bpf: Verify that sync_linked_regs preserves subreg_def + - nvmet-passthru: clear EUID/NGUID/UUID while using loop target + - irqchip/ocelot: Fix trigger register address + - pinctrl: aw9523: add missing mutex_destroy + - pinctrl: intel: platform: Add Panther Lake to the list of supported + - block: Fix elevator_get_default() checking for NULL q->tag_set + - HID: multitouch: Add support for B2402FVA track point + - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad + - iommu/arm-smmu: Clarify MMU-500 CPRE workaround + - nvme: disable CC.CRIME (NVME_CC_CRIME) + - bpf: use kvzmalloc to allocate BPF verifier environment + - crypto: api - Fix liveliness check in crypto_alg_tested + - crypto: marvell/cesa - Disable hash algorithms + - s390/ap: Fix CCA crypto card behavior within protected execution environment + - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML + - drm/vmwgfx: Limit display layout ioctl array size to + VMWGFX_NUM_DISPLAY_UNITS + - selftests/bpf: Assert link info uprobe_multi count & path_size if unset + - ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects + - drm/amdkfd: Accounting pdd vram_usage for svm + - powerpc/powernv: Free name on error in opal_event_init() + - net: phy: mdio-bcm-unimac: Add BCM6846 support + - drm/xe/query: Increase timestamp width + - nvme-loop: flush off pending I/O while shutting down loop controller + - samples/landlock: Fix port parsing in sandboxer + - vDPA/ifcvf: Fix pci_read_config_byte() return code handling + - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 + - ASoC: Intel: avs: Update stream status in a separate thread + - ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function + - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA + - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA + - ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops + - netfs: Downgrade i_rwsem for a buffered write + - HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad + - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad + - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard + - ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7 regs + - RISCV: KVM: use raw_spinlock for critical section in imsic + - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue + - LoongArch: Use "Exception return address" to comment ERA + - ASoC: fsl_micfil: Add sample rate constraint + - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition + - drm/xe: Enlarge the invalidation timeout from 150 to 500 + - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout + - drm/xe: Handle unreliable MMIO reads during forcewake + - drm/xe: Don't restart parallel queues multiple times on GT reset + - mm: krealloc: Fix MTE false alarm in __do_krealloc + - 9p: fix slab cache name creation for real + - Linux 6.11.9 + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53098 + - drm/xe/ufence: Prefetch ufence addr to catch bogus address + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53099 + - bpf: Check validity of link->type in bpf_link_show_fdinfo() + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53089 + - LoongArch: KVM: Mark hrtimer to expire in hard interrupt context + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53090 + - afs: Fix lock recursion + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53101 + - fs: Fix uninitialized value issue in from_kuid and from_kgid + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53091 + - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53092 + - virtio_pci: Fix admin vq cleanup by using correct info pointer + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53102 + - nvme: make keep-alive synchronous operation + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53093 + - nvme-multipath: defer partition scanning + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53094 + - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53100 + - nvme: tcp: avoid race between queue_lock lock and destroy + + * Oracular update: v6.11.9 upstream stable release (LP: #2091649) // + CVE-2024-53095 + - smb: client: Fix use-after-free of network namespace. + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) + - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 + - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire- + excavator + - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi + - arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B + - arm64: dts: rockchip: Designate Turing RK1's system power controller + - EDAC/qcom: Make irq configuration optional + - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 + - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node + - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes + - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v + - arm64: dts: rockchip: Drop regulator-init-microvolt from two boards + - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo + - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards + - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus + - arm64: dts: rockchip: Remove undocumented supports-emmc property + - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion + - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc + - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus + - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1 + - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs + - arm64: dts: imx8mp: correct sdhc ipg clk + - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz + - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling + - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro + - ARM: dts: rockchip: fix rk3036 acodec node + - ARM: dts: rockchip: drop grf reference from rk3036 hdmi + - ARM: dts: rockchip: Fix the spi controller on rk3036 + - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin + - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes + - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() + - NFSv3: only use NFS timeout for MOUNT when protocols are compatible + - NFS: Fix attribute delegation behaviour on exclusive create + - NFS: Further fixes to attribute delegation a/mtime changes + - nfs: avoid i_lock contention in nfs_clear_invalid_mapping + - net: enetc: set MAC address to the VF net_device + - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint + - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value + - can: c_can: fix {rx,tx}_errors statistics + - ice: change q_index variable type to s16 to store -1 value + - e1000e: Remove Meteor Lake SMBUS workarounds + - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag + - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case + - netfilter: nf_tables: wait for rcu grace period on net_device removal + - virtio_net: Support dynamic rss indirection table size + - virtio_net: Sync rss config to device when virtnet_probe + - virtio_net: Update rss when set queue + - net: arc: rockchip: fix emac mdio node support + - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path + - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" + - media: stb0899_algo: initialize cfr before using it + - media: dvb_frontend: don't play tricks with underflow values + - media: adv7604: prevent underflow condition when reporting colorspace + - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer + - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() + - tools/lib/thermal: Fix sampling handler context ptr + - thermal/of: support thermal zones w/o trips subnode + - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits + - media: pulse8-cec: fix data timestamp at pulse8_setup() + - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() + - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices + - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation + - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when + switching CAN modes + - can: {cc770,sja1000}_isa: allow building on x86_64 + - [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA + - drm/xe: Set mask bits for CCS_MODE register + - pwm: imx-tpm: Use correct MODULO value for EPWM mode + - rpmsg: glink: Handle rejected intent request better + - drm/amd/pm: always pick the pptable from IFWI + - drm/amd/display: Fix brightness level not retained over reboot + - drm/imagination: Add a per-file PVR context list + - drm/amdgpu: Adjust debugfs eviction and IB access permissions + - drm/amdgpu: Adjust debugfs register access permissions + - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 + - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported + - thermal/drivers/qcom/lmh: Remove false lockdep backtrace + - dm cache: correct the number of origin blocks to match the target length + - dm cache: optimize dirty bit checking with find_next_bit when resizing + - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t + overflow + - mptcp: no admin perm to list endpoints + - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam + - tracing: Fix tracefs mount options + - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() + - mptcp: use sock_kfree_s instead of kfree + - arm64: Kconfig: Make SME depend on BROKEN for now + - [Config] updateconfigs for ARM64_SME + - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint + - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid + spurious interrupts + - btrfs: fix the length of reserved qgroup to free + - btrfs: fix per-subvolume RO/RW flags with new mount API + - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header + - platform/x86/amd/pmf: Update SMU metrics table for 1AH family series + - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model + - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set + - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags + - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set + - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' + - objpool: fix to make percpu slot allocation more robust + - mm/damon/core: handle zero {aggregation,ops_update} intervals + - mm/damon/core: handle zero schemes apply interval + - mm/mlock: set the correct prev on failure + - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING + - usb: dwc3: fix fault at system suspend if device was already runtime + suspended + - USB: serial: qcserial: add support for Sierra Wireless EM86xx + - USB: serial: option: add Fibocom FG132 0x0112 composition + - USB: serial: option: add Quectel RG650V + - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks + - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock + - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation + - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation + - irqchip/gic-v3: Force propagation of the active state with a read-back + - ucounts: fix counter leak in inc_rlimit_get_ucounts() + - selftests: hugetlb_dio: check for initial conditions to skip in the start + - firmware: qcom: scm: Refactor code to support multiple dload mode + - [Config] updateconfigs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT + - firmware: qcom: scm: suppress download mode error + - block: rework bio splitting + - block: fix queue limits checks in blk_rq_map_user_bvec for real + - drm/xe: Move LNL scheduling WA to xe_device.h + - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout + - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout + - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 + - xtensa: Emulate one-byte cmpxchg + - Linux 6.11.8 + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50265 + - ocfs2: remove entry once instead of null-ptr-dereference in + ocfs2_xa_remove() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50266 + - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50267 + - USB: serial: io_edgeport: fix use after free in debug printk + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50268 + - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53083 + - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50269 + - usb: musb: sunxi: Fix accessing an released usb phy + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53079 + - mm/thp: fix deferred split unqueue naming and locking + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50270 + - mm/damon/core: avoid overflow in damon_feed_loop_next_input() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50271 + - signal: restore the override_rlimit logic + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50272 + - filemap: Fix bounds checking in filemap_read() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53104 + - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in + uvc_parse_format + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50273 + - btrfs: reinitialize delayed ref list after deleting it from the list + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53064 + - idpf: fix idpf_vc_core_init error path + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50274 + - idpf: avoid vport access in idpf_get_link_ksettings + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53065 + - mm/slab: fix warning caused by duplicate kmem_cache creation in + kmem_buckets_create + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50275 + - arm64/sve: Discard stale CPU state when handling SVE traps + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50276 + - net: vertexcom: mse102x: Fix possible double free of TX skb + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53066 + - nfs: Fix KMSAN warning in decode_getfattr_attrs() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53067 + - scsi: ufs: core: Start the RTC update work later + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50277 + - dm: fix a crash if blk_alloc_disk fails + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50278 + - dm cache: fix potential out-of-bounds access on the first resume + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50279 + - dm cache: fix out-of-bounds access to the dirty bitset when resizing + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50280 + - dm cache: fix flushing uninitialized delayed_work on cache_ctr error + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50281 + - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50282 + - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53071 + - drm/panthor: Be stricter about IO mapping flags + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53080 + - drm/panthor: Lock XArray when getting entries for the VM + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53084 + - drm/imagination: Break an object reference loop + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53085 + - tpm: Lock TPM chip in tpm_pm_suspend() first + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53086 + - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53087 + - drm/xe: Fix possible exec queue leak in exec IOCTL + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50283 + - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50284 + - ksmbd: Fix the missing xa_store error check + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50285 + - ksmbd: check outstanding simultaneous SMB operations + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50286 + - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50287 + - media: v4l2-tpg: prevent the risk of a division by zero + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50288 + - media: vivid: fix buffer overwrite when using > 32 buffers + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50289 + - media: av7110: fix a spectre vulnerability + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50290 + - media: cx24116: prevent overflows on SNR calculus + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53061 + - media: s5p-jpeg: prevent buffer overflows + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53081 + - media: ar0521: don't overflow when checking PLL values + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53062 + - media: mgb4: protect driver against spectre + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50291 + - media: dvb-core: add missing buffer index check + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50292 + - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53063 + - media: dvbdev: prevent the risk of out of memory access + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50293 + - net/smc: do not leave a dangling sk pointer in __smc_create() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50294 + - rxrpc: Fix missing locking causing hanging calls + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50295 + - net: arc: fix the device for dma_map_single/dma_unmap_single + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53082 + - virtio_net: Add hash_key_length check + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50296 + - net: hns3: fix kernel crash when uninstalling driver + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53088 + - i40e: fix race condition by adding filter's intermediate sync state + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50297 + - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50298 + - net: enetc: allocate vf_state during PF probes + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50299 + - sctp: properly validate chunk size in sctp_sf_ootb() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50300 + - regulator: rtq2208: Fix uninitialized use of regulator_config + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50301 + - security/keys: fix slab-out-of-bounds in key_task_permission + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53072 + - platform/x86/amd/pmc: Detect when STB is not available + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-50302 + - HID: core: zero-initialize the report buffer + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53068 + - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() + + * Oracular update: v6.11.8 upstream stable release (LP: #2091645) // + CVE-2024-53069 + - firmware: qcom: scm: fix a NULL-pointer dereference + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) + - drm/amdgpu: fix random data corruption for sdma 7 + - cgroup: Fix potential overflow issue when checking max_depth + - spi: geni-qcom: Fix boot warning related to pm_runtime and devres + - perf trace: Fix non-listed archs in the syscalltbl routines + - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT + - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy + length + - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() + - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING + - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys + - wifi: ath11k: Fix invalid ring usage in full monitor mode + - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts + - wifi: brcm80211: BRCM_TRACING should depend on TRACING + - RDMA/cxgb4: Dump vendor specific QP details + - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down + - RDMA/bnxt_re: Fix the usage of control path spin locks + - RDMA/bnxt_re: synchronize the qp-handle table array + - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd + - wifi: iwlwifi: mvm: don't add default link in fw restart flow + - Revert "wifi: iwlwifi: remove retry loops in start" + - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() + - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from + register values + - dpll: add Embedded SYNC feature for a pin + - ice: add callbacks for Embedded SYNC enablement on dpll pins + - gtp: allow -1 to be specified as file description from userspace + - bpf: Force checkpoint when jmp history is too long + - bpf: Add bpf_mem_alloc_check_size() helper + - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension + - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header + - mlxsw: pci: Sync Rx buffers for CPU + - mlxsw: pci: Sync Rx buffers for device + - net: ethernet: mtk_wed: fix path of MT7988 WO firmware + - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled + - iomap: improve shared block detection in iomap_unshare_iter + - iomap: don't bother unsharing delalloc extents + - iomap: share iomap_unshare_iter predicate code with fsdax + - fsdax: remove zeroing code from dax_unshare_iter + - iomap: turn iomap_want_unshare_iter into an inline function + - kasan: Fix Software Tag-Based KASAN with GCC + - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() + - afs: Fix missing subdir edit when renamed between parent dirs + - gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init() + call + - smb: client: fix parsing of device numbers + - smb: client: set correct device number on nfs reparse points + - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert() + - drm/mediatek: Fix color format MACROs in OVL + - drm/mediatek: Fix get efuse issue for MT8188 DPTX + - drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy() + - cxl/events: Fix Trace DRAM Event Record + - PCI: Fix pci_enable_acs() support for the ACS quirks + - nvme: module parameter to disable pi with offsets + - drm/panthor: Fix firmware initialization on systems with a page size > 4k + - drm/panthor: Fail job creation when the group is dead + - drm/panthor: Report group as timedout when we fail to properly suspend + - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state + - fs/ntfs3: Stale inode instead of bad + - rust: device: change the from_raw() function + - scsi: scsi_transport_fc: Allow setting rport state to current state + - cifs: Improve creating native symlinks pointing to directory + - cifs: Fix creating native symlinks pointing to current or parent directory + - ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together + - powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U + - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support + - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support + - net: amd: mvme147: Fix probe banner message + - NFS: remove revoked delegation from server's delegation list + - misc: sgi-gru: Don't disable preemption in GRU driver + - NFSD: Initialize struct nfsd4_copy earlier + - NFSD: Never decrement pending_async_copies on error + - ALSA: usb-audio: Add quirks for Dell WD19 dock + - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171 + - usbip: tools: Fix detach_port() invalid port error path + - usb: phy: Fix API devm_usb_put_phy() can not release the phy + - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() + - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non + self-powered devices + - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes + - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path + - xhci: Fix Link TRB DMA in command ring stopped completion event + - xhci: Use pm_runtime_get to prevent RPM on unsupported systems + - Revert "driver core: Fix uevent_show() vs driver detach race" + - dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply + - iio: light: veml6030: fix microlux value calculation + - RISC-V: ACPI: fix early_ioremap to early_memremap + - tools/mm: -Werror fixes in page-types/slabinfo + - mm: shrinker: avoid memleak in alloc_shrinker_info + - firmware: microchip: auto-update: fix poll_complete() to not report spurious + timeout errors + - thunderbolt: Honor TMU requirements in the domain when setting TMU mode + - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections + - cxl/port: Fix CXL port initialization order when the subsystem is built-in + - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function + - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process + - block: fix sanity checks in blk_rq_map_user_bvec + - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check + - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() + - riscv: vdso: Prevent the compiler from inserting calls to memset() + - Input: edt-ft5x06 - fix regmap leak when probe fails + - ALSA: hda/realtek: Limit internal Mic boost on Dell platform + - riscv: efi: Set NX compat flag in PE/COFF header + - riscv: Use '%u' to format the output of 'cpu' + - riscv: Remove unused GENERATING_ASM_OFFSETS + - riscv: Remove duplicated GET_RM + - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() + - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return + - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone + - tpm: Return tpm2_sessions_init() when null key creation fails + - tpm: Rollback tpm2_load_null() + - drm/amdgpu/smu13: fix profile reporting + - tpm: Lazily flush the auth session + - mei: use kvmalloc for read buffer + - x86/traps: Enable UBSAN traps on x86 + - x86/traps: move kmsan check after instrumentation_begin + - accel/ivpu: Fix NOC firewall interrupt handling + - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 + - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 + - nvme: re-fix error-handling for io_uring nvme-passthrough + - kasan: remove vmalloc_percpu test + - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic() + - drm/xe: Fix register definition order in xe_regs.h + - drm/xe: Kill regs/xe_sriov_regs.h + - drm/xe: Add mmio read before GGTT invalidate + - drm/xe: Don't short circuit TDR on jobs not started + - btrfs: fix extent map merging not happening for adjacent extents + - btrfs: fix defrag not merging contiguous extents due to merged extent maps + - gpiolib: fix debugfs newline separators + - gpiolib: fix debugfs dangling chip separator + - vmscan,migrate: fix page count imbalance on node stats when demoting pages + - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes + - Input: fix regression when re-registering input handlers + - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true + - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats + - mm: shrink skip folio mapped by an exiting process + - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify() + - riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64 + - riscv: dts: starfive: disable unused csi/camss nodes + - arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM + - arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch + - arm64: dts: qcom: x1e80100: Fix up BAR spaces + - arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch + - arm64: dts: qcom: x1e80100: fix PCIe4 interconnect + - arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch + - arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch + - arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block + - arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks + - drm/xe/xe2hpg: Add Wa_15016589081 + - drm/amdgpu/swsmu: fix ordering for setting workload_mask + - drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs + - fs/ntfs3: Sequential field availability check in mi_enum_attr() + - drm/amdgpu: handle default profile on on devices without fullscreen 3D + - MIPS: export __cmpxchg_small() + - RISC-V: disallow gcc + rust builds + - [Config] updateconfigs after disabling rust with gcc on riscv + - rcu/kvfree: Add kvfree_rcu_barrier() API + - rcu/kvfree: Refactor kvfree_rcu_queue_batch() + - Linux 6.11.7 + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50212 + - lib: alloc_tag_module_unload must wait for pending kfree_rcu calls + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53046 + - arm64: dts: imx8ulp: correct the flexspi compatible string + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53052 + - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50213 + - drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50214 + - drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50215 + - nvmet-auth: assign dh_key to NULL after kfree_sensitive + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50216 + - xfs: fix finding a last resort AG in xfs_filestream_pick_ag + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50217 + - btrfs: fix use-after-free of block device file in + __btrfs_free_extra_devids() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53043 + - mctp i2c: handle NULL header address + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50303 + - resource,kexec: walk_system_ram_res_rev must retain resource flags + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50218 + - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50219 + - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50263 + - fork: only invoke khugepaged, ksm hooks if no error + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50220 + - fork: do not invoke uffd on fork if error occurs + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53047 + - mptcp: init: protect sched with rcu_read_lock + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50221 + - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50222 + - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50223 + - sched/numa: Fix the potential null pointer dereference in task_numa_work() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53053 + - scsi: ufs: core: Fix another deadlock during RTC update + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53075 + - riscv: Prevent a bad reference count on CPU nodes + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50224 + - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50225 + - btrfs: fix error propagation of split bios + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53054 + - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50226 + - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50227 + - thunderbolt: Fix KASAN reported stack out-of-bounds read in + tb_retimer_scan() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50228 + - mm: shmem: fix data-race in shmem_getattr() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50229 + - nilfs2: fix potential deadlock with newly created symlinks + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50230 + - nilfs2: fix kernel bug due to missing clearing of checked flag + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50231 + - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53076 + - iio: gts-helper: Fix memory leaks for the error path of + iio_gts_build_avail_scale_table() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50232 + - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50233 + - staging: iio: frequency: ad9832: fix division by zero in + ad9832_calc_freqreg() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53055 + - wifi: iwlwifi: mvm: fix 6 GHz scan construction + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50234 + - wifi: iwlegacy: Clear stale interrupts before resuming device + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50235 + - wifi: cfg80211: clear wdev->cqm_config pointer on free + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50236 + - wifi: ath10k: Fix memory leak in management tx + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50237 + - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50238 + - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50239 + - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50240 + - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53077 + - rpcrdma: Always release the rpcrdma_device's xa_array + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50242 + - fs/ntfs3: Additional check in ntfs_file_release + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50243 + - fs/ntfs3: Fix general protection fault in run_is_mapped_full + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50244 + - fs/ntfs3: Additional check in ni_clear() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50245 + - fs/ntfs3: Fix possible deadlock in mi_read + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50246 + - fs/ntfs3: Add rough attr alloc_size check + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50247 + - fs/ntfs3: Check if more than chunk-size bytes are written + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50248 + - ntfs3: Add bounds checking to mi_enum_attr() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53078 + - drm/tegra: Fix NULL vs IS_ERR() check in probe() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53056 + - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50249 + - ACPI: CPPC: Make rmw_lock a raw_spin_lock + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50250 + - fsdax: dax_unshare_iter needs to copy entire blocks + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50251 + - netfilter: nft_payload: sanitize offset and length before calling + skb_checksum() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50252 + - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50253 + - bpf: Check the validity of nr_words in bpf_iter_bits_new() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50254 + - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50255 + - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50256 + - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50257 + - netfilter: Fix use-after-free in get_info() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50258 + - net: fix crash when config small gso_max_size/gso_ipv4_max_size + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50262 + - bpf: Fix out-of-bounds write in trie_get_next_key() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53044 + - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50259 + - netdevsim: Add trailing zero to terminate the string in + nsim_nexthop_bucket_activity_write() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50304 + - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53042 + - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53048 + - ice: fix crash on probe for DPLL enabled E810 LOM + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53058 + - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50260 + - sock_map: fix a NULL pointer dereference in sock_map_link_update_prog() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53045 + - ASoC: dapm: fix bounds checker error in dapm_widget_list_create + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-50261 + - macsec: Fix use-after-free while sending the offloading packet + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53059 + - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53074 + - wifi: iwlwifi: mvm: don't leak a link on AP removal + + * Oracular update: v6.11.7 upstream stable release (LP: #2091629) // + CVE-2024-53049 + - slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof + + * Oracular update: v6.11.6 upstream stable release (LP: #2091386) + - bpf: Use raw_spinlock_t in ringbuf + - iio: accel: bma400: Fix uninitialized variable field_value in tap event + handling. + - reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC + - bpf: sync_linked_regs() must preserve subreg_def + - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap + - irqchip/riscv-imsic: Fix output text of base address + - bpf: devmap: provide rxq after redirect + - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems + - lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW + - bpf: Fix memory leak in bpf_core_apply + - RDMA/bnxt_re: Fix a possible memory leak + - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure + - RDMA/bnxt_re: Add a check for memory allocation + - x86/resctrl: Avoid overflow in MB settings in bw_validate() + - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin + - clk: rockchip: fix finding of maximum clock ID + - bpf: Check the remaining info_cnt before repeating btf fields + - bpf: fix unpopulated name_len field in perf_event link info + - selftests/bpf: fix perf_event link info name_len assertion + - riscv, bpf: Fix possible infinite tailcall when CONFIG_CFI_CLANG is enabled + - s390/pci: Handle PCI error codes other than 0x3a + - bpf: fix kfunc btf caching for modules + - iio: frequency: {admv4420,adrf6780}: format Kconfig entries + - iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig + - drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check + - selftests/bpf: Fix cross-compiling urandom_read + - bpf: Fix unpopulated path_size when uprobe_multi fields unset + - sched/core: Disable page allocation in task_tick_mm_cid() + - ALSA: hda/cs8409: Fix possible NULL dereference + - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() + - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP + - RDMA/irdma: Fix misspelling of "accept*" + - RDMA/srpt: Make slab cache names unique + - elevator: do not request_module if elevator exists + - elevator: Remove argument from elevator_find_get + - ipv4: give an IPv4 dev to blackhole_netdev + - net: sparx5: fix source port register when mirroring + - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters + - RDMA/bnxt_re: Fix out of bound check + - RDMA/bnxt_re: Fix incorrect dereference of srq in async event + - RDMA/bnxt_re: Return more meaningful error + - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop + - RDMA/bnxt_re: Get the toggle bits from SRQ events + - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value + - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages + - RDMA/bnxt_re: Fix the GID table length + - accel/qaic: Fix the for loop used to walk SG table + - drm/panel: himax-hx83102: Adjust power and gamma to optimize brightness + - drm/msm/dpu: make sure phys resources are properly initialized + - drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check + - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() + - drm/msm/dsi: improve/fix dsc pclk calculation + - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation + - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() + - drm/msm: Allocate memory for disp snapshot with kvzalloc() + - firmware: arm_scmi: Queue in scmi layer for mailbox implementation + - net/smc: Fix memory leak when using percpu refs + - [PATCH} hwmon: (jc42) Properly detect TSE2004-compliant devices again + - net: usb: usbnet: fix race in probe failure + - net: stmmac: dwmac-tegra: Fix link bring-up sequence + - octeontx2-af: Fix potential integer overflows on integer shifts + - ring-buffer: Fix reader locking when changing the sub buffer order + - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring + - macsec: don't increment counters for an unrelated SA + - netdevsim: use cond_resched() in nsim_dev_trap_report_work() + - net: ethernet: aeroflex: fix potential memory leak in + greth_start_xmit_gbit() + - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid + - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() + - net: ethernet: rtsn: fix potential memory leak in rtsn_start_xmit() + - bpf: Fix truncation bug in coerce_reg_to_size_sx() + - net: systemport: fix potential memory leak in bcm_sysport_xmit() + - irqchip/renesas-rzg2l: Fix missing put_device + - drm/msm/dpu: Don't always set merge_3d pending flush + - drm/msm/dpu: don't always program merge_3d block + - net: bcmasp: fix potential memory leak in bcmasp_xmit() + - drm/msm/a6xx+: Insert a fence wait before SMMU table update + - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). + - net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361 + - genetlink: hold RCU in genlmsg_mcast() + - ravb: Remove setting of RX software timestamp + - net: ravb: Only advertise Rx/Tx timestamps if hardware supports it + - net: dsa: vsc73xx: fix reception from VLAN-unaware bridges + - scsi: target: core: Fix null-ptr-deref in target_alloc_device() + - smb: client: fix possible double free in smb2_set_ea() + - smb: client: fix OOBs when building SMB2_IOCTL request + - usb: typec: altmode should keep reference to parent + - s390: Initialize psw mask in perf_arch_fetch_caller_regs() + - drm/xe: fix unbalanced rpm put() with fence_fini() + - drm/xe: fix unbalanced rpm put() with declare_wedged() + - drm/xe: Take job list lock in xe_sched_add_pending_job + - drm/xe: Don't free job in TDR + - drm/xe: Use bookkeep slots for external BO's in exec IOCTL + - bpf: Fix link info netfilter flags to populate defrag flag + - Bluetooth: bnep: fix wild-memory-access in proto_unregister + - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame + - net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init + - net/mlx5: Check for invalid vector index on EQ creation + - net/mlx5: Fix command bitmask initialization + - net/mlx5: Unregister notifier on eswitch init failure + - net/mlx5e: Don't call cleanup on profile rollback failure + - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock + - vsock: Update rx_bytes on read_skb() + - vsock: Update msg_count on read_skb() + - bpf, vsock: Drop static vsock_bpf_prot initialization + - riscv, bpf: Make BPF_CMPXCHG fully ordered + - nvme-pci: fix race condition between reset and nvme_dev_disable() + - bpf: Fix iter/task tid filtering + - bpf: Fix incorrect delta propagation between linked registers + - bpf: Fix print_reg_state's constant scalar dump + - cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed() + - fgraph: Allocate ret_stack_list with proper size + - mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled() + - mm: shmem: move shmem_huge_global_enabled() into + shmem_allowable_huge_orders() + - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw() + - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma + - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - xhci: dbgtty: remove kfifo_out() wrapper + - xhci: dbgtty: use kfifo from tty_port struct + - xhci: dbc: honor usb transfer size boundaries. + - uprobe: avoid out-of-bounds memory access of fetching args + - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real + VLA + - ASoC: amd: yc: Add quirk for HP Dragonfly pro one + - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to + default regs values + - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit + - arm64: Force position-independent veneers + - udf: refactor udf_current_aext() to handle error + - udf: refactor udf_next_aext() to handle error + - udf: refactor inode_bmap() to handle error + - udf: fix uninit-value use in udf_get_fileshortad + - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string + - fsnotify: Avoid data race between fsnotify_recalc_mask() and + fsnotify_object_watched() + - drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM + - cifs: Validate content of NFS reparse point buffer + - LoongArch: Don't crash in stack_top() for tasks without vDSO + - objpool: fix choosing allocation for percpu slots + - jfs: Fix sanity check in dbMount + - tracing/probes: Fix MAX_TRACE_ARGS limit handling + - tracing: Consider the NULL character when validating the event length + - xfrm: extract dst lookup parameters into a struct + - xfrm: respect ip protocols rules criteria when performing dst lookups + - xfrm: validate new SA's prefixlen using SA family when sel.family is unset + - netfilter: bpf: must hold reference on net namespace + - net: pse-pd: Fix out of bound for loop + - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() + - be2net: fix potential memory leak in be_xmit() + - net: plip: fix break; causing plip to never transmit + - bnxt_en: replace ptp_lock with irqsave variant + - octeon_ep: Implement helper for iterating packets in Rx queue + - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() + - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x + - bpf, arm64: Fix address emission with tag-based KASAN enabled + - fsl/fman: Save device references taken in mac_probe() + - fsl/fman: Fix refcount handling of fman-related devices + - net: wwan: fix global oob in wwan_rtnl_policy + - net: fix races in netdev_tx_sent_queue()/dev_watchdog() + - virtio_net: fix integer overflow in stats + - mlxsw: spectrum_router: fix xa_store() error checking + - net: usb: usbnet: fix name regression + - bpf: Preserve param->string when parsing mount options + - bpf: Add MEM_WRITE attribute + - bpf: Fix overloading of MEM_UNINIT's meaning + - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers + - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions + created by classifiers + - net: sched: fix use-after-free in taprio_change() + - net: sched: use RCU read-side critical section in taprio_dump() + - r8169: avoid unsolicited interrupts + - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() + - Bluetooth: hci_core: Disable works on hci_unregister_dev + - Bluetooth: SCO: Fix UAF on sco_sock_timeout + - Bluetooth: ISO: Fix UAF on iso_sock_timeout + - bpf,perf: Fix perf_event_detach_bpf_prog error handling + - bpf: fix do_misc_fixups() for bpf_get_branch_snapshot() + - net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x + - net: dsa: mv88e6xxx: group cycle counter coefficients + - net: dsa: mv88e6xxx: read cycle counter period from hardware + - net: dsa: mv88e6xxx: support 4000ps cycle counter period + - bpf: Add the missing BPF_LINK_TYPE invocation for sockmap + - ASoC: dt-bindings: davinci-mcasp: Fix interrupts property + - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties + - ASoC: loongson: Fix component check failed on FDT systems + - ASoC: topology: Bump minimal topology ABI version + - ASoC: max98388: Fix missing increment of variable slot_found + - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing + - PCI: Hold rescan lock while adding devices during host probe + - fs: pass offset and result to backing_file end_write() callback + - fuse: update inode size after extending passthrough write + - ASoC: fsl_micfil: Add a flag to distinguish with different volume control + types + - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() + - fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS + - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request() + - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net + - ALSA: hda/realtek: Update default depop procedure + - smb: client: Handle kstrdup failures for passwords + - cifs: fix warning when destroy 'cifs_io_request_pool' + - PCI/pwrctl: Add WCN6855 support + - PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees + - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception + - btrfs: qgroup: set a more sane default value for subtree drop threshold + - btrfs: clear force-compress on remount when compress mount option is given + - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item() + - perf/x86/rapl: Fix the energy-pkg event for AMD CPUs + - btrfs: reject ro->rw reconfiguration if there are hard ro requirements + - btrfs: zoned: fix zone unusable accounting for freed reserved extent + - btrfs: fix read corruption due to race with extent map merging + - drm/amd: Guard against bad data for ATIF ACPI method + - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] + - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context + - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid + detection issue + - nilfs2: fix kernel bug due to missing clearing of buffer delay flag + - fs: don't try and remove empty rbtree node + - xfs: don't fail repairs on metadata files with no attr fork + - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) + - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory + - KVM: arm64: Unregister redistributor for failed vCPU creation + - KVM: arm64: Fix shift-out-of-bounds bug + - KVM: arm64: Don't eagerly teardown the vgic on init error + - firewire: core: fix invalid port index for parent device + - x86/lam: Disable ADDRESS_MASKING in most cases + - [Config] updateconfigs to disable ADDRESS_MASKING + - x86/sev: Ensure that RMP table fixups are reserved + - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE + - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 + - LoongArch: Get correct cores_per_package for SMT systems + - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context + - LoongArch: Make KASAN usable for variable cpu_vabits + - xfrm: fix one more kernel-infoleak in algo dumping + - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event + - md/raid10: fix null ptr dereference in raid10_size() + - drm/bridge: Fix assignment of the of_node of the parent to aux bridge + - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too + - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid + addresses + - fgraph: Fix missing unlock in register_ftrace_graph() + - fgraph: Change the name of cpuhp state to "fgraph:online" + - net: phy: dp83822: Fix reset pin definitions + - nfsd: fix race between laundromat and free_stateid + - drm/amd/display: temp w/a for DP Link Layer compliance + - ata: libata: Set DID_TIME_OUT for commands that actually timed out + - ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC + - ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's + - ASoC: SOF: Intel: hda: Always clean up link DMA during stop + - ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs + - ASoC: dapm: avoid container_of() to get component + - ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc + - ASoC: qcom: sdm845: add missing soundwire runtime stream alloc + - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() + - Revert " fs/9p: mitigate inode collisions" + - Revert "fs/9p: remove redundant pointer v9ses" + - Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl" + - Revert "fs/9p: simplify iget to remove unnecessary paths" + - soundwire: intel_ace2x: Send PDI stream number during prepare + - x86: support user address masking instead of non-speculative conditional + - x86: fix whitespace in runtime-const assembler output + - x86: fix user address masking non-canonical speculation issue + - platform/x86: dell-wmi: Ignore suspend notifications + - ACPI: PRM: Clean up guid type in struct prm_handler_info + - ASoC: qcom: Select missing common Soundwire module code on SDM845 + - Linux 6.11.6 + + * ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel + 5.15.0-127.137 (LP: #2091990) + - netfilter: xtables: fix typo causing some targets not to load on IPv6 + + * By always inlining _compound_head(), clone() sees 3%+ performance increase + (LP: #2089327) + - mm: always inline _compound_head() with + CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y + + * Keyboard backlight controls do not work on Asus ROG Zephyrus GA503RM in + Oracular (LP: #2089113) + - hid-asus: use hid for brightness control on keyboard + + * Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+ + (LP: #2086587) + - SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx + + * Add list of source files to linux-buildinfo (LP: #2086606) + - [Packaging] Sort build dependencies alphabetically + - [Packaging] Add list of used source files to buildinfo package + + * asus: Fix thermal profile initialization on Lunar Lake (LP: #2085950) + - platform/x86: asus-wmi: Fix thermal profile initialization + + * drm/xe: Fix LNL getting wedged after idling (LP: #2085944) + - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout + + * UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853) + - ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields + + * Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983) + - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) + - ALSA: scarlett2: Add error check after retrieving PEQ filter values + - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 + - net: enetc: remove xdp_drops statistic from enetc_xdp_drop() + - net: enetc: block concurrent XDP transmissions during ring reconfiguration + - net: enetc: disable Tx BD rings after they are empty + - net: enetc: disable NAPI after all rings are disabled + - net: enetc: add missing static descriptor and inline keyword + - udp: Compute L4 checksum as usual when not segmenting the skb + - arm64: dts: marvell: cn9130-sr-som: fix cp0 mdio pin numbers + - arm64: probes: Fix simulate_ldr*_literal() + - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed- + link PHY + - selftests: mptcp: join: test for prohibited MPC to port-based endp + - fat: fix uninitialized variable + - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace + point + - net: fec: Move `fec_ptp_read()` to the top of the file + - net: fec: Remove duplicated code + - mptcp: prevent MPC handshake on port-based signal endpoints + - s390/sclp: Deactivate sclp after all its users + - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR + - KVM: s390: gaccess: Check if guest address is in memslot + - KVM: s390: Change virtual to physical address access in diag 0x258 handler + - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET + - x86/cpufeatures: Add a IBPB_NO_RET BUG flag + - x86/entry: Have entry_ibpb() invalidate return predictions + - x86/bugs: Skip RSB fill at VMEXIT + - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry + - fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks + - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller + - io_uring/sqpoll: close race on waiting for sqring entries + - selftest: hid: add the missing tests directory + - Input: xpad - add support for MSI Claw A1M + - scsi: mpi3mr: Validate SAS port assignments + - scsi: ufs: core: Fix the issue of ICU failure + - scsi: ufs: core: Requeue aborted request + - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation + - drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible + mode + - drm/xe/xe_sync: initialise ufence.signalled + - drm/xe/ufence: ufence can be signaled right after wait_woken + - drm/vmwgfx: Cleanup kms setup without 3d + - drm/vmwgfx: Handle surface check failure correctly + - drm/amdgpu/mes: fix issue of writing to the same log buffer from 2 MES pipes + - drm/amdgpu/smu13: always apply the powersave optimization + - drm/amdgpu/swsmu: Only force workload setup on init + - drm/amdgpu: prevent BO_HANDLES error from being overwritten + - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig + - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig + - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig + - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: hid-sensors: Fix an error handling path in + _hid_sensor_set_report_latency() + - iio: light: veml6030: fix ALS sensor resolution + - iio: light: opt3001: add missing full-scale range value + - iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig + - iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig + - iio: chemical: ens160: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: magnetometer: af8133j: add missing select IIO_(TRIGGERED_)BUFFER in + Kconfig + - iio: resolver: ad2s1210 add missing select REGMAP in Kconfig + - iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig + - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig + - iio: adc: ad7944: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig + - Bluetooth: Remove debugfs directory on module init failure + - Bluetooth: btusb: Fix not being able to reconnect after suspend + - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 + - xhci: Fix incorrect stream context type macro + - xhci: Mitigate failed set dequeue pointer commands + - USB: serial: option: add support for Quectel EG916Q-GL + - USB: serial: option: add Telit FN920C04 MBIM compositions + - usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF + - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store + - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG + - usb: dwc3: core: Fix system suspend on TI AM62 platforms + - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM + device + - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device + - serial: imx: Update mctrl old_status on RTSD interrupt + - x86/resctrl: Annotate get_mem_config() functions as __init + - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load + - x86/entry_32: Do not clobber user EFLAGS.ZF + - irqchip/sifive-plic: Unmask interrupt in plic_irq_enable() + - irqchip/sifive-plic: Return error code on failure + - serial: qcom-geni: fix polled console initialisation + - serial: qcom-geni: revert broken hibernation support + - serial: qcom-geni: fix shutdown race + - serial: qcom-geni: fix dma rx cancellation + - serial: qcom-geni: fix receiver enable + - mm: vmscan.c: fix OOM on swap stress test + - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne + 1000 G2 + - Linux 6.11.5 + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50192 + - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50069 + - pinctrl: apple: check devm_kasprintf() returned value + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50070 + - pinctrl: stm32: check devm_kasprintf() returned value + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50196 + - pinctrl: ocelot: fix system hang on level based interrupts + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50197 + - pinctrl: intel: platform: fix error path in device_for_each_child_node() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50071 + - pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50072 + - x86/bugs: Use code segment selector for VERW operand + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50073 + - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50193 + - x86/entry_32: Clear CPU buffers after register restore in NMI return + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50074 + - parport: Proper fix for array out-of-bounds access + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50100 + - USB: gadget: dummy-hcd: Fix "task hung" problem + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50075 + - xhci: tegra: fix checked USB2 port number + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50076 + - vt: prevent kernel-infoleak in con_font_get() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50077 + - Bluetooth: ISO: Fix multiple init when debugfs is disabled + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50078 + - Bluetooth: Call iso_exit() on module unload + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50198 + - iio: light: veml6030: fix IIO device retrieval from embedded device + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50201 + - drm/radeon: Fix encoder->possible_clones + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50098 + - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50079 + - io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50080 + - ublk: don't allow user copy for unprivileged device + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50081 + - blk-mq: setup queue ->tag_set before initializing hctx + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50082 + - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50101 + - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50083 + - tcp: fix mptcp DSS corruption due to large pmtu xmit + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50068 + - mm/damon/tests/sysfs-kunit.h: fix memory leak in + damon_sysfs_test_add_targets() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50199 + - mm/swapfile: skip HugeTLB pages for unuse_vma + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50066 + - mm/mremap: fix move_normal_pmd/retract_page_tables race + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50202 + - nilfs2: propagate directory read errors from nilfs_find_entry() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50200 + - maple_tree: correct tree corruption on spanning store + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50084 + - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50194 + - arm64: probes: Fix uprobes for big-endian kernels + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50099 + - arm64: probes: Remove broken LDR (literal) uprobe support + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50195 + - posix-clock: Fix missing timespec64 check in pc_clock_settime() + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50085 + - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50086 + - ksmbd: fix user-after-free from session log off + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50087 + - btrfs: fix uninitialized pointer free on read_alloc_one_name() error + + * Oracular update: v6.11.5 upstream stable release (LP: #2089152) // + CVE-2024-50088 + - btrfs: fix uninitialized pointer free in add_inode_ref() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) + - net: fec: don't save PTP state if PTP is unsupported + - fs/ntfs3: Do not call file_modified if collapse range failed + - fs/ntfs3: Optimize large writes into sparse file + - fs/ntfs3: Fix sparse warning for bigendian + - fs/ntfs3: Fix sparse warning in ni_fiemap + - fs/ntfs3: Refactor enum_rstbl to suppress static checker + - vdpa/octeon_ep: Fix format specifier for pointers in debug messages + - virtio_console: fix misc probe bugs + - perf vdso: Missed put on 32-bit dsos + - perf build: Fix static compilation error when libdw is not installed + - perf build: Fix build feature-dwarf_getlocations fail for old libdw + - zram: don't free statically defined names + - bpf: Call the missed btf_record_free() when map creation fails + - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test + - bpf: Check percpu map value size first + - s390/facility: Disable compile time optimization for decompressor code + - s390/mm: Add cond_resched() to cmm_alloc/free_pages() + - bpf, x64: Fix a jit convergence issue + - ext4: nested locking for xattr inode + - s390/cpum_sf: Remove WARN_ON_ONCE statements + - s390/traps: Handle early warnings gracefully + - ktest.pl: Avoid false positives with grub2 skip regex + - soundwire: intel_bus_common: enable interrupts before exiting reset + - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip + - clk: bcm: bcm53573: fix OF node leak in init + - PCI: Add ACS quirk for Qualcomm SA8775P + - i2c: i801: Use a different adapter-name for IDF adapters + - PCI: Mark Creative Labs EMU20k2 INTx masking as broken + - RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t + - mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict + - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs + - riscv: Omit optimized string routines when using KASAN + - riscv: avoid Imbalance in RAS + - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults + - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region + - PCI: endpoint: Assign PCI domain number for endpoint controllers + - soundwire: cadence: re-check Peripheral status with delayed_work + - riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 + unknown + - media: videobuf2-core: clear memory related fields in + __vb2_plane_dmabuf_put() + - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table + - usb: chipidea: udc: enable suspend interrupt after usb reset + - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the + Crashkernel Scenario + - xhci: dbc: Fix STALL transfer event handling + - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk + - comedi: ni_routing: tools: Check when the file could not be opened + - LoongArch: Fix memleak in pci_acpi_scan_root() + - netfilter: nf_nat: don't try nat source port reallocation for reverse dir + clash + - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n + - tools/iio: Add memory allocation failure check for trigger_name + - staging: vme_user: added bound check to geoid + - driver core: bus: Return -EIO instead of 0 when show/store invalid bus + attribute + - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in + lpfc_els_flush_cmd() + - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to + KERN_WARNING + - NFSD: Mark filecache "down" if init fails + - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() + failed + - ice: set correct dst VSI in only LAN filters + - ice: clear port vlan config during reset + - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins + - ice: fix VLAN replay after reset + - SUNRPC: Fix integer overflow in decode_rc_list() + - net: phy: aquantia: AQR115c fix up PMA capabilities + - net: phy: aquantia: remove usage of phy_set_max_speed + - tcp: fix to allow timestamp undo if no retransmits were sent + - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe + - tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out + - rxrpc: Fix uninitialised variable in rxrpc_send_data() + - net: dsa: sja1105: fix reception from VLAN-unaware bridges + - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() + test + - net: pse-pd: Fix enabled status mismatch + - Bluetooth: btusb: Don't fail external suspend requests + - net: phy: bcm84881: Fix some error handling paths + - net: ethernet: adi: adin1110: Fix some error handling path in + adin1110_read_fifo() + - net: dsa: b53: fix jumbo frame mtu check + - net: dsa: b53: fix max MTU for 1g switches + - net: dsa: b53: fix max MTU for BCM5325/BCM5365 + - net: dsa: b53: allow lower MTUs on BCM5325/5365 + - net: dsa: b53: fix jumbo frames on 10/100 ports + - drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device + - nouveau/dmem: Fix privileged error in copy engine channel + - gpio: aspeed: Add the flush write to ensure the write complete. + - gpio: aspeed: Use devm_clk api to manage clock source + - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE + - powercap: intel_rapl_tpmi: Ignore minor version change + - ice: Fix entering Safe Mode + - ice: Fix netif_is_ice() in Safe Mode + - ice: Flush FDB entries before reset + - drm/xe: Restore GT freq on GSC load error + - drm/xe: Make wedged_mode debugfs writable + - net: ibm: emac: mal: fix wrong goto + - net: ti: icssg-prueth: Fix race condition for VLAN table access + - btrfs: zoned: fix missing RCU locking in error message when loading zone + info + - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start + - netfilter: fib: check correct rtable in vrf setups + - net: ibm: emac: mal: add dcr_unmap to _remove + - net: dsa: refuse cross-chip mirroring operations + - rtnetlink: Add bulk registration helpers for rtnetlink message handlers. + - vxlan: Handle error of rtnl_register_module(). + - bridge: Handle error of rtnl_register_module(). + - mctp: Handle error of rtnl_register_module(). + - mpls: Handle error of rtnl_register_module(). + - phonet: Handle error of rtnl_register_module(). + - rcu/nocb: Fix rcuog wake-up from offline softirq + - HID: multitouch: Add support for lenovo Y9000P Touchpad + - hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature + - hwmon: (tmp513) Add missing dependency on REGMAP_I2C + - hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C + - hwmon: (adm9240) Add missing dependency on REGMAP_I2C + - hwmon: (adt7470) Add missing dependency on REGMAP_I2C + - hwmon: (ltc2991) Add missing dependency on REGMAP_I2C + - HID: plantronics: Workaround for an unexcepted opposite volume key + - HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN + - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" + - usb: dwc3: core: Stop processing of pending events if controller is halted + - usb: xhci: Fix problem with xhci resume from suspend + - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip + - usb: dwc3: re-enable runtime PM after failed resume + - usb: gadget: core: force synchronous registration + - hid: intel-ish-hid: Fix uninitialized variable 'rv' in + ish_fw_xfer_direct_dma + - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models + - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models + - drm/amdgpu: partially revert powerplay `__counted_by` changes + - drm/amd/display: Clear update flags after update has been applied + - drm/amdkfd: Fix an eviction fence leak + - drm/amd/display: fix hibernate entry for DCN35+ + - drm/xe/guc_submit: fix xa_store() error checking + - drm/i915/hdcp: fix connector refcounting + - drm/xe/ct: fix xa_store() error checking + - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() + - Revert "mmc: mvsdio: Use sg_miter for PIO" + - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling + - mptcp: fallback when MPTCP opts are dropped after 1st data + - ata: libata: avoid superfluous disk spin down + spin up during hibernation + - OPP: fix error code in dev_pm_opp_set_config() + - net: dsa: lan9303: ensure chip reset and wait for READY status + - net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY + - mptcp: pm: do not remove closing subflows + - powercap: intel_rapl_tpmi: Fix bogus register reading + - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test + - selftests/rseq: Fix mm_cid test failure + - btrfs: split remaining space to discard in chunks + - btrfs: add cancellation points to trim loops + - PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list() + - idpf: use actual mbx receive payload length + - fs/proc/kcore.c: allow translation of physical memory addresses + - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly + - io_uring/rw: fix cflags posting for single issue multishot read + - Linux 6.11.4 + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50182 + - secretmem: disable memfd_secret() if arch cannot set direct map + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50019 + - kthread: unpark only parked kthread + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50096 + - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50020 + - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50021 + - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50022 + - device-dax: correct pgoff align in dax_set_mapping() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50185 + - mptcp: handle consistently DSS corruption + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50023 + - net: phy: Remove LED entry from LEDs list on unregister + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50024 + - net: Fix an unsafe loop on the list + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50186 + - net: explicitly clear the sk pointer, when pf->create fails + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50025 + - scsi: fnic: Move flush_work initialization out of if block + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50026 + - scsi: wd33c93: Don't use stale scsi_pointer value + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50027 + - thermal: core: Free tzp copy along with the thermal zone + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50028 + - thermal: core: Reference count the zone in thermal_zone_get_by_id() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50029 + - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50030 + - drm/xe/ct: prevent UAF in send_recv() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50187 + - drm/vc4: Stop the active perfmon before being destroyed + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50031 + - drm/v3d: Stop the active perfmon before being destroyed + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50189 + - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50033 + - slip: make slhc_remember() more robust against malicious packets + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50034 + - net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50035 + - ppp: fix ppp_async_encode() illegal access + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50036 + - net: do not delay dst_entries_add() in dst_release() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50037 + - drm/fbdev-dma: Only cleanup deferred I/O if necessary + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50092 + - net: netconsole: fix wrong warning + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50038 + - netfilter: xtables: avoid NFPROTO_UNSPEC where needed + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50039 + - net/sched: accept TCA_STAB only for root qdisc + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50040 + - igb: Do not bring the device up after non-fatal error + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50041 + - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50042 + - ice: Fix increasing MSI-X on VF + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50093 + - thermal: intel: int340x: processor: Fix warning during module unload + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50043 + - nfsd: fix possible badness in FREE_STATEID + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50044 + - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50045 + - netfilter: br_netfilter: fix panic with metadata_dst skb + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50094 + - sfc: Don't invoke xdp_do_flush() from netpoll. + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50188 + - net: phy: dp83869: fix memory corruption when enabling fiber + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50046 + - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50190 + - ice: fix memleak in ice_init_tx_topology() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50180 + - fbdev: sisfb: Fix strbuf array overflow + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50047 + - smb: client: fix UAF in async decryption + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50048 + - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50049 + - drm/amd/display: Check null pointer before dereferencing se + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50090 + - drm/xe/oa: Fix overflow in oa batch buffer + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50183 + - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV + instance + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50055 + - driver core: bus: Fix double free in driver API bus_register() + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50091 + - dm vdo: don't refer to dedupe_context after releasing it + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50056 + - usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50184 + - virtio_pmem: Check device status before requesting flush + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50057 + - usb: typec: tipd: Free IRQ only if it was requested before + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50058 + - serial: protect uart_port_dtr_rts() in uart_shutdown() too + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50181 + - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50059 + - ntb: ntb_hw_switchtec: Fix use after free vulnerability in + switchtec_ntb_remove due to race condition + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50060 + - io_uring: check if we need to reschedule during overflow flush + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50061 + - i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master + Driver Due to Race Condition + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50062 + - RDMA/rtrs-srv: Avoid null pointer deref during path establishment + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50095 + - RDMA/mad: Improve handling of timed out WRs of mad agent + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50063 + - bpf: Prevent tail call between progs attached to different hooks + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50191 + - ext4: don't set SB_RDONLY after filesystem errors + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50064 + - zram: free secondary algorithms names + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50065 + - ntfs3: Change to non-blocking allocation in ntfs_d_hash + + * Oracular update: v6.11.4 upstream stable release (LP: #2089068) // + CVE-2024-50089 + - unicode: Don't special case ignorable code points + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) + - jump_label: Fix static_key_slow_dec() yet again + - scsi: st: Fix input/output error on empty drive reset + - scsi: pm8001: Do not overwrite PCI queue mapping + - drm/i915/psr: Do not wait for PSR being idle on on Panel Replay + - drm/i915/display: BMG supports UHBR13.5 + - drm/i915/dp: Fix AUX IO power enabling for eDP PSR + - drm/amdgpu: Fix get each xcp macro + - drm/amd/display: handle nulled pipe context in DCE110's set_drr() + - ksmbd: fix warning: comparison of distinct pointer types lacks a cast + - mailbox: ARM_MHU_V3 should depend on ARM64 + - [Config] updateconfigs for ARM_MHU_V3 + - mailbox: rockchip: fix a typo in module autoloading + - ceph: fix a memory leak on cap_auths in MDS client + - drm/i915/dp: Fix colorimetry detection + - ieee802154: Fix build error + - net: sparx5: Fix invalid timestamps + - net/mlx5: Added cond_resched() to crdump collection + - net/mlx5e: SHAMPO, Fix overflow of hd_per_wq + - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED + - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() + - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable() + - selftests: netfilter: Fix nft_audit.sh for newer nft binaries + - selftests: netfilter: Add missing return value + - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() + - afs: Fix missing wire-up of afs_retry_request() + - net: Add netif_get_gro_max_size helper for GRO + - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size + - net: fec: Restart PPS after link state change + - net: fec: Reload PTP registers after link-state change + - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check + - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit + - netfs: Fix missing wakeup after issuing writes + - net: phy: realtek: Check the index value in led_hw_control_get + - bridge: mcast: Fail MDB get request on empty entry + - iomap: constrain the file range passed to iomap_file_unshare + - dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems + - ASoC: topology: Fix incorrect addressing assignments + - ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is + uninitialized + - drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes + - io_uring: fix memory leak when cache init fail + - rust: kbuild: split up helpers.c + - rust: kbuild: auto generate helper exports + - rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT + - ALSA: mixer_oss: Remove some incorrect kfree_const() usages + - ALSA: hda/realtek: Fix the push button function for the ALC257 + - cifs: Remove intermediate object of failed create reparse call + - drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc() + - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs + - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m + - drm/xe: Restore pci state upon resume + - drm/xe: Resume TDR after GT reset + - cifs: Do not convert delimiter when parsing NFS-style symlinks + - tools/rtla: Fix installation from out-of-tree build + - ALSA: gus: Fix some error handling paths related to get_bpos() usage + - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin + - drm/amd/display: Disable replay if VRR capability is false + - drm/amd/display: Fix VRR cannot enable + - drm/amd/display: Re-enable panel replay feature + - e1000e: avoid failing the system during pm_suspend + - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() + - crypto: x86/sha256 - Add parentheses around macros' single arguments + - crypto: octeontx - Fix authenc setkey + - crypto: octeontx2 - Fix authenc setkey + - ice: Adjust over allocation of memory in ice_sched_add_root_node() and + ice_sched_add_node() + - wifi: iwlwifi: mvm: Fix a race in scan abort flow + - wifi: iwlwifi: mvm: drop wrong STA selection in TX + - net: hisilicon: hip04: fix OF node leak in probe() + - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() + - net: hisilicon: hns_mdio: fix OF node leak in probe() + - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails + - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails + - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB + - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable + - net: sched: consistently use rcu_replace_pointer() in taprio_change() + - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 + - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B + - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 + - ACPI: CPPC: Add support for setting EPP register in FFH + - wifi: rtw88: select WANT_DEV_COREDUMP + - l2tp: free sessions using rcu + - l2tp: use rcu list add/del when updating lists + - ACPI: EC: Do not release locks during operation region accesses + - net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs + - net: mvpp2: Increase size of queue_name buffer + - bnxt_en: Extend maximum length of version string by 1 byte + - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). + - wifi: rtw89: correct base HT rate mask for firmware + - netfilter: nf_tables: do not remove elements if set backend implements + .abort + - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family + - nvme-keyring: restrict match length for version '1' identifiers + - nvme-tcp: sanitize TLS key handling + - nvme-tcp: check for invalidated or revoked key + - net: atlantic: Avoid warning about potential string truncation + - crypto: simd - Do not call crypto_alloc_tfm during registration + - netpoll: Ensure clean state on setup failures + - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process + - wifi: iwlwifi: mvm: use correct key iteration + - wifi: iwlwifi: allow only CN mcc from WRDD + - virt: sev-guest: Ensure the SNP guest messages do not exceed a page + - wifi: mac80211: fix RCU list iterations + - ACPICA: iasl: handle empty connection_node + - proc: add config & param to block forcing mem writes + - [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE + - vfs: use RCU in ilookup + - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions + - nvme: fix metadata handling in nvme-passthrough + - can: netlink: avoid call to do_set_data_bittiming callback with stale + can_priv::ctrlmode + - netdev-genl: Set extack and fix error on napi-get + - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume + - arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec() + - net: phy: Check for read errors in SIOCGMIIREG + - x86/bugs: Add missing NO_SSB flag + - x86/bugs: Fix handling when SRSO mitigation is disabled + - crypto: hisilicon - fix missed error branch + - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation + - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker + - netfs: Cancel dirty folios that have no storage destination + - nfp: Use IRQF_NO_AUTOEN flag in request_irq() + - ALSA: usb-audio: Add input value sanity checks for standard types + - x86/apic: Remove logical destination mode for 64-bit + - ALSA: usb-audio: Define macros for quirk table entries + - ALSA: usb-audio: Replace complex quirk lines with macros + - ALSA: usb-audio: Add quirk for RME Digiface USB + - ALSA: usb-audio: Add mixer quirk for RME Digiface USB + - ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init + - ALSA: usb-audio: Add logitech Audio profile quirk + - ASoC: codecs: wsa883x: Handle reading version failure + - ALSA: control: Take power_ref lock primarily + - tools/x86/kcpuid: Protect against faulty "max subleaf" values + - x86/pkeys: Add PKRU as a parameter in signal handling functions + - x86/pkeys: Restore altstack access in sigreturn() + - x86/kexec: Add EFI config table identity mapping for kexec kernel + - ALSA: hdsp: Break infinite MIDI input flush loop + - tools/nolibc: powerpc: limit stack-protector workaround to GCC + - selftests/nolibc: avoid passing NULL to printf("%s") + - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() + - ASoC: Intel: boards: always check the result of + acpi_dev_get_first_match_dev() + - hwmon: (nct6775) add G15CF to ASUS WMI monitoring list + - pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set() + - pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs + - rcuscale: Provide clear error when async specified without primitives + - power: reset: brcmstb: Do not go into infinite loop if reset fails + - iommu/arm-smmu-v3: Match Stall behaviour for S2 + - iommu/vt-d: Always reserve a domain ID for identity setup + - iommu/vt-d: Unconditionally flush device TLB for pasid table updates + - iommu/arm-smmu-v3: Do not use devm for the cd table allocations + - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit + - drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces + - ata: pata_serverworks: Do not use the term blacklist + - ata: sata_sil: Rename sil_blacklist to sil_quirks + - selftests/bpf: fix uprobe.path leak in bpf_testmod + - scsi: smartpqi: Add new controller PCI IDs + - HID: Ignore battery for all ELAN I2C-HID devices + - drm/amd/display: Underflow Seen on DCN401 eGPU + - drm/xe: Name and document Wa_14019789679 + - jfs: UBSAN: shift-out-of-bounds in dbFindBits + - scsi: smartpqi: correct stream detection + - scsi: smartpqi: add new controller PCI IDs + - drm/amdgpu: add raven1 gfxoff quirk + - drm/amdgpu: enable gfxoff quirk on HP 705G4 + - drm/amdkfd: Fix resource leak in criu restore queue + - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio + - platform/x86: touchscreen_dmi: add nanote-next quirk + - platform/x86/amd: pmf: Add quirk for TUF Gaming A14 + - drm/stm: ltdc: reset plane transparency after plane disable + - drm/amdgpu/gfx12: properly handle error ints on all pipes + - drm/amdgpu/gfx9: properly handle error ints on all pipes + - drm/amd/display: Fix possible overflow in integer multiplication + - drm/printer: Allow NULL data in devcoredump printer + - perf,x86: avoid missing caller address in stack traces captured in uprobe + - scsi: aacraid: Rearrange order of struct aac_srb_unit + - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached + topology + - scsi: lpfc: Update PRLO handling in direct attached topology + - drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML + - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx + - drm/amdgpu: fix unchecked return value warning for amdgpu_atombios + - perf: Fix event_function_call() locking + - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers + - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() + - drm/amd/display: Unlock Pipes Based On DET Allocation + - drm/amdgpu: fix ptr check warning in gfx9 ip_dump + - drm/amdgpu: fix ptr check warning in gfx10 ip_dump + - drm/amdgpu: fix ptr check warning in gfx11 ip_dump + - drm/amdgpu: Block MMR_READ IOCTL in reset + - drm/amdgpu/gfx9: use rlc safe mode for soft recovery + - drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL + - drm/xe: Use topology to determine page fault queue size + - drm/amdkfd: Check int source id for utcl2 poison event + - of/irq: Refer to actual buffer size in of_irq_parse_one() + - drm/amd/display: guard write a 0 post_divider value to HW + - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct + - ovl: fsync after metadata copy-up + - drm/amdgpu/gfx12: use rlc safe mode for soft recovery + - drm/amdgpu/gfx11: use rlc safe mode for soft recovery + - drm/amdgpu/gfx10: use rlc safe mode for soft recovery + - platform/x86: lenovo-ymc: Ignore the 0x0 state + - tools/hv: Add memory allocation check in hv_fcopy_start + - HID: i2c-hid: ensure various commands do not interfere with each other + - platform/mellanox: mlxbf-pmc: fix lockdep warning + - platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch + buttons LED + - bpf: Make the pointer returned by iter next method valid + - ext4: ext4_search_dir should return a proper error + - bpftool: Fix undefined behavior caused by shifting into the sign bit + - iomap: handle a post-direct I/O invalidate race in + iomap_write_delalloc_release + - EINJ, CXL: Fix CXL device SBDF calculation + - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled + - spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled + - spi: spi-cadence: Fix missing spi_controller_is_target() check + - selftest: hid: add missing run-hid-tools-tests.sh + - spi: s3c64xx: fix timeout counters in flush_fifo + - kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3 + - selftests: breakpoints: use remaining time to check if suspend succeed + - accel/ivpu: Add missing MODULE_FIRMWARE metadata + - spi: rpc-if: Add missing MODULE_DEVICE_TABLE + - ALSA: control: Fix power_ref lock order for compat code, too + - perf callchain: Fix stitch LBR memory leaks + - perf: Really fix event_function_call() locking + - drm/xe: fixup xe_alloc_pf_queue + - drm/xe: Fix memory leak on xe_alloc_pf_queue failure + - selftests: vDSO: fix vDSO name for powerpc + - selftests: vDSO: fix vdso_config for powerpc + - selftests: vDSO: fix vDSO symbols lookup for powerpc64 + - ext4: fix error message when rejecting the default hash + - selftests/mm: fix charge_reserved_hugetlb.sh test + - nvme-tcp: fix link failure for TCP auth + - f2fs: add write priority option based on zone UFS + - powerpc/vdso: Fix VDSO data access when running in a non-root time namespace + - selftests: vDSO: fix ELF hash table entry size for s390x + - selftests: vDSO: fix vdso_config for s390 + - f2fs: make BG GC more aggressive for zoned devices + - f2fs: introduce migration_window_granularity + - f2fs: increase BG GC migration window granularity when boosted for zoned + devices + - f2fs: do FG_GC when GC boosting is required for zoned devices + - f2fs: forcibly migrate to secure space for zoned device file pinning + - Revert "ALSA: hda: Conditionally use snooping for AMD HDMI" + - KVM: arm64: Fix kvm_has_feat*() handling of negative features + - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() + - i2c: xiic: Wait for TX empty to avoid missed TX NAKs + - i2c: core: Lock address during client device instantiation + - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled + - i2c: designware: fix controller is holding SCL low while ENABLE bit is + disabled + - i2c: synquacer: Deal with optional PCLK correctly + - rust: sync: require `T: Sync` for `LockedBy::access` + - ovl: fail if trusted xattrs are needed but caller lacks permission + - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() + - memory: tegra186-emc: drop unused to_tegra186_emc() + - dt-bindings: clock: exynos7885: Fix duplicated binding + - spi: bcm63xx: Fix module autoloading + - spi: bcm63xx: Fix missing pm_runtime_disable() + - power: supply: hwmon: Fix missing temp1_max_alarm attribute + - power: supply: Drop use_cnt check from power_supply_property_is_writeable() + - perf/core: Fix small negative period being ignored + - drm/v3d: Prevent out of bounds access in performance query extensions + - parisc: Fix itlb miss handler for 64-bit programs + - drm/mediatek: ovl_adaptor: Add missing of_node_put() + - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS + - ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop + - ALSA: core: add isascii() check to card ID generator + - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET + - ALSA: usb-audio: Add native DSD support for Luxman D-08u + - ALSA: line6: add hw monitor volume control to POD HD500X + - ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 + - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 + - ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 + - ext4: correct encrypted dentry name hash when not casefolded + - ext4: propagate errors from ext4_find_extent() in ext4_insert_range() + - ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() + - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() + - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() + - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() + - ext4: fix fast commit inode enqueueing during a full journal commit + - ext4: use handle to mark fc as ineligible in __track_dentry_update() + - ext4: mark fc as ineligible using an handle in ext4_xattr_set() + - parisc: Fix 64-bit userspace syscall path + - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards + - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality + - drm/rockchip: vop: clear DMA stop bit on RK3066 + - of: address: Report error on resource bounds overflow + - of/irq: Support #msi-cells=<0> in of_msi_get_domain + - lib/buildid: harden build ID parsing logic + - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit + - mm: krealloc: consider spare memory for __GFP_ZERO + - ocfs2: fix the la space leak when unmounting an ocfs2 volume + - ocfs2: fix uninit-value in ocfs2_get_block() + - scripts/gdb: fix timerlist parsing issue + - scripts/gdb: add iteration function for rbtree + - scripts/gdb: fix lx-mounts command error + - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS + - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 + - drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close + - sched/deadline: Comment sched_dl_entity::dl_server variable + - sched/core: Add clearing of ->dl_server in put_prev_task_balance() + - sched/core: Clear prev->dl_server in CFS pick fast path + - sched: psi: fix bogus pressure spikes from aggregation race + - riscv: define ILLEGAL_POINTER_VALUE for 64bit + - [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv + - perf python: Disable -Wno-cast-function-type-mismatch if present on clang + - perf hist: Update hist symbol when updating maps + - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds + - NFSD: Fix NFSv4's PUTPUBFH operation + - sysctl: avoid spurious permanent empty tables + - RDMA/mana_ib: use the correct page table index based on hardware page size + - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page + - drivers/perf: riscv: Align errno for unsupported perf event + - riscv: Fix kernel stack size when KASAN is enabled + - media: imx335: Fix reset-gpio handling + - clk: rockchip: fix error for unknown clocks + - leds: pca9532: Remove irrelevant blink configuration error message + - media: videobuf2: Drop minimum allocation requirement of 2 buffers + - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks + - media: sun4i_csi: Implement link validate for sun4i_csi subdev + - clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable() + - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags + - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x + - clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x + - clk: qcom: clk-rpmh: Fix overflow in BCM vote + - clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix + - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src + - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() + - clk: qcom: gcc-sc8180x: Add GPLL9 support + - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table + - clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL + - drm/amd/display: avoid set dispclk to 0 + - smb: client: use actual path when queryfs + - smb3: fix incorrect mode displayed for read-only files + - iio: magnetometer: ak8975: Fix reading for ak099xx sensors + - iio: pressure: bmp280: Fix regmap for BMP280 device + - iio: pressure: bmp280: Fix waiting time for BMP3xx configuration + - tomoyo: fallback to realpath if symlink's pathname does not exist + - kselftests: mm: fix wrong __NR_userfaultfd value + - rtc: at91sam9: fix OF node leak in probe() error path + - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak + - mm/gup: fix memfd_pin_folios hugetlb page allocation + - mm/hugetlb: simplify refs in memfd_alloc_folio + - Input: adp5589-keys - fix adp5589_gpio_get_value() + - HID: bpf: fix cfi stubs for hid_bpf_ops + - pidfs: check for valid pid namespace + - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO + - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override + - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA + - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] + - ACPI: resource: Add Asus ExpertBook B2502CVA to + irq1_level_low_skip_override[] + - btrfs: drop the backref cache during relocation if we commit + - btrfs: send: fix invalid clone operation for file that got its size + decreased + - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock + - gpio: davinci: fix lazy disable + - net: pcs: xpcs: fix the wrong register that was written back + - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE + - io_uring/net: harden multishot termination case for recv + - ceph: fix cap ref leak via netfs init_request + - tracing/hwlat: Fix a race during cpuhp processing + - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline + - rtla: Fix the help text in osnoise and timerlat top tools + - firmware/sysfb: Disable sysfb for firmware buffers with unknown parent + - close_range(): fix the logics in descriptor table trimming + - drm/i915/gem: fix bitwise and logical AND mixup + - drm/panthor: Don't add write fences to the shared BOs + - drm/panthor: Don't declare a queue blocked if deferred operations are + pending + - drm/sched: Fix dynamic job-flow control race + - drm/sched: Add locking to drm_sched_entity_modify_sched + - drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job + - drm/sched: Always increment correct scheduler score + - drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC + - drm/amd/display: Add HDR workaround for specific eDP + - drm/amd/display: Enable idle workqueue for more IPS modes + - kconfig: fix infinite loop in sym_calc_choice() + - kconfig: qconf: move conf_read() before drawing tree pain + - kconfig: qconf: fix buffer overflow in debug links + - arm64: cputype: Add Neoverse-N3 definitions + - arm64: errata: Expand speculative SSBS workaround once more + - mm: z3fold: deprecate CONFIG_Z3FOLD + - [Config] updateconfigs after deprecating Z3FOLD + - drm/amd/display: Allow backlight to go below + `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` + - sunrpc: change sp_nrthreads from atomic_t to unsigned int. + - NFSD: Async COPY result needs to return a write verifier + - remoteproc: k3-r5: Acquire mailbox handle during probe routine + - remoteproc: k3-r5: Delay notification of wakeup event + - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" + - ACPI: battery: Simplify battery hook locking + - drm/xe: Clean up VM / exec queue file lock usage. + - drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066 + - drm/xe/vram: fix ccs offset calculation + - drm/sched: revert "Always increment correct scheduler score" + - ALSA: control: Fix leftover snd_power_unref() + - crypto: octeontx* - Select CRYPTO_AUTHENC + - drm/amd/display: Revert Avoid overflow assignment + - perf report: Fix segfault when 'sym' sort key is not used + - pmdomain: core: Reduce debug summary table width + - perf python: Allow checking for the existence of warning options in clang + - Linux 6.11.3 + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49863 + - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49864 + - rxrpc: Fix a race between socket set up and I/O thread creation + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49865 + - drm/xe/vm: move xa_alloc to prevent UAF + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49955 + - ACPI: battery: Fix possible crash when unregistering a battery hook + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49973 + - r8169: add tally counter fields added with RTL8125 + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49974 + - NFSD: Limit the number of concurrent async COPY operations + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49975 + - uprobes: fix kernel info leak via "[uprobes]" vma + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50003 + - drm/amd/display: Fix system hang while resume with TBT monitor + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50173 + - drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49866 + - tracing/timerlat: Fix a race during cpuhp processing + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49976 + - tracing/timerlat: Drop interface_lock in stop_kthread() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50005 + - mac802154: Fix potential RCU dereference issue in mac802154_scan_worker + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50012 + - cpufreq: Avoid a bad reference count on CPU node + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49867 + - btrfs: wait for fixup workers before stopping cleaner kthread during umount + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49868 + - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49869 + - btrfs: send: fix buffer overflow detection when copying path to cache entry + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49870 + - cachefiles: fix dentry leak in cachefiles_open_file() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49871 + - Input: adp5589-keys - fix NULL pointer dereference + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49872 + - mm/gup: fix memfd_pin_folios alloc race panic + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49964 + - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49873 + - mm/filemap: fix filemap_get_folios_contig THP panic + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49977 + - net: stmmac: Fix zero-division error when disabling tc cbs + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49978 + - gso: fix udp gso fraglist segmentation after pull from frag_list + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49979 + - net: gso: fix tcp fraglist segmentation after pull from frag_list + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49980 + - vrf: revert "vrf: Remove unnecessary RCU-bh critical section" + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49981 + - media: venus: fix use after free bug in venus_remove due to race condition + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49956 + - gfs2: fix double destroy_workqueue error + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50176 + - remoteproc: k3-r5: Fix error handling when power-up failed + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49982 + - aoe: fix the potential use-after-free problem in more places + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49874 + - i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver + Due to Race Condition + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49875 + - nfsd: map the EBADMSG to nfserr_io to avoid warning + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50013 + - exfat: fix memory leak in exfat_load_bitmap() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49876 + - drm/xe: fix UAF around queue destruction + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49877 + - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49957 + - ocfs2: fix null-ptr-deref when journal load failed. + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49965 + - ocfs2: remove unreasonable unlock in ocfs2_read_blocks + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49966 + - ocfs2: cancel dqi_sync_work before freeing oinfo + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49958 + - ocfs2: reserve space for inline xattr before attaching reflink tree + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49959 + - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49878 + - resource: fix region_intersects() vs add_memory_driver_managed() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49879 + - drm: omapdrm: Add missing check for alloc_ordered_workqueue + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49880 + - ext4: fix off by one issue in alloc_flex_gd() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49881 + - ext4: update orig_path in ext4_find_extent() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50014 + - ext4: fix access to uninitialised lock in fc replay path + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49960 + - ext4: fix timer use-after-free on failed mount + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49882 + - ext4: fix double brelse() the buffer of the extents path + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49883 + - ext4: aovid use-after-free in ext4_ext_insert_extent() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49983 + - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50015 + - ext4: dax: fix overflowing extents beyond inode size when partially writing + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49884 + - ext4: fix slab-use-after-free in ext4_split_extent_at() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49885 + - mm, slub: avoid zeroing kmalloc redzone + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49961 + - media: i2c: ar0521: Use cansleep version of gpiod_set_value() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49985 + - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49886 + - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49986 + - platform/x86: x86-android-tablets: Fix use after free on + platform_device_register() errors + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49887 + - f2fs: fix to don't panic system for no free segment fault injection + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49888 + - bpf: Fix a sdiv overflow issue + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49987 + - bpftool: Fix undefined behavior in qsort(NULL, 0, ...) + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50006 + - ext4: fix i_data_sem unlock order in ext4_ind_migrate() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49889 + - ext4: avoid use-after-free in ext4_ext_show_leaf() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49968 + - ext4: filesystems without casefold feature cannot be mounted with siphash + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49988 + - ksmbd: add refcnt to ksmbd_conn struct + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49890 + - drm/amd/pm: ensure the fw_info is not null before using it + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49891 + - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata + paths + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49892 + - drm/amd/display: Initialize get_bytes_per_element's default to 1 + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50016 + - drm/amd/display: Avoid overflow assignment in link_dp_cts + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49893 + - drm/amd/display: Check stream_status before it is used + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49969 + - drm/amd/display: Fix index out of bounds in DCN30 color transformation + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49970 + - drm/amd/display: Implement bounds check for stream encoder creation in + DCN401 + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49894 + - drm/amd/display: Fix index out of bounds in degamma hardware format + translation + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49895 + - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format + translation + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49971 + - drm/amd/display: Increase array size of dummy_boolean + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49972 + - drm/amd/display: Deallocate DML memory if allocation fails + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49896 + - drm/amd/display: Check stream before comparing them + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49897 + - drm/amd/display: Check phantom_stream before it is used + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49898 + - drm/amd/display: Check null-initialized variables + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49899 + - drm/amd/display: Initialize denominators' default to 1 + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49900 + - jfs: Fix uninit-value access of new_ea in ea_buffer + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49901 + - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49902 + - jfs: check if leafidx greater than num leaves per dmap tree + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49903 + - jfs: Fix uaf in dbFreeBits + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49904 + - drm/amdgpu: add list empty check to avoid null pointer issue + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49989 + - drm/amd/display: fix double free issue during amdgpu module unload + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49905 + - drm/amd/display: Add null check for 'afb' in + amdgpu_dm_plane_handle_cursor_update (v2) + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49906 + - drm/amd/display: Check null pointer before try to access it + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49907 + - drm/amd/display: Check null pointers before using dc->clk_mgr + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49908 + - drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2) + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50177 + - drm/amd/display: fix a UBSAN warning in DML2.1 + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49909 + - drm/amd/display: Add NULL check for function pointer in + dcn32_set_output_transfer_func + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49910 + - drm/amd/display: Add NULL check for function pointer in + dcn401_set_output_transfer_func + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49911 + - drm/amd/display: Add NULL check for function pointer in + dcn20_set_output_transfer_func + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49912 + - drm/amd/display: Handle null 'stream_status' in + 'planes_changed_for_existing_stream' + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49913 + - drm/amd/display: Add null check for top_pipe_to_program in + commit_planes_for_stream + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49914 + - drm/amd/display: Add null check for pipe_ctx->plane_state in + dcn20_program_pipe + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49915 + - drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49916 + - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in + dcn401_init_hw + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49917 + - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in + dcn30_init_hw + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49918 + - drm/amd/display: Add null check for head_pipe in + dcn32_acquire_idle_pipe_for_head_pipe_in_layer + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49919 + - drm/amd/display: Add null check for head_pipe in + dcn201_acquire_free_pipe_for_layer + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49991 + - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49920 + - drm/amd/display: Check null pointers before multiple uses + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49921 + - drm/amd/display: Check null pointers before used + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49922 + - drm/amd/display: Check null pointers before using them + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49923 + - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49992 + - drm/stm: Avoid use-after-free issues with crtc and plane + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49993 + - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49924 + - fbdev: pxafb: Fix possible use after free in pxafb_task() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49925 + - fbdev: efifb: Register sysfs groups through driver core + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49926 + - rcu-tasks: Fix access non-existent percpu rtpcp variable in + rcu_tasks_need_gpcb() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50007 + - ALSA: asihpi: Fix potential OOB array access + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50017 + - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49927 + - x86/ioapic: Handle allocation failures gracefully + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50008 + - wifi: mwifiex: Fix memcpy() field-spanning write warning in + mwifiex_cmd_802_11_scan_ext() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50018 + - net: napi: Prevent overflow of napi_defer_hard_irqs + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49928 + - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50178 + - cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50009 + - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49994 + - block: fix integer overflow in BLKSECDISCARD + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49929 + - wifi: iwlwifi: mvm: avoid NULL pointer dereference + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49995 + - tipc: guard against string buffer overrun + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49962 + - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in + acpi_db_convert_to_package() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49930 + - wifi: ath11k: fix array out-of-bound access in SoC stats + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49931 + - wifi: ath12k: fix array out-of-bound access in SoC stats + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49932 + - btrfs: don't readahead the relocation inode on RST + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49933 + - blk_iocost: fix more out of bound shifts + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49934 + - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50010 + - exec: don't WARN for racy path_noexec check + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49935 + - ACPI: PAD: fix crash in exit_round_robin() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49936 + - net/xen-netback: prevent UAF in xenvif_flush_hash() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49937 + - wifi: cfg80211: Set correct chandef when starting CAC + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49938 + - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49939 + - wifi: rtw89: avoid to add interface to list twice when SER + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49940 + - l2tp: prevent possible tunnel refcount underflow + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49941 + - gpiolib: Fix potential NULL pointer dereference in gpiod_get_label() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49996 + - cifs: Fix buffer overflow when parsing NFS reparse points + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49942 + - drm/xe: Prevent null pointer access in xe_migrate_copy + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49943 + - drm/xe/guc_submit: add missing locking in wedged_fini + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50011 + - ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50174 + - drm/panthor: Fix race when converting group handle to group object + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49944 + - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49945 + - net/ncsi: Disable the ncsi work before freeing the associated structure + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49946 + - ppp: do not assume bh is held in ppp_channel_bridge_input() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49947 + - net: test for not too small csum_start in virtio_net_hdr_to_skb() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49948 + - net: add more sanity checks to qdisc_pkt_len_init() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49949 + - net: avoid potential underflow in qdisc_pkt_len_init() with UFO + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49997 + - net: ethernet: lantiq_etop: fix memory disclosure + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49998 + - net: dsa: improve shutdown sequence + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49999 + - afs: Fix the setting of the server responding flag + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49950 + - Bluetooth: L2CAP: Fix uaf in l2cap_connect + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49951 + - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49952 + - netfilter: nf_tables: prevent nf_skb_duplicated corruption + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49953 + - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50000 + - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50001 + - net/mlx5: Fix error path in multi-packet WQE transmit + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50179 + - ceph: remove the incorrect Fw reference check when dirtying pages + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49963 + - mailbox: bcm2835: Fix timeout during suspend mode + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-49954 + - static_call: Replace pointless WARN_ON() in static_call_module_notify() + + * Oracular update: v6.11.3 upstream stable release (LP: #2089052) // + CVE-2024-50002 + - static_call: Handle module init failure correctly in + static_call_del_module() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) + - EDAC/synopsys: Fix error injection on Zynq UltraScale+ + - crypto: xor - fix template benchmarking + - crypto: qat - disable IOV in adf_dev_stop() + - crypto: qat - fix recovery flow for VFs + - crypto: qat - ensure correct order in VF restarting handler + - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() + - eth: fbnic: select DEVLINK and PAGE_POOL + - wifi: brcmfmac: introducing fwil query functions + - wifi: ath9k: Remove error checks when creating debugfs entries + - wifi: ath12k: fix BSS chan info request WMI command + - wifi: ath12k: match WMI BSS chan info structure with firmware definition + - wifi: ath12k: fix invalid AMPDU factor calculation in + ath12k_peer_assoc_h_he() + - hwrng: cn10k - Enable by default CN10K driver if Thunder SoC is enabled + - crypto: x86/aes-gcm - fix PREEMPT_RT issue in gcm_crypt() + - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate + - virtio: rename virtio_config_enabled to virtio_config_core_enabled + - virtio: allow driver to disable the configure change notification + - virtio-net: synchronize operstate with admin state on up/down + - virtio-net: synchronize probe with ndo_set_features + - arm64: signal: Fix some under-bracketed UAPI macros + - wifi: rtw88: remove CPT execution branch never used + - RISC-V: KVM: Fix sbiret init before forwarding to userspace + - RISC-V: KVM: Allow legacy PMU access from guest + - RISC-V: KVM: Fix to allow hpmcounter31 from the guest + - mount: handle OOM on mnt_warn_timestamp_expiry + - autofs: fix missing fput for FSCONFIG_SET_FD + - netfilter: nf_tables: store new sets in dedicated list + - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 + - kselftest/arm64: signal: fix/refactor SVE vector length enumeration + - arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI + first + - thermal: core: Fold two functions into their respective callers + - thermal: core: Fix rounding of delay jiffies + - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances + - perf/dwc_pcie: Always register for PCIe bus notifier + - crypto: qat - fix "Full Going True" macro definition + - ACPI: video: force native for Apple MacbookPro9,2 + - wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio + - wifi: iwlwifi: config: label 'gl' devices as discrete + - wifi: iwlwifi: mvm: increase the time between ranging measurements + - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority + - wifi: mac80211: fix the comeback long retry times + - wifi: iwlwifi: mvm: allow ESR when we the ROC expires + - wifi: mac80211: Check for missing VHT elements only for 5 GHz + - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE + - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the + spec + - padata: Honor the caller's alignment in case of chunk_size 0 + - drivers/perf: hisi_pcie: Record hardware counts correctly + - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting + - kselftest/arm64: Actually test SME vector length changes via sigreturn + - can: j1939: use correct function name in comment + - wifi: rtw89: wow: fix wait condition for AOAC report request + - ACPI: CPPC: Fix MASK_VAL() usage + - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire + - netfilter: nf_tables: reject element expiration with no timeout + - netfilter: nf_tables: reject expiration higher than timeout + - netfilter: nf_tables: remove annotation to access set timeout while holding + lock + - netfilter: nft_dynset: annotate data-races around set timeout + - perf/arm-cmn: Refactor node ID handling. Again. + - perf/arm-cmn: Fix CCLA register offset + - perf/arm-cmn: Ensure dtm_idx is big enough + - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately + - thermal: gov_bang_bang: Adjust states of all uninitialized instances + - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage + - wifi: mt76: mt7996: fix traffic delay when switching back to working channel + - wifi: mt76: mt7996: fix wmm set of station interface to 3 + - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities + - wifi: mt76: mt7996: fix EHT beamforming capability check + - pm:cpupower: Add missing powercap_set_enabled() stub function + - crypto: ccp - do not request interrupt on cmd completion when irqs disabled + - crypto: hisilicon/hpre - mask cluster timeout error + - crypto: hisilicon/qm - reset device before enabling it + - wifi: mt76: mt7996: fix handling mbss enable/disable + - wifi: mt76: connac: fix checksum offload fields of connac3 RXD + - wifi: mt76: mt7603: fix mixed declarations and code + - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() + - wifi: mt76: mt7915: fix rx filter setting for bfee functionality + - wifi: mt76: mt7996: fix uninitialized TLV data + - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors + - af_unix: Don't call skb_get() for OOB skb. + - af_unix: Remove single nest in manage_oob(). + - af_unix: Rename unlinked_skb in manage_oob(). + - af_unix: Move spin_lock() in manage_oob(). + - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED + - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL + - can: m_can: enable NAPI before enabling interrupts + - can: m_can: m_can_close(): stop clocks after device has been shut down + - Bluetooth: btusb: Fix not handling ZPL/short-transfer + - bareudp: Pull inner IP header in bareudp_udp_encap_recv(). + - bareudp: Pull inner IP header on xmit. + - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq() + - crypto: n2 - Set err to EINVAL if snprintf fails for hmac + - xsk: fix batch alloc API on non-coherent systems + - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input + - fbnic: Set napi irq value after calling netif_napi_add + - net: tipc: avoid possible garbage value + - ublk: move zone report data out of request pdu + - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() + - block, bfq: don't break merge chain in bfq_split_bfqq() + - cachefiles: Fix non-taking of sb_writers around set/removexattr + - nbd: correct the maximum value for discard sectors + - erofs: fix incorrect symlink detection in fast symlink + - erofs: fix error handling in z_erofs_init_decompressor + - block, bfq: fix uaf for accessing waker_bfqq after splitting + - block, bfq: fix procress reference leakage for bfqq in merge chain + - io_uring/io-wq: do not allow pinning outside of cpuset + - io_uring/io-wq: inherit cpuset of cgroup in io worker + - spi: ppc4xx: handle irq_of_parse_and_map() errors + - arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB + - arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs + - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ + - firmware: qcom: scm: Disable SDI and write no dump to dump mode + - regulator: Return actual error in of_regulator_bulk_get_all() + - arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes + - arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes + - arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes + - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes + - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks + - arm64: tegra: Correct location of power-sensors for IGX Orin + - arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1 + - arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations + - arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations + - spi: bcmbca-hsspi: Fix missing pm_runtime_disable() + - arm64: dts: qcom: x1e80100: Fix PHY for DP2 + - ARM: dts: microchip: sama7g5: Fix RTT clock + - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property + - arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas + - ARM: versatile: fix OF node leak in CPUs prepare + - reset: berlin: fix OF node leak in probe() error path + - reset: k210: fix OF node leak in probe() error path + - platform: cznic: turris-omnia-mcu: Fix error check in + omnia_mcu_register_trng() + - clocksource/drivers/qcom: Add missing iounmap() on errors in + msm_dt_timer_init() + - arm64: dts: mediatek: mt8195: Correct clock order for dp_intf* + - x86/mm: Use IPIs to synchronize LAM enablement + - ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error + - ASoC: tas2781: Fix a compiling warning reported by robot kernel test due to + adding tas2563_dvc_table + - ASoC: tas2781-i2c: Drop weird GPIO code + - ASoC: tas2781-i2c: Get the right GPIO line + - selftests/ftrace: Add required dependency for kprobe tests + - ALSA: hda: cs35l41: fix module autoloading + - selftests/ftrace: Fix test to handle both old and new kernels + - x86/boot/64: Strip percpu address space when setting up GDT descriptors + - m68k: Fix kernel_clone_args.flags in m68k_clone() + - ASoC: loongson: fix error release + - selftests/ftrace: Fix eventfs ownership testcase to find mount point + - selftests:resctrl: Fix build failure on archs without __cpuid_count() + - cgroup/pids: Avoid spurious event notification + - hwmon: (max16065) Fix overflows seen when writing limits + - hwmon: (max16065) Fix alarm attributes + - iommu/arm-smmu: Un-demote unhandled-fault msg + - iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check + - mtd: slram: insert break after errors in parsing the map + - hwmon: (ntc_thermistor) fix module autoloading + - power: supply: axp20x_battery: Remove design from min and max voltage + - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense + - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() + - iommu/amd: Handle error path in amd_iommu_probe_device() + - iommu/amd: Allocate the page table root using GFP_KERNEL + - iommu/amd: Move allocation of the top table into v1_alloc_pgtable + - iommu/amd: Set the pgsize_bitmap correctly + - iommu/amd: Do not set the D bit on AMD v2 table entries + - mtd: powernv: Add check devm_kasprintf() returned value + - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU + - mtd: rawnand: mtk: Use for_each_child_of_node_scoped() + - mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips + - mtd: rawnand: mtk: Fix init error path + - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux + - iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages + - iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660 + - pmdomain: core: Harden inter-column space in debug summary + - pmdomain: core: Fix "managed by" alignment in debug summary + - drm/stm: Fix an error handling path in stm_drm_platform_probe() + - drm/stm: ltdc: check memory returned by devm_kzalloc() + - drm/amd/display: free bo used for dmub bounding box + - drm/amdgpu: properly handle vbios fake edid sizing + - drm/radeon: properly handle vbios fake edid sizing + - drm/amd/display: Reset VRR config during resume + - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly + - scsi: sd: Don't check if a write for REQ_ATOMIC + - scsi: block: Don't check REQ_ATOMIC for reads + - scsi: NCR5380: Check for phase match during PDMA fixup + - drm/amd/amdgpu: Properly tune the size of struct + - drm/amd/display: Improve FAM control for DCN401 + - drm/rockchip: vop: Allow 4096px width scaling + - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode + - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets + - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() + - drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get + - drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config() + - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock + - powerpc/8xx: Fix initial memory mapping + - powerpc/8xx: Fix kernel vs user address comparison + - powerpc/vdso: Inconditionally use CFUNC macro + - drm/msm: Use a7xx family directly in gpu_state + - drm/msm: Dump correct dbgahb clusters on a750 + - drm/msm: Fix CP_BV_DRAW_STATE_ADDR name + - drm/msm: Fix incorrect file name output in adreno_request_fw() + - drm/msm/a5xx: disable preemption in submits by default + - drm/msm/a5xx: properly clear preemption records on resume + - drm/msm/a5xx: fix races in preemption evaluation stage + - drm/msm/a5xx: workaround early ring-buffer emptiness check + - ipmi: docs: don't advertise deprecated sysfs entries + - drm/msm/dp: enable widebus on all relevant chipsets + - drm/msm/dsi: correct programming sequence for SM8350 / SM8450 + - drm/msm: fix %s null argument error + - platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope + - kselftest: dt: Ignore nodes that have ancestors disabled + - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() + - drm/amdgpu: fix invalid fence handling in amdgpu_vm_tlb_flush + - xen: use correct end address of kernel for conflict checking + - HID: wacom: Support sequence numbers smaller than 16-bit + - HID: wacom: Do not warn about dropped packets for first packet + - ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data + - xen: introduce generic helper checking for memory map conflicts + - xen: move max_pfn in xen_memory_setup() out of function scope + - xen: add capability to remap non-RAM pages to different PFNs + - xen: tolerate ACPI NVS memory overlapping with Xen allocated memory + - drm/xe: fix missing 'xe_vm_put' + - xen/swiotlb: add alignment check for dma buffers + - xen/swiotlb: fix allocated size + - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy + - bpf, x64: Fix tailcall hierarchy + - bpf, arm64: Fix tailcall hierarchy + - bpf: Fix compare error in function retval_range_within + - selftests/bpf: Workaround strict bpf_lsm return value check. + - selftests/bpf: Fix error linking uprobe_multi on mips + - selftests/bpf: Fix wrong binary in Makefile log output + - tools/runqslower: Fix LDFLAGS and add LDLIBS support + - selftests/bpf: Use pid_t consistently in test_progs.c + - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c + - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc + - selftests/bpf: Drop unneeded error.h includes + - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c + - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks + - selftests/bpf: Fix missing BUILD_BUG_ON() declaration + - selftests/bpf: Fix include of + - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc + - selftests/bpf: Fix compiling kfree_skb.c with musl-libc + - selftests/bpf: Fix compiling flow_dissector.c with musl-libc + - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc + - selftests/bpf: Fix compiling core_reloc.c with musl-libc + - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc + - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc + - selftests/bpf: Fix errors compiling crypto_sanity.c with musl libc + - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc + - libbpf: Don't take direct pointers into BTF data from st_ops + - selftests/bpf: Fix arg parsing in veristat, test_progs + - selftests/bpf: Fix error compiling test_lru_map.c + - selftests/bpf: Fix C++ compile error from missing _Bool type + - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c + - selftests/bpf: Fix compile if backtrace support missing in libc + - selftests/bpf: Fix error compiling tc_redirect.c with musl libc + - s390/entry: Move early program check handler to entry.S + - s390/entry: Make early program check handler relocated lowcore aware + - libbpf: Fix license for btf_relocate.c + - samples/bpf: Fix compilation errors with cf-protection option + - selftests/bpf: no need to track next_match_pos in struct test_loader + - selftests/bpf: extract test_loader->expect_msgs as a data structure + - selftests/bpf: allow checking xlated programs in verifier_* tests + - selftests/bpf: __arch_* macro to limit test cases to specific archs + - selftests/bpf: fix to avoid __msg tag de-duplication by clang + - selftests/bpf: Fix incorrect parameters in NULL pointer checking + - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options + - s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex + - libbpf: Ensure new BTF objects inherit input endianness + - xz: cleanup CRC32 edits from 2018 + - kthread: fix task state in kthread worker if being frozen + - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard + - bpftool: Fix handling enum64 in btf dump sorting + - sched/deadline: Fix schedstats vs deadline servers + - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso + - ext4: avoid buffer_head leak in ext4_mark_inode_used() + - ext4: avoid potential buffer_head leak in __ext4_new_inode() + - ext4: avoid negative min_clusters in find_group_orlov() + - ext4: return error on ext4_find_inline_entry + - sched/numa: Fix the vma scan starving issue + - nilfs2: determine empty node blocks as corrupted + - sched/pelt: Use rq_clock_task() for hw_pressure + - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit + - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types + - perf scripts python cs-etm: Restore first sample log in verbose mode + - perf bpf: Move BPF disassembly routines to separate file to avoid clash with + capstone bpf headers + - perf mem: Free the allocated sort string, fixing a leak + - perf lock contention: Change stack_id type to s32 + - perf vendor events: SKX, CLX, SNR uncore cache event fixes + - perf inject: Fix leader sampling inserting additional samples + - perf report: Fix --total-cycles --stdio output error + - perf build: Fix up broken capstone feature detection fast path + - perf sched timehist: Fix missing free of session in perf_sched__timehist() + - perf stat: Display iostat headers correctly + - perf dwarf-aux: Check allowed location expressions when collecting variables + - perf annotate-data: Fix off-by-one in location range check + - perf dwarf-aux: Handle bitfield members from pointer access + - perf hist: Don't set hpp_fmt_value for members in --no-group + - perf sched timehist: Fixed timestamp error when unable to confirm event + sched_in time + - perf time-utils: Fix 32-bit nsec parsing + - perf mem: Check mem_events for all eligible PMUs + - perf mem: Fix missed p-core mem events on ADL and RPL + - clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll + - clk: imx: imx6ul: fix default parent for enet*_ref_sel + - clk: imx: composite-8m: Enable gate clk with mcore_booted + - clk: imx: composite-93: keep root clock on when mcore enabled + - clk: imx: composite-7ulp: Check the PCC present bit + - clk: imx: fracn-gppll: fix fractional part of PLL getting lost + - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks + - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk + - clk: imx: imx8qxp: Parent should be initialized earlier than the clock + - quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed + - remoteproc: imx_rproc: Correct ddr alias for i.MX8M + - remoteproc: imx_rproc: Initialize workqueue earlier + - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 + - clk: qcom: dispcc-sm8550: fix several supposed typos + - clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src + - clk: qcom: dispcc-sm8650: Update the GDSC flags + - clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs + - leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe() + - pinctrl: renesas: rzg2l: Return -EINVAL if the pin doesn't support + PIN_CFG_OEN + - pinctrl: ti: ti-iodelay: Fix some error handling paths + - phy: phy-rockchip-samsung-hdptx: Explicitly include pm_runtime.h + - Input: ilitek_ts_i2c - avoid wrong input subsystem sync + - Input: ilitek_ts_i2c - add report id message validation + - media: raspberrypi: VIDEO_RASPBERRYPI_PISP_BE should depend on ARCH_BCM2835 + - [Config] updateconfigs for VIDEO_RASPBERRYPI_PISP_BE + - PCI: Wait for Link before restoring Downstream Buses + - firewire: core: correct range of block for case of switch statement + - media: staging: media: starfive: camss: Drop obsolete return value + documentation + - clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src + - clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL + - leds: pca995x: Use device_for_each_child_node() to access device child nodes + - leds: pca995x: Fix device child node usage in pca995x_probe() + - x86/PCI: Check pcie_find_root_port() return for NULL + - PCI: xilinx-nwl: Fix register misspelling + - PCI: xilinx-nwl: Clean up clock on probe failure/removal + - leds: gpio: Set num_leds after allocation + - media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE + - pinctrl: single: fix missing error code in pcs_probe() + - clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs + - iommufd/selftest: Fix buffer read overrrun in the dirty test + - RDMA/bnxt_re: Fix the table size for PSN/MSN entries + - media: imagination: VIDEO_E5010_JPEG_ENC should depend on ARCH_K3 + - [Config] updateconfigs for VIDEO_E5010_JPEG_ENC + - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer + - clk: ti: dra7-atl: Fix leak of of_nodes + - clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() + usage + - clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p + - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire + - nfsd: fix refcount leak when file is unhashed after being found + - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function + - dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with + fsl,lx2160ar2-pcie + - iommufd: Check the domain owner of the parent before creating a nesting + domain + - RDMA/erdma: Return QP state in erdma_query_qp + - RDMA/mlx5: Fix counter update on MR cache mkey creation + - RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache + - RDMA/mlx5: Drop redundant work canceling from clean_keys() + - RDMA/mlx5: Fix MR cache temp entries cleanup + - watchdog: imx_sc_wdt: Don't disable WDT in suspend + - RDMA/hns: Don't modify rq next block addr in HIP09 QPC + - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() + - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler + - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS + - RDMA/hns: Optimize hem allocation performance + - RDMA/hns: Fix restricted __le16 degrades to integer issue + - Input: ims-pcu - fix calling interruptible mutex + - RDMA/mlx5: Obtain upper net device only when needed + - PCI: qcom-ep: Enable controller resources like PHY only after refclk is + available + - riscv: Fix fp alignment bug in perf_callchain_user() + - RDMA/hns: Fix ah error counter in sw stat not increasing + - RDMA/irdma: fix error message in irdma_modify_qp_roce() + - ntb_perf: Fix printk format + - ntb: Force physically contiguous allocation of rx ring buffers + - nfsd: untangle code in nfsd4_deleg_getattr_conflict() + - nfsd: fix initial getattr on write delegation + - crypto: caam - Pad SG length when allocating hash edesc + - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 + - [Config] disable CRYPTO_AES_GCM_P10 + - f2fs: atomic: fix to avoid racing w/ GC + - f2fs: reduce expensive checkpoint trigger frequency + - f2fs: fix to avoid racing in between read and OPU dio write + - f2fs: Create COW inode from parent dentry for atomic write + - f2fs: fix to wait page writeback before setting gcing flag + - f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation + - f2fs: compress: don't redirty sparse cluster during {,de}compress + - f2fs: prevent atomic file from being dirtied before commit + - spi: airoha: fix dirmap_{read,write} operations + - spi: airoha: fix airoha_snand_{write,read}_data data_len estimation + - spi: atmel-quadspi: Undo runtime PM changes at driver exit time + - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time + - lib/sbitmap: define swap_lock as raw_spinlock_t + - spi: airoha: remove read cache in airoha_snand_dirmap_read() + - spi: atmel-quadspi: Avoid overwriting delay register settings + - NFSv4.2: Fix detection of "Proxying of Times" server support + - nvme-multipath: system fails to create generic nvme device + - iio: adc: ad7606: fix oversampling gpio array + - iio: adc: ad7606: fix standby gpio state to match the documentation + - driver core: Fix error handling in driver API device_rename() + - ABI: testing: fix admv8818 attr description + - iio: chemical: bme680: Fix read/write ops to device by adding mutexes + - iio: magnetometer: ak8975: drop incorrect AK09116 compatible + - dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible + - serial: 8250: omap: Cleanup on error in request_irq + - Coresight: Set correct cs_mode for TPDM to fix disable issue + - Coresight: Set correct cs_mode for dummy source to fix disable issue + - coresight: tmc: sg: Do not leak sg_table + - interconnect: icc-clk: Add missed num_nodes initialization + - interconnect: qcom: sm8250: Enable sync_state + - dm integrity: fix gcc 5 warning + - cxl/pci: Fix to record only non-zero ranges + - um: remove ARCH_NO_PREEMPT_DYNAMIC + - Revert "dm: requeue IO if mapping table not yet available" + - net: phy: aquantia: fix -ETIMEDOUT PHY probe failure when firmware not + present + - net: xilinx: axienet: Schedule NAPI in two steps + - net: xilinx: axienet: Fix packet counting + - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL + - net: qrtr: Update packets cloning when broadcasting + - net: phy: aquantia: fix setting active_low bit + - net: phy: aquantia: fix applying active_low bit after reset + - net: ravb: Fix maximum TX frame size for GbEth devices + - net: ravb: Fix R-Car RX frame size limit + - virtio_net: Fix mismatched buf address when unmapping for small packets + - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU + - netfilter: ctnetlink: compile ctnetlink_label_size with + CONFIG_NF_CONNTRACK_EVENTS + - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump + path + - netfilter: nf_tables: missing objects with no memcg accounting + - selftests: netfilter: Avoid hanging ipvs.sh + - io_uring/sqpoll: do not allow pinning outside of cpuset + - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN + - io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL + - mm: migrate: annotate data-race in migrate_folio_unmap() + - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination + - drm/amd/display: Add DSC Debug Log + - drm/amdgpu/display: Fix a mistake in revert commit + - xen: move checks for e820 conflicts further up + - xen: allow mapping ACPI data using a different physical address + - io_uring/sqpoll: retain test for whether the CPU is valid + - drm/amd/display: disable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc + before using it + - io_uring/sqpoll: do not put cpumask on stack + - selftests/bpf: correctly move 'log' upon successful match + - Remove *.orig pattern from .gitignore + - PCI: Revert to the original speed after PCIe failed link retraining + - PCI: Clear the LBMS bit after a link retrain + - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ + - PCI: imx6: Fix missing call to phy_power_off() in error handling + - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP + - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI + - PCI: Correct error reporting with PCIe failed link retraining + - PCI: Use an error code with PCIe failed link retraining + - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler + - PCI: dra7xx: Fix error handling when IRQ request fails in probe + - Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible" + - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error + - soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode + - soc: fsl: cpm1: tsa: Fix tsa_write8() + - soc: versatile: integrator: fix OF node leak in probe() error path + - Revert "media: tuners: fix error return code of + hybrid_tuner_request_state()" + - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() + - Input: adp5588-keys - fix check on return code + - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table + - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table + - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line + - KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer + - KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits + - KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() + - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) + - drm/amdgpu/mes12: reduce timeout + - drm/amdgpu/mes11: reduce timeout + - drm/amdkfd: Add SDMA queue quantum support for GFX12 + - drm/amdgpu: update golden regs for gfx12 + - drm/amdgpu/mes12: set enable_level_process_quantum_check + - drm/amdgpu/vcn: enable AV1 on both instances + - drm/amd/pm: update workload mask after the setting + - drm/amdgpu: fix PTE copy corruption for sdma 7 + - drm/amdgpu: bump driver version for cleared VRAM + - drm/amdgpu/mes12: switch SET_SHADER_DEBUGGER pkt to mes schq pipe + - drm/amdgpu: Fix selfring initialization sequence on soc24 + - drm/amd/display: Add HDMI DSC native YCbCr422 support + - drm/amd/display: Round calculated vtotal + - drm/amd/display: Clean up dsc blocks in accelerated mode + - drm/amd/display: Block timing sync for different output formats in pmo + - drm/amd/display: Validate backlight caps are sane + - drm/amd/display: Disable SYMCLK32_LE root clock gating + - drm/amd/display: Block dynamic IPS2 on DCN35 for incompatible FW versions + - drm/amd/display: Enable DML2 override_det_buffer_size_kbytes + - drm/amd/display: Skip to enable dsc if it has been off + - drm/amd/display: Fix underflow when setting underscan on DCN401 + - drm/amd/display: Update IPS default mode for DCN35/DCN351 + - objtool: Handle frame pointer related instructions + - powerpc/atomic: Use YZ constraints for DS-form instructions + - ksmbd: make __dir_empty() compatible with POSIX + - ksmbd: allow write with FILE_APPEND_DATA + - ksmbd: handle caseless file creation + - ata: libata-scsi: Fix ata_msense_control() CDL page reporting + - scsi: ufs: qcom: Update MODE_MAX cfg_bw value + - scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs + - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages + - scsi: mac_scsi: Refactor polling loop + - scsi: mac_scsi: Disallow bus errors during PDMA send + - can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD + - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons + - usbnet: fix cyclical race on disconnect with work queue + - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled + - arm64: dts: mediatek: mt8395-nio-12l: Mark USB 3.0 on xhci1 as disabled + - USB: appledisplay: close race between probe and completion handler + - USB: misc: cypress_cy7c63: check for short transfer + - USB: class: CDC-ACM: fix race between get_serial and set_serial + - USB: misc: yurex: fix race between read and write + - usb: xhci: fix loss of data on Cadence xHC + - usb: cdnsp: Fix incorrect usb_request status + - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host + - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context + - usb: dwc2: drd: fix clock gating on USB role switch + - bus: integrator-lm: fix OF node leak in probe() + - bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems + - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A + - tty: rp2: Fix reset with non forgiving PCIe host bridges + - pps: add an error check in parport_attach + - serial: don't use uninitialized value in uart_poll_init() + - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. + - serial: qcom-geni: fix fifo polling timeout + - serial: qcom-geni: fix false console tx restart + - crypto: qcom-rng - fix support for ACPI-based systems + - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure + - drbd: Fix atomicity violation in drbd_uuid_set_bm() + - drbd: Add NULL check for net_conf to prevent dereference in state validation + - ACPI: resource: Do IRQ override on MECHREV GM7XG0M + - ACPI: resource: Add another DMI match for the TongFang GMxXGxx + - intel_idle: add Granite Rapids Xeon support + - intel_idle: fix ACPI _CST matching for newer Xeon platforms + - x86/entry: Remove unwanted instrumentation in common_interrupt() + - perf/x86/intel: Allow to setup LBR for counting event for BPF + - perf/x86/intel/pt: Fix sampling synchronization + - btrfs: subpage: fix the bitmap dump which can cause bitmap corruption + - wifi: mt76: mt7921: Check devm_kasprintf() returned value + - wifi: mt76: mt7915: check devm_kasprintf() returned value + - idpf: fix netdev Tx queue stop/wake + - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c + - wifi: rtw88: 8822c: Fix reported RX band width + - wifi: rtw88: 8703b: Fix reported RX band width + - wifi: mt76: mt7615: check devm_kasprintf() returned value + - wifi: mt76: mt7925: fix a potential association failure upon resuming + - debugfs show actual source in /proc/mounts + - debugobjects: Fix conditions in fill_pool() + - btrfs: tree-checker: fix the wrong output of data backref objectid + - btrfs: always update fstrim_range on failure in FITRIM ioctl + - f2fs: fix several potential integer overflows in file offsets + - f2fs: prevent possible int overflow in dir_block_index() + - f2fs: avoid potential int overflow in sanity_check_area_boundary() + - hwrng: mtk - Use devm_pm_runtime_enable + - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init + - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume + - arm64: esr: Define ESR_ELx_EC_* constants as UL + - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a + - arm64: dts: mediatek: mt8186-corsola: Disable DPI display interface + - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency + - arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent + - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity + - fs: Fix file_set_fowner LSM hook inconsistencies + - nfs: fix memory leak in error path of nfs4_do_reclaim + - EDAC/igen6: Fix conversion of system address to physical memory address + - eventpoll: Annotate data-race of busy_poll_usecs + - md: Don't flush sync_work in md_write_start() + - cpuidle: riscv-sbi: Use scoped device node handling to fix missing + of_node_put + - lsm: add the inode_free_security_rcu() LSM implementation hook + - spi: fspi: involve lut_num for struct nxp_fspi_devtype_data + - dt-bindings: spi: nxp-fspi: add imx8ulp support + - ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl + - ARM: dts: imx6ull-seeed-npi: fix fsl,pins property in tscgrp pinctrl + - tools/nolibc: include arch.h from string.h + - soc: versatile: realview: fix memory leak during device remove + - soc: versatile: realview: fix soc_dev leak during device remove + - usb: typec: ucsi: Call CANCEL from single location + - usb: typec: ucsi: Fix busy loop on ASUS VivoBooks + - soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers + - serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() + - serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() + - serial: qcom-geni: fix console corruption + - thermal: core: Store trip sysfs attributes in thermal_trip_desc + - thermal: sysfs: Get to trips via attribute pointers + - thermal: sysfs: Refine the handling of trip hysteresis changes + - thermal: sysfs: Add sanity checks for trip temperature and hysteresis + - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 + - compiler.h: specify correct attribute for .rodata..c_jump_table + - lockdep: fix deadlock issue between lockdep and rcu + - mm/hugetlb_vmemmap: batch HVO work when demoting + - s390/ftrace: Avoid calling unwinder in ftrace_return_address() + - selftest mm/mseal: fix test_seal_mremap_move_dontunmap_anyaddr + - mm: only enforce minimum stack gap size if it's sensible + - spi: fspi: add support for imx8ulp + - module: Fix KCOV-ignored file name + - fbdev: xen-fbfront: Assign fb_info->device + - tpm: export tpm2_sessions_init() to fix ibmvtpm building + - mm/huge_memory: ensure huge_zero_folio won't have large_rmappable flag set + - mm: change vmf_anon_prepare() to __vmf_anon_prepare() + - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu + read lock + - i2c: aspeed: Update the stop sw state when the bus recovery occurs + - i2c: isch: Add missed 'else' + - i2c: xiic: Try re-initialization on bus busy timeout + - Documentation: KVM: fix warning in "make htmldocs" + - spi: atmel-quadspi: Fix wrong register value written to MR + - Revert: "dm-verity: restart or panic on an I/O error" + - Linux 6.11.2 + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47675 + - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47676 + - mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47677 + - exfat: resolve memory leak from exfat_create_upcase_table() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47725 + - dm-verity: restart or panic on an I/O error + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47739 + - padata: use integer wrap around to prevent deadlock on seq_nr overflow + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47678 + - icmp: change the order of rate limits + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47733 + - netfs: Delete subtree of 'fs/netfs' when netfs module exits + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47679 + - vfs: fix race between evice_inodes() and find_inode()&iput() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49859 + - f2fs: fix to check atomic_file in f2fs ioctl interfaces + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47680 + - f2fs: check discard support for conventional zones + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47740 + - f2fs: Require FMODE_WRITE for atomic write ioctls + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47726 + - f2fs: fix to wait dio completion + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47741 + - btrfs: fix race setting file private on concurrent lseek using same fd + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47681 + - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49858 + - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49860 + - ACPI: sysfs: validate return type of _STR method + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47742 + - firmware_loader: Block path traversal + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47682 + - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47743 + - KEYS: prevent NULL pointer dereference in find_asymmetric_key() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47727 + - x86/tdx: Fix "in-kernel MMIO" check + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47744 + - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47719 + - iommufd: Protect against overflow of ALIGN() during iova allocation + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47745 + - mm: call the security_mmap_file() LSM hook in remap_file_pages() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47746 + - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47734 + - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47684 + - tcp: check skb is non-NULL in tcp_rto_delta_us() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47747 + - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race + Condition + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47685 + - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47686 + - ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47748 + - vhost_vdpa: assign irq bypass producer token correctly + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47687 + - vdpa/mlx5: Fix invalid mr resource destroy + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47688 + - driver core: Fix a potential null-ptr-deref in module_add_driver() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47689 + - f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47690 + - f2fs: get rid of online repaire on corrupted directory + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47691 + - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47692 + - nfsd: return -EINVAL when namelen is 0 + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47737 + - nfsd: call cache_put if xdr_reserve_space returns NULL + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2023-52917 + - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47749 + - RDMA/cxgb4: Added NULL check for lookup_atid + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47735 + - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47750 + - RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47751 + - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47693 + - IB/core: Fix ib_cache_setup_one error flow cleanup + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47694 + - IB/mlx5: Fix UMR pd cleanup on error flow of driver init + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47695 + - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47752 + - media: mediatek: vcodec: Fix H264 stateless decoder smatch warning + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47753 + - media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47754 + - media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47696 + - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47755 + - nvdimm: Fix devs leaks in scan_labels() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47756 + - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47697 + - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47698 + - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47728 + - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49861 + - bpf: Fix helper writes to read-only maps + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47757 + - nilfs2: fix potential oob read in nilfs_btree_check_delete() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47699 + - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47700 + - ext4: check stripe size compatibility on remount as well + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47701 + - ext4: avoid OOB when system.data xattr changes underneath the filesystem + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49850 + - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47702 + - bpf: Fail verification for sign-extension of packet data/data_end/data_meta + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47703 + - bpf, lsm: Add check for BPF LSM return value + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49851 + - tpm: Clean up TPM space after command failure + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47723 + - jfs: fix out-of-bounds in dbNextAG() and diAlloc() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49852 + - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47720 + - drm/amd/display: Add null check for set_output_gamma in + dcn30_set_output_transfer_func + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47704 + - drm/amd/display: Check link_res->hpo_dp_link_enc before using it + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49853 + - firmware: arm_scmi: Fix double free in OPTEE transport + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47705 + - block: fix potential invalid pointer dereference in blk_add_partition + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47736 + - erofs: handle overlapped pclusters out of crafted images properly + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47706 + - block, bfq: fix possible UAF for bfqq->bic with merge chain + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49855 + - nbd: fix race between timeout and normal completion + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47707 + - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47708 + - netkit: Assign missing bpf_net_context + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47709 + - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47710 + - sock_map: Add a cond_resched() in sock_hash_free() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47711 + - af_unix: Don't return OOB skb in manage_oob(). + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47712 + - wifi: wilc1000: fix potential RCU dereference issue in + wilc_parse_join_bss_param + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47713 + - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47730 + - crypto: hisilicon/qm - inject error before stopping queue + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49856 + - x86/sgx: Fix deadlock in SGX NUMA node search + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47714 + - wifi: mt76: mt7996: use hweight16 to get correct tx antenna + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47715 + - wifi: mt76: mt7915: fix oops on non-dbdc mt7986 + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49857 + - wifi: iwlwifi: mvm: set the cipher for secured NDP ranging + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47738 + - wifi: mac80211: don't use rate mask for offchannel TX either + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47731 + - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-49862 + - powercap: intel_rapl: Fix off by one in get_rpi() + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47716 + - ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47717 + - RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47721 + - wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to + prevent out-of-bounds reading + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47732 + - crypto: iaa - Fix potential use after free bug + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47718 + - wifi: rtw88: always wait for both firmware loading attempts + + * Oracular update: v6.11.2 upstream stable release (LP: #2089033) // + CVE-2024-47724 + - wifi: ath11k: use work queue to process beacon tx event + + * Oracular update: v6.11.1 upstream stable release (LP: #2089020) + - powercap/intel_rapl: Add support for AMD family 1Ah + - powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs + - cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() + - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in + nft_socket_cgroup_subtree_level() + - ASoC: amd: acp: add ZSC control register programming sequence + - nvme-pci: qdepth 1 quirk + - USB: serial: pl2303: add device id for Macrosilicon MS3020 + - powercap: intel_rapl: Change an error pointer to NULL + - Linux 6.11.1 + + * Oracular update: v6.11.1 upstream stable release (LP: #2089020) // + CVE-2024-47671 + - USB: usbtmc: prevent kernel-usb-infoleak + + * Oracular update: v6.11.1 upstream stable release (LP: #2089020) // + CVE-2024-46869 + - Bluetooth: btintel_pcie: Allocate memory for driver private data + + * CVE-2024-53164 + - net: sched: fix ordering of qlen adjustment + + * CVE-2024-53103 + - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer + + -- Stefan Bader Thu, 16 Jan 2025 22:38:59 +0100 linux (6.11.0-13.14) oracular; urgency=medium diff --git a/debian.master/reconstruct b/debian.master/reconstruct index a31390314052..3d56ea0f4e84 100644 --- a/debian.master/reconstruct +++ b/debian.master/reconstruct @@ -31,5 +31,13 @@ chmod +x 'debian/templates/image.prerm.in' chmod +x 'debian/tests-build/check-aliases' chmod +x 'debian/tests/rebuild' chmod +x 'debian/tests/ubuntu-regression-suite' +chmod +x 'tools/perf/tests/shell/test_stat_intel_tpebs.sh' +chmod +x 'tools/testing/selftests/net/ipv6_route_update_soft_lockup.sh' # Remove any files deleted from the orig. +rm -f 'arch/s390/kernel/earlypgm.S' +rm -f 'drivers/dax/pmem/Makefile' +rm -f 'drivers/dax/pmem/pmem.c' +rm -f 'drivers/gpu/drm/xe/regs/xe_sriov_regs.h' +rm -f 'rust/helpers.c' +rm -f 'sound/pci/hda/samsung_helper.c' exit 0