# changelog

author: yaoxin <yao_xin001@hoperun.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
    * Security fix for CVE-2024-6237,CVE-2024-5953,CVE-2024-3657,CVE-2024-2199
    * Issue 6172 - RFE: improve the performance of evaluation of filter component 
      when tested against a large valueset (like group members) #6173
    * Issue 6181 - RFE - Allow system to manage uid/gid at startup
    * Issue 6238 - RFE - add option to write audit log in JSON format
    * Issue 6241 - Add support for CRYPT-YESCRYPT #6242
    * Issue 5772 - ONE LEVEL search fails to return sub-suffixes #6219
    * Issue 6123 - Allow DNA plugin to reuse global config for bind method and connection protocol #6124
    * Issue 6155 - ldap-agent fails to start because of permission error #6179
    * Issue 6170 - audit log buffering doesn’t handle large updates
    * Issue 6175 - Referential integrity plugin - in referint_thread_func does not handle null from ldap_utf8strtok #6168
    * Issue 6183 - Slow ldif2db import on a newly created BDB backend #6208
    * Issue 6199 - unprotected search query during certificate based authentication #6205
    * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes #6225
    * Issue 6229 - After an initial failure, subsequent online backups fail #6230
    * Issue 6254 - Enabling replication for a sub suffix crashes browser #6255
    * Issue 6256 - nsslapd-numlisteners limit is not enforced
    * Issue 6265 - lmdb - missing entries in range searches #6266
    * Please see log - https://www.port389.org/docs/389ds/releases/release-3-1-1


author: Xiong Zhou <xiongzhou4@huawei.com> - v1.0-4
changelog:
  - Type:Sync
  - ID:NA
  - SUG:NA
  - DESC:Sync patches from openeuler/A-FOT
         Add reboot action to fasten the second compilation,
         fix bugs and format codes.
  	   Reuse calcsum, delay pre-reboot operations and fixs typos.


author: li-miaomiao_zhr<mmlidc@isoftstone.com> - 1.0.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix wrong file name referenced in spec file causing build failure,remove spec file from the source package


author: yaoxin <yaoxin30@huawei.com> 2.4.3-5
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-44228 is fixed, the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> 2.4.3-6
changelog:
  - This package depends on log4j. After the log4j vulnerability CVE-2021-45105 is fixed, the version needs to be rebuild.


author: Yuhang Wei<weiyuhang3@huawei.com> - 1.0.6-2
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:restart
  - DESC:modify version display and fix the path for EFI boot in bootloader.sh


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: liuzhilin <liuzhilin@uniontech.com> - 1:1.44.2-2
changelog:
  - add NM to support wifi6(fix dde-network-core build error)
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:Support wireless networks connecting WIFI6 encryption methods,
         so this demand is achieved in NetworkManager, KF5-NetworkManager-QT,
         DDE-Network-Core software package


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: yaoxin <yao_xin001@hoperun.com> - 1.2.24-1
changelog:
  - Update to 1.2.24:
    * Fixed formatting of ipsec.conf snippet. This is a security
    issue with severity of "Important." (CVE-2024-9050)
    * Added support for "require-id-on-certificate" setting.
    * Updated Georgian, Slovenian and Ukrainian translations.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: Funda Wang <fundawang@yeah.net> - 1.2.8-4
changelog:
  - move dbus interface to main package
  - split out gtk module from devel sub package
  - cleanup buildrequires


author: yinsist <jianhui.oerv@isrc.iscas.ac.cn> - 4.0.5-4
changelog:
  - Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix parsing of lowercase group names


author: yixiangzhike <yixiangzhike007@163.com> - 0.18.6-4
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: backport upstream patch to fix concurrent reading of extended attributes


author: sunhai <sunhai10@huawei.com> - 36.16.5-29
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix lost ntfsprogs
          fix lost nvme-cli
          fix BuildRequires


author: yueyuankun <yueyuankun@kylinos.cn> - 36.16.5-35
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix(anaconda-pre-log-gen): don't unnecessarily use cat and use grep -E


author: songmingliang <songmingliang@uniontech.com> - 36.16.5-38
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the root user creation GTK GUI not checking if a password
     contains the user name.
          Fix the non-root user creation Text UI not checking if a password
     contains the user name.


author: yaoxin <yao_xin001@hoperun.com> - 2.12.0-1
changelog:
  - Update to 2.12.0
  - Bootloader Images:
      * remove unused plat_try_next_boot_source
  - Architecture:
      *Branch Record Buffer Extension (FEAT_BRBE)
      * allow RME builds with BRBE
  - Arm:
      * avoid stripping kernel trampoline
      * add DRAM memory regions that linux kernel can share
      * add optee specific mem-size attribute
      * add secure uart interrupt in device region
      * enable FEAT_MTE2
      * fix the FF-A optee manifest by adding the boot info node
      * update the memory size allocated to optee at EL1
  - Intel:
      * add cache invalidation during BL31 initialization
      * add in JTAG ID for Linux FCS
      * add in missing ECC register
      * add in watchdog for QSPI driver
      * bridge ack timing issue causing fpga config hung
      * correct macro naming
      * f2sdram bridge quick write thru failed
      * fix bridge enable and disable function
      * fix CCU for cache maintenance
      * flush L1/L2/L3/Sys cache before HPS cold reset
      * implement soc and lwsoc bridge control for burst speed
      * refactor SDMMC driver for Altera products
      * remove redundant BIT_32 macro
      * software workaround for bridge timeout
      * update Agilex5 BL2 init flow and other misc changes
      * update Agilex5 warm reset subroutines
      * update all the platforms hand-off data offset value
      * update CCU configuration for Agilex5 platform
      * update mailbox SDM printout message
      * update memcpy to memcpy_s ([e264b55]
      * update outdated code for Linux direct boot
      * update preloaded_bl33_base for legacy product
      * update sip smc config addr for agilex5
      * update the size with addition 0x8000 0000 base


author: Funda Wang <fundawang@yeah.net> - 5.3.1-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-2751 CVE-2025-3158 CVE-2025-3196
  - SUG:NA
  - DESC:fix CVE-2025-2751 CVE-2025-3158 CVE-2025-3196


author: mapengyuan <mapengyuan@xfusion.com> - 5.3.1-16
changelog:
  - Type:CVE
  - CVE:CVE-2025-2754 CVE-2025-2756 CVE-2025-5200
  - SUG:NA
  - DESC:fix CVE-2025-2754 CVE-2025-2756 CVE-2025-5200


author: majianhan <majianhan@kylinos.cn> - 5.3.1-17
changelog:
  - Type:CVE
  - CVE:CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204
  - SUG:NA
  - DESC:fix CVE-2025-2752 CVE-2025-2755 CVE-2025-5201 CVE-2025-5202 CVE-2025-5203 CVE-2025-5204


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: baizhonggui <baizhonggui@huawei.com> - 0.2.92-3
changelog:
  - Fix building error: File must begin with "/": /usr/lib/systemd/system/attest_ra_server.service
  - Add systemd in BuildRequires


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: liyancheng <412998149@qq.com> - 0.19-1
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Support parsing multiple events and process repeat function


author: Ge Wang <wang__ge@126.com> - 1.0-0.34
changelog:
  - Replace buildrequire kde-filesystem with kde4-filesystem due to kde-filesytem updated to version 5-1


author: wangkai <wangkai385@huawei.com> - 0:4.3-23
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44228 is fixed,the version needs to be rebuild.


author: yaoxin <yaoxin30@huawei.com> - 0:4.3-24
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-45105 is fixed,the version needs to be rebuild.


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: yaoxin <yao_xin001@hoperun.com> - 1.17-1
changelog:
  - Update to 1.17 for fix CVE-2022-38398,CVE-2022-38648,CVE-2022-40146,CVE-2022-44729 and CVE-2022-44730


author: liequan che <cheliequan@inspur.com> - 1.1-4
changelog:
  - add bcache-export-cached to export CACHED_UUID and CACHED_LABEL,so that 69-bcache.rules
  udev rules can correctly create uuid and label links for bcache devices


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-2
changelog:
  - Type:CVE
  - CVE:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868
  - SUG:NA
  - DESC:fix CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: lingsheng <lingsheng1@h-partners.com> - 3.7.1-7
changelog:
  - Type:CVE
  - ID:CVE-2025-5914,CVE-2025-5915,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
  - SUG:NA
  - DESC:fix CVE-2025-5914 CVE-2025-5915 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: yaoxin <1024769339@qq.com> - 20250113-1
changelog:
  - Update to 20250113:
    * Parse unknown timezones as UTC
    * Apk (Alpine Linux) format support added
    * Implement default value in parameter expansion
    * Also support supplements that use & as "and"
    * Add workaround for skopeo's argument parser
    * add cap-htm=off on power9
    * Fixed usage of chown calls
    * Remove leading `go` from `purl` locators


author: jianmin <jianmin@iscas.ac.cn> - 1.34.1-5
changelog:
  - Type:cve
  - CVE:CVE-2024-3727 CVE-2024-24791
  - SUG:NA
  - DESC: fix CVE-2024-3727 and Rebuild to fix CVE-2024-24791


author: liuxu <liuxu156@huawei.com> - 1:1.36.1-6
changelog:
  - Type:CVE
  - Id:NA
  - SUG:NA
  - DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: wangkai <13474090681@163.com> - 1.82.0-1
changelog:
  - Update to 1.82.0 because firefox update 140ESR version
  - Synchronize the code from the openEuler-24.03-LTS-SP1 branch
  - Remove rls command


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: zhoupengcheng <zhoupengcheng11@huawei.com> - 0.2.4-4
changelog:
  - packing chatglm_convert.py file
  - install python models for chatglm_convert.py int dockerfile
  - update long-term yum.repo in dockerfile


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-16
changelog:
  - Ignored the `-Wa,--generate-missing-build-notes=` option, update llvm-lit config to support macro `build_for_openeuler`


author: wangqiang <wangqiang1@kylinos.cn> - 17.0.6-17
changelog:
  - Complete -fgcc-compatible option scope to Langopts and Diagopts, and handling of option `-Wall` and `-Werror=format=2` override `-Wno`


author: Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 17.0.6-18
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: dongyuzhen <dongyuzhen@h-partners.com> - 23.4.1-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix(net): klibc ipconfig PROTO compatibility
         fix(openstack): Fix bond mac_address


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:chore: set recursive=False for ensure_dir if parent path is "/"
         test(openstack): Test bond mac address
         fix: Ensure properties for bonded interfaces are properly translated


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-13
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:net/sysconfig: do not remove all existing settings of /etc/sysconfig/network
         fix: typing for rsyslog, ubuntu_pro, power_state_change


author: shixuantong <shixuantong1@huawei.com> - 23.4.1-16
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: fix: Add get_connection_with_tls_context() for requests 2.32.2+


author: fuanan <fuanan3@h-partners.com> - 3.27.9-5
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: lijian <lijian2@kylinos.cn> - 2:2.230.0-1
changelog:
  - Update container-selinux to v2.230.0
  - Allow containers to unmount file systems
  - Add buildah as a container_runtime_exec_t label
  - Additional rules for container_user_t
  - Add some MLS rules to policy
  - Add container_file_t and container_ro_file_t as user_home_type


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.6.22-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete task asynchronously to avoid containerd be killed when delete is blocking


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: Peng Fan <fanpeng@loongson.cn> - 12.3.1-33
changelog:
  - Type: Sync
  - DESC: Optimize the loading of immediate numbers.
  -       Fixed bug in bstrins_<mode>for_ior_mask.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 12.3.1-38
changelog:
  - Type: Sync
  - DESC: Sync patches for fixing building issues with clang
  - Source: https://gitee.com/openeuler/gcc/pulls/239


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: wangxiao <wangxiao184@h-partners.com> - 8.0.4-15
changelog:
  - remove the arch judgment, include all patches in the src package
  - use patch command to apply patches for consistency in context


author: lijian1 <lijian1@kylinos.cn> - 8.0.4-17
changelog:
  - fix loongarch64 support so file extension error for elf64 lack the branch while elf32 do not need.


author: lijian <lijian2@kylinos.cn> - 1.8.7-1
changelog:
  - update to 1.8.7
  - crun: new command "crun features".
  - linux: support io_priority from the OCI specs.
  - cgroup: allow setting swap to 0.
  - cgroup, systemd: set the memory limit on the system scope.


author: yixiangzhike <yixiangzhike007@163.com> - 20230614-1.git5f3458e
changelog:
  - update version to 20230614
    - DEFAULT policy drop DH<2048bits,TLS1.0,TLS1.1,SHA-1
    - Remove the CBC ciphers from DEFAULT policy in openssh
    - FIPS policy drop the CBC ciphersuites
    - Enable RSA-PSK algorithms in DEFAULT and LEGACY policies
    - Add the diffie-hellman-group14-sha256 to libssh
    - Add --check option to update-crypto-policies
    - Add AES-192 algorithms support
    - Use allowlisting config for gnutls
    - Enable SHAKE algorithms for gnutls,java and nss
    - Openssl disable SHA-1 signatures in FUTURE policy
    - Openssh add HostbasedAcceptedAlgorithms and RequiresRSASize config options


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-25
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-26
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
  - SUG:NA
  - DESC:fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-27
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:formdata: validate callback is non-NULL before use
         tftp: correct the filename length check


author: zhouyihang <zhouyihang_z@163.com> - 8.4.0-28
changelog:
  - Type:CVE
  - CVE:CVE-2026-1965 CVE-2026-3783 CVE-2026-3784
  - SUG:NA
  - DESC:fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: senlin <xiasenlin1@huawei.com> - 1.0.0-19
changelog:
  - Type: Correction of bad behavior
  - ID: NA
  - SUG: NA
  - DESC: Specify the specific sudo commands for abuild users


author: xu_ping <xuping33@h-partners.com> - 1.0.0-20
changelog:
  - Type: fix warning
  - ID: NA
  - SUG: NA
  - DESC: fix install custom_build_tool warning due to new rpm-build not provides find-debuginfo.sh


author: wangkai <13474090681@163.com> - 1.11.23-54
changelog:
  - Add patches from fedora, improve C compatibility and fix build failures caused by higher gcc versions


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: yaoxin <yaoxin30@huawei.com> - 3.2.15-4
changelog:
  - This package depends on log4j.After the log4j vulnerability CVE-2021-44832 is fixed,the version needs to be rebuild.


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: renmingshuai <renmingshuai@huawei.com> - 12:4.4.3-5
changelog:
  - Type:CVE
  - ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
  - SUG:restart
  - DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178


author: Miroslav Suchý <msuchy@redhat.com> 1.82-1
changelog:
  - move symlink of fedora-rawhide to fedora-39
  - add openEuler new key
  - update copr keys
  - add fedora 40 gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.84-1
changelog:
  - add tumbleweed key
  - Added RPM Fusion keys for Fedora 39.
  - update copr keys
  - add elastic gpg key


author: Miroslav Suchý <msuchy@redhat.com> 1.86-1
changelog:
  - update copr keys
  - Add Jenkins 2023
  - Add keys for Bacula & Baculum
  - Add keys for Google Cloud
  - Add VeraCrypt keys
  - add Element keys


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: renmingshuai <renmingshuai@huawei.com> - 2.89-2
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: zhongjiawei<zhongjiawei1@huawei.com> - 2:18.09.0-347
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:delete redundant characters to prevent make failure in golang 1.24


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: bixiaoyan <bixiaoyan@kylinos.cn> - 2.0.8-2
changelog:
  - Change assert in ringbuffer to a return code
    Community Patch Link:
    https://github.com/ClusterLabs/libqb/pull/492/commits/88d3eeacc64a059fcb8e2d329ddeafa63b24edfb


author: zouzhimin <zouzhimin@kylinos.cn> - 2.0.8-5
changelog:
  - Check returns from setsockopt() calls, also fix doxygen comment for qb_util_timespec_from_epoch_get()


author: litenglong <litenglong@kylinos.cn> - 2.0.8-6
changelog:
  - Fix file conflicts among the help package, main package, and devel package by deleting the duplicated content during upgrades.


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: Chenxi Mao <chenxi.mao@suse.com> - 1.25-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Upgrade dwarves version to 1.25 to fix build error
          if kernel version upgrade to 6.4


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: chenchen <chen_aka_jan@163.com> - 1:4.11-4
changelog:
  - switch to the new httpclient45 ECF provider
  - remove ECF httpclient dependency from p2 test
  - build failed with compilation failure in org.eclipse.test


author: liyanan <liyanan32@h-partners.com> - 1:4.11-8
changelog:
  - Add security compile options pie, relro and -fstack-protector-strong
  - Add glassfish-jsp and glassfish-servlet-api and glassfish-el-api version limit


author: taolinghongfei <taolinghongfei@h-partners.com> - 202308-32
changelog:
  - fix CVE-2026-22795,CVE-2026-22796
  - fix CVE-2025-69420
  - fix CVE-2025-69421
  - fix CVE-2025-68160
  - fix CVE-2025-69418


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: Ouuleilei <wangliu@iscas.ac.cn> - 3.1.0-14
changelog:
  - riscv64 rpmlist.xml exclude some packages, riscv64 normal.xml delete opengauss
  - fix patch conflict


author: lvxiangcong <lvxiangcong@kylinos.cn> - 3.4.14-16
changelog:
  - Type:CVES
  - ID:CVE-2024-24791 CVE-2023-45288 CVE-2024-24783 CVE-2024-24785 CVE-2023-45290
       CVE-2023-39326
  - SUG:NA
  - DESC:Batch fix cves through rebuild


author: zhangyaqi <zhangyaqi@kylinos.cn> - 2:6.6-4
changelog:
  - Type:bugfix
  - Id:NA
  - SUG:NA
  - DESC:add NULL check before jsonw_string_field() in print_string()
         netlink: add NULL check for get_string() in features.c


author: laokz <zhangkai@iscas.ac.cn> - 1.6.2-2
changelog:
  - Let valgrind BuildRequire following system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: liupei <liupei@kylinos.cn> - 4.12.1-8
changelog:
  - fence_scsi: Automatically detect devices for shared VGs
  - fence_scsi: Add support for space-separated devices and update in meta-data


author: liupei <liupei@kylinos.cn> - 4.12.1-9
changelog:
  - fence_azure_arm:add stack cloud support
  - azure_fence: use correct credential_scope and profile for stack hub


author: liupei <liupei@kylinos.cn> - 4.12.1-11
changelog:
  - fence_aliyun: support filter for list-action
  - fence_aliyun: add credentials file support
  - fence_aliyun: update order for new parameters


author: Funda Wang <fundawang@yeah.net> - 140.4.0-1
changelog:
  - update to 140.4.0
  - fix CVE-2025-11708, CVE-2025-11709, CVE-2025-11710, CVE-2025-11711,
    CVE-2025-11712, CVE-2025-11713, CVE-2025-11714, CVE-2025-11715


author: Funda Wang <fundawang@yeah.net> - 140.5.0-1
changelog:
  - update to 140.5.0
    * fix CVE-2025-13012, CVE-2025-13013, CVE-2025-13014, CVE-2025-13015,
      CVE-2025-13016, CVE-2025-13017, CVE-2025-13018, CVE-2025-13019,
      CVE-2025-13020


author: Funda Wang <fundawang@yeah.net> - 140.7.0-1
changelog:
  - update to 140.7.0
    * fix CVE-2026-0877, CVE-2026-0878, CVE-2026-0879, CVE-2026-0880,
      CVE-2026-0882, CVE-2025-14327, CVE-2026-0883, CVE-2026-0884,
      CVE-2026-0885, CVE-2026-0886, CVE-2026-0887, CVE-2026-0890,
      CVE-2026-0891


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:chore nftables add delete table helper
         fix nftables always flush main table on start


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-7
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: Dingli Zhang <dingli@iscas.ac.cn> - 1.17.1-4
changelog:
  - Remove riscv64 prebuilded files
  - Build protoc, protoc-jar and protoc-jar-maven-plugin in prep state for riscv64


author: wangkai <13474090681@163.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 for fix CVE-2024-32039,CVE-2024-32040,
    CVE-2024-32041,CVE-2024-32458,CVE-2024-32459,CVE-2024-32460,
    CVE-2024-32658,CVE-2024-32659 and CVE-2024-32660


author: wangkai <13474090681@163.com> - 2:2.11.8-1
changelog:
  - Update to 2.11.8
  - Fix CVE-2026-22852, CVE-2026-22856, CVE-2026-22859, CVE-2026-23530, CVE-2026-23531,
    CVE-2026-23532, CVE-2026-23534, CVE-2026-24491, CVE-2026-24675, CVE-2026-24676,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24682, CVE-2026-24683, CVE-2026-24684,
    CVE-2026-25997, CVE-2026-26271, CVE-2026-26986, CVE-2026-27015, CVE-2026-25941,
    CVE-2026-22855, CVE-2026-22857, CVE-2026-23533, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-7
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Zhen Chen <chenzhen126@huawei.com> - 1.0.1-2
changelog:
  - fix str2enum bug & data query refactor
  - add systemd service for anteater
  - remove 'sys-level' config param
  - add chinese descriptions
  - Update TCP Establish Model & Add Nic Loss Detector
  - Add disk throughput detector


author: Liping Hu <huliping10@huawei.com> - 2.0.1-2
changelog:
  - fix delete unnecessary judgments
    fix buffer overflow caused by strcpy()
    cadvisor_probe: fix int to str warnings
    fix compile warnings when disable KAFKA_CHANNEL
    fix segmentation fault when setting out_channel of metrics to logs
    fix writing metadata to log file properly
    bugfix: probe_define access out of bounds
    refactor(cadvisor): remove the dependency on the python-libconf
    avoid use ato*


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-79
changelog:
  - cfg: notify that it's unsupported, when stack_num > 1
  - fix errno == ETIMEFOUT
  - fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
  - fix rpc pool leak, when thread exits
  - remove app_bind_numa check from exclude_cpus
  - openGauss: fix connection attempt failed
  - openGauss: fix gs_ctl switchover failed


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-80
changelog:
  - Connect: execute lwip connect if dst_ip and host_ip are in the same network.
  - kernerl bind: add ipv6 add check
  - openGauss unsupport_tcp_optname
  - fix a contention issue when rpc pools are added to rpc_pool_array


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-82
changelog:
  - DUMP: fix abnomal printing in the dump process.
  - SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
  - SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-83
changelog:
  - SIGNAL: block SIGSEGV during exit process
  - Stack: unset stack_stop, while stacks exit by rpc message.
  - fix the memory leak when using strdup


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-84
changelog:
  - update gazelle max numa nodes 8
  - Protocal: fixing deathlock between protocol threads and app thread
  - Connect: fix benchmark_dws connect failed
  - RTC-mode: fix gazellectl can't print connenct info
  - add xdp tx checksum/tso offload


author: yinbin6 <yinbin8@huawei.com> - 1.0.2-85
changelog:
  - sockio: fix rpc_send coredump after RPC_MSG_EXIT
  - sockio: fix tcp_write not remove EPOLLOUT
  - fix 20.03-LTS build failed
  - sk_wait: igonre mem_thread flush signal
  - sockio: fix sendmbox full return EWOULDBLOCK
  - sockio: fix callback_tcp_send output too many at once
  - mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
  - sockctl: fix rtw broadcast close and shutdown
  - poll: fix do_lwip_connected_callback not delete poll kernel fd
  - sk_event: fix rtw epoll wrong event notify and remove
  - sockio: fix rtw_stack_tcp_write wrong copied_total after append
  - epoll: fix do_lwip_connected_callback
  - sk_wait: fix lwip_wait_foreach_notify coredump at startup
  - socket: fix stack_udp_readmsg return len
  - sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
  - mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
  - sk_wait: fix lwip_tcp_allow_send coredump
  - mempool: stop using cache when too many threads
  - mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
  - mempool: mem_get_rpc add reserve limit
  - mempool: fix mbox_ring free not call recv_finish_burst
  - mempool: modify mbuf num and rpc_msg num
  - socket: fix sk_wait cannot be interrupted by signals
  - socket: fix tcp closed
  - tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
  - socket: fix stack_tcp_read do not recv_finish_burst
  - socket: fix connect blocking
  - mempool: fix copy_mbuf_private
  - dfx: support sk_wait stat
  - mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
  - cfg: add mem_async_mode
  - cfg: add mem_cache_max and change default rpc_msg_max
  - socket: adapt to tcp and udp
  - socket: refactor tcp and udp
  - socket: adapt to sock_event
  - socket: refactor sock_event
  - cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
  - cleancode: remove gazelle_light_ring
  - cleancode: add GAZELLE_SAME_NODE
  - RTC: fixing program stuck while gazelle exit in multi-threads envirement


author: dingguangya <dingguangya1@huawei.com> - 1.0-3
changelog:
  -Type:Fix
  -ID:NA
  -SUG:NA
  -DESC: Fix the hard coding problem in the software package building process


author: liqian <liqian@kylinos.cn> - 1.0-7
changelog:
  -Type:Fix
  -ID:NA
  -SUG:NA
  -DESC: Fix Only the spec file is packaged in src.rpm without the source code file, 
         so it cannot be directly decompressed and compiled using src.rpm


author: shenyangyang<shenyangyang4@huawei.com> - 1.0-0.7
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: bump release rebuilding for adding rhash.spec to macro gcc_secure_exclude


author: tangjie02 <tangjie02@kylinos.com.cn> - 1.0.1-1.ky3
changelog:
  - KYOS-F: Modify the python3-jinja2 to Requires from BuildRequires.
  - KYOS-F: Remove gdbus_codegen.glibmm*egg-info directory after install.


author: yaoxin <yao_xin001@hoperun.com> - 0.4.50-1
changelog:
  - Update to 0.4.50:
  - Core:
    * Better Gobject Introspection annotation coverage.
    * Improved error handling for gegl chain processing.
    * Added accessors for pad meta-data, to be able to show names and descriptions in UIs.
    * GeglColor: more lax parameters for g_arapm_values_cmp
    * exr-save: store 16bpc files as half, fixing gimp#10778
    * ff-load, ff-save: fix build with FFmpeg 7
    * dither: do processing in linear when all levels==2


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.43.0-4
changelog:
  - Type:CVE
  - ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
  - SUG:NA
  - DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: huzhangying <huzhangying@huawei.com> - 1.21.4-38
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58185, CVE-2025-58188, CVE-2025-58189, CVE-2025-61724


author: huzhangying <huzhangying@huawei.com> - 1.21.4-42
changelog:
  - Type:CVE
  - CVE:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723
  - SUG:NA
  - DESC:fix CVE-2025-61732,CVE-2025-68119,CVE-2025-61731,CVE-2025-61728,CVE-2025-68121,CVE-2025-61723


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 8.0.32-27.5
changelog:
  - greatsql-mysql-config was removed previously, my.cnf was moved
    into greatsql-server package without conflicts and obsoletes


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Revert 'grub-install: bailout root device probing'
         Revert 'Workaround volatile efi boot variable'
         Revert 'Unify the check to enable btrfs relative path'


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-48
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:loader/i386/pc/linux: Fix resource leak
         Revert "lzma: Make sure we don't dereference past array
         loader/efi/linux: Correctly terminate load_options member
         loader/efi/linux: Use sizeof() instead of constant
         loader/efi/linux: Use proper type for len variable
         loader/efi/linux: Do not pass excessive size for source string
         loader/efi/linux: Remove useless assignment
         loader/efi/linux: Reuse len variable
         loader/efi/linux: Unload previous Linux kernel/initrd before updating kernel size
         normal/charset: Fix underflow and overflow in loop init
         lib/LzmaEnc: Validate len before subtracting
         osdep/unix/hostdisk: Fix signed integer overflow
         fs/zfs: Fix another memory leak in ZFS code
         fs/xfs: Fix large extent counters incompat feature support


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: lin zhang <lin.zhang@turbolinux.com.cn> - 3.24.7-1
changelog:
  - Update to 3.24.7

  -* Mon Jun 20 2022 liukuo <liukuo@kylinos.cn> - 3.24.6-2
  -- License compliance rectification


author: luhuaxin <luhuaxin@huawei.com> - 1.3-39
changelog:
  - Type: enhancement
  - ID: NA
  - SUG: NA
  - DESC: move gxvattr to main package, move AUTHORS to license folder


author: Jia Chao <jiac13@chinaunicom.cn> - 3.3.4-4
changelog:
  - fix: use $HOME rather than /home/abuild, suit for all buildtools.
  - fix: yarn have ELF bin, not noarch at all.


author: Dingli Zhang <dingli@iscas.ac.cn> - 3.3.6-3
changelog:
  - Fix build on riscv64
  - Upgrade os-maven-plugin to 1.7.1
  - Remove settings.xml and use ${HOME}/.m2/repository as maven repo


author: Zheng Zengkai <zhengzengkai@huawei.com> - 6.6.0-22.0.0.25
changelog:
  - !6467 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Fix incorrect variable usage in scc_attr_is_visible()
  - RDMA/hns: Fix null pointer when alloc_scc_param() fails
  - RDMA/hns: Fix scc_param delay_work to execute after sysfs shutdown
  - RDMA/hns: Add mutex_destroy() to destroy the mutex
  - RDMA/hns: Fix a potential Sleep-in-Atomic-Context
  - !6468 v2  scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - scsi: fnic: Move fnic_fnic_flush_tx() to a work queue
  - !6439 v3  m: convert mm's rss stats to use atomic mode
  - mm: convert mm's rss stats to use atomic mode
  - percpu_counter: introduce atomic mode for percpu_counter
  - !6424  mm/migrate: correct nr_failed in migrate_pages_sync()
  - mm/migrate: add nr_split to trace_mm_migrate_pages stats.
  - mm/migrate: correct nr_failed in migrate_pages_sync()
  - !6390  nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
  - !5482 [OLK-6.6] crypto: update zhaoxin-aes for __pcpu_unique_paes_last_cword
  - crypto: update zhaoxin-aes for __pcpu_unique_paes_last_cword
  - !3171 [OLK-6.6] ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - ata: libata: disabling PhyRdy Change Interrupt based on actual LPM capability
  - !6443  f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
  - f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
  - !6261 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Modify the print level of CQE error
  - RDMA/hns: Add mutex_destroy()
  - RDMA/hns: Fix GMV table pagesize
  - RDMA/hns: Fix mismatch exception rollback
  - RDMA/hns: Fix UAF for cq async event
  - RDMA/hns: Fix deadlock on SRQ async events.
  - RDMA/hns: Remove unused parameters and variables
  - RDMA/hns: Use macro instead of magic number
  - RDMA/hns: Fix return value in hns_roce_map_mr_sg
  - !6265 tpm_tis: Avoid warning splat at shutdown
  - tpm,tpm_tis: Avoid warning splat at shutdown
  - !6402  bpf: Add missing BPF_LINK_TYPE invocations
  - bpf: Add missing BPF_LINK_TYPE invocations
  - !6256 [OLK-6.6] bugfix from upstream v6.9 for AMD EPYC perf
  - perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
  - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
  - perf/x86/amd/lbr: Use freeze based on availability
  - !6134 v3  rootfs: Fix support for rootfstype= when root= is given
  - rootfs: Fix support for rootfstype= when root= is given


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-23.0.0.26
changelog:
  - !6306 【OLK-6.6】fix compiling problem in bzwx N5/N6 series NIC drivers
  - drivers: fix compiling problem in bzwx N5/N6 series NIC drivers
  - !6692  ipvlan: enable CONFIG_IPVLAN_L2E option in openeuler config
  - ipvlan: enable CONFIG_IPVLAN_L2E option in openeuler config
  - !6632  ext4: use iomap for regular file's buffered IO path and enable large foilo
  - ext4: add mount option for buffered IO iomap path
  - ext4: don't mark IOMAP_F_DIRTY for buffer write
  - ext4: enable large folio for regular file with iomap buffered IO path
  - filemap: support disable large folios on active inode
  - ext4: partial enable iomap for regular file's buffered IO path
  - ext4: fall back to buffer_head path for defrag
  - ext4: writeback partial blocks before zeroing out range
  - ext4: implement zero_range iomap path
  - ext4: implement mmap iomap path
  - ext4: implement writeback iomap path
  - ext4: implement buffered write iomap path
  - ext4: implement buffered read iomap path
  - ext4: add a new iomap aops for regular file's buffered IO path
  - ext4: introduce seq counter for the extent status entry
  - ext4: factor out ext4_map_create_blocks() to allocate new blocks
  - ext4: use reserved metadata blocks when splitting extent on endio
  - ext4: make ext4_da_map_blocks() buffer_head unaware
  - ext4: make ext4_insert_delayed_block() insert multi-blocks
  - ext4: factor out check for whether a cluster is allocated
  - ext4: make ext4_da_reserve_space() reserve multi-clusters
  - ext4: make ext4_es_insert_delayed_block() insert multi-blocks
  - ext4: drop iblock parameter
  - ext4: trim delalloc extent
  - ext4: check the extent status again before inserting delalloc block
  - ext4: factor out a common helper to query extent map
  - ext4: make ext4_set_iomap() recognize IOMAP_DELALLOC map type
  - ext4: make ext4_map_blocks() distinguish delalloc only extent
  - ext4: add a hole extent entry in cache after punch
  - ext4: convert to exclusive lock while inserting delalloc extents
  - ext4: refactor ext4_da_map_blocks()
  - iomap: do some small logical cleanup in buffered write
  - iomap: make iomap_write_end() return a boolean
  - iomap: use a new variable to handle the written bytes in iomap_write_iter()
  - iomap: don't increase i_size if it's not a write operation
  - iomap: drop the write failure handles when unsharing and zeroing
  - xfs: convert delayed extents to unwritten when zeroing post eof blocks
  - xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
  - xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
  - xfs: match lock mode in xfs_buffered_write_iomap_begin()
  - iomap: add pos and dirty_len into trace_iomap_writepage_map
  - iomap: pass the length of the dirty region to ->map_blocks
  - iomap: map multiple blocks at a time
  - iomap: submit ioends immediately
  - iomap: factor out a iomap_writepage_map_block helper
  - iomap: only call mapping_set_error once for each failed bio
  - iomap: don't chain bios
  - iomap: move the iomap_sector sector calculation out of iomap_add_to_ioend
  - iomap: clean up the iomap_alloc_ioend calling convention
  - iomap: move all remaining per-folio logic into iomap_writepage_map
  - iomap: factor out a iomap_writepage_handle_eof helper
  - iomap: move the PF_MEMALLOC check to iomap_writepages
  - iomap: move the io_folios field out of struct iomap_ioend
  - iomap: treat inline data in iomap_writepage_map as an I/O error
  - iomap: clear the per-folio dirty bits on all writeback failures
  - !6625 v2  perf data convert: Fix segfault when converting to json when cpu_desc isn't set
  - perf data convert: Fix segfault when converting to json when cpu_desc isn't set
  - !6647  infiniband/hw/hiroce3: Add Huawei Intelligent Network Card RDMA Driver
  - infiniband/hw/hiroce3: Add Huawei Intelligent Network Card RDMA Driver
  - net/ethernet/huawei/hinic3: Add the CQM on which the RDMA depends
  - !6624  hisi-acc-vfio-pci:add DFX for acc migration driver
  - hisi_acc_vfio_pci: add exception error handling
  - hisi-acc-vfio-pci:add DFX for acc migration driver
  - !6658  sched: disable sched_autogroup by default
  - sched: disable sched_autogroup by default
  - !6626  Backport page fault and fork optimization
  - mm: swapfile: check usable swap device in __folio_throttle_swaprate()
  - mm/filemap: optimize filemap folio adding
  - lib/xarray: introduce a new helper xas_get_order
  - lib/xarray: introduce a new helper xas_get_order
  - mm/filemap: clean up hugetlb exclusion code
  - mm/filemap: return early if failed to allocate memory for split
  - mm: memory: check userfaultfd_wp() in vmf_orig_pte_uffd_wp()
  - !6179 crypto: hisilicon - fixed some code security review issues
  - crypto: hisilicon/debugfs - Resolve the problem of applying for redundant space in sq dump
  - crypto: hisilicon/sec - Fix memory leak for sec resource release
  - crypto: hisilicon - Adjust debugfs creation and release order
  - crypto: hisilicon/qm - Add the default processing branch
  - crypto: hisilicon/debugfs - Fix the processing logic issue in the debugfs creation
  - crypto: hisilicon/sgl - Delete redundant parameter verification
  - crypto: hisilicon/debugfs - Fix debugfs uninit process issue
  - crypto: hisilicon/sec - Add the condition for configuring the sriov function
  - crypto: hisilicon/zip - fix the missing CRYPTO_ALG_ASYNC in cra_flags
  - !6400  btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
  - !6444  Fix CVE-2024-26869
  - f2fs: fix to truncate meta inode pages forcely
  - f2fs: introduce f2fs_invalidate_internal_cache() for cleanup
  - !6585  ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
  - !6251  ubi: Check for too small LEB size in VTBL code
  - ubi: Check for too small LEB size in VTBL code
  - !6418  media: pvrusb2: fix uaf in pvr2_context_set_notify
  - media: pvrusb2: fix uaf in pvr2_context_set_notify


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-24.0.0.27
changelog:
  - !6824  Introduce CONFIG_ARCH_CUSTOM_NUMA_DISTANCE
  - config: enable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
  - arm64/numa: Support node_reclaim_distance adjust for arch
  - !6877  maple_tree: avoid checking other gaps after getting the largest gap
  - maple_tree: avoid checking other gaps after getting the largest gap
  - !6859 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.23-6.6.30 LTS Patches
  - x86: update openeuler_defconfig for x86_64
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec
  - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst
  - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads
  - Revert "riscv: kdump: fix crashkernel reserving problem on RISC-V"
  - ovl: fix memory leak in ovl_parse_param()
  - phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6
  - i2c: smbus: fix NULL function pointer dereference
  - sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
  - sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr
  - sched/eevdf: Always update V if se->on_rq when reweighting
  - phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
  - riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
  - riscv: Fix TASK_SIZE on 64-bit NOMMU
  - riscv: fix VMALLOC_START definition
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
  - dma: xilinx_dpdma: Fix locking
  - dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue
  - phy: qcom: m31: match requested regulator name with dt schema
  - phy: rockchip: naneng-combphy: Fix mux on rk3588
  - phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
  - phy: rockchip-snps-pcie3: fix bifurcation on rk3588
  - phy: freescale: imx8m-pcie: fix pcie link-up instability
  - phy: marvell: a3700-comphy: Fix hardcoded array size
  - phy: marvell: a3700-comphy: Fix out of bounds read
  - soundwire: amd: fix for wake interrupt handling for clockstop mode
  - idma64: Don't try to serve interrupts when device is powered off
  - dmaengine: tegra186: Fix residual calculation
  - dmaengine: owl: fix register access functions
  - x86/tdx: Preserve shared bit on mprotect()
  - phy: qcom: qmp-combo: Fix VCO div offset on v3
  - phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE
  - mtd: diskonchip: work around ubsan link failure
  - udp: preserve the connected status if only UDP cmsg
  - fbdev: fix incorrect address computation in deferred IO
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag
  - net: b44: set pause params only when interface is up
  - ethernet: Add helper for assigning packet type when dest address does not match device address
  - ACPI: CPPC: Fix access width used for PCC registers
  - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
  - ACPI: CPPC: Use access_width over bit_width for system memory accesses
  - irqchip/gic-v3-its: Prevent double free on error
  - drm/amdgpu: Fix leak when GPU memory allocation fails
  - drm/amdgpu: Assign correct bits for SDMA HDP flush
  - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  - arm64: dts: qcom: sm8450: Fix the msi-map entries
  - arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
  - LoongArch: Fix access error when read fault on a write-only VMA
  - LoongArch: Fix callchain parse error with kernel tracepoint events
  - cpu: Re-enable CPU mitigations by default for !X86 architectures
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  - btrfs: scrub: run relocation repair when/only needed
  - btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
  - btrfs: fallback if compressed IO fails for ENOSPC
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
  - smb3: missing lock when picking channel
  - smb: client: Fix struct_group() usage in __packed structs
  - mm: support page_mapcount() on page_has_type() pages
  - mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros
  - mmc: sdhci-msm: pervent access to suspended controller
  - mtd: rawnand: qcom: Fix broken OP_RESET_DEVICE command in qcom_misc_cmd_type_exec()
  - Bluetooth: qca: fix NULL-deref on non-serdev setup
  - Bluetooth: qca: fix NULL-deref on non-serdev suspend
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  - rust: remove `params` from `module` macro example
  - kbuild: rust: force `alloc` extern to allow "empty" Rust files
  - kbuild: rust: remove unneeded `@rustc_cfg` to avoid ICE
  - rust: make mutually exclusive with CFI_CLANG
  - rust: init: remove impl Zeroable for Infallible
  - rust: don't select CONSTRUCTORS
  - x86/cpu: Fix check for RDPKRU in __show_regs()
  - selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)
  - selftests/seccomp: Change the syscall used in KILL_THREAD test
  - selftests/seccomp: user_notification_addfd check nextfd is available
  - Squashfs: check the inode number is not the invalid value of zero
  - squashfs: convert to new timestamp accessors
  - drm/amdgpu: fix visible VRAM handling during faults
  - drm/amdgpu: add shared fdinfo stats
  - drm: add drm_gem_object_is_shared_for_memory_stats() helper
  - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly
  - mm/gup: explicitly define and check internal GUP flags, disallow FOLL_TOUCH
  - KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET"
  - KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  - tls: fix lockless read of strp->msg_ready in ->poll
  - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  - ice: fix LAG and VF lock dependency in ice_reset_vf()
  - iavf: Fix TC config comparison with existing adapter TC config
  - i40e: Report MFS in decimal base instead of hex
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  - net: ti: icssg-prueth: Fix signedness bug in prueth_init_rx_chns()
  - net: phy: dp83869: Fix MII mode failure
  - netfilter: nf_tables: honor table dormant flag from netdev release event path
  - ARM: dts: imx6ull-tarragon: fix USB over-current polarity
  - eth: bnxt: fix counting packets discarded due to OOM and netpoll
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  - mlxsw: spectrum_acl_tcam: Rate limit error message
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  - mlxsw: spectrum_acl_tcam: Fix race in region ID allocation
  - mlxsw: Use refcount_t for reference counting
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  - ipvs: Fix checksumming on GSO of SCTP packets
  - Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional()
  - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
  - Bluetooth: btusb: mediatek: Fix double free of skb in coredump
  - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
  - Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE
  - Bluetooth: btusb: Fix triggering coredump implementation for QCA
  - gpio: tegra186: Fix tegra186_gpio_is_accessible() check
  - net: phy: mediatek-ge-soc: follow netdev LED trigger semantics
  - net: gtp: Fix Use-After-Free in gtp_dellink
  - net: usb: ax88179_178a: stop lying about skb->truesize
  - ipv4: check for NULL idev in ip_route_use_hint()
  - net: fix sk_memory_allocated_{add|sub} vs softirqs
  - net: make SK_MEMORY_PCPU_RESERV tunable
  - tools: ynl: don't ignore errors in NLMSG_DONE messages
  - ax25: Fix netdev refcount issue
  - NFC: trf7970a: disable all regulators on removal
  - net: dsa: mv88e6xx: fix supported_interfaces setup in mv88e6250_phylink_get_caps()
  - cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()
  - bnxt_en: Fix the PCI-AER routines
  - bnxt_en: refactor reset close code
  - bridge/br_netlink.c: no need to return void function
  - icmp: prevent possible NULL dereferences from icmp_build_probe()
  - ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with the valid property
  - mlxsw: core_env: Fix driver initialization with old firmware
  - mlxsw: core: Unregister EMAD trap using FORWARD action
  - net: bcmasp: fix memory leak when bringing down interface
  - vxlan: drop packets from invalid src-address
  - net: libwx: fix alloc msix vectors failed
  - wifi: mac80211: fix unaligned le16 access
  - wifi: mac80211: remove link before AP
  - wifi: mac80211_hwsim: init peer measurement result
  - drm/gma500: Remove lid code
  - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  - wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded
  - wifi: mac80211: clean up assignments to pointer cache.
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  - gpio: tangier: Use correct type for the IRQ chip data
  - arm64: dts: qcom: sc8180x: Fix ss_phy_irq for secondary USB controller
  - arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro
  - arm64: dts: mediatek: mt2712: fix validation errors
  - arm64: dts: mediatek: mt7986: prefix BPI-R3 cooling maps with "map-"
  - arm64: dts: mediatek: mt7986: drop invalid thermal block clock
  - arm64: dts: mediatek: mt7986: reorder nodes
  - arm64: dts: mediatek: mt7986: drop "#reset-cells" from Ethernet controller
  - arm64: dts: mediatek: mt7986: drop invalid properties from ethsys
  - arm64: dts: mediatek: mt7986: reorder properties
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  - arm64: dts: mediatek: mt7622: fix IR nodename
  - arm64: dts: mediatek: mt7622: fix clock controllers
  - arm64: dts: mediatek: mt8183-kukui: Use default min voltage for MT6358
  - arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for MT6315
  - arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for MT6315
  - arm64: dts: mediatek: cherry: Describe CPU supplies
  - arm64: dts: mediatek: cherry: Add platform thermal configuration
  - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex1
  - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex
  - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys
  - arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex
  - arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
  - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  - arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
  - arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f
  - HID: logitech-dj: allow mice to use all types of reports
  - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
  - cifs: reinstate original behavior again for forceuid/forcegid
  - smb: client: fix rename(2) regression against samba
  - cifs: Fix reacquisition of volume cookie on still-live connection
  - selftests: kselftest: Fix build failure with NOLIBC
  - thunderbolt: Reset only non-USB4 host routers in resume
  - PCI/ASPM: Fix deadlock when enabling ASPM
  - ksmbd: common: use struct_group_attr instead of struct_group for network_open_info
  - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
  - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
  - powerpc/ftrace: Ignore ftrace locations in exit text sections
  - virtio_net: Do not send RSS key if it is not supported
  - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
  - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
  - nilfs2: fix OOB in nilfs_set_de_type
  - bootconfig: use memblock_free_late to free xbc memory to buddy
  - nouveau: fix instmem race condition around ptr stores
  - drm/vmwgfx: Fix crtc's atomic check conditional
  - drm/vmwgfx: Sort primary plane formats by order of preference
  - drm/vmwgfx: Fix prime import/export
  - drm/amdgpu: remove invalid resource->start check v2
  - drm/amdkfd: Fix memory leak in create_process failure
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  - fuse: fix leaked ENOSYS error on first statx call
  - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
  - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries
  - mm/userfaultfd: allow hugetlb change protection upon poison entry
  - init/main.c: Fix potential static_command_line memory overflow
  - arm64: hibernate: Fix level3 translation fault in swsusp_save()
  - arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H
  - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
  - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
  - KVM: x86/pmu: Disable support for adaptive PEBS
  - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
  - sched: Add missing memory barrier in switch_mm_cid
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - speakup: Avoid crash on very long word
  - mei: me: disable RPL-S on SPS and IGN firmwares
  - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  - usb: Disable USB3 LPM at shutdown
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  - Revert "usb: cdc-wdm: close race between read and workqueue"
  - USB: serial: option: add Telit FN920C04 rmnet compositions
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support
  - USB: serial: option: support Quectel EM060K sub-models
  - USB: serial: option: add Lonsung U8300/U9300 product
  - USB: serial: option: add support for Fibocom FM650/FG650
  - USB: serial: option: add Fibocom FM135-GL variants
  - serial: core: Fix missing shutdown and startup for serial base port
  - serial: core: Clearing the circular buffer before NULLifying it
  - serial: stm32: Reset .throttled state in .startup()
  - serial: stm32: Return IRQ_NONE in the ISR if no handling happend
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  - serial: mxs-auart: add spinlock around changing cts state
  - comedi: vmk80xx: fix incomplete endpoint checking
  - thunderbolt: Fix wake configurations after device unplug
  - thunderbolt: Avoid notify PM core about runtime PM resume
  - binder: check offset alignment in binder_get_object()
  - ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
  - ALSA: hda/realtek: Add quirks for Huawei Matebook D14 NBLB-WAX9N
  - ALSA: hda/tas2781: Add new vendor_id and subsystem_id to support ThinkPad ICE-1
  - ALSA: hda/tas2781: correct the register for pow calibrated data
  - ALSA: seq: ump: Fix conversion from MIDI2 to MIDI1 UMP messages
  - net/mlx5: E-switch, store eswitch pointer before registering devlink_param
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  - x86/bugs: Fix BHI retpoline check
  - clk: mediatek: Do a runtime PM get on controllers during probe
  - clk: Get runtime PM before walking tree for clk_summary
  - clk: Show active consumers of clocks in debugfs
  - clk: Get runtime PM before walking tree during disable_unused
  - clk: Initialize struct clk_core kref earlier
  - clk: Remove prepare_lock hold assertion in __clk_release()
  - interconnect: Don't access req_list while it's being manipulated
  - platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes
  - usb: new quirk to reduce the SET_ADDRESS request timeout
  - usb: xhci: Add timeout argument in address_device USB HCD callback
  - drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go
  - ALSA: scarlett2: Rename scarlett_gen2 to scarlett2
  - PCI: Simplify pcie_capability_clear_and_set_word() to ..._clear_word()
  - PCI/DPC: Use FIELD_GET()
  - ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support
  - ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support
  - ALSA: scarlett2: Add correct product series name to messages
  - ALSA: scarlett2: Default mixer driver to enabled
  - thunderbolt: Reset topology created by the boot firmware
  - thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4 routers
  - thunderbolt: Introduce tb_path_deactivate_hop()
  - thunderbolt: Introduce tb_port_reset()
  - ASoC: ti: Convert Pandora ASoC to GPIO descriptors
  - ALSA: scarlett2: Add support for Clarett 8Pre USB
  - ALSA: scarlett2: Move USB IDs out from device_info struct
  - drm/radeon: make -fstrict-flex-arrays=3 happy
  - drm/panel: visionox-rm69299: don't unregister DSI device
  - drm: nv04: Fix out of bounds access
  - s390/cio: fix race condition during online processing
  - s390/qdio: handle deferred cc1
  - perf lock contention: Add a missing NULL check
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout
  - RDMA/rxe: Fix the problem "mutex_destroy missing"
  - drm/i915/mst: Limit MST+DSC to TGL+
  - net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
  - net: ethernet: mtk_eth_soc: fix WED + wifi reset
  - gpiolib: swnode: Remove wrong header inclusion
  - s390/ism: Properly fix receive message buffer allocation
  - net: dsa: mt7530: fix port mirroring for MT7988 SoC switch
  - net: dsa: mt7530: fix mirroring frames received on local port
  - tun: limit printing rate when illegal packet received by tun dev
  - ice: Fix checking for unsupported keys on non-tunnel device
  - ice: tc: allow zero flags in parsing tc flower
  - ice: tc: check src_vsi in case of traffic from VF
  - net: stmmac: Fix IP-cores specific MAC capabilities
  - net: stmmac: Fix max-speed being ignored on queue re-init
  - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation
  - net: change maximum number of UDP segments to 128
  - net/mlx5e: Prevent deadlock while disabling aRFS
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation
  - net: sparx5: flower: fix fragment flags handling
  - af_unix: Don't peek OOB data without MSG_OOB.
  - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
  - netfilter: flowtable: incorrect pppoe tuple
  - netfilter: flowtable: validate pppoe header
  - netfilter: nft_set_pipapo: do not free live element
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  - scsi: ufs: qcom: Add missing interconnect bandwidth values for Gear 5
  - arm64: tlb: Fix TLBI RANGE operand
  - arm64/mm: Modify range-based tlbi to decrement scale
  - net: usb: ax88179_178a: avoid writing the mac address before first reading
  - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING
  - random: handle creditable entropy from atomic process context
  - selftests/ftrace: Limit length in subsystem-enable tests
  - SUNRPC: Fix rpcgss_context trace event acceptor field
  - drm/i915/vma: Fix UAF on destroy against retire race
  - io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64() failure
  - media: videobuf2: request more buffers for vb2_read
  - drm/msm/dpu: populate SSPP scaler block version
  - selftests: timers: Fix posix_timers ksft_print_msg() warning
  - ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE
  - ceph: rename _to_client() to _to_fs_client()
  - ceph: pass the mdsc to several helpers
  - drm/amd/display: Do not recursively call manual trigger programming
  - selftests/timers/posix_timers: Reimplement check_timer_distribution()
  - selftests: timers: Convert posix_timers test to generate KTAP output
  - drm/i915: Disable live M/N updates when using bigjoiner
  - drm/i915: Adjust seamless_m_n flag behaviour
  - drm/i915: Enable VRR later during fastsets
  - drm/i915: Extract intel_crtc_vblank_evade_scanlines()
  - drm/i915: Change intel_pipe_update_{start,end}() calling convention
  - drm/i915/cdclk: Fix voltage_level programming edge case
  - drm/i915/mst: Reject FEC+MST on ICL
  - drm/i915: Fix FEC pipe A vs. DDI A mixup
  - smb: client: refresh referral without acquiring refpath_lock
  - smb: client: guarantee refcounted children from parent session
  - smb3: show beginning time for per share stats
  - smb: client: fix UAF in smb2_reconnect_server()
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses()
  - drm/amd/display: fix disable otg wa logic in DCN316
  - drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST
  - drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4
  - drm/amdgpu: fix incorrect number of active RBs for gfx11
  - drm/amdgpu: always force full reset for SOC21
  - drm/amdgpu: Reset dGPU if suspend got aborted
  - drm/i915: Disable port sync when bigjoiner is used
  - drm/i915/cdclk: Fix CDCLK programming order when pipes are active
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
  - x86/bugs: Fix BHI handling of RRSBA
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
  - x86/bugs: Fix BHI documentation
  - x86/bugs: Fix return type of spectre_bhi_state()
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction
  - selftests: timers: Fix abs() warning in posix_timers test
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  - perf/x86: Fix out of range data
  - vhost: Add smp_rmb() in vhost_enable_notify()
  - vhost: Add smp_rmb() in vhost_vq_avail_empty()
  - arm64: dts: imx8-ss-dma: fix spi lpcg indices
  - arm64: dts: imx8-ss-lsio: fix pwm lpcg indices
  - arm64: dts: imx8-ss-conn: fix usb lpcg indices
  - arm64: dts: imx8-ss-dma: fix adc lpcg indices
  - arm64: dts: imx8-ss-dma: fix can lpcg indices
  - arm64: dts: imx8qm-ss-dma: fix can lpcg indices
  - drm/client: Fully protect modes[] with dev->mode_config.mutex
  - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
  - drm/ast: Fix soft lockup
  - drm/amdkfd: Reset GPU on queue preemption failure
  - drm/i915/vrr: Disable VRR when using bigjoiner
  - drm/vmwgfx: Enable DMA mappings with SEV
  - accel/ivpu: Fix deadlock in context_xa
  - scsi: sg: Avoid race in error handling & drop bogus warn
  - scsi: sg: Avoid sg device teardown race
  - kprobes: Fix possible use-after-free issue on kprobe registration
  - io_uring/net: restore msg_control on sendzc retry
  - btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
  - btrfs: record delayed inode root in transaction
  - btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
  - btrfs: qgroup: correctly model root qgroup rsv in convert
  - selftests: mptcp: use += operator to append strings
  - iommu/vt-d: Allocate local memory for page request queue
  - iommu/vt-d: Fix wrong use of pasid config
  - tracing: hide unused ftrace_event_id_fops
  - net: ena: Set tx_info->xdpf value to NULL
  - net: ena: Use tx_ring instead of xdp_ring for XDP channel TX
  - net: ena: Pass ena_adapter instead of net_device to ena_xmit_common()
  - net: ena: Move XDP code to its new files
  - net: ena: Fix incorrect descriptor free behavior
  - net: ena: Wrong missing IO completions check order
  - net: ena: Fix potential sign extension issue
  - af_unix: Fix garbage collector racing against connect()
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
  - net: dsa: mt7530: trap link-local frames regardless of ST Port State
  - Revert "s390/ism: fix receive message buffer allocation"
  - net: sparx5: fix wrong config being used when reconfiguring PCS
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit
  - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow
  - net/mlx5: Correctly compare pkt reformat ids
  - net/mlx5: Properly link new fs rules into the tree
  - net/mlx5: offset comp irq index in name by one
  - net/mlx5: Register devlink first under devlink lock
  - net/mlx5: SF, Stop waiting for FW as teardown was called
  - netfilter: complete validation of user input
  - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit
  - Bluetooth: SCO: Fix not validating setsockopt user input
  - Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY
  - Bluetooth: hci_sync: Use QoS to determine which PHY to scan
  - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
  - Bluetooth: ISO: Align broadcast sync_timeout with connection timeout
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  - ipv4/route: avoid unused-but-set-variable warning
  - ipv6: fib: hide unused 'pn' variable
  - octeontx2-af: Fix NIX SQ mode and BP config
  - af_unix: Clear stale u->oob_skb.
  - net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
  - net: ks8851: Inline ks8851_rx_skb()
  - bnxt_en: Reset PTP tx_avail after possible firmware reset
  - bnxt_en: Fix error recovery for RoCE ulp client
  - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
  - s390/ism: fix receive message buffer allocation
  - geneve: fix header validation in geneve[6]_xmit_skb
  - block: fix q->blkg_list corruption during disk rebind
  - octeontx2-pf: Fix transmit scheduler resource leak
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
  - net: openvswitch: fix unwanted error log on timeout policy probing
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
  - nouveau: fix function cast warning
  - Revert "drm/qxl: simplify qxl_fence_wait"
  - cxl/core: Fix initialization of mbox_cmd.size_out in get event
  - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
  - drm/msm/dpu: don't allow overriding data from catalog
  - cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before assigned
  - cxl/mem: Fix for the index of Clear Event Record Handle
  - firmware: arm_scmi: Make raw debugfs entries non-seekable
  - ARM: OMAP2+: fix USB regression on Nokia N8x0
  - mmc: omap: restore original power up/down steps
  - mmc: omap: fix deferred probe
  - mmc: omap: fix broken slot switch lookup
  - ARM: OMAP2+: fix N810 MMC gpiod table
  - ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
  - media: cec: core: remove length check of Timer Status
  - PM: s2idle: Make sure CPUs will wakeup directly on resume
  - ACPI: scan: Do not increase dep_unmet for already met dependencies
  - platform/chrome: cros_ec_uart: properly fix race condition
  - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
  - Bluetooth: Fix memory leak in hci_req_sync_complete()
  - ring-buffer: Only update pages_touched when a new page is touched
  - raid1: fix use-after-free for original bio in raid1_write_request()
  - ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
  - batman-adv: Avoid infinite loop trying to resize local TT
  - ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
  - ata: libata-core: Allow command duration limits detection for ACS-4 drives
  - smb3: fix Open files on server counter going negative
  - drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes
  - Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()"
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
  - net: mpls: error out if inner headers are not set
  - Bluetooth: btintel: Fixe build regression
  - platform/x86: intel-vbtn: Update tablet mode switch at end of probe
  - randomize_kstack: Improve entropy diffusion
  - media: mediatek: vcodec: adding lock to protect encoder context list
  - media: mediatek: vcodec: adding lock to protect decoder context list
  - media: mediatek: vcodec: Fix oops when HEVC init fails
  - selftests: mptcp: display simult in extra_msg
  - gcc-plugins/stackleak: Avoid .head.text section
  - ALSA: hda/realtek: Add quirks for some Clevo laptops
  - fbmon: prevent division by zero in fb_videomode_from_videomode()
  - drivers/nvme: Add quirks for device 126f:2262
  - modpost: fix null pointer dereference
  - io_uring: clear opcode specific data for an early failure
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
  - x86/xen: attempt to inflate the memory balloon on PVH
  - ASoC: soc-core.c: Skip dummy codec when adding platforms
  - thermal/of: Assume polling-delay(-passive) 0 when absent
  - ASoC: amd: yc: Fix non-functional mic on ASUS M7600RE
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
  - usb: typec: tcpci: add generic tcpci fallback compatible
  - thunderbolt: Keep the domain powered when USB4 port is in redrive mode
  - usb: typec: ucsi: Limit read size on v1.2
  - usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
  - bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
  - tools: iio: replace seekdir() in iio_generic_buffer
  - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
  - Input: xpad - add support for Snakebyte GAMEPADs
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
  - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
  - Input: allocate keycode for Display refresh rate toggle
  - Input: imagis - use FIELD_GET where applicable
  - RDMA/cm: add timeout to cm_destroy_id wait
  - block: prevent division by zero in blk_rq_stat_sum()
  - input/touchscreen: imagis: Correct the maximum touch area value
  - libperf evlist: Avoid out-of-bounds access
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
  - PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  - drm: Check output polling initialized before disabling
  - drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()
  - HID: input: avoid polling stylus battery on Chromebook Pompom
  - i2c: designware: Fix RX FIFO depth define on Wangxun 10Gb NIC
  - accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings
  - drm/amd/display: Fix nanosec stat overflow
  - ext4: forbid commit inconsistent quota data when errors=remount-ro
  - ext4: add a hint for block bitmap corrupt state in mb_groups
  - ASoC: Intel: avs: Populate board selection with new I2S entries
  - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter
  - media: sta2x11: fix irq handler cast
  - Julia Lawall reported this null pointer dereference, this should fix it.
  - rcu-tasks: Repair RCU Tasks Trace quiescence check
  - rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
  - ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710) laptops
  - isofs: handle CDs with bad root inode but good Joliet root directory
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  - sysv: don't call sb_bread() with pointers_lock held
  - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
  - drm/ttm: return ENOSPC from ttm_bo_mem_space v3
  - ASoC: SOF: amd: Optimize quirk for Valve Galileo
  - drm: panel-orientation-quirks: Add quirk for GPD Win Mini
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
  - drm/vc4: don't check if plane->state->fb == state->fb
  - Bluetooth: Add new quirk for broken read key length on ATS2851
  - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
  - ice: use relative VSI index for VFs instead of PF VSI number
  - btrfs: send: handle path ref underflow in header iterate_inode_ref()
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
  - wifi: cfg80211: check A-MSDU format more carefully
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE() for *.pnvm
  - overflow: Allow non-type arg to type_max() and type_min()
  - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
  - wifi: ath11k: decrease MHI channel buffer length to 8KB
  - dma-direct: Leak pages on dma_set_decrypted() failure
  - net: pcs: xpcs: Return EINVAL in the internal methods
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
  - pstore/zone: Add a null pointer check to the psz_kmsg_read
  - ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of CONFIG_X86_ANDROID_TABLETS
  - wifi: mt76: mt7996: add locking for accessing mapped registers
  - wifi: mt76: mt7996: disable AMSDU for non-data frames
  - wifi: mt76: mt7915: add locking for accessing mapped registers
  - wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
  - firmware: tegra: bpmp: Return directly after a failed kzalloc() in get_filename()
  - net: skbuff: add overflow debug check to pull/push helpers
  - ionic: set adminq irq affinity
  - pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
  - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
  - net: add netdev_lockdep_set_classes() to virtual drivers
  - arm64: dts: rockchip: fix rk3399 hdmi ports node
  - arm64: dts: rockchip: fix rk3328 hdmi ports node
  - ARM: dts: rockchip: fix rk322x hdmi ports node
  - ARM: dts: rockchip: fix rk3288 hdmi ports node
  - cpuidle: Avoid potential overflow in integer multiplication
  - panic: Flush kernel log buffer at the end
  - printk: For @suppress_panic_printk check for other CPU in panic
  - wifi: iwlwifi: pcie: Add the PCI device id for new hardware
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
  - wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
  - net: phy: phy_device: Prevent nullptr exceptions on ISR
  - net: stmmac: dwmac-starfive: Add support for JH7100 SoC
  - bnx2x: Fix firmware version string character counts
  - wifi: rtw89: fix null pointer access when abort scan
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow
  - x86: set SPECTRE_BHI_ON as default
  - KVM: x86: Add BHI_NO
  - x86/bhi: Mitigate KVM by default
  - x86/bhi: Add BHI mitigation knob
  - x86/bhi: Enumerate Branch History Injection (BHI) bug
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S
  - x86/bhi: Add support for clearing branch history at syscall entry
  - x86/syscall: Don't force use of indirect calls for system calls
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
  - x86/boot: Move mem_encrypt= parsing to the decompressor
  - x86/efistub: Remap kernel text read-only before dropping NX attribute
  - x86/sev: Move early startup code into .head.text section
  - x86/sme: Move early SME kernel encryption handling into .head.text
  - efi/libstub: Add generic support for parsing mem_encrypt=
  - x86/head/64: Move the __head definition to <asm/init.h>
  - bpf: put uprobe link's path and task in release callback
  - mptcp: don't account accept() of non-MPC client as fallback to TCP
  - mptcp: don't overwrite sock_ops in mptcp_is_tcpsk()
  - selftests: mptcp: connect: fix shellcheck warnings
  - of: module: prevent NULL pointer dereference in vsnprintf()
  - Revert "x86/mpparse: Register APIC address only once"
  - drm/i915/gt: Enable only one CCS for compute workload
  - drm/i915/gt: Do not generate the command streamer for all the CCS
  - drm/i915/gt: Disable HW load balancing for CCS
  - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
  - smb: client: fix potential UAF in smb2_is_network_name_deleted()
  - smb: client: fix potential UAF in is_valid_oplock_break()
  - smb: client: fix potential UAF in smb2_is_valid_lease_break()
  - smb: client: fix potential UAF in smb2_is_valid_oplock_break()
  - smb: client: fix potential UAF in cifs_dump_full_key()
  - smb: client: fix potential UAF in cifs_stats_proc_show()
  - smb: client: fix potential UAF in cifs_stats_proc_write()
  - smb: client: fix potential UAF in cifs_debug_files_proc_show()
  - smb3: retrying on failed server close
  - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
  - smb: client: handle DFS tcons in cifs_construct_tcon()
  - riscv: process: Fix kernel gp leakage
  - riscv: Fix spurious errors from __get/put_kernel_nofault
  - s390/entry: align system call table on 8 bytes
  - selftests/mm: include strings.h for ffsl
  - mm/secretmem: fix GUP-fast succeeding on secretmem folios
  - arm64/ptrace: Use saved floating point state type to determine SVE layout
  - perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  - x86/mm/pat: fix VM_PAT handling in COW mappings
  - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
  - driver core: Introduce device_link_wait_removal()
  - io_uring/kbuf: hold io_buffer_list reference over mmap
  - io_uring: use private workqueue for exit work
  - io_uring/kbuf: protect io_buffer_list teardown with a reference
  - io_uring/kbuf: get rid of bl->is_ready
  - io_uring/kbuf: get rid of lower BGID lists
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
  - ALSA: hda/realtek - Fix inactive headset mic jack
  - ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
  - ksmbd: validate payload size in ipc response
  - ksmbd: don't send oplock break if rename fails
  - gpio: cdev: fix missed label sanitizing in debounce_setup()
  - gpio: cdev: check for NULL labels when sanitizing them for irqs
  - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
  - ice: fix typo in assignment
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
  - riscv: Disable preemption when using patch_map()
  - ASoC: SOF: amd: fix for false dsp interrupts
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning
  - spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe
  - cifs: Fix caching to try to do open O_WRONLY as rdwr on server
  - Revert "ALSA: emu10k1: fix synthesizer sample playback position and caching"
  - scsi: mylex: Fix sysfs buffer lengths
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  - regmap: maple: Fix uninitialized symbol 'ret' warnings
  - ASoC: amd: acp: fix for acp_init function error handling
  - spi: s3c64xx: Use DMA mode from fifo size
  - spi: s3c64xx: determine the fifo depth only once
  - spi: s3c64xx: allow full FIFO masks
  - spi: s3c64xx: define a magic value
  - spi: s3c64xx: remove else after return
  - spi: s3c64xx: explicitly include <linux/bits.h>
  - spi: s3c64xx: sort headers alphabetically
  - spi: s3c64xx: Extract FIFO depth calculation to a dedicated macro
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  - ASoC: rt722-sdca-sdw: fix locking sequence
  - ASoC: rt712-sdca-sdw: fix locking sequence
  - ASoC: rt711-sdw: fix locking sequence
  - ASoC: rt711-sdca: fix locking sequence
  - ASoC: rt5682-sdw: fix locking sequence
  - drm/prime: Unbreak virtgpu dma-buf export
  - nouveau/uvmm: fix addr/range calcs for remap operations
  - drm/panfrost: fix power transition timeout warnings
  - ALSA: hda: cs35l56: Add ACPI device match tables
  - regmap: maple: Fix cache corruption in regcache_maple_drop()
  - RISC-V: Update AT_VECTOR_SIZE_ARCH for new AT_MINSIGSTKSZ
  - drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
  - ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl()
  - 9p: Fix read/write debug statements to report server reply
  - fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
  - KVM: SVM: Add support for allowing zero SEV ASIDs
  - KVM: SVM: Use unsigned integers when dealing with ASIDs
  - net: ravb: Always update error counters
  - net: ravb: Always process TX descriptor ring
  - net: ravb: Let IP-specific receive function to interrogate descriptors
  - e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue
  - e1000e: Minor flow correction in e1000_shutdown function
  - e1000e: Workaround for sporadic MDI error on Meteor Lake systems
  - intel: legacy: field get conversion
  - intel: add bit macro includes where needed
  - i40e: Remove circular header dependencies and fix headers
  - i40e: Split i40e_osdep.h
  - i40e: Move memory allocation structures to i40e_alloc.h
  - i40e: Simplify memory allocation functions
  - virtchnl: Add header dependencies
  - i40e: Refactor I40E_MDIO_CLAUSE* macros
  - i40e: Remove back pointer from i40e_hw structure
  - i40e: Enforce software interrupt during busy-poll exit
  - i40e: Remove _t suffix from enum type names
  - drm/amd: Flush GFXOFF requests in prepare stage
  - drm/amd: Add concept of running prepare_suspend() sequence for IP blocks
  - drm/amd: Evict resources during PM ops prepare() callback
  - drm/amd/display: Prevent crash when disable stream
  - drm/amd/display: Fix DPSTREAM CLK on and off sequence
  - usb: typec: ucsi: Fix race between typec_switch and role_switch
  - i40e: fix vf may be used uninitialized in this function warning
  - i40e: fix i40e_count_filters() to count only active/new filters
  - octeontx2-af: Add array index check
  - octeontx2-pf: check negative error code in otx2_open()
  - octeontx2-af: Fix issue with loading coalesced KPU profiles
  - udp: prevent local UDP tunnel packets from being GROed
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel
  - r8169: skip DASH fw status checks when DASH is disabled
  - mlxbf_gige: stop interface during shutdown
  - ipv6: Fix infinite recursion in fib6_dump_done().
  - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
  - tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-wildcard addresses.
  - selftests: reuseaddr_conflict: add missing new line at the end of the output
  - erspan: make sure erspan_base_hdr is present in skb->head
  - i40e: Fix VF MAC filter removal
  - ice: fix enabling RX VLAN filtering
  - gro: fix ownership transfer
  - selftests: net: gro fwd: update vxlan GRO test expectations
  - net: dsa: mv88e6xxx: fix usable ports on 88e6020
  - net: phy: micrel: Fix potential null pointer dereference
  - net: fec: Set mac_managed_pm during probe
  - net: txgbe: fix i2c dev name cannot match clkdev
  - net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
  - net: stmmac: fix rx queue priority assignment
  - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
  - net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45()
  - net/sched: act_skbmod: prevent kernel-infoleak
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI
  - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
  - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
  - netfilter: validate user input for expected length
  - netfilter: nf_tables: discard table flag update with pending basechain deletion
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  - netfilter: nf_tables: flush pending destroy work before exit_net release
  - netfilter: nf_tables: reject new basechain after table flag update
  - x86/bugs: Fix the SRSO mitigation on Zen3/4
  - x86/nospec: Refactor UNTRAIN_RET[_*]
  - x86/srso: Disentangle rethunk-dependent options
  - x86/srso: Improve i-cache locality for alias mitigation
  - vsock/virtio: fix packet delivery to tap device
  - net: mana: Fix Rx DMA datasize and skb_over_panic
  - net: usb: ax88179_178a: avoid the interface always configured as random address
  - net/rds: fix possible cp null dereference
  - xen-netfront: Add missing skb_mark_for_recycle
  - selftests: mptcp: join: fix dev in check_endpoint
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  - netfilter: nf_tables: release batch on table validation from abort path
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation
  - Bluetooth: hci_event: set the conn encrypted before conn establishes
  - Bluetooth: add quirk for broken address properties
  - Bluetooth: qca: fix device-address endianness
  - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
  - Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
  - x86/bpf: Fix IP after emitting call depth accounting
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
  - selinux: avoid dereference of garbage after mount failure
  - KVM: arm64: Fix host-programmed guest events in nVHE
  - RISC-V: KVM: Fix APLIC in_clrip[x] read emulation
  - RISC-V: KVM: Fix APLIC setipnum_le/be write emulation
  - gpio: cdev: sanitize the label before requesting the interrupt
  - modpost: do not make find_tosym() return NULL
  - btrfs: fix race when detecting delalloc ranges during fiemap
  - btrfs: ensure fiemap doesn't race with writes when FIEMAP_FLAG_SYNC is given
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  - mm/treewide: replace pud_large() with pud_leaf()
  - dm integrity: fix out-of-range warning
  - drm/i915/mtl: Update workaround 14018575942
  - drm/i915/xelpg: Extend some workarounds/tuning to gfx version 12.74
  - drm/i915/mtl: Update workaround 14016712196
  - drm/i915: Replace several IS_METEORLAKE with proper IP version checks
  - drm/i915: Eliminate IS_MTL_GRAPHICS_STEP
  - drm/i915/xelpg: Call Xe_LPG workaround functions based on IP version
  - drm/i915: Consolidate condition for Wa_22011802037
  - drm/i915: Tidy workaround definitions
  - drm/i915/dg2: Drop pre-production GT workarounds
  - inet: inet_defrag: prevent sk release while still in use
  - Octeontx2-af: fix pause frame configuration in GMP mode
  - net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
  - net: bcmasp: Bring up unimac after PHY link up
  - netfilter: nf_tables: skip netdev hook unregistration if table is dormant
  - netfilter: nf_tables: reject table flag and netdev basechain updates
  - netfilter: nf_tables: reject destroy command to remove basechain hooks
  - cifs: Fix duplicate fscache cookie warnings
  - bpf: Protect against int overflow for stack access size
  - mlxbf_gige: call request_irq() after NAPI initialized
  - tls: get psock ref after taking rxlock to avoid leak
  - tls: adjust recv return with async crypto and failed copy to userspace
  - tls: recv: process_rx_list shouldn't use an offset with kvec
  - net: hns3: mark unexcuted loopback test result as UNEXECUTED
  - net: hns3: fix kernel crash when devlink reload during pf initialization
  - net: hns3: fix index limit to support all queue stats
  - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
  - selftests: vxlan_mdb: Fix failures with old libnet
  - net: wwan: t7xx: Split 64bit accesses to fix alignment issues
  - tcp: properly terminate timers for kernel sockets
  - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
  - s390/qeth: handle deferred cc1
  - igc: Remove stale comment about Tx timestamping
  - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
  - ice: fix memory corruption bug with suspend and rebuild
  - ice: realloc VSI stats arrays
  - ice: Refactor FW data type and fix bitmap casting issue
  - ALSA: hda: cs35l56: Set the init_done flag before component_add()
  - wifi: iwlwifi: mvm: include link ID when releasing frames
  - wifi: iwlwifi: disable multi rx queue for 9000
  - wifi: iwlwifi: mvm: rfi: fix potential response leaks
  - mlxbf_gige: stop PHY during open() error paths
  - tools: ynl: fix setting presence bits in simple nests
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  - arm64: bpf: fix 32bit unconditional bswap
  - dma-buf: Fix NULL pointer dereference in sanitycheck()
  - bpf, arm64: fix bug in BPF_LDX_MEMSX
  - s390/bpf: Fix bpf_plt pointer arithmetic
  - scripts/bpf_doc: Use silent mode when exec make cmd
  - drm/i915: Pre-populate the cursor physical dma address
  - drm/i915/display: Use i915_gem_object_get_dma_address to get dma address
  - Revert "workqueue.c: Increase workqueue name length"
  - Revert "workqueue: Move pwq->max_active to wq->max_active"
  - Revert "workqueue: Factor out pwq_is_empty()"
  - Revert "workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()"
  - Revert "workqueue: Move nr_active handling into helpers"
  - Revert "workqueue: Make wq_adjust_max_active() round-robin pwqs while activating"
  - Revert "workqueue: Introduce struct wq_node_nr_active"
  - Revert "workqueue: Shorten events_freezable_power_efficient name"
  - drm/amdgpu: fix use-after-free bug
  - tools/resolve_btfids: fix build with musl libc
  - x86/sev: Skip ROM range scans and validation for SEV-SNP guests
  - scsi: lpfc: Correct size for wqe for memset()
  - scsi: lpfc: Correct size for cmdwqe/rspwqe for memset()
  - usb: dwc3: pci: Drop duplicate ID
  - Revert "x86/bugs: Use fixed addressing for VERW operand"
  - x86/bugs: Use fixed addressing for VERW operand
  - scsi: qla2xxx: Delay I/O Abort on PCI error
  - scsi: qla2xxx: Change debug message during driver unload
  - scsi: qla2xxx: Fix double free of fcport
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer
  - scsi: qla2xxx: Fix command flush on cable pull
  - scsi: qla2xxx: NVME|FCP prefer flag not being honored
  - scsi: qla2xxx: Update manufacturer detail
  - scsi: qla2xxx: Split FCE|EFT trace control
  - scsi: qla2xxx: Fix N2N stuck connection
  - scsi: qla2xxx: Prevent command send on chip reset
  - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
  - usb: typec: ucsi_acpi: Refactor and fix DELL quirk
  - usb: typec: ucsi: Ack unsupported commands
  - usb: typec: ucsi: Clear EVENT_PENDING under PPM lock
  - usb: typec: Return size of buffer if pd_set operation succeeds
  - usb: udc: remove warning when queue disabled ep
  - usb: dwc2: gadget: LPM flow fix
  - usb: dwc2: gadget: Fix exiting from clock gating
  - usb: dwc2: host: Fix ISOC flow in DDMA mode
  - usb: dwc2: host: Fix hibernation flow
  - usb: dwc2: host: Fix remote wakeup from hibernation
  - USB: core: Fix deadlock in port "disable" sysfs attribute
  - USB: core: Add hub_get() and hub_put() routines
  - USB: core: Fix deadlock in usb_deauthorize_interface()
  - usb: dwc3: Properly set system wakeup
  - staging: vc04_services: fix information leak in create_component()
  - staging: vc04_services: changen strncpy() to strscpy_pad()
  - scsi: core: Fix unremoved procfs host directory regression
  - scsi: sd: Fix TCG OPAL unlock on system resume
  - vfio/pds: Make sure migration file isn't accessed after reset
  - drm/amd/display: Clear OPTC mem select on disable
  - drm/amd/display: Disconnect phantom pipe OPP from OPTC being disabled
  - drm/amd/display: Fix hang/underflow when transitioning to ODM4:1
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - usb: cdc-wdm: close race between read and workqueue
  - Revert "usb: phy: generic: Get the vbus supply"
  - mtd: spinand: Add support for 5-byte IDs
  - Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync
  - drm/i915/gt: Reset queue_priority_hint on parking
  - drm/i915: Do not match JSL in ehl_combo_pll_div_frac_wa_needed()
  - drm/i915/dsi: Go back to the previous INIT_OTP/DISPLAY_ON order, mostly
  - drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()
  - drm/i915/hwmon: Fix locking inversion in sysfs getter
  - drm/amdgpu: fix deadlock while reading mqd from debugfs
  - drm/amdkfd: fix TLB flush after unmap for GFX9.4.2
  - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed
  - net: ll_temac: platform_get_resource replaced by wrong function
  - nouveau/dmem: handle kcalloc() allocation failure
  - thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
  - block: Do not force full zone append completion in req_bio_endio()
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove()
  - mmc: core: Avoid negative index with array access
  - mmc: core: Initialize mmc_blk_ioc_data
  - mmc: sdhci-omap: re-tuning is needed after a pm transition to support emmc HS200 mode
  - selftests/mm: fix ARM related issue with fork after pthread_create
  - selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM
  - mm: cachestat: fix two shmem bugs
  - hexagon: vmlinux.lds.S: handle attributes section
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
  - Revert "drm/amd/display: Fix sending VSC (+ colorimetry) packets for DP/eDP displays without PSR"
  - wifi: iwlwifi: fw: don't always use FW dump trig
  - wifi: iwlwifi: mvm: disable MLO for the time being
  - wifi: cfg80211: add a flag to disable wireless extensions
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  - btrfs: zoned: use zone aware sb location for scrub
  - btrfs: zoned: don't skip block groups with 100% zone unusable
  - btrfs: fix race in read_extent_buffer_pages()
  - tmpfs: fix race on handling dquot rbtree
  - ARM: prctl: reject PR_SET_MDWE on pre-ARMv6
  - prctl: generalize PR_SET_MDWE support check to be per-arch
  - x86/efistub: Reinstate soft limit for initrd loading
  - x86/efistub: Add missing boot_params for mixed mode compat entry
  - init: open /initrd.image with O_LARGEFILE
  - ALSA: hda/tas2781: add locks to kcontrols
  - ALSA: hda/tas2781: remove digital gain kcontrol
  - perf top: Use evsel's cpus to replace user_requested_cpus
  - selftests/mm: Fix build with _FORTIFY_SOURCE
  - selftests/mm: gup_test: conform test to TAP format output
  - pwm: img: fix pwm clock lookup
  - efi: fix panic in kdump kernel
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
  - x86/mpparse: Register APIC address only once
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
  - irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type
  - irqchip/renesas-rzg2l: Rename rzg2l_irq_eoi()
  - irqchip/renesas-rzg2l: Rename rzg2l_tint_eoi()
  - irqchip/renesas-rzg2l: Add macro to retrieve TITSR register offset based on register's index
  - irqchip/renesas-rzg2l: Flush posted write in irq_eoi()
  - irqchip/renesas-rzg2l: Implement restriction when writing ISCR register
  - printk: Update @console_may_schedule in console_trylock_spinning()
  - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
  - swiotlb: Fix alignment checks when both allocation and DMA masks are present
  - swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc()
  - swiotlb: Fix double-allocation of slots due to broken alignment handling
  - entry: Respect changes to system call number by trace_sys_enter()
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
  - ARM: 9352/1: iwmmxt: Remove support for PJ4/PJ4B cores
  - clocksource/drivers/arm_global_timer: Fix maximum prescaler value
  - x86/sev: Fix position dependent variable references in startup code
  - x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
  - vfio/fsl-mc: Block calling interrupt handler without trigger
  - vfio/platform: Create persistent IRQ handlers
  - vfio/pci: Create persistent INTx handler
  - vfio: Introduce interface to flush virqfd inject workqueue
  - btrfs: fix deadlock with fiemap and extent locking
  - xfs: remove conditional building of rt geometry validator functions
  - xfs: reset XFS_ATTR_INCOMPLETE filter on node removal
  - xfs: update dir3 leaf block metadata after swap
  - xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
  - xfs: short circuit xfs_growfs_data_private() if delta is zero
  - xfs: initialise di_crc in xfs_log_dinode
  - xfs: add missing nrext64 inode flag check to scrub
  - xfs: force all buffers to be written during btree bulk load
  - xfs: fix an off-by-one error in xreap_agextent_binval
  - xfs: recompute growfsrtfree transaction reservation while growing rt volume
  - xfs: remove unused fields from struct xbtree_ifakeroot
  - xfs: make xchk_iget safer in the presence of corrupt inode btrees
  - xfs: don't allow overly small or large realtime volumes
  - xfs: fix 32-bit truncation in xfs_compute_rextslog
  - xfs: make rextslog computation consistent with mkfs
  - xfs: transfer recovered intent item ownership in ->iop_recover
  - xfs: pass the xfs_defer_pending object to iop_recover
  - xfs: use xfs_defer_pending objects to recover intent items
  - xfs: don't leak recovered attri intent items
  - xfs: consider minlen sized extents in xfs_rtallocate_extent_block
  - xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t
  - xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h
  - wifi: rtw88: 8821cu: Fix connection failure
  - wifi: iwlwifi: pcie: fix RB status reading
  - ASoC: amd: yc: Revert "Fix non-functional mic on Lenovo 21J2"
  - x86/efistub: Call mixed mode boot services on the firmware's stack
  - drm/amd/display: handle range offsets in VRR ranges
  - drm/i915: Don't explode when the dig port we don't have an AUX CH
  - iio: imu: inv_mpu6050: fix FIFO parsing when empty
  - iio: imu: inv_mpu6050: fix frequency setting when chip is off
  - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table
  - iio: accel: adxl367: fix I2C FIFO data register
  - iio: accel: adxl367: fix DEVID read after reset
  - arm64: dts: qcom: sc8280xp-x13s: limit pcie4 link speed
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  - ARM: imx_v6_v7_defconfig: Restore CONFIG_BACKLIGHT_CLASS_DEVICE
  - tee: optee: Fix kernel panic caused by incorrect error handling
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook
  - ALSA: hda/realtek - Add Headset Mic supported Acer NB platform
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  - Revert "tty: serial: simplify qcom_geni_serial_send_chunk_fifo()"
  - vt: fix unicode buffer corruption when deleting characters
  - mei: me: add arrow lake point H DID
  - mei: me: add arrow lake point S DID
  - serial: port: Don't suspend if the port is still busy
  - misc: fastrpc: Pass proper arguments to scm call
  - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
  - xhci: Fix failure to detect ring expansion need.
  - usb: port: Don't try to peer unused USB ports based on location
  - usb: gadget: ncm: Fix handling of zero block length packets
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
  - drm/i915: Check before removing mm notifier
  - tty: serial: imx: Fix broken RS485
  - drm/amdgpu/pm: Fix the error of pwm1_enable setting
  - tracing: Use .flush() call to wake up readers
  - SEV: disable SEV-ES DebugSwap by default
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
  - KVM: x86: Mark target gfn of emulated atomic instruction as dirty
  - firewire: ohci: prevent leak of left-over IRQ on unbind
  - init/Kconfig: lower GCC version check for -Warray-bounds
  - Input: xpad - add additional HyperX Controller Identifiers
  - cgroup/cpuset: Fix retval in update_cpumask()
  - usb: typec: tpcm: Fix PORT_RESET behavior for self powered devices
  - selftests: mptcp: diag: return KSFT_FAIL not test_cnt
  - mm, mmap: fix vma_merge() case 7 with vma_ops->close
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
  - crypto: sun8i-ce - Fix use after free in unprepare
  - crypto: rk3288 - Fix use after free in unprepare
  - drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf
  - nouveau: lock the client object tree.
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
  - netfilter: nf_tables: reject constant set with timeout
  - netfilter: nf_tables: disallow anonymous set with timeout flag
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
  - net: fix IPSTATS_MIB_OUTPKGS increment in OutForwDatagrams.
  - drm/amd/display: Use freesync when `DRM_EDID_FEATURE_CONTINUOUS_FREQ` found
  - workqueue: Shorten events_freezable_power_efficient name
  - drm/bridge: lt8912b: do not return negative values from .get_modes()
  - drm/bridge: lt8912b: clear the EDID property on failures
  - drm/bridge: lt8912b: use drm_bridge_edid_read()
  - drm/bridge: add ->edid_read hook and drm_bridge_edid_read()
  - drm/ttm: Make sure the mapped tt pages are decrypted when needed
  - wifi: brcmfmac: Demote vendor-specific attach/detach messages to info
  - wifi: brcmfmac: cfg80211: Use WSEC to set SAE password
  - wifi: brcmfmac: add per-vendor feature detection callback
  - x86/pm: Work around false positive kmemleak report in msr_build_context()
  - dm snapshot: fix lockup in dm_exception_table_exit
  - drm/amd/display: Fix noise issue on HDMI AV mute
  - drm/amd/display: Return the correct HDCP error code
  - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
  - ahci: asm1064: asm1166: don't limit reported ports
  - ahci: asm1064: correct count of reported ports
  - wireguard: selftests: set RISCV_ISA_FALLBACK on riscv{32,64}
  - wireguard: netlink: access device through ctx instead of peer
  - wireguard: netlink: check for dangling peer via is_dead instead of empty list
  - LoongArch/crypto: Clean up useless assignment operations
  - LoongArch: Define the __io_aw() hook as mmiowb()
  - LoongArch: Change __my_cpu_offset definition to avoid mis-optimization
  - virtio: reenable config if freezing device failed
  - cxl/trace: Properly initialize cxl_poison region name
  - net: hns3: tracing: fix hclgevf trace event strings
  - drm/i915: Add missing ; to __assign_str() macros in tracepoint code
  - NFSD: Fix nfsd_clid_class use of __string_len() macro
  - net: esp: fix bad handling of pages from page_pool
  - x86/CPU/AMD: Update the Zenbleed microcode revisions
  - cpufreq: dt: always allocate zeroed cpumask
  - mtd: rawnand: Constrain even more when continuous reads are enabled
  - mtd: rawnand: Fix and simplify again the continuous read derivations
  - cifs: open_cached_dir(): add FILE_READ_EA to desired access
  - cifs: reduce warning log level for server not advertising interfaces
  - cifs: make cifs_chan_update_iface() a void function
  - cifs: delete unnecessary NULL checks in cifs_chan_update_iface()
  - cifs: do not let cifs_chan_update_iface deallocate channels
  - cifs: make sure server interfaces are requested only for SMB3+
  - cifs: add xid to query server interface call
  - nilfs2: prevent kernel bug at submit_bh_wbc()
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  - f2fs: truncate page cache before clearing flags when aborting atomic write
  - f2fs: mark inode dirty for FI_ATOMIC_COMMITTED flag
  - Revert "block/mq-deadline: use correct way to throttling write requests"
  - memtest: use {READ,WRITE}_ONCE in memory scanning
  - drm/vc4: hdmi: do not return negative values from .get_modes()
  - drm/imx/ipuv3: do not return negative values from .get_modes()
  - drm/exynos: do not return negative values from .get_modes()
  - drm/panel: do not return negative error codes from drm_panel_get_modes()
  - drm/probe-helper: warn about negative .get_modes()
  - s390/zcrypt: fix reference counting on zcrypt card objects
  - soc: fsl: qbman: Use raw spinlock for cgr_lock
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  - dlm: fix user space lkb refcounting
  - ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
  - ring-buffer: Fix full_waiters_pending in poll
  - ring-buffer: Fix resetting of shortest_full
  - ring-buffer: Do not set shortest_full when full target is hit
  - ring-buffer: Fix waking up ring buffer readers
  - io_uring: clean rings on NO_MMAP alloc fail
  - platform/x86/intel/tpmi: Change vsec offset to u64
  - ksmbd: retrieve number of blocks using vfs_getattr in set_file_allocation_info
  - ksmbd: replace generic_fillattr with vfs_getattr
  - server: convert to new timestamp accessors
  - vfio/platform: Disable virqfds on cleanup
  - vfio/pci: Lock external INTx masking ops
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ
  - thermal/drivers/mediatek: Fix control buffer enablement on MT7896
  - cifs: allow changing password during remount
  - cifs: prevent updating file size from server if we have a read/write lease
  - smb: client: stop revalidating reparse points unnecessarily
  - PCI: hv: Fix ring buffer size calculation
  - PCI: dwc: endpoint: Fix advertised resizable BAR size
  - PCI: qcom: Enable BDF to SID translation properly
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
  - NFS: Read unlock folio on nfs_page_create_from_folio() error
  - nfs: fix UAF in direct writes
  - sparc32: Fix parport build with sparc32
  - io_uring: fix mshot io-wq checks
  - io_uring/net: correctly handle multishot recvmsg retry setup
  - PCI/AER: Block runtime suspend when handling errors
  - speakup: Fix 8bit characters from direct synth
  - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
  - phy: tegra: xusb: Add API to retrieve the port number of phy
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
  - nvmem: meson-efuse: fix function pointer type mismatch
  - ext4: fix corruption during on-line resize
  - hwmon: (amc6821) add of_match table
  - landlock: Warn once if a Landlock action is requested while disabled
  - drm/etnaviv: Restore some id values
  - leds: trigger: netdev: Fix kernel panic on interface rename trig notify
  - Bluetooth: btnxpuart: Fix btnxpuart_close
  - mmc: core: Fix switch on gp3 partition
  - mm: swap: fix race between free_swap_and_cache() and swapoff()
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del
  - block: Fix page refcounts for unaligned buffers in __bio_release_pages()
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
  - dm-raid: fix lockdep waring in "pers->hot_add_disk"
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
  - PCI/PM: Drain runtime-idle callbacks before driver removal
  - wifi: rtw88: Add missing VID/PIDs for 8811CU and 8821CU
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
  - btrfs: qgroup: always free reserved space for extent records
  - serial: Lock console when calling into driver before registration
  - serial: core: only stop transmit when HW fifo is empty
  - usb: dwc3-am62: Disable wakeup at remove
  - usb: dwc3-am62: fix module unload/reload behavior
  - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
  - fuse: don't unhash root
  - fuse: fix root lookup with nonzero generation
  - fuse: replace remaining make_bad_inode() with fuse_make_bad()
  - mmc: tmio: avoid concurrent runs of mmc_request_done()
  - PM: sleep: wakeirq: fix wake irq warning in system suspend
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
  - KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled
  - USB: serial: option: add MeiG Smart SLM320 product
  - USB: serial: cp210x: add ID for MGP Instruments PDS100
  - USB: serial: add device ID for VeriFone adapter
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
  - powerpc/fsl: Fix mfpmr build errors with newer binutils
  - usb: xhci: Add error handling in xhci_map_urb_for_dma
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
  - clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
  - vfio/pds: Always clear the save/restore FDs on reset
  - PM: suspend: Set mem_sleep_current during kernel command line setup
  - cpufreq: Limit resolving a frequency to policy min/max
  - docs: Restore "smart quotes" for quotes
  - iio: adc: rockchip_saradc: use mask for write_enable bitfield
  - iio: adc: rockchip_saradc: fix bitmask for channels on SARADCv2
  - md/raid5: fix atomicity violation in raid5_cache_count
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
  - parisc: Fix csum_ipv6_magic on 64-bit systems
  - parisc: Fix csum_ipv6_magic on 32-bit systems
  - parisc: Fix ip_fast_csum
  - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
  - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
  - x86/nmi: Fix the inverse "in NMI handler" check
  - md/md-bitmap: fix incorrect usage for sb_index
  - mtd: rawnand: meson: fix scrambling mode value in command macro
  - ubi: correct the calculation of fastmap size
  - ubifs: Set page uptodate in the correct place
  - fuse: fix VM_MAYSHARE and direct_io_allow_mmap
  - fat: fix uninitialized field in nostale filehandles
  - bounds: support non-power-of-two CONFIG_NR_CPUS
  - kasan/test: avoid gcc warning for intentional overflow
  - block: Clear zone limits for a non-zoned stacked queue
  - ext4: correct best extent lstart adjustment logic
  - selftests/mqueue: Set timeout to 180 seconds
  - sparc: vDSO: fix return value of __setup handler
  - sparc64: NMI watchdog: fix return value of __setup handler
  - powerpc/smp: Increase nr_cpu_ids to include the boot CPU
  - powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core
  - powercap: intel_rapl_tpmi: Fix System Domain probing
  - powercap: intel_rapl_tpmi: Fix a register bug
  - powercap: intel_rapl: Fix locking in TPMI RAPL
  - sched: Simplify tg_set_cfs_bandwidth()
  - powercap: intel_rapl: Fix a NULL pointer dereference
  - thermal/intel: Fix intel_tcc_get_temp() to support negative CPU temperature
  - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf()
  - arm64: dts: qcom: sm8550-mtp: correct WCD9385 TX port mapping
  - arm64: dts: qcom: sm8550-qrd: correct WCD9385 TX port mapping
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed
  - media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT
  - media: mc: Expand MUST_CONNECT flag to always require an enabled link
  - media: mc: Rename pad variable to clarify intent
  - media: mc: Add num_links flag to media_pad
  - media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
  - media: mc: Fix flags handling when creating pad links
  - media: mc: Add local pad to pipeline regardless of the link state
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency
  - pci_iounmap(): Fix MMIO mapping leak
  - drm/vmwgfx: Fix the lifetime of the bo cursor memory
  - serial: max310x: fix NULL pointer dereference in I2C instantiation
  - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
  - remoteproc: virtio: Fix wdg cannot recovery remote processor
  - arm64: dts: qcom: sc7280: Add additional MSI interrupts
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
  - wifi: brcmfmac: avoid invalid list operation when vendor attach fails
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  - drm/vmwgfx: Unmap the surface before resetting it on a plane state
  - KVM: x86: Use a switch statement and macros in __feature_translate()
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace
  - x86/efistub: Don't clear BSS twice in mixed mode
  - x86/efistub: Clear decompressor BSS in native EFI entrypoint
  - dm-integrity: align the outgoing bio in integrity_recheck
  - dm io: Support IO priority
  - selftests: forwarding: Fix ping failure due to short timeout
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
  - netfilter: nf_tables: Fix a memory leak in nf_tables_updchain
  - net: dsa: mt7530: fix handling of all link-local frames
  - net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
  - bpf: report RCU QS in cpumap kthread
  - net: report RCU QS on threaded NAPI repolling
  - rcu: add a helper to report consolidated flavor QS
  - netfilter: nf_tables: do not compare internal table flags on updates
  - netfilter: nft_set_pipapo: release elements in clone only from destroy path
  - octeontx2-af: Use separate handlers for interrupts
  - octeontx2-pf: Send UP messages to VF only when VF is up.
  - octeontx2-pf: Use default max_active works instead of one
  - octeontx2-pf: Wait till detach_resources msg is complete
  - octeontx2: Detect the mbox up or down message via register
  - devlink: fix port new reply cmd type
  - net/bnx2x: Prevent access to a freed page in page_pool
  - dm-integrity: fix a memory leak when rechecking the data
  - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
  - ceph: stop copying to iter at EOF on sync reads
  - ipv4: raw: Fix sending packets from raw sockets via IPsec tunnels
  - hsr: Handle failures in module init
  - rds: introduce acquire/release ordering in acquire/release_in_xmit()
  - wireguard: receive: annotate data-race around receiving_counter.counter
  - virtio: packed: fix unmap leak for indirect desc table
  - vdpa/mlx5: Allow CVQ size changes
  - vdpa_sim: reset must not run
  - drm: Fix drm_fixp2int_round() making it add 0.5
  - spi: spi-imx: fix off-by-one in mx51 CPU mode burst length
  - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
  - net: veth: do not manipulate GRO when using XDP
  - xfrm: Allow UDP encapsulation only in offload modes
  - packet: annotate data-races around ignore_outgoing
  - xen/events: increment refcnt only if event channel is refcounted
  - xen/evtchn: avoid WARN() when unbinding an event channel
  - riscv: Fix compilation error with FAST_GUP and rv32
  - io_uring: fix poll_remove stalled req completion
  - net: ethernet: mtk_eth_soc: fix PPE hanging issue
  - net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
  - nvme: fix reconnection fail due to reserved tag allocation
  - net: txgbe: fix clk_name exceed MAX_DEV_ID limits
  - hsr: Fix uninit-value access in hsr_get_node()
  - vmxnet3: Fix missing reserved tailroom
  - tcp: Fix refcnt handling in __inet_hash_connect().
  - io_uring: Fix release of pinned pages when __io_uaddr_map fails
  - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
  - soc: fsl: dpio: fix kcalloc() argument order
  - net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
  - s390/vtime: fix average steal time calculation
  - octeontx2-af: Use matching wake_up API variant in CGX command interface
  - rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
  - nouveau: reset the bo resource bus info after an eviction
  - ASoC: rockchip: i2s-tdm: Fix inaccurate sampling rates
  - spi: lpspi: Avoid potential use-after-free in probe()
  - io_uring: don't save/restore iowait state
  - thermal/drivers/qoriq: Fix getting tmu range
  - thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling path
  - ASoC: tlv320adc3xxx: Don't strip remove function when driver is builtin
  - x86/hyperv: Use per cpu initial stack for vtl context
  - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
  - staging: greybus: fix get_channel_from_mode() failure path
  - serial: 8250_exar: Don't remove GPIO device on suspend
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it
  - bus: mhi: ep: check the correct variable in mhi_ep_register_controller()
  - iio: gts-helper: Fix division loop
  - kconfig: fix infinite loop when expanding a macro at the end of file
  - coresight: etm4x: Set skip_power_up in etm4_init_arch_data function
  - coresight: Fix issue where a source device's helpers aren't disabled
  - arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
  - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
  - serial: max310x: fix syntax error in IRQ error message
  - tty: vt: fix 20 vs 0x20 typo in EScsiignore
  - usb: phy: generic: Get the vbus supply
  - iio: pressure: mprls0025pa fix off-by-one enum
  - remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef
  - remoteproc: stm32: Fix incorrect type in assignment for va
  - mei: gsc_proxy: match component when GSC is on different bus
  - comedi: comedi_test: Prevent timers rescheduling during deletion
  - io_uring/net: correct the type of variable
  - afs: Revert "afs: Hide silly-rename files from userspace"
  - f2fs: zone: fix to remove pow2 check condition for zoned block device
  - f2fs: compress: fix reserve_cblocks counting error when out of space
  - f2fs: compress: relocate some judgments in f2fs_reserve_compress_blocks
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs
  - NFS: Fix an off by one in root_nfs_cat()
  - NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt
  - Input: iqs7222 - add support for IQS7222D v1.1 and v1.2
  - RDMA/mana_ib: Fix bug in creation of dma regions
  - f2fs: ro: compress: fix to avoid caching unaligned extent
  - f2fs: fix to use correct segment type in f2fs_allocate_data_block()
  - watchdog: stm32_iwdg: initialize default timeout
  - watchdog: starfive: Check pm_runtime_enabled() before decrementing usage counter
  - f2fs: check number of blocks in a current section
  - f2fs: compress: fix to check compress flag w/ .i_sem lock
  - NFSv4.2: fix listxattr maximum XDR buffer size
  - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
  - f2fs: compress: fix to check zstd compress level correctly in mount option
  - f2fs: fix to create selinux label during whiteout initialization
  - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
  - RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
  - RDMA/device: Fix a race between mad_client and cm_client init
  - i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling
  - scsi: csiostor: Avoid function pointer casts
  - f2fs: fix to avoid potential panic during recovery
  - f2fs: compress: fix to cover f2fs_disable_compressed_file() w/ i_sem
  - f2fs: zone: fix to wait completion of last bio in zone correctly
  - f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic
  - f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode
  - f2fs: update blkaddr in __set_data_blkaddr() for cleanup
  - f2fs: introduce get_dnode_addr() to clean up codes
  - f2fs: delete obsolete FI_DROP_CACHE
  - f2fs: delete obsolete FI_FIRST_BLOCK_WRITTEN
  - f2fs: compress: fix to check unreleased compressed cluster
  - f2fs: compress: fix to cover normal cluster write with cp_rwsem
  - f2fs: compress: fix to guarantee persisting compressed blocks by CP
  - RDMA/srpt: Do not register event handler until srpt device is fully setup
  - RDMA/irdma: Remove duplicate assignment
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
  - ALSA: hda/tas2781: restore power state after system_resume
  - ALSA: hda/tas2781: configure the amp after firmware load
  - ALSA: hda/tas2781: do not call pm_runtime_force_* in system_resume/suspend
  - ALSA: hda/tas2781: add ptrs to calibration functions
  - ALSA: hda/tas2781: do not reset cur_* values in runtime_suspend
  - ALSA: hda/tas2781: add lock to system_suspend
  - ALSA: hda/tas2781: use dev_dbg in system_resume
  - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
  - cifs: Fix writeback data corruption
  - cifs: Don't use certain unnecessary folio_*() functions
  - smb: do not test the return value of folio_start_writeback()
  - PCI: brcmstb: Fix broken brcm_pcie_mdio_write() polling
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
  - clk: Fix clk_core_get NULL dereference
  - sparc32: Fix section mismatch in leon_pci_grpci
  - backlight: lp8788: Fully initialize backlight_properties during probe
  - backlight: lm3639: Fully initialize backlight_properties during probe
  - backlight: da9052: Fully initialize backlight_properties during probe
  - backlight: lm3630a: Don't set bl->props.brightness in get_brightness
  - backlight: lm3630a: Initialize backlight_properties on init
  - backlight: ktz8866: Correct the check for of_property_read_u32
  - leds: sgm3140: Add missing timer cleanup and flash gpio control
  - leds: aw2013: Unlock mutex before destroying it
  - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
  - mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults
  - modules: wait do_free_init correctly
  - drm/msm/dpu: add division of drm_display_mode's hskew parameter
  - clk: qcom: gcc-ipq5018: fix register offset for GCC_UBI0_AXI_ARES reset
  - clk: qcom: gcc-ipq5018: fix 'halt_reg' offset of 'gcc_pcie1_pipe_clk'
  - clk: qcom: gcc-ipq5018: fix 'enable_reg' offset of 'gcc_gmac0_sys_clk'
  - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
  - powerpc/pseries: Fix potential memleak in papr_get_attr()
  - mfd: cs42l43: Fix wrong register defaults
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
  - gpio: nomadik: fix offset bug in nmk_pmx_set()
  - drm/amd/pm: Fix esm reg mask use to get pcie speed
  - drm/tests: helpers: Include missing drm_drv header
  - arm64: ftrace: Don't forbid CALL_OPS+CC_OPTIMIZE_FOR_SIZE with Clang
  - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
  - media: ttpci: fix two memleaks in budget_av_attach
  - media: go7007: fix a memleak in go7007_load_encoder
  - media: dvb-frontends: avoid stack overflow warnings with clang
  - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
  - HID: amd_sfh: Avoid disabling the interrupt
  - HID: amd_sfh: Update HPD sensor structure elements
  - perf pmu: Fix a potential memory leak in perf_pmu__lookup()
  - ASoC: meson: axg-tdm-interface: add frame rate constraint
  - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
  - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
  - mtd: maps: physmap-core: fix flash size larger than 32-bit
  - clk: imx: imx8mp: Fix SAI_MCLK_SEL definition
  - drm/tidss: Fix sync-lost issue with two displays
  - drm/tidss: Fix initial plane zpos values
  - crypto: jitter - fix CRYPTO_JITTERENTROPY help text
  - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
  - crypto: arm/sha - fix function cast warnings
  - perf print-events: make is_event_supported() more robust
  - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref
  - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
  - media: i2c: imx290: Fix IMX920 typo
  - media: ivsc: csi: Swap SINK and SOURCE pads
  - drm/tegra: put drm_gem_object ref on error in tegra_fb_create
  - clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical
  - clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF
  - clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()
  - clk: mediatek: mt8135: Fix an error handling path in clk_mt8135_apmixed_probe()
  - clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
  - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister()
  - pinctrl: renesas: Allow the compiler to optimize away sh_pfc_pm
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
  - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
  - drm/panel: boe-tv101wum-nl6: make use of prepare_prev_first
  - drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'
  - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
  - media: pvrusb2: fix pvr2_stream_callback casts
  - media: pvrusb2: remove redundant NULL check
  - media: go7007: add check of return value of go7007_read_addr()
  - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
  - media: sun8i-di: Fix chroma difference threshold
  - media: sun8i-di: Fix power on/off sequences
  - media: sun8i-di: Fix coefficient writes
  - media: cedrus: h265: Fix configuring bitstream size
  - NTB: fix possible name leak in ntb_register_device()
  - drm: ci: use clk_ignore_unused for apq8016
  - ASoC: SOF: Add some bounds checking to firmware data
  - powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
  - ASoC: meson: t9015: fix function pointer type mismatch
  - ASoC: meson: aiu: fix function pointer type mismatch
  - perf metric: Don't remove scale from counts
  - perf stat: Avoid metric-only segv
  - perf expr: Fix "has_event" function for metric style events
  - ALSA: seq: fix function cast warnings
  - clk: renesas: r8a779f0: Correct PFC/GPIO parent clock
  - clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks
  - drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()
  - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
  - drm/msm/dpu: Only enable DSC_MODE_MULTIPLEX if dsc_merge is enabled
  - drm/msm/dpu: fix the programming of INTF_CFG2_DATA_HCTL_EN
  - dt-bindings: msm: qcom, mdss: Include ommited fam-b compatible
  - perf srcline: Add missed addr2line closes
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
  - drivers/ps3: select VIDEO to provide cmdline functions
  - crypto: xilinx - call finalize with bh disabled
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
  - PCI/P2PDMA: Fix a sleeping issue in a RCU read section
  - quota: Properly annotate i_dquot arrays with __rcu
  - quota: Fix rcu annotations of inode dquot pointers
  - clk: qcom: reset: Ensure write completion on reset de/assertion
  - clk: qcom: reset: Commonize the de/assert functions
  - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'
  - pinctrl: mediatek: Drop bogus slew rate register range for MT8192
  - pinctrl: mediatek: Drop bogus slew rate register range for MT8186
  - media: edia: dvbdev: fix a use-after-free
  - mtd: spinand: esmt: Extend IDs to 5 bytes
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
  - media: v4l2-tpg: fix some memleaks in tpg_alloc
  - media: em28xx: annotate unchecked call to media_device_register()
  - clk: meson: Add missing clocks to axg_clk_regmaps
  - perf bpf: Clean up the generated/copied vmlinux.h
  - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
  - media: v4l2: cci: print leading 0 on error
  - clk: samsung: exynos850: Propagate SPI IPCLK rate change
  - pinctrl: renesas: r8a779g0: Add missing SCIF_CLK2 pin group/function
  - drm/vmwgfx: Fix vmw_du_get_cursor_mob fencing of newly-created MOBs
  - ASoC: sh: rz-ssi: Fix error message print
  - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
  - perf pmu: Treat the msr pmu as software
  - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
  - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
  - perf record: Check conflict between '--timestamp-filename' option and pipe mode before recording
  - perf top: Uniform the event name for the hybrid machine
  - perf record: Fix possible incorrect free in record__switch_output()
  - PCI/DPC: Print all TLP Prefixes, not just the first
  - media: cadence: csi2rx: use match fwnode for media link
  - media: tc358743: register v4l2 async device only after successful setup
  - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
  - ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
  - ASoC: amd: acp: Add missing error handling in sof-mach
  - drm/lima: fix a memleak in lima_heap_alloc
  - drm/panel-edp: use put_sync in unprepare
  - drm/rockchip: lvds: do not print scary message when probing defer
  - drm/rockchip: lvds: do not overwrite error code
  - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
  - drm/vkms: Avoid reading beyond LUT array
  - drm: Don't treat 0 as -1 in drm_fixp2int_ceil
  - drm/rockchip: inno_hdmi: Fix video timing
  - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe()
  - drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()
  - drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
  - drm/tegra: hdmi: Fix some error handling paths in tegra_hdmi_probe()
  - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe()
  - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
  - drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
  - drm/tegra: dsi: Add missing check for of_find_device_by_node
  - dm: call the resume method on internal suspend
  - dm raid: fix false positive for requeue needed during reshape
  - bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes()
  - nfp: flower: handle acti_netdevs allocation failure
  - net/x25: fix incorrect parameter validation in the x25_getsockopt() function
  - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
  - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
  - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
  - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function
  - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
  - OPP: debugfs: Fix warning around icc_get_name()
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
  - net: phy: dp83822: Fix RGMII TX delay configuration
  - Bluetooth: Fix eir name length
  - net: phy: fix phy_get_internal_delay accessing an empty array
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
  - ipv6: fib6_rules: flush route cache when rule is changed
  - iommu: Fix compilation without CONFIG_IOMMU_INTEL
  - bpf: Fix stackmap overflow check on 32-bit arches
  - bpf: Fix hashtab overflow check on 32-bit arches
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
  - s390/cache: prevent rebuild of shared_cpu_list
  - Bluetooth: fix use-after-free in accessing skb after sending it
  - Bluetooth: af_bluetooth: Fix deadlock
  - Bluetooth: btusb: Fix memory leak
  - Bluetooth: msft: Fix memory leak
  - Bluetooth: msft: __hci_cmd_sync() doesn't return NULL
  - Bluetooth: hci_core: Fix possible buffer overflow
  - Bluetooth: btrtl: fix out of bounds memory access
  - Bluetooth: hci_h5: Add ability to allocate memory for private data
  - Bluetooth: hci_sync: Fix overwriting request callback
  - Bluetooth: hci_core: Cancel request on command timeout
  - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
  - Bluetooth: hci_event: Fix not indicating new connection for BIG Sync
  - Bluetooth: Remove BT_HS
  - Bluetooth: Remove superfluous call to hci_conn_check_pending()
  - Bluetooth: mgmt: Remove leftover queuing of power_off work
  - Bluetooth: Remove HCI_POWER_OFF_TIMEOUT
  - ice: fix stats being updated by way too large values
  - igb: Fix missing time sync events
  - igc: Fix missing time sync events
  - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
  - PCI: Make pci_dev_is_disconnected() helper public for other drivers
  - wifi: brcm80211: handle pmk_op allocation failure
  - wifi: rtw88: 8821c: Fix false alarm count
  - wifi: rtw88: 8821c: Fix beacon loss and disconnect
  - wifi: rtw88: 8821cu: Fix firmware upload fail
  - ACPI: CPPC: enable AMD CPPC V2 support for family 17h processors
  - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function
  - arm64: dts: qcom: sm8550: Fix SPMI channels size
  - SUNRPC: fix some memleaks in gssx_dec_option_array
  - SUNRPC: fix a memleak in gss_import_v2_context
  - x86, relocs: Ignore relocations in .notes section
  - objtool: Fix UNWIND_HINT_{SAVE,RESTORE} across basic blocks
  - arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s
  - arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller
  - arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu
  - ACPI: scan: Fix device check notification handling
  - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
  - ACPI: resource: Do IRQ override on Lunnen Ground laptops
  - ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override
  - arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
  - gpiolib: Pass consumer device through to core in devm_fwnode_gpiod_get_index()
  - regulator: userspace-consumer: add module device table
  - arm64: dts: imx8mp-evk: Fix hdmi@3d node
  - arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M Plus eDM SBC
  - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
  - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
  - arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF
  - pstore: inode: Only d_invalidate() is needed
  - pstore: inode: Convert mutex usage to guard(mutex)
  - net: mctp: copy skb ext data when fragmenting
  - arm64: dts: renesas: r8a779g0: Correct avb[01] reg sizes
  - arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
  - arm64: dts: renesas: rzg2l: Add missing interrupts to IRQC nodes
  - wifi: mt76: mt792x: fix a potential loading failure of the 6Ghz channel config from ACPI
  - wifi: mt76: mt7921e: fix use-after-free in free_irq()
  - wifi: mt76: mt792x: fix ethtool warning
  - wifi: mt76: mt7996: fix HIF_TXD_V2_1 value
  - wifi: mt76: mt7996: fix efuse reading issue
  - wifi: mt76: mt7996: fix HE beamformer phy cap for station vif
  - wifi: mt76: mt7996: fix incorrect interpretation of EHT MCS caps
  - wifi: mt76: mt7996: fix TWT issues
  - memory: tegra: Correct DLA client names
  - ARM: dts: arm: realview: Fix development chip ROM compatible value
  - wifi: wilc1000: revert reset line logic flip
  - arm64: dts: ti: k3-am62p: Fix memory ranges for DMSS
  - firmware: arm_scmi: Fix double free in SMC transport cleanup path
  - arm64: dts: ti: Add common1 register space for AM62x SoC
  - arm64: dts: ti: Add common1 register space for AM65x SoC
  - arm64: dts: mt8195-cherry-tomato: change watchdog reset boot flow
  - arm64: dts: ti: k3-am64-main: Fix ITAP/OTAP values for MMC
  - arm64: dts: ti: k3-am64: Enable SDHCI nodes at the board level
  - arm64: dts: ti: k3-am642-sk: Add boot phase tags marking
  - arm64: dts: ti: k3-am642-evm: Add boot phase tags marking
  - arm64: dts: ti: k3-j784s4-evm: Remove Pinmux for CTS and RTS in wkup_uart0
  - arm64: dts: ti: k3-j721s2-common-proc-board: Remove Pinmux for CTS and RTS in wkup_uart0
  - arm64: dts: ti: k3-j7200-common-proc-board: Remove clock-frequency from mcu_uart0
  - arm64: dts: ti: k3-j7200-common-proc-board: Modify Pinmux for wkup_uart0 and mcu_uart0
  - net: ena: Remove ena_select_queue
  - powercap: dtpm_cpu: Fix error check against freq_qos_add_request()
  - arm64: dts: qcom: sm8150: correct PCIe wake-gpios
  - arm64: dts: qcom: sm8150: use 'gpios' suffix for PCI GPIOs
  - arm64: dts: qcom: sdm845-db845c: correct PCIe wake-gpios
  - wifi: brcmsmac: avoid function pointer casts
  - iommu/amd: Mark interrupt as managed
  - bus: tegra-aconnect: Update dependency to ARCH_TEGRA
  - arm64: dts: ti: k3-am62-main: disable usb lpm
  - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
  - cpufreq: qcom-hw: add CONFIG_COMMON_CLK dependency
  - arm64: dts: mediatek: mt8186: Add missing xhci clock to usb controllers
  - arm64: dts: mediatek: mt8186: Add missing clocks to ssusb power domains
  - ARM: dts: qcom: msm8974: correct qfprom node size
  - soc: qcom: llcc: Check return value on Broadcast_OR reg read
  - arm64: dts: qcom: sdm845: Use the Low Power Island CX/MX for SLPI
  - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
  - wifi: iwlwifi: mvm: Fix the listener MAC filter flags
  - can: m_can: Start/Cancel polling timer together with interrupts
  - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
  - arm64: dts: mediatek: mt8186: fix VENC power domain clocks
  - arm64: dts: mediatek: mt8192: fix vencoder clock name
  - arm64: dts: mediatek: mt8192-asurada: Remove CrosEC base detection node
  - arm64: dts: mediatek: mt7986: add "#reset-cells" to infracfg
  - arm64: dts: mediatek: mt7986: drop "#clock-cells" from PWM
  - arm64: dts: mediatek: mt7986: fix SPI nodename
  - arm64: dts: mediatek: mt7986: fix SPI bus width properties
  - arm64: dts: mediatek: mt7986: drop crypto's unneeded/invalid clock name
  - arm64: dts: mediatek: mt7986: fix reference to PWM in fan node
  - arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
  - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
  - selftests: forwarding: Add missing multicast routing config entries
  - selftests: forwarding: Add missing config entries
  - s390/vdso: drop '-fPIC' from LDFLAGS
  - s390/pai: fix attr_event_free upper limit for pai device drivers
  - wifi: iwlwifi: mvm: don't set replay counters to 0xff
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
  - wifi: iwlwifi: mvm: fix erroneous queue index mask
  - wifi: iwlwifi: support EHT for WH
  - tools/resolve_btfids: Fix cross-compilation to non-host endianness
  - tools/resolve_btfids: Refactor set sorting with types from btf_ids.h
  - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
  - printk: Disable passing console lock owner completely during panic()
  - wifi: ath12k: fix incorrect logic of calculating vdev_stats_id
  - arm64: dts: qcom: sm6115: declare VLS CLAMP register for USB3 PHY
  - arm64: dts: qcom: qcm2290: declare VLS CLAMP register for USB3 PHY
  - wifi: wfx: fix memory leak when starting AP
  - libbpf: Use OPTS_SET() macro in bpf_xdp_query()
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
  - wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use
  - arm64: dts: ti: k3-j784s4: Fix power domain for VTM node
  - arm64: dts: ti: k3-j721s2: Fix power domain for VTM node
  - net: blackhole_dev: fix build warning for ethh set but not used
  - pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
  - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
  - gpio: vf610: allow disabling the vf610 driver
  - wifi: iwlwifi: read BIOS PNVM only for non-Intel SKU
  - wifi: iwlwifi: mvm: fix the TLC command after ADD_STA
  - wifi: iwlwifi: mvm: d3: fix IPN byte order
  - wifi: iwlwifi: fix EWRD table validity check
  - wifi: iwlwifi: mvm: initialize rates in FW earlier
  - wifi: iwlwifi: acpi: fix WPFC reading
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination
  - wifi: iwlwifi: mvm: report beacon protection failures
  - wifi: ath12k: fix fetching MCBC flag for QCN9274
  - wifi: ath12k: Update Qualcomm Innovation Center, Inc. copyrights
  - wifi: ath11k: change to move WMI_VDEV_PARAM_SET_HEMU_MODE before WMI_PEER_ASSOC_CMDID
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
  - libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API
  - arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM module
  - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL board
  - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL OSM-S board
  - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL board
  - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL OSM-S board
  - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
  - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S i.MX8MM
  - selftests/bpf: Disable IPv6 for lwt_redirect test
  - arm64: dts: renesas: r8a779g0: Add missing SCIF_CLK2
  - arm64: dts: renesas: r8a779g0: Restore sort order
  - arm64: dts: qcom: sa8540p: Drop gfx.lvl as power-domain for gpucc
  - pmdomain: qcom: rpmhpd: Drop SA8540P gfx.lvl
  - libbpf: Fix faccessat() usage on Android
  - cpufreq: mediatek-hw: Don't error out if supply is not found
  - arm64: dts: qcom: sdm845-oneplus-common: improve DAI node naming
  - soc: qcom: socinfo: rename PM2250 to PM4125
  - arm64: dts: qcom: sm8450: Add missing interconnects to serial
  - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
  - selftests/bpf: Wait for the netstamp_needed_key static key to be turned on
  - selftests/bpf: Fix the flaky tc_redirect_dtime test
  - selftests/bpf: Add netkit to tc_redirect selftest
  - selftests/bpf: De-veth-ize the tc_redirect test case
  - wifi: ath12k: Fix issues in channel list update
  - selftest/bpf: Add map_in_maps with BPF_MAP_TYPE_PERF_EVENT_ARRAY values
  - libbpf: Apply map_set_def_max_entries() for inner_maps on creation
  - selftests/bpf: Fix potential premature unload in bpf_testmod
  - bpftool: Silence build warning about calloc()
  - inet_diag: annotate data-races around inet_diag_table[]
  - sock_diag: annotate data-races around sock_diag_handlers[family]
  - cpufreq: mediatek-hw: Wait for CPU supplies before probing
  - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
  - arm64: dts: qcom: sc8180x: Shrink aoss_qmp register space size
  - arm64: dts: qcom: sc8180x: Require LOW_SVS vote for MMCX if DISPCC is on
  - arm64: dts: qcom: sc8180x: Don't hold MDP core clock at FMAX
  - arm64: dts: qcom: sc8180x: Fix eDP PHY power-domains
  - arm64: dts: qcom: sc8180x: Add missing CPU off state
  - arm64: dts: qcom: sc8180x: Fix up big CPU idle state entry latency
  - arm64: dts: qcom: sc8180x: Hook up VDD_CX as GCC parent domain
  - ARM: dts: renesas: r8a73a4: Fix external clocks and clock rate
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
  - wifi: wilc1000: fix multi-vif management when deleting a vif
  - wifi: wilc1000: do not realloc workqueue everytime an interface is added
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
  - wifi: wilc1000: fix RCU usage in connect path
  - wifi: wilc1000: fix declarations ordering
  - wifi: b43: Disable QoS for bcm4331
  - wifi: b43: Stop correct queue in DMA worker when QoS is disabled
  - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  - timekeeping: Fix cross-timestamp interpolation for non-x86
  - timekeeping: Fix cross-timestamp interpolation corner case decision
  - timekeeping: Fix cross-timestamp interpolation on counter wrap
  - x86/sme: Fix memory encryption setting if enabled by default and not overridden
  - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  - io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
  - io_uring/net: move receive multishot out of the generic msghdr path
  - io_uring/net: unify how recvmsg and sendmsg copy in the msghdr
  - rtc: test: Fix invalid format specifier.
  - time: test: Fix incorrect format specifier
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg
  - lib/cmdline: Fix an invalid format specifier in an assertion msg
  - kunit: test: Log the correct filter string in executor_test
  - ovl: Always reject mounting over case-insensitive directories
  - ovl: add support for appending lowerdirs one by one
  - ovl: refactor layer parsing helpers
  - ovl: store and show the user provided lowerdir mount option
  - ovl: remove unused code in lowerdir param parsing
  - md: Don't clear MD_CLOSING when the raid is about to stop
  - fs/select: rework stack allocation hack for clang
  - rcu/exp: Handle RCU expedited grace period kworker allocation failure
  - rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure recovery
  - s390/dasd: fix double module refcount decrement
  - s390/dasd: Use dev_*() for device log messages
  - io_uring: remove unconditional looping in local task_work handling
  - io_uring: remove looping around handling traditional task_work
  - fs: Fix rw_hint validation
  - workqueue: Introduce struct wq_node_nr_active
  - workqueue: Make wq_adjust_max_active() round-robin pwqs while activating
  - workqueue: Move nr_active handling into helpers
  - workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()
  - workqueue: Factor out pwq_is_empty()
  - workqueue: Move pwq->max_active to wq->max_active
  - workqueue.c: Increase workqueue name length
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
  - Input: gpio_keys_polled - suppress deferred probe error for gpio
  - xfrm: set skb control buffer based on packet offload as well
  - xfrm: fix xfrm child route lookup for packet offload
  - ASoC: amd: yc: Add HP Pavilion Aero Laptop 13-be2xxx(8BD6) into DMI quirk table
  - x86/hyperv: Allow 15-bit APIC IDs for VTL platforms
  - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
  - arm64: tegra: Set the correct PHY mode for MGBE
  - perf: RISCV: Fix panic on pmu overflow handler
  - firewire: core: use long bus reset on gap count error
  - Bluetooth: mgmt: Fix limited discoverable off timeout
  - ASoC: amd: yc: Fix non-functional mic on Lenovo 21J2
  - drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
  - ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
  - ASoC: amd: yc: Add Lenovo ThinkBook 21J0 into DMI quirk table
  - drm/ttm/tests: depend on UML || COMPILE_TEST
  - wifi: mac80211: only call drv_sta_rc_update for uploaded stations
  - net: smsc95xx: add support for SYS TEC USB-SPEmodule1
  - regulator: max5970: Fix regulator child node name
  - ARM: dts: renesas: rcar-gen2: Add missing #interrupt-cells to DA9063 nodes
  - arm64: dts: qcom: Fix interrupt-map cell sizes
  - arm: dts: Fix dtc interrupt_map warnings
  - arm64: dts: Fix dtc interrupt_provider warnings
  - arm: dts: Fix dtc interrupt_provider warnings
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly
  - platform/x86: x86-android-tablets: Fix acer_b1_750_goodix_gpios name
  - perf: CXL: fix CPMU filter value mask length
  - cxl/region: Allow out of order assembly of autodiscovered regions
  - cxl/region: Handle endpoint decoders in cxl_region_find_decoder()
  - block: sed-opal: handle empty atoms when parsing response
  - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
  - net/iucv: fix the allocation size of iucv_path_table array
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
  - riscv: dts: sifive: add missing #interrupt-cells to pmic
  - ARM: dts: rockchip: Drop interrupts property from pwm-rockchip nodes
  - RDMA/mlx5: Relax DEVX access upon modify commands
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment
  - arm64: dts: rockchip: mark system power controller on rk3588-evb1
  - soc: microchip: Fix POLARFIRE_SOC_SYS_CTRL input prompt
  - arm64/sve: Lower the maximum allocation for the SVE ptrace regset
  - gen_compile_commands: fix invalid escape sequence warning
  - ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend
  - HID: multitouch: Add required quirk for Synaptics 0xcddc device
  - MIPS: Clear Cause.BD in instruction_pointer_set
  - x86/xen: Add some null pointer checking to smp.c
  - ASoC: amd: yc: Fix non-functional mic on Lenovo 82UU
  - regmap: kunit: Ensure that changed bytes are actually different
  - spi: intel-pci: Add support for Lunar Lake-M SPI serial flash
  - ASoC: rt5645: Make LattePanda board DMI match more precise
  - selftests: tls: use exact comparison in recv_partial
  - selftests: openvswitch: Add validation for the recursion test
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count)
  - wifi: iwlwifi: mvm: use correct address 3 in A-MSDU
  - ASoC: cs42l43: Handle error from devm_pm_runtime_enable
  - media: rkisp1: Fix IRQ handling due to shared interrupts
  - soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free
  - io_uring: drop any code related to SCM_RIGHTS
  - io_uring/unix: drop usage of io_uring socket
  - platform/x86: p2sb: On Goldmont only cache P2SB and SPI devfn BAR
  - !6730  quota: Fix potential NULL pointer dereference
  - quota: Fix potential NULL pointer dereference
  - !6782 i2c: hisi: Add I2C controller reset and initialization  proccess in bus recovery action
  - i2c: hisi: Correct the description comment for PIN_MUX METHOD
  - i2c: hisi: Add I2C controller reset and initialization proccess in bus recovery action
  - !6760 spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
  - spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
  - !3176 [OLK-6.6] Turning off Zhaoxin ahci controller runtime pm
  - Turning off Zhaoxin ahci controller runtime pm
  - !6403  iommu/arm-smmu-v3: fix using uninitialized or unchecked symbol
  - iommu/arm-smmu-v3: fix using uninitialized or unchecked symbol
  - !6479  do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
  - !6005 [OLK-6.6]Add Yunsilicon eth driver and rdma driver
  - drivers: support for xsc drivers from Yunsilicon Technology
  - !6595  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
  - arm64: update openeuler_defconfig for HVO enable
  - arm64: mm: Re-enable OPTIMIZE_HUGETLB_VMEMMAP
  - arm64: mm: HVO: support BBM of vmemmap pgtable safely
  - mm: HVO: introduce helper function to update and flush pgtable
  - !6731 [OLK-6.6] watchdog: Fix call trace when failed to initialize sdei
  - watchdog: Fix call trace when failed to initialize sdei
  - !6651 [OLK - 6.6]net: hns3: add support for Hisilicon ptp sync device
  - net: hns3: add support for Hisilicon ptp sync device
  - !6385  ipvlan: Fix warning while IPVLAN_L2E disabled
  - ipvlan: Fix warning while IPVLAN_L2E disabled
  - !6409 [OLK-6.6] irqchip: gic-v3: Collection table support muti pages
  - irqchip: gic-v3: Collection table support muti pages
  - !6735 v2  SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
  - SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
  - !6590 v6  Introduce BPF_READAHEAD option for optimizing read performance
  - arch: Add BPF_READAHEAD config options for supported architectures
  - mm, fs: Add BPF_READAHEAD build option for bpf readhead
  - !6681 v2  btrfs: fix data races when accessing the reserved amount of block reserves
  - btrfs: fix data races when accessing the reserved amount of block reserves


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-25.0.0.28
changelog:
  - !6930  fix general protection fault in update_cpumask
  - cgroup/cpuset: fix general protection fault in update_cpumask
  - !6905 v2  arm64: mmap: disable align larger anonymous mappings on THP boundaries
  - arm64: mmap: disable align larger anonymous mappings on THP boundaries
  - !7015  Fixes and cleanups to fs-writeback
  - fs/writeback: remove unnecessary return in writeback_inodes_sb
  - fs/writeback: correct comment of __wakeup_flusher_threads_bdi
  - fs/writeback: only calculate dirtied_before when b_io is empty
  - fs/writeback: remove unused parameter wb of finish_writeback_work
  - fs/writeback: bail out if there is no more inodes for IO and queued once
  - fs/writeback: avoid to writeback non-expired inode in kupdate writeback
  - !6581  LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI
  - LoongArch: fix KASLR can not be disabled by nokaslr when boot from old BPI
  - !6483  LoongArch: fix boot error caused by ioremap_page_range error
  - LoongArch: fix boot error caused by ioremap_page_range error
  - !6759 net: hns3: backport some maillist patches
  - net: hns3: move constants from hclge_debugfs.h to hclge_debugfs.c
  - net: hns3: dump more reg info based on ras mod
  - net: hns3: add command queue trace for hns3
  - net: hns3: add support to query scc version by devlink info
  - net: hns3: revert "net: hns3: dump more reg info based on ras mod"
  - net: hns3: revert "net: hns3: add command queue trace for hns3"
  - net: hns3: revert "net: hns3: add support to query scc version by devlink info"
  - !7011 v3  bugfix patches from OLK-5.10
  - x86/quirks: Add parameter to clear MSIs early on boot
  - x86/PCI: Export find_cap() to be used in early PCI code
  - !6844  block: fix deadlock between bd_link_disk_holder and partition scan
  - block: fix deadlock between bd_link_disk_holder and partition scan
  - !5879 [OLK-6.6] Fix 'duplicate symbol rnp10_netdev_ops' error  for RNPGBE driver with x86_64-allyesconfig
  - RNPGBE: NET: Fix 'duplicate symbol rnp10_netdev_ops' errors
  - !5836 [OLK-6.6] Fix "'snprintf' output between 10 and 37 bytes into a destination of size 24" warning for RNP driver with loongarch-allmodconfig
  - RNP: NET: Fix "'snprintf' output between 10 and 37 bytes into a 	  destination of size 24" wanrings


author: Mingzheng Xing <xingmingzheng@iscas.ac.cn> - 6.6.0-25.0.0.29
changelog:
  - Add riscv-kernel patch, which adds support for sg2042 and th1520 RISC-V SoCs. 
  - This patch only applies to the RISC-V architecture, the related commit list:
  -
  - th1520: riscv: config: Enable th1520 support
  - riscv: thead: Use the wback_inv instead of wback_only
  - riscv: errata: thead: use pa based instructions for CMO
  - riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - Revert "riscv: errata: thead: use riscv_nonstd_cache_ops for CMO"
  - Revert "riscv: errata: thead: use pa based instructions for CMO"
  - riscv: mm: fix NOCACHE_THEAD does not set bit[61] correctly
  - riscv: mm: update T-Head memory type definitions
  - Revert "sg2042: riscv: changing T-Head PBMT attributes"
  - riscv: remove compression for riscv Image
  - th1520: cpufreq: correct typo in config name
  - th1520: riscv: dts: thead: Add Milk-V Meles board
  - th1520: cpufreq: light-mpw-cpufreq: fix -Wunused-variable in panic_cpufreq_notifier_call
  - th1520: cpufreq: light-mpw-cpufreq: fix cpu_pll1 already disabled warning
  - riscv: Add th1520-lichee-cluster-4a dts support (8G/16G)
  - riscv: dts: th1520-beaglev-ahead: add alias for emmc & sd
  - riscv: dts: th1520-lichee-pi-4a: add alias for emmc & sd
  - riscv: dts: lpi4a 16g support
  - th1520: perf vendor events riscv: add T-HEAD C9xx JSON file
  - th1520: riscv: dts: thead: Add PMU event node
  - riscv: pinctrl: th1520: fix build
  - riscv: dts: th1520: lpi4a: add rpmsg node
  - riscv: dts: th1520: add mbox client node
  - riscv: rpmsg: mailbox-client: sync thead sdk 1.4.2
  - riscv: panic: add thead sdk quirks
  - riscv: dts: add watchdog node
  - th1520: riscv: dts: Add th1520 reset device tree
  - th1520: reset: Add th1520 reset driver support
  - th1520: dt-bindings: reset: Document th1520 reset control
  - riscv: light_wdt: update sdk 1.4.2
  - th1520_light_event: update sdk 1.4.2
  - th1520_aon: update sdk 1.4.2
  - th1520: fix compile th1520-beaglev-ahead error
  - th1520: add TH1520 cpu frequency driver
  - th1520: riscv: errata: thead: use pa based instructions for CMO
  - th1520: riscv: errata: thead: use riscv_nonstd_cache_ops for CMO
  - riscv: dts: thead: Add TH1520 CPU reset node
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A USB
  - th1520: riscv: dts: thead: Add Lichee Pi 4A IO expansions
  - th1520: riscv: dts: thead: Add TH1520 USB nodes
  - th1520: riscv: dts: thead: Add TH1520 I2C nodes
  - th1520: usb: dwc3: add T-HEAD TH1520 usb driver
  - th1520: dt-bindings: usb: Add T-HEAD TH1520 USB controller
  - th1520: riscv: dts: thead: Add BeagleV Ahead SDIO0 pins
  - th1520: riscv: dts: thead: Add Lichee Pi 4A SDIO0 pins
  - th1520: riscv: dts: thead: Add TH1520 ethernet nodes
  - th1520: net: stmmac: add glue layer for T-HEAD TH1520 SoC
  - th1520: dt-bindings: net: add T-HEAD dwmac support
  - th1520: dt-bindings: net: snps,dwmac: allow dwmac-3.70a to set pbl properties
  - th1520: riscv: dts: thead: Enable Lichee Pi 4A PWM fan
  - th1520: riscv: dts: thead: Add TH1520 PVT node
  - th1520: riscv: dts: thead: Add TH1520 PWM node
  - th1520: pwm: add T-HEAD PWM driver
  - th1520: dt-bindings: pwm: Add T-HEAD PWM controller
  - th1520: gpio: dwapb: Use generic request, free and set_config
  - riscv: dts: thead: Enable LicheePi 4A eMMC and microSD
  - riscv: dts: thead: Enable BeagleV Ahead eMMC and microSD
  - riscv: dts: thead: Add TH1520 mmc controllers and sdhci clock
  - riscv: defconfig: Enable mmc and dma drivers for T-Head TH1520
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520
  - mmc: sdhci: add __sdhci_execute_tuning() to header
  - dt-bindings: mmc: sdhci-of-dwcmhsc: Add T-Head TH1520 support
  - th1520: riscv: dtb: thead: Add BeagleV Ahead LEDs
  - th1520: riscv: dts: thead: Add TH1520 pinctrl settings for UART0
  - th1520: riscv: dts: thead: Adjust TH1520 GPIO labels
  - th1520: riscv: dts: thead: Add TH1520 GPIO ranges
  - th1520: riscv: dts: thead: Add TH1520 pin control nodes
  - th1520: pinctrl: Add driver for the T-Head TH1520 SoC
  - th1520: dt-bindings: pinctrl: Add thead,th1520-pinctrl bindings
  - th1520: dt-bindings: gpio: dwapb: allow gpio-ranges
  - sg2042: riscv: config: Enable sg2042 support
  - sg2042: riscv: changing T-Head PBMT attributes
  - sg2042: kconfig: Enable DW_APB_TIMER_OF in ARCH_SOPHGO
  - sg2042: pcie contronller msi-x whitelist add device_id
  - sg2042: nvidia hda: force msi
  - sg2042: radeon hack: force 64-bit msi to fit top intc
  - sg2042: amdgpu: disable rebar
  - sg2042: ttm: disallow cached mapping
  - sg2042: mango pci hack: broadcast when no MSI source known
  - sg2042: riscv: dts: separate sg2042 mtime and mtimecmp to fit aclint format
  - sg2042: dt-bindings: timer: thead,c900-aclint-mtimer: separate mtime and mtimecmp regs
  - sg2042: riscv: dts: modify the PCIe range
  - sg2042: drivers: clk: turn off non-essential clocks by default
  - sg2042: drivers: clk: Avoid the problem of serial port garbled characters
  - sg2042: mm: Modify __find_max_addr for memory hole
  - sg2042: riscv: dts: Add timer apb clock
  - sg2042: riscv: dts: Remove cma node
  - sg2042: riscv: dts: Add uart apb clock and remove sysdma clock
  - sg2042: riscv: dts: Move memory node from dts to zsbl
  - sg2042: riscv: dts: Reduce bootargs
  - sg2042: riscv: dts: Configure external interrupt in m mode
  - sg2042: rebase: v6.6-rc1: Fix some compile warnings
  - sg2042: riscv: dts: Remove nvme paremeter in bootargs
  - sg2042: riscv: dtsi: confirm correspondence between PMU events and IDs
  - sg2042: driver: pcie: support msix for top intr
  - sg2042: driver: mmc: add config for MMC_SDHCI_SOPHGO
  - sg2042: riscv: Kconfig: Set vector as default no
  - sg2042: driver: soc: Add sophgo sg2042 soc support
  - sg2042: driver: net: Add sophgo sg2042 soc support
  - sg2042: driver: mmc: Add sophgo sg2042 soc support
  - sg2042: driver: pcie: Add sophgo sg2042 soc support
  - sg2042: driver: reset: Add sophgo sg2042 soc support
  - sg2042: driver: pinctrl: Add sophgo sg2042 soc support
  - sg2042: driver: clk: Add sophgo sg2042 soc support
  - sg2042: riscv: dts: Add sophgo sg2042 soc support
  - sg2042: riscv: defconfig: enable SOPHGO SoC
  - sg2042: riscv: dts: sophgo: add Milk-V Pioneer board device tree
  - sg2042: riscv: dts: add initial Sophgo SG2042 SoC device tree
  - sg2042: dt-bindings: interrupt-controller: Add Sophgo sg2042 CLINT mswi
  - sg2042: dt-bindings: timer: Add Sophgo sg2042 CLINT timer
  - sg2042: dt-bindings: interrupt-controller: Add Sophgo SG2042 PLIC
  - sg2042: dt-bindings: riscv: Add T-HEAD C920 compatibles
  - sg2042: dt-bindings: riscv: add sophgo sg2042 bindings
  - sg2042: dt-bindings: vendor-prefixes: add milkv/sophgo
  - sg2042: riscv: Add SOPHGO SOC family Kconfig support


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-26.0.0.30
changelog:
  - !7198 v2  mm: prepare more high-order pages on pcplist
  - mm: prepare more high-order pages to be stored on the per-cpu lists
  - mm: page_alloc: use the correct THP order for THP PCP
  - !7196 v3  Backport folio feature and bugfix
  - mm: madvise: avoid split during MADV_PAGEOUT and MADV_COLD
  - mm: vmscan: avoid split during shrink_folio_list()
  - mm: swap: allow storage of all mTHP orders
  - mm: swap: update get_swap_pages() to take folio order
  - mm: swap: simplify struct percpu_cluster
  - mm: swap: free_swap_and_cache_nr() as batched free_swap_and_cache()
  - mm: swap: remove CLUSTER_FLAG_HUGE from swap_cluster_info:flags
  - mm/madvise: don't forget to leave lazy MMU mode in madvise_cold_or_pageout_pte_range()
  - mm/madvise: add cond_resched() in madvise_cold_or_pageout_pte_range()
  - mm: support multi-size THP numa balancing
  - mm: factor out the numa mapping rebuilding into a new helper
  - mm: alloc_anon_folio: avoid doing vma_thp_gfp_mask in fallback cases
  - huge_memory.c: document huge page splitting rules more thoroughly
  - mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
  - mm/migrate: split source folio if it is on deferred split list
  - mm: hold PTL from the first PTE while reclaiming a large folio
  - madvise:madvise_cold_or_pageout_pte_range(): allow split while folio_estimated_sharers = 0
  - mm/filemap: don't decrease mmap_miss when folio has workingset flag
  - mm/readahead: break read-ahead loop if filemap_add_folio return -ENOMEM
  - arm64: mm: swap: support THP_SWAP on hardware with MTE
  - mm: remove PageAnonExclusive assertions in unuse_pte()
  - mm: remove struct page from get_shadow_from_swap_cache
  - selftests: mm: fix unused and uninitialized variable warning
  - XArray: set the marks correctly when splitting an entry
  - mm/huge_memory: check new folio order when split a folio
  - mm: huge_memory: enable debugfs to split huge pages to any order
  - mm: thp: split huge page to any lower order pages
  - mm: page_owner: add support for splitting to any order in split page_owner
  - mm: memcg: make memcg huge page split support any order split
  - mm/page_owner: use order instead of nr in split_page_owner()
  - mm/memcg: use order instead of nr in split_page_memcg()
  - mm: support order-1 folios in the page cache
  - mm/huge_memory: only split PMD mapping when necessary in unmap_folio()
  - selftests/mm: split_huge_page_test: conform test to TAP format output
  - mm: huge_memory: use more folio api in __split_huge_page_tail()
  - mm/vmalloc: fix return value of vb_alloc if size is 0
  - mm: use memalloc_nofs_save() in page_cache_ra_order()
  - mm: madvise: pageout: ignore references rather than clearing young
  - mm: ratelimit stat flush from workingset shrinker
  - mm, oom:dump_tasks add rss detailed information printing
  - arm64/mm: improve comment in contpte_ptep_get_lockless()
  - arm64/mm: export contpte symbols only to GPL users
  - mm: page_alloc: enforce minimum zone size to do high atomic reserves
  - mm: page_alloc: correct high atomic reserve calculations
  - mm: fix draining remote pageset
  - !7190  entry: inline syscall enter/exit functions
  - entry: Move syscall_enter_from_user_mode() to header file
  - entry: Move enter_from_user_mode() to header file
  - entry: Move exit to usermode functions to header file
  - !7130 v2  openeuler_defconfig: update oedefconfig for the minimum set
  - openeuler_defconfig: update oedefconfig for the minimum set
  - !7141 spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
  - spi: Add verification for the max_frequency provided by the firmware
  - !7136 Fix failed in acpi_gpiochip_find() by adding parent node match
  - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
  - !6778 v2 Fix two soc bugs of hip09
  - irqchip: gicv3: Add workaround for hip09 erratum 162200806
  - irqchip: gicv3: Add workaround for hip09 erratum 162200803
  - !7165 v2  tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - tick/broadcast-hrtimer: Prevent the timer device on broadcast duty CPU from being disabled
  - !7184 v3  md: do not delete safemode_timer in mddev_suspend
  - md: do not delete safemode_timer in mddev_suspend
  - !7131 net: hns3: Fix ROH mac address initialization.
  - net: hns3: Fix ROH mac address initialization.
  - !7126 net: hns3: some bugfixes for hns3 driver
  - net: hns3: fix kernel crash when devlink reload during initialization
  - net: hns3: direct return when receive a unknown mailbox message
  - net: hns3: release PTP resources if pf initialization failed
  - net: hns3: change type of numa_node_mask as nodemask_t
  - net: hns3: using cpumask_copy when set value to cpumask_t
  - net: hns3: set irq affinity directly
  - net: hns3: use appropriate barrier function after setting a bit value
  - net: hns3: don't need to check an unsigned number is less than 0
  - net: hns3: add 
  - net: hns3: using user configure after hardware reset
  - net: hns3: add cond_resched() to hns3 ring buffer init process
  - net: hns3: fix kernel crash problem in concurrent scenario
  - net: hns3: fix port vlan filter not disabled issue
  - net: hns3: revert "net: hns3: fix port vlan filter not disabled problem in dynamic vlan mode"
  - !7159 【OLK 6.6】 backport some mailist patches for perf
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
  - !7068  kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id()
  - !7153  Backports for OLK-6.6
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets
  - netfilter: bridge: confirm multicast packets before passing them up the stack
  - !7069  ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
  - !7075 RDMA/hns: Some bugfixes and cleanups
  - RDMA/hns: Fix soft lockup under heavy CEQE load
  - RDMA/hns: Fix sleeping in spin_lock critical section
  - RDMA/hns: Fix Use-After-Free of rsv_qp
  - RDMA/hns: Fix a missing check of atomic wr length
  - !3184 [OLK-6.6] add support for Zhaoxin ZXPAUSE instruction
  - x86/delay: add support for Zhaoxin ZXPAUSE instruction
  - !7078 v2  Backport four conflict stable patch
  - mm: turn folio_test_hugetlb into a PageType
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
  - fork: defer linking file vma until vma is fully initialized
  - mm, treewide: introduce NR_PAGE_ORDERS
  - !7067 crypto: hisilicon fix some issues
  - uacce: fix for cdev memory leak
  - crypto: hisilicon/qm - adjust the internal processing sequence of the vf enable and disable
  - crypto: hisilicon/zip - optimize the address offset of the reg query function
  - !4084 riscv64: initial LIVEPATCH_WO_FTRACE support
  - riscv64: add initial livepatch support
  - livepatch: add arch hook before doing klp_resolve_symbols
  - !6868  irqchip/loongson-pch-pic: Update interrupt registration policy
  - irqchip/loongson-pch-pic: Update interrupt registration policy
  - !6004 [OLK-6.6] fix bug：ethtool -S and ethtool -x/X for mucse rnpm drvier
  - mucse: ethtool -S and ethtool -x/X for mucse rnpm drvier

   at the end when print msg


author: ZhangPeng <zhangpeng362@huawei.com> - 6.6.0-27.0.0.31
changelog:
  - !7527  ext4 iomap performance optimize
  - ext4: fallback to generic_perform_write once iov_iter_count <= PAGE_SIZE
  - iomap: export __iomap_write_{begin|end}
  - !7530  mm: more thp control for large folio
  - mm: correct the docs for thp_fault_alloc and thp_fault_fallback
  - mm: add docs for per-order mTHP counters and transhuge_page ABI
  - mm: add per-order mTHP anon_swpout and anon_swpout_fallback counters
  - mm: add per-order mTHP anon_fault_alloc and anon_fault_fallback counters
  - mm: add control to allow specified high-order pages stored on PCP list
  - mm: huge_memory: add thp mapping align control
  - mm: huge_memory: add folio_get_unmapped_area()
  - mm: filemap: make mTHP configurable for exec mapping
  - mm/filemap: Allow arch to request folio size for exec memory
  - mm/memcontrol: remove __mod_lruvec_page_state()
  - mm/khugepaged: use a folio more in collapse_file()
  - mm: remove inc/dec lruvec page state functions
  - !7521 v2  Avoiding false sharing in field access of tk_core
  - openeuler_defconfig: Enable CONFIG_ARCH_LLC_128_LINE_SIZE for Hisilicon platforms
  - timekeeping: Avoiding false sharing in field access of tk_core
  - !7182 v3  mm: mglru: reuse some legacy trace
  - mm: multi-gen LRU: reuse some legacy trace events
  - mm, vmscan: remove ISOLATE_UNMAPPED
  - trace-vmscan-postprocess: sync with tracepoints updates
  - !7219 Hygon model 6h L3 PMU event duplicate creating issue fix
  - perf/x86/uncore: Create L3 event strictly to the CPU vendor
  - !7474  sched/fair: set burst to zero when cfs bandwidth is cancelled
  - sched/fair: set burst to zero when set max to cpu.max
  - sched/fair: limit burst to zero when cfs bandwidth is toggled off
  - !7475  Makefile.oever: add OPENEULER_RELEASE for version.h
  - Makefile.oever: add OPENEULER_RELEASE for version.h
  - !6241 add pmu support for loongarch kvm
  - LoongArch: KVM: Add PMU support
  - !5654 [OLK-6.6] USB: UAS: return ENODEV when submit urbs fail with device not attached
  - USB: UAS: return ENODEV when submit urbs fail with device not attached
  - !5218 [OLK-6.6] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
  - crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
  - crypto: ccp: Move the fixup code for Hygon psp to Hygon specific files
  - crypto: ccp: Bind specific sp_dev_vdata for Hygon secure processor
  - crypto: ccp: Introduce hygon specific interface to support driver
  - !6311 v2  ima: Avoid blocking in RCU read-side critical section
  - ima: Avoid blocking in RCU read-side critical section
  - !6837  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  - !5644 [OLK-6.6] x86/mce: Set bios_cmci_threshold for CMCI threshold
  - x86/mce: Set bios_cmci_threshold for CMCI threshold
  - !7454  add new kvm_type for Confidential VMs
  - kvm: add macro CONFIG_CVM_HOST to defconfig
  - kvm: add new kvm_type for cvm
  - !7405 v2  mm: prepare to support weighted interleaving mempolicy
  - mm: prepare to support weighted interleaving mempolicy
  - !7370 v2  sched: smart_grid: silence complier error
  - sched: smart_grid: silence complier error
  - !7227  arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer
  - !5291 [OLK-6.6] iommu/dma: Fix not fully traversing iova reservations issue
  - iommu/dma: Fix not fully traversing iova reservations issue
  - !6774 [OLK-6.6] merge upstream  4 wangxun related patches to fix i2c bug
  - Revert "net: txgbe: fix clk_name exceed MAX_DEV_ID limits"
  - Revert "net: txgbe: fix i2c dev name cannot match clkdev"
  - net: wangxun: add ethtool_ops for channel number
  - clkdev: Update clkdev id usage to allow for longer names
  - !7206 v2  sched: programmable: Allow set tag for pid 1.
  - sched: programmable: Allow set tag for pid 1.


author: xinghe <xinghe2@h-partners.com> - 2.9.5-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:server: 'source' interface ignored from 'default-server' directive


author: xinghe <xinghe2@h-partners.com> - 2.9.5-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:stream: Prevent mux upgrades if client connection is no longer ready


author: yanglu <yanglu72@h-partners.com> - 2.9.5-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:queues:Do not use pendconn_grab_from_px
         queues:Make sure we call process_srv_queue when leaving
         queue:Make process_srv_queue return the number of streams


author: xinghe <xinghe2@h-partners.com> - 2.9.5-11
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:haproxy: only tid 0 must not sleep if got signal
         server/addr: fix tune.events.max-events-at-once event miss and leak


author: yaoxin <yao_xin001@hoperun.com> - 1.14.5-1
changelog:
  - Update to 1.14.5:
    * Added signed Windows msi binary and signed Apple dmg binary files.
    * Moved examples to the HDF5Examples folder in the source tree.
    * Added support for using zlib-ng package as the zlib library
    * Disable CMake UNITY_BUILD for hdf5
    * Removed "function/code stack" debugging configuration option
    * Added configure options for enabling/disabling non-standard programming language features
    * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
      file hdf5-config.cmake. This allows it to easily detect if the library
      has been built with or without read-only S3 functionality.
    * Fixed many CVE:
      CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
      CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
      CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
      CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
      CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
      CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
      CVE-2018-13875,CVE-2018-14034


author: Funda Wang <fundawang@yeah.net> - 1.14.5-2
changelog:
  - add patches from azure linux for fixing CVE-2025-2153, CVE-2025-2310,
    CVE-2025-2914, CVE-2025-2926, CVE-2025-6816, CVE-2025-2925,
    CVE-2025-2924, CVE-2025-44905, CVE-2025-6269, CVE-2025-6750,
    CVE-2025-6857, CVE-2025-7067, CVE-2025-7068, CVE-2025-6858,
    CVE-2025-2923, CVE-2025-2913, CVE-2025-6516, CVE-2025-6818,
    CVE-2025-6817, CVE-2025-6856, CVE-2025-7069


author: baizhonggui <baizhonggui@huawei.com> - 540.1.linux3-18
changelog:
  - Fix building error: make[1]: cc: No such file or directory
  - Add gcc in BuildRequires 
  - Add hfsplus-tools-sysctl.patch


author: yixiangzhike <yixiangzhike007@163.com> - 3.3.0-1
changelog:
  - Update version to 3.3.0
    - htop add '-n/--max-itrations' option
    - implement zswap support
    - add IRQ PSI meter
    - refactor /proc/<pid>/status parsing
    - add option to shadow path prefixes
    - fix linux Platform_getProcessLocks() for file-description locks
    - fix format specifier warning on 32 bit
    - prevent null pointer dereference on ealy error


author: zhangyaqi <zhagnyaqi@kylinos.cn> - 2.4.58-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:allocate a heap buffer if the configured size is greater than the stack-allocated buffer.


author: chengyechun <chengyechun1@huawei.com> - 2.4.58-6
changelog:
  - Type:CVE
  - ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
  - SUG:NA
  - DSEC:fix some CVEs


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update i40e version to 2.22.8 to fix kernel-6.1 based build error


author: chengyechun <chengyechun1@huawei.com> - 2.22.8-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Remove the obsolte u64_stats_fetch_*_irq() users
         use mul_u64_u64_div_u64 and convert .adjfreq to .adjfine


author: chengyechun <chengyechun1@huawei.com> - 2.24.6-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:update i40e version to 2.24.6 to fix kernel-6.6 based build error


author: wujichao <wujichao1@huawei.com> - 2.1.5-12
changelog:
  - Type: update
  - ID: NA
  - SUG: NA
  - DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream


author: jingxiaolu<lujingxiao@huawei.com> - 2.1.5-18
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: sync patches from upstream for refactoring sandbox and bugfixing


author: yanglu <yanglu72@h-partners.com> - 4.7.0-1
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Update iavf version to 4.7.0 to fix kernel-6.1 based build error


author: Donghua Huang <huangdonghua3@h-partners.com> - 50.0-36
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libhns: Fix wrong WQE data in new post send API when QP wraps around


author: chenyanpanHW <chenyanpan@huawei.com> - 1.8.4-8
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/fix-for-cargo-test-sometimes-fails-when-make-runs-with-several-simultaneous-jobs.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/add-dunce-lib.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/del-some-testcases-who-need-network-but-cannot-connect-smoothly.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 1.2-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:after executing hook scripts, remove their executable permission
         of non root users


author: zhangxingrong <zhangxingrong@uniontech.com> - 3.16-4
changelog:
  - iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library


author: wangkai <13474090681@163.com> - 3.17.1-1
changelog:
  - Update to 3.17.1
  - iperf3 no longer changes its current working directory in --daemon mode. This results in more 
    predictable behavior with relative paths, in particular finding key and credential files for authentication.
  - A new --json-stream option has been added to enable a streaming output format, consisting of 
    a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
  - UDP tests now work correctly between different endian hosts
  - The --fq-rate parameter now works for --reverse tests
  - The statistics reporting interval is now available in the --json start test object


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: daisicheng <daisicheng@huawei.com> - 0.9.6-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that isula-build service did not stop after it removed


author: luofeng <luofeng13@huawei.com> - 0.9.6-22
changelog:
  - Type: bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix the problem that it failed when applying patches in RISCV architecture


author: Ge Wang <wangge20@huawei.com> - 5.0.0-2
changelog:
  - Fix install confilict with glassfish-servlet-api due to provides same file glassfish-servlet-api.jar


author: douyiwang <douyiwang@huawei.com> -1:1.8.0.472.b08-5
changelog:
  - add fix-libpng-API-allow-reading-up-to-1012-bytes-beyond-the-png-sRGB-bbase-array-bug.patch to fix CVE-2025-66293


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.482.b08-0
changelog:
  - update to 8u482
  - modified 8256488-Use-ldpq-stpq-instead-of-ld4-st4-for-small-c.patch
  - modified Fix-LineBuffer-vappend-when-buffer-too-small.patch
  - modified add-missing-test-case.patch
  - add Fix-KAEProvider-SM2-Code.patch


author: yangyingqing <yangyingqing@h-partners.com> -1:11.0.28.6-0
changelog:
  - update to 11.0.28+6(GA)
  - delete 8352716-tz-Update-Timezone-Data-to-2025b.patch
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch


author: DXwangg <wangjiawei80@huawei.com> -1:11.0.29.7-0
changelog:
  - update to 11.0.29+7(GA)
  - modify delete_expired_certificates.patch
  - modify G1-interate-region-by-bitmap-rather-than-obj-size-in.patch
  - add Enable-optimizations-upon-detecting-Phytium-CPU.patch


author: BenShuai5D <benshuai5d@163.com> 1:17.0.18.8-0
changelog:
  - upgrade to 17.0.18
  - modify Backport-Important-Fixed-Issues.patch
  - modify downgrade-the-glibc-symver-of-memcpy.patch
  - modify puyuan-jdk17.0.9-patch.patch
  - modify add-version-txt.patch
  - modify jdk17-Add-KAE-provider.patch
  - add huawei-Fix-KAEProvider-SM2-Code.patch


author: Benshuai5D <benshuai5d@163.com> - 1:21.0.10.7-0
changelog:
  - update to jdk21.0.9-ga
  - modify Add-Compact-Object-Headers-feature-for-Aarch64.patch
  - modify Add-dynamic-max-heap-size.patch
  - modify Fix-kae-testcat-and-EATest-testcast-bug-and-fix-cve-.patch
  - modify add-version.txt.patch
  - add huawei-Fix-KAE-Provider-SM2-code.patch
  - add huawei-fix-UseCompactObjectHeaders-slowdebug-build-fail.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.5.4-1
changelog:
  - Upgrade to 1.5.4 for fix cves: CVE-2022-40149,CVE-2022-40150,
    CVE-2022-45685,CVE-2022-45693 and CVE-2023-1436


author: chenyanpanHW <chenyanpan@huawei.com> - 1.1.15-17
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-1.1.15-linux-headers.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils_sysmacros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/backport-fix-building-against-gcc-10.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/jfsutils-reslove-build-error.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: sundapeng <sundapeng_yewu@cmss.chinamobile.com> - 2.8.2-17
changelog:
  - log clean relative index range check of group consider empty log segment to avoid too many empty log segment left


author: dongyuzhen <dongyuzhen@h-partners.com> - 3.2.0-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of missing kata-containers source code in the src package


author: zhangbowei<zhangbowei@kylinos.cn> - 1.0.0-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: modify kernel config for supporting shared_fs:virtio-fs option


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: Li Nan <linan122@huawei.com> - 6.6.0-137.0.0.118
changelog:
  - !20552 ub: udma: fix some code issues.
  - !20313 Fix CVE-2025-40220
  - !20321  nvme: fix admin request_queue lifetime
  - !20512 PM / devfreq: hisi: Fix potential UAF in OPP handling
  - !20544 Fix CVE-2025-71147
  - !20548 v4  net: LTS-6.6 backport
  - !20503 Fix CVE-2025-39713
  - !20133 Fix CVE-2025-39721
  - !20438 Fix CVE-2025-38659
  - !20264 Fix CVE-2025-40277
  - !20340 Fix CVE-2025-40271
  - !20319 Fix CVE-2025-40237
  - !20392  vfs: Don't leak disconnected dentries on umount
  - !20554  iommu/s390: Implement blocking domain
  - !20489 [OLK-6.6][linux-6.6.y sync] Backport 6.6.101-6.6.102 LTS Patches
  - !20513 ACPI: PCC: Fix race condition by removing static qualifier
  - !20468  drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
  - !20483  rcu: Protect ->defer_qs_iw_pending from data race
  - !20510 drivers/ub/sentry: fix primary eid index value
  - !20553 ub: cdma: support separated page table feature
  - ub: udma: fix some code issues.
  - !20480 iommu/ummu-core: fix error invalidate tid
  - !20561 iommu/ummu: Add ummu sva independent page table parameter
  - ub: udma: bugfix related to 2m_hugepage.
  - ub: udma: support for separate page tables
  - ub: udma: delete debugfs code.
  - ub: udma: bugfix related to ctrlq function.
  - ub: udma: verify get cqe/ae aux info out addr and len.
  - ub: cdma: support separated page table feature
  - iommu/ummu: Add ummu sva independent page table parameter
  - iommu: Adjust PLB refresh timing in 'grant' and 'ungrant'
  - !20505 Fix CVE-2026-23035
  - iommu/s390: Implement blocking domain
  - drivers/ub/sentry: fix primary eid index value
  - !20535  libceph: make decode_pool() more resilient against corrupted osdmaps
  - !20536  mm/page_alloc: change all pageblocks migrate type on coalescing
  - !20537  mm/secretmem: fix use-after-free race in fault handler
  - !20538  wifi: avoid kernel-infoleak from struct iw_point
  - !20539  net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
  - !20440  PCI/AER: Fix NULL pointer access by aer_info
  - !20262 Fix CVE-2025-68176
  - netfilter: nf_reject: don't leak dst refcount for loopback packets
  - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
  - page_pool: always add GFP_NOWARN for ATOMIC allocations
  - virtio-net: fix received length check in big packets
  - net: bridge: fix use-after-free due to MST port state bypass
  - vsock: Ignore signal/timeout on connect() if already established
  - tls: make sure to abort the stream if headers are bogus
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
  - xfrm: Duplicate SPI Handling
  - tls: handle data disappearing from under the TLS ULP
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd
  - !20237 Fix CVE-2025-68724
  - !20459 Fix CVE-2025-71131
  - !20525 Fix CVE-2025-68816
  - !20529  CVE-2025-68172
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
  - !20370 Revert "Revert "RDMA/hns: Fix mismatch exception rollback""
  - wifi: avoid kernel-infoleak from struct iw_point
  - mm/secretmem: fix use-after-free race in fault handler
  - mm/page_alloc: change all pageblocks migrate type on coalescing
  - libceph: make decode_pool() more resilient against corrupted osdmaps
  - pps: Fix kabi breakage of struct pps_device for last_fetched_ev
  - sched: Fix kabi breakage of struct task_struct for saved_state
  - crypto: aspeed - fix double free caused by devm
  - !20515  Bluetooth: bcsp: receive data only if registered
  - !20507 Fix CVE-2025-40358
  - !20450 ub: ubase&unic: Fix some bug in concurrent process
  - !20452 iommu/ummu: Fix some bugs and optimize the code implementation
  - !20451 iommu/ummu: Add the function of creating devices with SVA-separated
  - !20500 mm: fix the inaccurate memory statistics issue for users
  - net/mlx5: fw_tracer, Validate format string parameters
  - Bluetooth: bcsp: receive data only if registered
  - ACPI: PCC: Fix race condition by removing static qualifier
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf
  - iommu/ummu: Add the function of creating devices with SVA-separated
  - iommu/ummu-core: fix error invalidate tid
  - riscv: stacktrace: Disable KASAN checks for non-current tasks
  - !20497  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - !20496  drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
  - !20495  iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - !20494  HID: core: Harden s32ton() against conversion to 0 bits
  - !20493  iommu: Fix two issues in iommu_copy_struct_from_user()
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
  - PM / devfreq: hisi: Fix potential UAF in OPP handling
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
  - !20487  interference: Fix uninitialized ifs_clock compiling issue
  - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
  - MIPS: mm: Prevent a TLB shutdown on initial uniquification
  - mm: fix the inaccurate memory statistics issue for users
  - mm: add config option for atomic mode in mm counter
  - Revert "mm: fix the inaccurate memory statistics issue for users"
  - !20444  net/mlx5e: Fix crash on profile change rollback failure
  - !20442  net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
  - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline
  - HID: core: Harden s32ton() against conversion to 0 bits
  - iommu: Fix two issues in iommu_copy_struct_from_user()
  - SUNRPC: call xs_sock_process_cmsg for all cmsg
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
  - !20374 [OLK 6.6]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
  - !20227  Rename leapioraid to leapraid and release v2.0
  - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
  - MIPS: mm: tlb-r4k: Uniquify TLB entries on init
  - x86/fpu: Delay instruction pointer fixup until after warning
  - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
  - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
  - x86/sev: Evict cache lines during SNP memory validation
  - net: usbnet: Fix the wrong netif_carrier_on() call
  - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
  - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
  - sched,freezer: Remove unnecessary warning in __thaw_task
  - freezer,sched: Clean saved_state when restoring it during thaw
  - freezer,sched: Do not restore saved_state of a thawed task
  - freezer,sched: Use saved_state to reduce some spurious wakeups
  - sched/core: Remove ifdeffery for saved_state
  - i2c: stm32f7: unmap DMA mapped buffer
  - i2c: stm32f7: simplify status messages in case of errors
  - i2c: stm32f7: perform most of irq job in threaded handler
  - i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
  - i2c: stm32f7: Use devm_clk_get_enabled()
  - USB: serial: option: add Foxconn T99W709
  - smb: server: Fix extension string in ksmbd_extract_shortname()
  - ksmbd: fix corrupted mtime and ctime in smb2_open
  - ksmbd: fix Preauh_HashValue race condition
  - ksmbd: fix null pointer dereference error in generate_encryptionkey
  - vsock: Do not allow binding to VMADDR_PORT_ANY
  - selftests/perf_events: Add a mmap() correctness test
  - smb: client: return an error if rdma_connect does not return within 5 seconds
  - smb: client: let recv_done() cleanup before notifying the callers.
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
  - smb: client: make use of common smbdirect_socket
  - smb: smbdirect: add smbdirect_socket.h
  - smb: client: Correct typos in multiple comments across various files
  - smb: client: Use min() macro
  - smb: server: let recv_done() avoid touching data_transfer after cleanup/move
  - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
  - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
  - irqchip: Build IMX_MU_MSI only on ARM
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
  - sunrpc: fix client side handling of tls alerts
  - net/sched: taprio: enforce minimum value for picos_per_byte
  - net: drop UFO packets in udp_rcv_segment()
  - ipv6: reject malicious packets in ipv6_gso_segment()
  - net/mlx5: Correctly set gso_segs when LRO is used
  - netlink: specs: ethtool: fix module EEPROM input/output arguments
  - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
  - phy: mscc: Fix parsing of unicast frames
  - netpoll: prevent hanging NAPI when netcons gets enabled
  - md/md-cluster: handle REMOVE message earlier
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
  - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors
  - PCI: pnv_php: Fix surprise plug detection and recovery
  - powerpc/eeh: Export eeh_unfreeze_pe()
  - PCI: pnv_php: Work around switches with broken presence detection
  - kconfig: qconf: fix ConfigList::updateListAllforAll()
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
  - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
  - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
  - scsi: mpt3sas: Fix a fw_event memory leak
  - vfio/pci: Separate SR-IOV VF dev_set
  - vfio/pds: Fix missing detach_ioas op
  - vfio: Prevent open_count decrement to negative
  - vfio: Fix unbalanced vfio_df_close call in no-iommu mode
  - f2fs: fix to calculate dirty data during has_not_enough_free_secs()
  - f2fs: fix to update upper_p in __get_secs_required() correctly
  - f2fs: vm_unmap_ram() may be called from an invalid context
  - f2fs: fix to avoid out-of-boundary access in devs.path
  - f2fs: doc: fix wrong quota mount option description
  - f2fs: fix KMSAN uninit-value in extent_info usage
  - rtc: rv3028: fix incorrect maximum clock rate handling
  - rtc: pcf8563: fix incorrect maximum clock rate handling
  - rtc: pcf85063: fix incorrect maximum clock rate handling
  - rtc: nct3018y: fix incorrect maximum clock rate handling
  - rtc: hym8563: fix incorrect maximum clock rate handling
  - rtc: ds1307: fix incorrect maximum clock rate handling
  - ucount: fix atomic_long_inc_below() argument type
  - module: Restore the moduleparam prefix length check
  - apparmor: fix loop detection used in conflicting attachment resolution
  - apparmor: ensure WB_HISTORY_SIZE value is a power of 2
  - bpf: Check netfilter ctx accesses are aligned
  - bpf: Check flow_dissector ctx accesses are aligned
  - vhost-scsi: Fix log flooding with target does not exist errors
  - mtd: rawnand: atmel: set pmecc data setup time
  - mtd: rawnand: rockchip: Add missing check after DMA map
  - mtd: rawnand: atmel: Fix dma_mapping_error() address
  - jfs: fix metapage reference count leak in dbAllocCtl
  - crypto: qat - fix seq_file position update in adf_ring_next()
  - crypto: qat - fix DMA direction for compression on GEN2 devices
  - perf tools: Remove libtraceevent in .gitignore
  - sh: Do not use hyphen in exported variable name
  - ASoC: fsl_xcvr: get channel status data when PHY is not exists
  - dmaengine: nbpfaxi: Add missing check after DMA map
  - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
  - fs/orangefs: Allow 2 more characters in do_c_string()
  - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
  - soundwire: stream: restore params when prepare ports fail
  - crypto: img-hash - Fix dma_unmap_sg() nents value
  - crypto: keembay - Fix dma_unmap_sg() nents value
  - hwrng: mtk - handle devm_pm_runtime_enable errors
  - watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
  - scsi: isci: Fix dma_unmap_sg() nents value
  - scsi: mvsas: Fix dma_unmap_sg() nents value
  - scsi: elx: efct: Fix dma_unmap_sg() nents value
  - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
  - clk: sunxi-ng: v3s: Fix de clock definition
  - perf tests bp_account: Fix leaked file descriptor
  - kernel: trace: preemptirq_delay_test: use offstack cpu mask
  - crypto: inside-secure - Fix `dma_unmap_sg()` nents value
  - perf sched: Fix memory leaks in 'perf sched latency'
  - perf sched: Fix memory leaks for evsel->priv in timehist
  - perf sched: Free thread->priv using priv_destructor
  - perf dso: Add missed dso__put to dso__load_kcore
  - perf tools: Fix use-after-free in help_unknown_cmd()
  - Fix dma_unmap_sg() nents value
  - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
  - fanotify: sanitize handle_type values when reporting fid
  - pinctrl: sunxi: Fix memory leak on krealloc failure
  - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
  - crypto: arm/aes-neonbs - work around gcc-15 warning
  - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
  - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
  - clk: xilinx: vcu: unregister pll_post only if registered correctly
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
  - mtd: fix possible integer overflow in erase_xfer()
  - crypto: marvell/cesa - Fix engine load inaccuracy
  - crypto: qat - use unmanaged allocation for dc_data
  - crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
  - PCI: rockchip-host: Fix "Unexpected Completion" log message
  - bpf/preload: Don't select USERMODE_DRIVER
  - ipv6: annotate data-races around rt->fib6_nsiblings
  - ipv6: fix possible infinite loop in fib6_info_uses_dev()
  - vrf: Drop existing dst reference in vrf_ip6_input_dst
  - selftests: rtnetlink.sh: remove esp4_offload after test
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update
  - netfilter: xt_nfacct: don't assume acct name is null-terminated
  - can: kvaser_usb: Assign netdev.dev_port based on device channel index
  - can: kvaser_pciefd: Store device channel index
  - can: peak_usb: fix USB FD devices potential malfunction
  - tools/rv: Do not skip idle in trace
  - Bluetooth: hci_event: Mask data status from LE ext adv reports
  - kcsan: test: Initialize dummy variable
  - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
  - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
  - wifi: ath12k: fix endianness handling while accessing wmi service bit
  - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
  - wifi: mac80211: Don't call fq_flow_idx() for management frames
  - wifi: mac80211: Do not schedule stopped TXQs
  - wifi: plfxlc: Fix error handling in usb driver probe
  - wifi: mac80211: reject TDLS operations when station is not associated
  - iommu/amd: Fix geometry.aperture_end for V2 tables
  - mwl8k: Add missing check after DMA map
  - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
  - tcp: call tcp_measure_rcv_mss() for ooo packets
  - xen/gntdev: remove struct gntdev_copy_batch from stack
  - net_sched: act_ctinfo: use atomic64_t for three counters
  - net/sched: Restrict conditions for adding duplicating netems to qdisc tree
  - um: rtc: Avoid shadowing err in uml_rtc_start()
  - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
  - netfilter: nf_tables: adjust lockdep assertions handling
  - netfilter: nf_tables: Drop dead code from fill_*_info routines
  - fbcon: Fix outdated registered_fb reference in comment
  - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
  - m68k: Don't unregister boot console needlessly
  - drm/msm/dpu: Fill in min_prefill_lines for SC8180X
  - kselftest/arm64: Fix check for setting new VLs in sve-ptrace
  - net: dst: annotate data-races around dst->input
  - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
  - wifi: ath11k: clear initialized flag for deinit-ed srng lists
  - iwlwifi: Add missing check for alloc_ordered_workqueue
  - wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
  - wifi: rtl818x: Kill URBs before clearing tx status queue
  - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
  - caif: reduce stack size, again
  - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
  - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
  - selftests/bpf: fix signedness bug in redir_partial()
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
  - bpf, sockmap: Fix psock incorrectly pointing to sk
  - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
  - staging: nvec: Fix incorrect null termination of battery manufacturer
  - interconnect: qcom: sc8180x: specify num_nodes
  - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
  - soc: qcom: pmic_glink: fix OF node leak
  - samples: mei: Fix building on musl libc
  - cpufreq: Initialize cpufreq-based frequency-invariance later
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
  - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
  - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
  - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
  - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
  - arm: dts: ti: omap: Fixup pinheader typo
  - usb: early: xhci-dbc: Fix early_ioremap leak
  - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
  - pps: fix poll support
  - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  - spi: stm32: Check for cfg availability in stm32_spi_probe
  - usb: misc: apple-mfi-fastcharge: Make power supply names unique
  - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
  - ARM: dts: vfxxx: Correctly use two tuples for timer address
  - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
  - arm64: dts: qcom: sc7180: Expand IMEM region
  - arm64: dts: qcom: sdm845: Expand IMEM region
  - soc: qcom: QMI encoding/decoding for big endian
  - selftests: Fix errno checking in syscall_user_dispatch test
  - ASoC: mediatek: use reserved memory or enable buffer pre-allocation
  - gfs2: No more self recovery
  - Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
  - hfs: make splice write available again
  - hfsplus: make splice write available again
  - ublk: use vmalloc for ublk_device's __queues
  - fs_context: fix parameter name in infofc() macro
  - audit,module: restore audit logging in load failure case
  - ASoC: amd: yc: add DMI quirk for ASUS M6501RM
  - ASoC: Intel: fix SND_SOC_SOF dependencies
  - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
  - ethernet: intel: fix building with large NR_CPUS
  - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
  - interference: Fix uninitialized ifs_clock compiling issue
  - iommu/ummu: optimize log printing
  - !20455 Fix compilation failure caused by PR#20174
  - !20302  CVE-2026-22980
  - !20142  CVE-2025-68803
  - !20261  ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
  - !20435  fix CVE-2026-22998
  - !20433  scsi: target: Reset t_task_cdb pointer in error case
  - !20432  scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
  - !20431  block: Use RCU in blk_mq_[un
  - !20307  tpm: Cap the number of PCR banks
  - !20062  xfs: Add xfs_dir3_leaf_header_check() in leaf/leafn read
  - !20157 v2  md: backport from mainline
  - rcu: Protect ->defer_qs_iw_pending from data race
  - platform/x86/intel/pmt: fix compilation failure caused by PR#20174
  - iommu/ummu: optimize kv cache memory management
  - iommu/ummu: optimize permission table management
  - iommu/ummu: remove check for eid_type while del eid
  - iommu/ummu: optimize the code implementation
  - drivers/perf: fix ummu-pmu data reading exception
  - iommu/ummu: IOMMU_DOMAIN_BLOCKED type don not sync tct
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
  - net: unic: Notify mami of the bond ip change.
  - ub: ubase: Support for UE link by ctrlq message
  - ub: ubase: send a deactivate req in removing
  - ub: ubase: Querying TPG/TP contexts in the chip is no longer supported after enabling safe mode.
  - ub: ubase: Use an independent thread for the ctrlq workqueue.
  - !20368 ubcore: fix logging and permission for route query.
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
  - !20344  ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
  - net: unic: Fix the ummu 0xa event that occurs when modifying queues and resetting concurrent scenarios
  - ub: ubase: Add KABI compatibility
  - ub: ubase: fixing the issue of cdma ctp_req_vl parameter configuration
  - ub: ubase: add PMU IDEV interrupt supported abilities.
  - ub: ubase: Delete the tid mask for eq, jfs, jfr, and jfc context
  - ub: ubase: Set the completion event interrupt to auto
  - net: unic: fix poll tx read old skb cause a UAF bug
  - !20249 Fix CVE-2025-38489
  - !20250 Fix CVE-2025-38480
  - !20378 Fix CVE-2025-39838
  - !20430  Fix CVE-2025-39942
  - !20351 Fix CVE-2025-71149
  - !20375 Fix CVE-2025-71150
  - !20323 Fix CVE-2025-38730
  - !20320 Fix CVE-2025-68814
  - !20314 Fix CVE-2025-71072
  - !20315 Fix CVE-2025-68794
  - !20403  bpf: Check skb->transport_header is set in bpf_skb_check_mtu
  - !20402  bpf: Do not let BPF test infra emit invalid GSO types to stack
  - !20401  tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
  - !20400  netfilter: nft_ct: add seqadj extension for natted connections
  - !20399  net: xfrm: Fix CVE-2025-40215
  - !20398  net/sched: sch_qfq: Fix null-deref in agg_dequeue
  - !20397  bpf: Reject narrower access to pointer ctx fields
  - !20396  Bluetooth: eir: Fix possible crashes on eir_create_adv_data
  - !20394  IB/mlx5: Fix potential deadlock in MR deregistration
  - !20367 ub: cdma: cdma uaf bugfix
  - net/mlx5e: Fix crash on profile change rollback failure
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
  - PCI/AER: Fix NULL pointer access by aer_info
  - gfs2: No more self recovery
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
  - crypto: qat - flush misc workqueue during device shutdown
  - !20174 Backport PMT spec 3.0 support
  - !20366 [Hygon][6.6][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
  - !19814 [OLK-6.6] Batch flushing user memory encrytion status change
  - !20393 [OLK-6.6][linux-6.6.y sync] Backport 6.6.100-6.6.101 LTS Patches
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
  - nvmet-tcp: remove boilerplate code
  - scsi: target: Reset t_task_cdb pointer in error case
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
  - smb: server: remove separate empty_recvmsg_queue
  - !20384 ub:ubus: Fix ubus link message and pool device error
  - !20389  gfs2: Prevent recursive memory reclaim
  - !20388  *** fix CVE-2025-38062 ***
  - !20387  KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
  - !20386  pinctrl: check the return value of pinmux_ops::get_function_name()
  - !20385  iommu/amd/pgtbl: Fix possible race while increase page table level
  - ub:ubus: Not cfg access during surprise down
  - ub:hisi-ubus: Delete validate_pa err print
  - PCI: cadence: Check for the existence of cdns_pcie::ops before using it
  - can: netlink: can_changelink(): allow disabling of automatic restart
  - Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
  - drm/sched: Remove optimization that causes hang when killing dependent jobs
  - ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
  - bpf: Check skb->transport_header is set in bpf_skb_check_mtu
  - bpf: Do not let BPF test infra emit invalid GSO types to stack
  - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
  - netfilter: nft_ct: add seqadj extension for natted connections
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
  - xfrm: delete x->tunnel as we delete x
  - x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue
  - bpf: Reject narrower access to pointer ctx fields
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data
  - IB/mlx5: Fix potential deadlock in MR deregistration
  - ub:ubus: Fix ubus link message and pool device error
  - ub:hisi-ubus: cq poller maximum handle 64 cqe per time
  - ub:hisi-ubus:Fix vdm message print error
  - ub:ubus:Fix ubus interrupt release issue
  - wifi: mt76: mt7921: prevent decap offload config before STA initialization
  - mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec()
  - iio: hid-sensor-prox: Restore lost scale assignments
  - iio: hid-sensor-prox: Fix incorrect OFFSET calculation
  - crypto: powerpc/poly1305 - add depends on BROKEN for now
  - erofs: address D-cache aliasing
  - drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
  - ALSA: hda: Add missing NVIDIA HDA codec IDs
  - ALSA: hda/tegra: Add Tegra264 support
  - comedi: comedi_test: Fix possible deletion of uninitialized timers
  - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
  - usb: typec: tcpm: allow switching to mode accessory to mux properly
  - usb: typec: tcpm: allow to use sink in accessory mode
  - drm/amdkfd: Don't call mmput from MMU notifier callback
  - mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
  - selftests: mptcp: connect: also cover checksum
  - selftests: mptcp: connect: also cover alt modes
  - resource: fix false warning in __request_region()
  - gve: Fix stuck TX queue for DQ queue format
  - e1000e: ignore uninitialized checksum word on tgp
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
  - dpaa2-switch: Fix device reference count leak in MAC endpoint handling
  - dpaa2-eth: Fix device reference count leak in MAC endpoint handling
  - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
  - sprintf.h requires stdarg.h
  - bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
  - i2c: virtio: Avoid hang by using interruptible completion wait
  - i2c: tegra: Fix reset error handling with ACPI
  - platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
  - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
  - can: dev: can_restart(): move debug message and stats after successful restart
  - can: dev: can_restart(): reverse logic to remove need for goto
  - i40e: When removing VF MAC filters, only check PF-set MAC
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards
  - i40e: Add rx_missed_errors for buffer exhaustion
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
  - net/mlx5: Fix memory leak in cmd_exec()
  - staging: vchiq_arm: Make vchiq_shutdown never fail
  - x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
  - regmap: fix potential memory leak of regmap_bus
  - iio: adc: ad7949: use spi_is_bpw_supported()
  - interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
  - RDMA/core: Rate limit GID cache warning messages
  - virtio_ring: Fix error reporting in virtqueue_resize
  - !20348 [OLK-6.6][linux-6.6.y sync] Backport 6.6.99-6.6.100 LTS Patches
  - !20346  tracing: Fix crash on synthetic stacktrace field usage
  - vfs: Don't leak disconnected dentries on umount
  - !20334 Fix CVE-2025-68780
  - gfs2: Prevent recursive memory reclaim
  - amd/amdkfd: enhance kfd process check in switch partition
  - drm/amdkfd: allow compute partition mode switch with cgroup exclusions
  - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
  - pinctrl: check the return value of pinmux_ops::get_function_name()
  - iommu/amd/pgtbl: Fix possible race while increase page table level
  - !19966  nvme-fc: use lock accessing port_state and rport state
  - ASoC: fsl_sai: replace regmap_write with regmap_update_bits
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  - cifs: prevent NULL pointer dereference in UTF16 conversion
  - ksmbd: Fix refcount leak when invalid session is found on session lookup
  - ubcore: fix logging and permission for route query.
  - !20232 driver/coda: VirtCCA supports MSI device DA
  - Revert "Revert "RDMA/hns: Fix mismatch exception rollback""
  - !20197 ub: udma&ubase: fix a bug that caused long reboot time
  - x86: Resolve FPU state corruption between atomic and non-atomic contexts
  - ub: cdma: cdma uaf bugfix
  - ub: cdma: jfs call trace bugfix
  - !20353  x86/fpu: Clear XSTATE_BV[i
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
  - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
  - nvmem: layouts: u-boot-env: remove crc32 endianness conversion
  - i2c: omap: fix deprecated of_property_read_bool() use
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode
  - regulator: pwm-regulator: Manage boot-on with disabled PWM channels
  - regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
  - i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
  - i2c: omap: Fix an error handling path in omap_i2c_probe()
  - i2c: omap: Add support for setting mux
  - usb: dwc3: qcom: Don't leave BCR asserted
  - usb: hub: Don't try to recover devices lost during warm reset.
  - usb: hub: Fix flushing of delayed work used for post resume purposes
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
  - arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
  - ipv6: make addrconf_wq single threaded
  - !20354 cpufreq/sched: Explicitly synchronize limits_changed flag handling
  - sched/deadline: only set free_cpus for online runqueues
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling
  - io_uring/poll: correctly handle io_poll_add() return value on update
  - shmem: fix recovery on rename failures
  - io_uring: fix filename leak in __io_openat_prep()
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
  - rxrpc: Fix transmission of an abort in response to an abort
  - rxrpc: Fix recv-recv race of completed call
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
  - net: bridge: Do not offload IGMP/MLD messages
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
  - net/mlx5: Correctly set gso_size when LRO is used
  - Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
  - Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
  - Bluetooth: SMP: If an unallowed command is received consider it a failure
  - Bluetooth: hci_sync: fix connectable extended advertising when using static random address
  - hwmon: (corsair-cpro) Validate the size of the received input buffer
  - selftests: net: increase inter-packet timeout in udpgro.sh
  - wifi: cfg80211: remove scan request n_channels counted_by
  - nvme: fix misaccounting of nvme-mpath inflight I/O
  - net: phy: Don't register LEDs for genphy
  - nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
  - rpl: Fix use-after-free in rpl_do_srh_inline().
  - block: fix kobject leak in blk_unregister_queue
  - net: emaclite: Fix missing pointer increment in aligned_read()
  - soundwire: amd: fix for clearing command status register
  - soundwire: amd: fix for handling slave alerts after link is down
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  - comedi: Fix some signed shift left operations
  - comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
  - comedi: das6402: Fix bit shift out of bounds
  - comedi: das16m1: Fix bit shift out of bounds
  - comedi: aio_iiro_16: Fix bit shift out of bounds
  - comedi: pcl812: Fix bit shift out of bounds
  - iio: adc: stm32-adc: Fix race in installing chained IRQ handler
  - iio: adc: max1363: Reorder mode_list[] entries
  - iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
  - iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
  - soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
  - soc: aspeed: lpc-snoop: Cleanup resources in stack-order
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
  - pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
  - net: libwx: properly reset Rx ring descriptor
  - net: libwx: remove duplicate page_pool_put_full_page()
  - mmc: sdhci_am654: Workaround for Errata i2312
  - mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
  - mmc: bcm2835: Fix dma_unmap_sg() nents value
  - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
  - isofs: Verify inode mode when loading from disk
  - dmaengine: nbpfaxi: Fix memory corruption in probe()
  - af_packet: fix soft lockup issue caused by tpacket_snd()
  - af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
  - arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
  - arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
  - arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
  - net/mlx5: Update the list of the PCI supported devices
  - phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
  - io_uring/poll: fix POLLERR handling
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
  - drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
  - tracing/osnoise: Fix crash in timerlat_dump_stack()
  - spi: Add check for 8-bit transfer with 8 IO mode support
  - pch_uart: Fix dma_sync_sg_for_device() nents value
  - thunderbolt: Fix bit masking in tb_dp_port_set_hops()
  - i2c: stm32: fix the device used for the DMA map
  - tracing: Fix crash on synthetic stacktrace field usage
  - usb: musb: fix gadget state on disconnect
  - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
  - USB: serial: option: add Foxconn T99W640
  - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
  - phy: tegra: xusb: Disable periodic tracking on Tegra234
  - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
  - fs/proc: fix uaf in proc_readdir_de()
  - io_uring/net: commit partial buffers on retry
  - nvme: fix admin request_queue lifetime
  - fs/notify: call exportfs_encode_fid with s_umount
  - iomap: adjust read range correctly for non-block-aligned positions
  - fuse: fix livelock in synchronous file put from fuseblk workers
  - tpm: Cap the number of PCR banks
  - nfsd: provide locking for v4_end_grace
  - Revert "nfsd: provide locking for v4_end_grace"
  - config: enable config for PMT discovery driver
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access
  - platform/x86/intel/pmt: fix build dependency for kunit test
  - platform/x86/intel/pmt/discovery: fix format string warning
  - platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit
  - platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API
  - platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature
  - platform/x86/intel/pmt/discovery: Get telemetry attributes
  - platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI
  - platform/x86/intel/vsec: Set OOBMSM to CPU mapping
  - platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h
  - docs: Add ABI documentation for intel_pmt feature directories
  - platform/x86/intel/pmt: Add PMT Discovery driver
  - sysfs: Fix crash on empty group attributes array
  - sysfs: Introduce a mechanism to hide static attribute_groups
  - platform/x86/intel/vsec: Add new Discovery feature
  - platform/x86/intel/vsec: Skip driverless features
  - platform/x86/intel/vsec: Skip absent features during initialization
  - platform/x86/intel/vsec: Add device links to enforce dependencies
  - platform/x86/intel/vsec: Create wrapper to walk PCI config space
  - platform/x86/intel/vsec: Add private data for per-device data
  - MAINTAINERS: Add link to documentation of Intel PMT ABI
  - platform/x86/intel/pmt: allow user offset for PMT callbacks
  - driver/coda: VirtCCA supports MSI device DA
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
  - Rename leapioraid to leapraid and release v2.0
  - ub: udma: fix a bug that caused long reboot time.
  - ub: ubase: Accelerate when ctrl node is shutting down
  - platform/x86/intel/pmt: Use PMT callbacks
  - platform/x86/intel/vsec: Add PMT read callbacks
  - platform/x86/intel/vsec.h: Move to include/linux
  - md: prevent incorrect update of resync/recovery offset
  - md/raid1: Fix data corruption for degraded array with slow disk
  - md/raid1: set max_sectors during early return from choose_slow_rdev()
  - md-cluster: fix no recovery job when adding/re-adding a disk
  - md-cluster: fix hanging issue while a new disk adding
  - md/raid5: recheck if reshape has finished with device_lock held
  - md-cluster: Constify struct md_cluster_operations
  - md: Remove unneeded semicolon
  - md/raid5: fix spares errors about rcu usage
  - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
  - md: pass in max_sectors for pers->sync_request()
  - md: factor out helpers for different sync_action in md_do_sync()
  - md: replace last_sync_action with new enum type
  - md: use new helpers in md_do_sync()
  - md: don't fail action_store() if sync_thread is not registered
  - md: remove parameter check_seq for stop_sync_thread()
  - md: replace sysfs api sync_action with new helpers
  - md: factor out helper to start reshape from action_store()
  - md: add new helpers for sync_action
  - md: add a new enum type sync_action
  - md: rearrange recovery_flags
  - md/raid0: don't free conf on raid0_run failure
  - md: make md_flush_request() more readable
  - md: change the return value type of md_write_start to void
  - md: Revert "md: Fix overflow in is_mddev_idle"
  - md: don't account sync_io if iostats of the disk is disabled
  - md: Fix overflow in is_mddev_idle
  - md: add check for sleepers in md_wakeup_thread()
  - md: add a mddev_is_dm helper
  - md: add a mddev_add_trace_msg helper
  - md: add a mddev_trace_remap helper
  - dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
  - dm-raid: add a new helper prepare_suspend() in md_personality
  - dm-raid: really frozen sync_thread during suspend
  - md: add a new helper reshape_interrupted()
  - md: export helper md_is_rdwr()
  - md: export helpers to stop sync_thread
  - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume
  - md/raid1: factor out helpers to choose the best rdev from read_balance()
  - md/raid1: factor out the code to manage sequential IO
  - md/raid1: factor out choose_bb_rdev() from read_balance()
  - md/raid1: factor out choose_slow_rdev() from read_balance()
  - md/raid1: factor out read_first_rdev() from read_balance()
  - md/raid1-10: factor out a new helper raid1_should_read_first()
  - md/raid1-10: add a helper raid1_check_read_range()
  - md/raid1: fix choose next idle in read_balance()
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf
  - md/raid1: factor out helpers to add rdev to conf
  - md: add a new helper rdev_has_badblock()
  - md: check mddev->pers before calling md_set_readonly()
  - md: clean up openers check in do_md_stop() and md_set_readonly()
  - md: sync blockdev before stopping raid or setting readonly
  - md: factor out a helper to sync mddev
  - md: return directly before setting did_set_md_closing
  - md: changed the switch of RAID_VERSION to if
  - md: merge the check of capabilities into md_ioctl_valid()
  - md: Don't suspend the array for interrupted reshape
  - md: Don't register sync_thread for reshape directly
  - md: Make sure md_do_sync() will set MD_RECOVERY_DONE
  - md: Don't ignore read-only array in md_check_recovery()
  - md: Don't ignore suspended array in md_check_recovery()
  - md: get rdev->mddev with READ_ONCE()
  - md: remove redundant md_wakeup_thread()
  - md: remove redundant check of 'mddev->sync_thread'
  - md: fix a suspicious RCU usage warning
  - raid: Remove now superfluous sentinel element from ctl_table array
  - NFSD: NFSv4 file creation neglects setting ACL
  - nfsd: set security label during create operations
  - xfs: Add xfs_dir3_leaf_header_check() in leaf/leafn read
  - nvme-fc: use lock accessing port_state and rport state
  - x86/mm: Batch flushing user memory encrytion status change


author: Li Nan <linan122@huawei.com> - 6.6.0-138.0.0.119
changelog:
  - !20588 [OLK-6.6] Revert "x86/csv: Enhance CMA memory usage reporting for CSV3"
  - Revert "x86/csv: Enhance CMA memory usage reporting for CSV3"
  - !20576  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - !20575  RDMA/cm: Fix leaking the multicast GID table reference
  - !20580  RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
  - !20551  Fix CVE-2025-68785
  - !20478  f2fs: fix to avoid potential deadlock
  - !20501 [OLK-6.6] backport important bugfix for bnxt driver from upstream linux-6.6.y
  - !20520 Fix CVE-2026-23038
  - !20424  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  - !20425  mlx5: Fix default values in create CQ
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  - RDMA/cm: Fix leaking the multicast GID table reference
  - net: openvswitch: fix middle attribute validation in push_nsh() action
  - net: openvswitch: remove never-working support for setting nsh fields
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
  - bnxt_en: Fix potential data corruption with HW GRO/LRO
  - f2fs: fix to avoid potential deadlock
  - mlx5: Fix default values in create CQ
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup


author: Li Nan <linan122@huawei.com> - 6.6.0-139.0.0.120
changelog:
  - !20727 v2  bpf: sockmap fixes
  - !20741  scsi: qla2xxx: Sanitize payload size to prevent member overflow
  - !20744  fix CVE-2025-38449
  - !20763  net: usb: asix: validate PHY address before use
  - !20762  smc91x: fix broken irq-context in PREEMPT_RT
  - !20293 [Hygon][6.6][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - !20290 [Hygon][6.6][Bugfix] Bug fix for EDAC to use unicast instead of broadcast on hygon family 18h model 4h
  - !20289 [Hygon][6.6][Bugfix] Bug fix for EDAC to correct the address translation on hygon family 18h model 4h
  - !20245 KVM: arm64: Refactor exit handlers
  - !20246 KVM: arm64: Mark some header functions as inline
  - !19005 [Hygon] [OLK-6.6] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
  - !20292 [Hygon][6.6][TSC Adjust] Backport x86 TSC adjust patch
  - !20273 [Hygon][6.6][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
  - !20722 [OLK-6.6][linux-6.6.y sync] Backport 6.6.104-6.6.106 LTS Patches
  - !20667  fix CVE-2024-50102
  - !20736  netfilter: nf_tables: remove redundant chain validation on register store
  - !20758 ub: ubase: Fixed the alarm issue caused by the initialization of the structure variable definition.
  - !20721 obmm: reduce log noise for successful export/import/preimport
  - net: usb: asix: validate PHY address before use
  - smc91x: fix broken irq-context in PREEMPT_RT
  - !20731  devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
  - !20732  libceph: return the handler error from mon_handle_auth_done()
  - !20743  mm: slub: avoid wake up kswapd in set_track_prepare
  - ub: ubase: Fixed the alarm issue caused by the initialization of the structure variable definition.
  - !20750 ub: cdma: adapted to UMMU interface changes
  - !20713 urma: DFX of log in kernel
  - urma: optimize log levels for kernel space
  - ub: cdma: adapted to UMMU interface changes
  - wifi: ath11k: avoid bit operation on key flags
  - drm/mediatek: fix potential OF node use-after-free
  - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
  - !20708 ub:hisi-ubus: Add create bus instance ummu bypass
  - drm: fix kabi for struct drm_framebuffer
  - drm/framebuffer: Acquire internal references on GEM handles
  - drm/gem: Acquire references on GEM handles for framebuffers
  - mm: slub: avoid wake up kswapd in set_track_prepare
  - scsi: qla2xxx: Sanitize payload size to prevent member overflow
  - netfilter: nf_tables: remove redundant chain validation on register store
  - libceph: return the handler error from mon_handle_auth_done()
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
  - Documentation/hw-vuln: Add VMSCAPE documentation
  - dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
  - riscv: use lw when reading int cpu in asm_per_cpu
  - mm: slub: avoid wake up kswapd in set_track_prepare
  - tools: gpio: remove the include directory on make clean
  - tools: gpio: rm .*.cmd on make clean
  - drm/amd/amdgpu: Fix missing error return on kzalloc failure
  - drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
  - perf bpf-event: Fix use-after-free in synthesis
  - drm/bridge: ti-sn65dsi86: fix REFCLK setting
  - spi: spi-fsl-lpspi: Clear status register after disabling the module
  - spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
  - spi: spi-fsl-lpspi: Set correct chip-select polarity bit
  - spi: spi-fsl-lpspi: Fix transmissions when using CONT
  - hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
  - pcmcia: omap: Add missing check for platform_get_resource
  - Revert "drm/amdgpu: Avoid extra evict-restore process."
  - ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
  - ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
  - drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
  - drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
  - drm/mediatek: Add crtc path enum for all_drm_priv array
  - vmxnet3: update MTU after device quiesce
  - net: dsa: microchip: linearize skb for tail-tagging switches
  - net: dsa: microchip: update tag_ksz masks for KSZ9477 family
  - dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
  - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
  - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
  - iio: pressure: mprls0025pa: use aligned_s64 for timestamp
  - iio: chemical: pms7003: use aligned_s64 for timestamp
  - iio: imu: inv_mpu6050: align buffer for timestamp
  - thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
  - nouveau: fix disabling the nonstall irq due to storm code
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
  - net: pcs: rzn1-miic: Correct MODCTRL register offset
  - platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
  - drm/amdgpu: drop hw access in non-DC audio fini
  - wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
  - wifi: mwifiex: Initialize the chan_stats array to zero
  - tcp_bpf: Fix copied value in tcp_bpf_sendmsg
  - skmsg: Return copied bytes in sk_msg_memcopy_from_iter
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
  - Revert "bpf, sockmap: Add sk_rmem_alloc check for sockmap"
  - ALSA: usb-audio: Add mute TLV for playback volumes on some devices
  - phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
  - selftest: net: Fix weird setsockopt() in bind_bhash.c.
  - net: atm: fix memory leak in atm_register_sysfs when device_register fail
  - ax25: properly unshare skbs in ax25_kiss_rcv()
  - mctp: return -ENOPROTOOPT for unknown getsockopt options
  - net/smc: Remove validation of reserved bits in CLC Decline message
  - ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
  - net: thunder_bgx: decrement cleanup index before use
  - net: thunder_bgx: add a missing of_node_put
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
  - wifi: libertas: cap SSID len in lbs_associate()
  - wifi: cw1200: cap SSID length in cw1200_do_join()
  - net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
  - wifi: ath11k: fix group data packet drops during rekey
  - wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
  - wifi: ath11k: rename ath11k_start_vdev_delay()
  - wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
  - net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
  - macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
  - netlink: add variable-length / auto integers
  - net: macb: Fix tx_ptr_lock locking
  - icmp: fix icmp_ndo_send address translation for reply direction
  - mISDN: Fix memory leak in dsp_hwec_enable()
  - xirc2ps_cs: fix register access when enabling FullDuplex
  - netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
  - wifi: cfg80211: fix use-after-free in cmp_bss()
  - arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
  - arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
  - tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
  - Bluetooth: hci_sync: Avoid adding default advertising on startup
  - cpupower: Fix a bug where the -t option of the set subcommand was not working.
  - drm/amd/display: Don't warn when missing DCE encoder caps
  - cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
  - LoongArch: Save LBT before FPU in setup_sigcontext()
  - btrfs: avoid load/store tearing races when checking if an inode was logged
  - btrfs: fix race between setting last_dir_index_offset and inode logging
  - btrfs: fix race between logging inode and checking if it was logged before
  - bpf: Fix oob access in cgroup local storage
  - !20556 urma: fix update topo logic
  - !20639 [OLK-6.6][linux-6.6.y sync] Backport 6.6.103-6.6.104 LTS Patches
  - !20641 [OLK-6.6][linux-6.6.y sync] LoongArch: Add more instruction opcodes and emit_* helpers
  - !20560  *** fix CVE-2025-38062 ***
  - !20662  pNFS: Fix a deadlock when returning a delegation during open()
  - ub:hisi-ubus: Add create bus instance ummu bypass
  - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
  - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
  - HID: mcp2221: Handle reads greater than 60 bytes
  - HID: mcp2221: Don't set bus speed on every transfer
  - net/mlx5: SF, Fix add port error handling
  - drm/nouveau/disp: Always accept linear modifier
  - smb3 client: fix return code mapping of remap_file_range
  - net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
  - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
  - HID: wacom: Add a new Art Pen 2
  - HID: logitech: Add ids for G PRO 2 LIGHTSPEED
  - HID: quirks: add support for Legion Go dual dinput modes
  - net: stmmac: Set CIC bit only for TX queues with COE
  - net: stmmac: xgmac: Correct supported speed modes
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
  - net/mlx5e: Set local Xoff after FW update
  - net/mlx5e: Update and set Xon/Xoff upon port speed set
  - net/mlx5e: Update and set Xon/Xoff upon MTU set
  - net/mlx5: Nack sync reset when SFs are present
  - net/mlx5: Convert SF port_indices xarray to function_ids xarray
  - net/mlx5: Use devlink port pointer to get the pointer of container SF struct
  - net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc()
  - phy: mscc: Fix when PTP clock is register and unregister
  - net: dlink: fix multicast stats being counted incorrectly
  - dt-bindings: display/msm: qcom,mdp5: drop lut clock
  - drm/nouveau: remove unused memory target test
  - drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  - Bluetooth: hci_sync: fix set_local_name race condition
  - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
  - Bluetooth: hci_event: Mark connection as closed during suspend disconnect
  - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
  - HID: input: report battery status changes immediately
  - HID: input: rename hidinput_set_battery_charge_status()
  - powerpc/kvm: Fix ifdef to remove build warning
  - drm/msm: Defer fd_install in SUBMIT ioctl
  - vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
  - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
  - erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
  - ASoC: codecs: tx-macro: correct tx_macro_component_drv name
  - smb: client: fix race with concurrent opens in unlink(2)
  - scsi: core: sysfs: Correct sysfs attributes access rights
  - of: dynamic: Fix use after free in of_changeset_add_prop_helper()
  - of: Add a helper to free property struct
  - mips: lantiq: xway: sysctrl: rename the etop node
  - mips: dts: lantiq: danube: add missing burst length property
  - pinctrl: STMFX: add missing HAS_IOMEM dependency
  - of: dynamic: Fix memleak when of_pci_add_properties() failed
  - !20684 urma: adjust urma log format
  - !20355  udp: Deal with race between UDP socket address change and rehash
  - !20627  Fixes CVE-2025-38627
  - !20702  CVE-2025-39948
  - !20701  netfilter: ctnetlink: remove refcounting in expectation dumpers
  - !20700  CVE-2025-38678
  - !20703  CVE-2025-38491
  - !20690  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
  - obmm: reduce log noise for successful export/import/preimport
  - mptcp: avoid deadlock on fallback while reinjecting
  - mptcp: plug races between subflow fail and subflow creation
  - mptcp: make fallback action and fallback decision atomic
  - ice: fix Rx page leak on multi-buffer frames
  - ice: fix incorrect counter for buffer allocation failures
  - ice: stop storing XDP verdict within ice_rx_buf
  - ice: gather page_count()'s of each frag right before XDP prog call
  - ice: Introduce ice_xdp_buff
  - netfilter: ctnetlink: remove refcounting in expectation dumpers
  - netfilter: nf_tables: reject duplicate device on updates
  - netfilter: nf_tables: Introduce functions freeing nft_hook objects
  - netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c
  - err.h: add ERR_PTR_PCPU(), PTR_ERR_PCPU() and IS_ERR_PCPU() macros
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
  - !20498 Fix CVE-2025-71118
  - !20608  pmdomain: arm: scmi: Fix genpd leak on provider registration failure
  - !20679  x86/CPU/AMD: Add RDSEED fix for Zen5
  - !20650  fix cve-2025-40300
  - !20661  Input: alps - fix use-after-free bugs caused by dev3_register_work
  - !20664  backport some net bugfix from 6.6 lts
  - urma: adjust urma log format
  - !20678 ub: udma: close debug switch load parameters.
  - ub: udma: close debug switch load parameters.
  - x86/CPU/AMD: Add RDSEED fix for Zen5
  - !20630  net: LTS-6.6 bugfix backport
  - !20632  net/sched: sch_qfq: do not free existing class in qfq_change_class()
  - !20631  macvlan: fix possible UAF in macvlan_forward_source()
  - !20628  Fix CVE-2025-39910
  - !20659 v2  Fix CVE-2025-22090
  - !20506  XSched: Update XSched manual
  - !20647  media: imon: make send_packet() more robust
  - !20646  ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
  - !20645  fbcon: Set fb_display[i
  - !20648  parse_longname(): strrchr() expects NUL-terminated string
  - !20621 urma: modify log level
  - !20602 urma: fix the jfe uaf issue that occurred during the killall process.
  - !20567 urma:change log level and pass status 9
  - !20640  iio: common: st_sensors: Fix use of uninitialize device structs
  - !20634  usb: gadget: udc: fix use-after-free in usb_gadget_state_work
  - !20633  net: dsa: properly keep track of conduit reference
  - !20635  fix CVE-2025-68231
  - !20651  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
  - !20649  drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
  - !20652  mm/vmalloc: fix data race in show_numa_info()
  - x86: uaccess: don't use runtime-const rewriting in modules
  - x86: fix off-by-one in access_ok()
  - x86: fix user address masking non-canonical speculation issue
  - x86/uaccess: Zero the 8-byte get_range case on failure on 32-bit
  - x86/uaccess: Improve the 8-byte getuser() case
  - x86: fix whitespace in runtime-const assembler output
  - dcache: keep dentry_hashtable or d_hash_shift even when not used
  - runtime constants: add x86 architecture support
  - runtime constants: deal with old decrepit linkers
  - x86/uaccess: Add missing __force to casts in __access_ok() and valid_user_address()
  - !20345 arm64: entry: xcall/xint: make asm conditionals compatible with clang IAS
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
  - libceph: replace BUG_ON with bounds check for map->max_osd
  - libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
  - libceph: fix potential use-after-free in have_mon_and_osd_map()
  - sctp: Hold sock lock while iterating over address list
  - sctp: Prevent TOCTOU out-of-bounds write
  - sctp: Hold RCU read lock while iterating over address list
  - tipc: Fix use-after-free in tipc_mon_reinit_self().
  - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
  - sctp: avoid NULL dereference when chunk data buffer is missing
  - bpf: Explicitly check accesses to bpf_sock_addr
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup
  - nexthop: Forbid FDB status change while nexthop is in a group
  - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
  - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
  - sctp: initialize more fields in sctp_v6_from_sk()
  - pNFS: Fix a deadlock when returning a delegation during open()
  - Input: alps - fix use-after-free bugs caused by dev3_register_work
  - x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
  - mm: (un)track_pfn_copy() fix + doc improvements
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
  - !20642  mtdchar: fix integer overflow in read/write ioctls
  - mm/vmalloc: fix data race in show_numa_info()
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err()
  - config: enable CONFIG_MITIGATION_VMESCAPE by default on x86
  - x86/vmscape: Enable the mitigation
  - x86/vmscape: Enumerate VMSCAPE bug
  - x86/vmscape: Add conditional IBPB mitigation
  - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
  - parse_longname(): strrchr() expects NUL-terminated string
  - media: imon: make send_packet() more robust
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
  - fbcon: Set fb_display[i]->mode to NULL when the mode is released
  - !20569  CVE-2024-35808
  - mtdchar: fix integer overflow in read/write ioctls
  - !20619 Fix CVE-2026-22991
  - !20612 net: hns3: extend HCLGE_FD_AD_COUNTER_NUM to 8 bits
  - LoongArch: Add more instruction opcodes and emit_* helpers
  - iio: common: st_sensors: Fix use of uninitialize device structs
  - !20581  null_blk: fix kmemleak by releasing references to fault configfs items
  - mm/mempool: fix poisoning order>0 pages with HIGHMEM
  - mm/page_poison: replace kmap_atomic() with kmap_local_page()
  - mm/mempool: replace kmap_atomic() with kmap_local_page()
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work
  - net: dsa: properly keep track of conduit reference
  - net/sched: sch_qfq: do not free existing class in qfq_change_class()
  - macvlan: fix possible UAF in macvlan_forward_source()
  - netfilter: nft_objref: validate objref and objrefmap expressions
  - arp: do not assume dev_hard_header() does not change skb->head
  - ip6_gre: make ip6gre_header() robust
  - netfilter: nf_tables: avoid chain re-validation if possible
  - netfilter: nf_tables: drop unused 3rd argument from validate callback ops
  - Revert "netfilter: nft_objref: validate objref and objrefmap expressions"
  - bpf: Fix reference count leak in bpf_prog_test_run_xdp()
  - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
  - ethtool: Avoid overflowing userspace buffer on stats query
  - ipvs: fix ipv4 null-ptr-deref in route error path
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
  - !20596  mm/page_alloc: prevent pcp corruption with SMP=n
  - !20598  team: fix check for port enabled in team_queue_override_port_prio_changed()
  - !18823  hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
  - mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
  - kasan: avoid sleepable page allocation from atomic context
  - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
  - f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
  - !20583 [OLK-6.6][linux-6.6.y sync] Backport 6.6.102-6.6.103 LTS Patches
  - !20460  fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - urma:fix log level and pass status 9
  - urma: modify log level
  - !20592  CVE-2025-71141 fixup
  - !20594  CVE-2025-39744 fixup
  - !20607  powerpc/64s/slb: Fix SLB multihit issue during SLB preload
  - !20606  mm/huge_memory: fix NULL pointer deference when splitting folio
  - !20604 Fix CVE-2026-22984
  - !20603 Fix CVE-2026-23021
  - !20600 Fix CVE-2026-22990
  - urma: fix the jfe uaf issue that occurred during the killall process.
  - !20380 pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD
  - libceph: make free_choose_arg_map() resilient to partial allocation
  - drm/dp: Change AUX DPCD probe address from LANE0_1_STATUS to TRAINING_PATTERN_SET
  - net: hns3: extend HCLGE_FD_AD_COUNTER_NUM to 8 bits
  - net: hns3: extend HCLGE_FD_AD_QID to 11 bits
  - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
  - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
  - Revert "net: hns3: add support for FD counter"
  - !20587  dmaengine: stm32: dmamux: fix device leak on route allocation
  - pmdomain: arm: scmi: Fix genpd leak on provider registration failure
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload
  - mm/huge_memory: fix NULL pointer deference when splitting folio
  - !20562  LoongArch: BPF: Sign extend kfunc call arguments
  - !20470  ipv4: Fix reference count leak when using error routes with nexthop objects
  - !20471  net: sock: fix hardened usercopy panic in sock_recv_errqueue
  - !20472  net: fix memory leak in skb_segment_list for GRO packets
  - !20473  ipv4: ip_gre: make ipgre_header() robust
  - !20469  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
  - !20476  ipv6: Fix use-after-free in inet6_addr_del().
  - !20477  svcrdma: bound check rq_pages index in inline path
  - !20578  ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
  - !20579  fix CVE-2025-68768
  - !20542  Fix NFS deadlock
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk
  - cpuidle: governors: menu: Select polling state in some more cases
  - cpuidle: governors: menu: Rearrange main loop in menu_select()
  - cpuidle: menu: Update documentation after previous changes
  - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
  - parisc: Remove spurious if statement from raw_copy_from_user()
  - ata: libata-scsi: Fix system suspend for a security locked drive
  - Revert "drm/amdgpu: fix incorrect vm flags to map bo"
  - mfd: axp20x: Set explicit ID for regulator cell if no IRQ line is present
  - drm/amd/display: use udelay rather than fsleep
  - sched/fair: Revert max_newidle_lb_cost bump
  - net: ipv4: fix regression in local-broadcast routes
  - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM
  - usb: typec: ucsi: psy: Set max current to zero when disconnected
  - io_uring/rw: cast rw->flags assignment to rwf_t
  - Documentation: ACPI: i2c-muxes: fix I2C device references
  - s390/hypfs: Enable limited access during lockdown
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs
  - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
  - net/mlx5e: Preserve shared buffer capacity during headroom updates
  - net/mlx5: Base ECVF devlink port attrs from 0
  - Octeontx2-af: Skip overlap check for SPI field
  - bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
  - bonding: Add independent control state machine
  - bonding: update LACP activity flag after setting lacp_active
  - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
  - gve: prevent ethtool ops after shutdown
  - phy: mscc: Fix timestamping for vsc8584
  - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
  - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3()
  - mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
  - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
  - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
  - scsi: qla4xxx: Prevent a potential error pointer dereference
  - RDMA/bnxt_re: Fix to initialize the PBL array
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
  - RDMA/bnxt_re: Fix to do SRQ armena by default
  - RDMA/erdma: Fix ignored return value of init_kernel_qp
  - iosys-map: Fix undefined behavior in iosys_map_clear()
  - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
  - spi: spi-fsl-lpspi: Clamp too high speed_hz
  - usb: typec: maxim_contaminant: disable low power mode when reading comparator values
  - usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
  - iio: imu: inv_icm42600: change invalid data error to -EBUSY
  - iio: imu: inv_icm42600: Convert to uXX and sXX integer types
  - iio: imu: inv_icm42600: use = { } instead of memset()
  - iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
  - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
  - iio: light: as73211: Ensure buffer holes are zeroed
  - tls: fix handling of zero-length records on the rx_list
  - powerpc/boot: Fix build with gcc 15
  - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
  - compiler: remove __ADDRESSABLE_ASM{_STR,}() again
  - drm/amd/display: Don't overclock DCE 6 by 15%
  - usb: dwc3: pci: add support for the Intel Wildcat Lake
  - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
  - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
  - usb: storage: realtek_cr: Use correct byte order for bcs->Residue
  - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
  - usb: renesas-xhci: Fix External ROM access timeouts
  - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
  - comedi: Make insn_rw_emulate_bits() do insn->n samples
  - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
  - cdx: Fix off-by-one error in cdx_rpmsg_probe()
  - most: core: Drop device reference after usage in get_channel()
  - iio: proximity: isl29501: fix buffered read on big-endian systems
  - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
  - fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
  - drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
  - cpuidle: governors: menu: Avoid selecting states with too much latency
  - cpuidle: menu: Remove iowait influence
  - mmc: sdhci-pci-gli: Add a new function to simplify the code
  - mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
  - mptcp: disable add_addr retransmission when timeout is 0
  - mptcp: remove duplicate sk_reset_timer call
  - use uniform permission checks for all mount propagation changes
  - arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
  - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
  - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
  - PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
  - PCI: imx6: Delay link start until configfs 'start' written
  - PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
  - PCI: rockchip: Use standard PCIe definitions
  - drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
  - drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
  - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
  - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
  - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
  - mm/debug_vm_pgtable: clear page table entries at destroy_args()
  - squashfs: fix memory leak in squashfs_fill_super
  - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
  - memstick: Fix deadlock by moving removing flag earlier
  - KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
  - sched/fair: Fix frequency selection for non-invariant case
  - kbuild: userprogs: use correct linker when mixing clang and GNU ld
  - ata: libata-scsi: Return aborted command when missing sense and result TF
  - PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
  - PM: runtime: Simplify pm_runtime_get_if_active() usage
  - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
  - usb: dwc3: imx8mp: fix device leak at unbind
  - wifi: mac80211: check basic rates validity in sta_link_apply_parameters
  - KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
  - s390/mm: Remove possible false-positive warning in pte_free_defer()
  - btrfs: send: make fs_path_len() inline and constify its argument
  - btrfs: send: use fallocate for hole punching with send stream v2
  - btrfs: send: avoid path allocation for the current inode when issuing commands
  - btrfs: send: keep the current inode's path cached
  - btrfs: send: add and use helper to rename current inode when processing refs
  - btrfs: send: only use boolean variables at process_recorded_refs()
  - btrfs: send: factor out common logic when sending xattrs
  - btrfs: populate otime when logging an inode item
  - btrfs: constify more pointer parameters
  - btrfs: fix ssd_spread overallocation
  - btrfs: open code timespec64 in struct btrfs_inode
  - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
  - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
  - btrfs: always abort transaction on failure to add block group to free space tree
  - btrfs: move transaction aborts to the error site in add_block_group_free_space()
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl
  - usb: typec: fusb302: cache PD RX state
  - block: Make REQ_OP_ZONE_FINISH a write operation
  - block: reject invalid operation in submit_bio_noacct
  - leds: flash: leds-qcom-flash: Fix registry access after re-bind
  - leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
  - selftests/memfd: add test for mapping write-sealed memfd read-only
  - mm: update memfd seal write check to include F_SEAL_WRITE
  - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
  - mptcp: drop skb if MPTCP skb extension allocation fails
  - ipv6: sr: Fix MAC comparison to be constant-time
  - drm/amd/display: Don't overwrite dce60_clk_mgr
  - drm/amd/display: Add primary plane to commits for correct VRR handling
  - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
  - drm/amdgpu: update mmhub 3.0.1 client id mappings
  - drm/amdgpu: Avoid extra evict-restore process.
  - drm/amd: Restore cached power limit during resume
  - media: venus: venc: Clamp param smaller than 1fps and bigger than 240
  - media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
  - media: venus: protect against spurious interrupts during probe
  - media: venus: hfi: explicitly release IRQ during teardown
  - media: qcom: camss: cleanup media device allocated resource on error path
  - media: ov2659: Fix memory leaks in ov2659_probe()
  - media: usbtv: Lock resolution while streaming
  - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
  - media: verisilicon: Fix AV1 decoder clock frequency
  - media: vivid: fix wrong pixel_array control size
  - media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
  - media: hi556: correct the test pattern configuration
  - media: gspca: Add bounds checking to firmware parser
  - parisc: Update comments in make_insert_tlb
  - parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
  - parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
  - parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
  - parisc: Define and use set_pte_at()
  - parisc: Check region is readable by user in raw_copy_from_user()
  - soc/tegra: pmc: Ensure power-domains are in a known state
  - f2fs: fix to avoid out-of-boundary access in dnode page
  - phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
  - vhost/vsock: Avoid allocating arbitrarily-sized SKBs
  - PCI: endpoint: Fix configfs group removal on driver teardown
  - PCI: endpoint: Fix configfs group list head handling
  - mtd: rawnand: renesas: Add missing check after DMA map
  - mtd: rawnand: fsmc: Add missing check after DMA map
  - mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
  - mtd: spi-nor: Fix spi_nor_try_unlock_all()
  - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
  - pwm: mediatek: Fix duty and period setting
  - pwm: mediatek: Handle hardware enable and clock enable separately
  - pwm: imx-tpm: Reset counter if CMOD is 0
  - wifi: ath11k: fix dest ring-buffer corruption when ring is full
  - wifi: ath11k: fix source ring-buffer corruption
  - wifi: ath11k: fix dest ring-buffer corruption
  - wifi: ath12k: fix dest ring-buffer corruption when ring is full
  - wifi: ath12k: fix source ring-buffer corruption
  - wifi: ath12k: fix dest ring-buffer corruption
  - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
  - iio: adc: ad_sigma_delta: change to buffer predisable
  - zynq_fpga: use sgtable-based scatterlist wrappers
  - scsi: ufs: ufs-pci: Fix default runtime and system PM levels
  - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
  - ata: libata-scsi: Fix ata_to_sense_error() status handling
  - scsi: mpi3mr: Fix race between config read submit and interrupt completion
  - dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
  - dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
  - arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
  - arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
  - arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
  - btrfs: zoned: fix write time activation failure for metadata block group
  - ext4: fix hole length calculation overflow in non-extent inodes
  - ext4: don't try to clear the orphan_present feature block device is r/o
  - ext4: fix reserved gdt blocks handling in fsmap
  - ext4: fix fsmap end of range reporting with bigalloc
  - ext4: check fast symlink for ea_inode correctly
  - tracing: fprobe-event: Sanitize wildcard for fprobe event name
  - crypto: qat - lower priority for skcipher and aead algorithms
  - lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
  - vt: defkeymap: Map keycodes above 127 to K_HOLE
  - vt: keyboard: Don't process Unicode characters in K_OFF mode
  - bus: mhi: host: Fix endianness of BHI vector table
  - usb: dwc3: meson-g12a: fix device leaks at unbind
  - usb: musb: omap2430: fix device leak at unbind
  - usb: gadget: udc: renesas_usb3: fix device leak at unbind
  - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
  - m68k: Fix lost column on framebuffer debug console
  - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
  - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
  - rcu: Fix racy re-initialization of irq_work causing hangs
  - HID: apple: avoid setting up battery timer for devices without battery
  - HID: magicmouse: avoid setting up battery timer when not needed
  - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
  - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
  - media: uvcvideo: Do not mark valid metadata as invalid
  - media: venus: Fix OOB read due to missing payload bound check
  - parisc: Makefile: fix a typo in palo.conf
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - btrfs: do not allow relocation of partially dropped subvolumes
  - btrfs: zoned: do not select metadata BG as finish target
  - btrfs: clear dirty status from extent buffer on error at insert_new_root()
  - btrfs: zoned: do not remove unwritten non-data block group
  - btrfs: abort transaction during log replay if walk_log_tree() failed
  - btrfs: zoned: use filesystem size not disk size for reclaim decision
  - cdc-acm: fix race between initial clearing halt and open
  - thunderbolt: Fix copy+paste error in match_service_id()
  - usb: typec: ucsi: Update power_supply on power role change
  - misc: rtsx: usb: Ensure mmc child device is active when card is present
  - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
  - cifs: reset iface weights when we cannot find a candidate
  - drm/amdgpu: fix incorrect vm flags to map bo
  - scsi: lpfc: Remove redundant assignment to avoid memory leak
  - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
  - pNFS: Handle RPC size limit for layoutcommits
  - pNFS: Fix disk addr range check in block/scsi layout
  - pNFS: Fix stripe mapping in block/scsi layout
  - ASoC: Intel: avs: Fix uninitialized pointer error in probe()
  - net: phy: smsc: add proper reset flags for LAN8710A
  - ipmi: Fix strcpy source and destination the same
  - kconfig: lxdialog: fix 'space' to (de)select options
  - kconfig: gconf: fix potential memory leak in renderer_edited()
  - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings
  - vfio/mlx5: fix possible overflow in tracking max message size
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY
  - scsi: target: core: Generate correct identifiers for PR OUT transport IDs
  - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
  - kconfig: nconf: Ensure null termination where strncpy is used
  - vfio/type1: conditional rescheduling while pinning
  - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
  - f2fs: check the generic conditions first
  - exfat: add cluster chain loop check for dir
  - i2c: Force DLL0945 touchpad i2c freq to 100khz
  - apparmor: use the condition in AA_BUG_FMT even with debug disabled
  - dm-table: fix checking for rq stackable devices
  - dm-mpath: don't print the "loaded" message if registering fails
  - i3c: master: Initialize ret in i3c_i2c_notifier_call()
  - i3c: don't fail if GETHDRCAP is unsupported
  - apparmor: shift ouid when mediating hard links in userns
  - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
  - i3c: add missing include to internal header
  - module: Prevent silent truncation of module name in delete_module(2)
  - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
  - soundwire: Move handle_nested_irq outside of sdw_dev_lock
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare
  - crypto: octeontx2 - add timeout for load_fvc completion poll
  - media: uvcvideo: Fix bandwidth issue for Alcor camera
  - media: usb: hdpvr: disable zero-length read messages
  - media: tc358743: Increase FIFO trigger level to 374
  - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
  - media: tc358743: Check I2C succeeded during probe
  - pinctrl: stm32: Manage irq affinity settings
  - scsi: mpi3mr: Correctly handle ATA device errors
  - scsi: mpt3sas: Correctly handle ATA device errors
  - power: supply: qcom_battmgr: Add lithium-polymer entry
  - RDMA/core: reduce stack using in nldev_stat_get_doit()
  - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
  - leds: leds-lp50xx: Handle reg to get correct multi_index
  - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
  - MIPS: lantiq: falcon: sysctrl: fix request memory check logic
  - crypto: jitter - fix intermediary handling
  - watchdog: iTCO_wdt: Report error if timeout configuration fails
  - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
  - clk: qcom: ipq5018: keep XO clock always on
  - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
  - watchdog: dw_wdt: Fix default timeout
  - fs/orangefs: use snprintf() instead of sprintf()
  - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
  - mfd: axp20x: Set explicit ID for AXP313 regulator
  - clk: tegra: periph: Fix error handling and resolve unsigned compare warning
  - fbdev: fix potential buffer overflow in do_register_framebuffer()
  - cifs: Fix calling CIFSFindFirst() for root path without msearch
  - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
  - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
  - drm/amd/display: Only finalize atomic_obj if it was initialized
  - vhost: fail early when __vhost_add_used() fails
  - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
  - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work
  - drm/amd/display: Avoid trying AUX transactions on disconnected ports
  - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
  - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
  - uapi: in6: restore visibility of most IPv6 socket options
  - drm/ttm: Should to return the evict error
  - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
  - net: ncsi: Fix buffer overflow in fetching version id
  - ionic: clean dbpage in de-init
  - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
  - ptp: Use ratelimite for freerun error message
  - bpftool: Fix JSON writer resource leak in version command
  - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
  - net: dsa: b53: prevent DIS_LEARNING access on BCM5325
  - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
  - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
  - gve: Return error for unknown admin queue command
  - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
  - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
  - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
  - dpaa_eth: don't use fixed_phy_change_carrier
  - wifi: iwlegacy: Check rate_idx range after addition
  - netmem: fix skb_frag_address_safe with unreadable skbs
  - powerpc: floppy: Add missing checks after DMA map
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling
  - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
  - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
  - wifi: mac80211: update radar_required in channel context after channel switch
  - drm/amd/display: Fix 'failed to blank crtc!'
  - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
  - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
  - wifi: ath12k: Add memset and update default rate value in wmi tx completion
  - drm/amd/display: Separate set_gsl from set_gsl_source_select
  - net: fec: allow disable coalescing
  - net: atlantic: add set_power to fw_ops for atl2 to fix wol
  - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
  - net: thunderbolt: Enable end-to-end flow control also in transmit
  - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
  - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
  - wifi: rtw89: Disable deep power saving for USB/SDIO
  - wifi: rtw89: Fix rtw89_mac_power_switch() for USB
  - drm/msm: use trylock for debugfs
  - wifi: mac80211: fix rx link assignment for non-MLO stations
  - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
  - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
  - wifi: mac80211: don't complete management TX on SAE commit
  - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
  - s390/stp: Remove udelay from stp_sync_clock()
  - wifi: iwlwifi: mvm: fix scan request validation
  - um: Re-evaluate thread flags repeatedly
  - wifi: iwlwifi: mvm: set gtk id also in older FWs
  - perf/cxlpmu: Remove unintended newline from IRQ name format string
  - net: phy: micrel: Add ksz9131_resume()
  - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
  - net: ipv4: fix incorrect MTU in broadcast routes
  - wifi: cfg80211: Fix interface type validation
  - net: mctp: Prevent duplicate binds
  - arm64: Mark kernel as tainted on SAE and SError panic
  - net/mlx5e: Properly access RCU protected qdisc_sleeping variable
  - net: ag71xx: Add missing check after DMA map
  - et131x: Add missing check after DMA map
  - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
  - be2net: Use correct byte order and format string for TCP seq and ack_seq
  - s390/time: Use monotonic clock in get_cycles()
  - wifi: cfg80211: reject HTC bit for management frames
  - ktest.pl: Prevent recursion of default variable options
  - wifi: ath12k: Correct tid cleanup when tid setup fails
  - net: usb: cdc-ncm: check for filtering capability
  - xen/netfront: Fix TX response spurious interrupts
  - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
  - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
  - ASoC: qcom: use drvdata instead of component to keep id
  - ASoC: codecs: rt5640: Retry DEVICE_ID verification
  - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
  - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
  - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
  - platform/chrome: cros_ec_typec: Defer probe on missing EC parent
  - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
  - soc: qcom: mdt_loader: Actually use the e_phoff
  - imx8m-blk-ctrl: set ISI panic write hurry level
  - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
  - usb: core: usb_submit_urb: downgrade type check
  - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
  - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
  - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
  - ALSA: hda: Disable jack polling at shutdown
  - ALSA: hda: Handle the jack polling always via a work
  - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
  - mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
  - char: misc: Fix improper and inaccurate error code returned by misc_init()
  - reset: brcmstb: Enable reset drivers for ARCH_BCM2835
  - pps: clients: gpio: fix interrupt handling order in remove path
  - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
  - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
  - ACPI: processor: fix acpi_object initialization
  - PM: sleep: console: Fix the black screen issue
  - thermal: sysfs: Return ENODATA instead of EAGAIN for reads
  - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
  - firmware: tegra: Fix IVC dependency problems
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion
  - selftests: tracing: Use mutex_unlock for testing glob filter
  - tools/build: Fix s390(x) cross-compilation with clang
  - gpio: tps65912: check the return value of regmap_update_bits()
  - iio: adc: ad_sigma_delta: don't overallocate scan buffer
  - tools/nolibc: define time_t in terms of __kernel_old_time_t
  - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
  - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
  - EDAC/synopsys: Clear the ECC counters on init
  - gpio: wcd934x: check the return value of regmap_update_bits()
  - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
  - soc: qcom: rpmh-rsc: Add RSC version 4 support
  - usb: xhci: Avoid showing errors during surprise removal
  - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
  - usb: xhci: Avoid showing warnings for dying controller
  - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
  - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
  - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
  - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
  - usb: xhci: print xhci->xhc_state when queue_command failed
  - tracefs: Add d_delete to remove negative dentries
  - securityfs: don't pin dentries twice, once is enough...
  - fix locking in efi_secret_unlink()
  - ext2: Handle fiemap on empty files to prevent EINVAL
  - fs/ntfs3: correctly create symlink for relative path
  - fs/ntfs3: Add sanity check for file name
  - better lockdep annotations for simple_recursive_removal()
  - hfs: fix not erasing deleted b-tree node issue
  - drbd: add missing kref_get in handle_write_conflicts
  - udf: Verify partition map count
  - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
  - nvme-pci: try function level reset on init failure
  - smb/server: avoid deadlock when linking with ReplaceIfExists
  - arm64: Handle KCOV __init vs inline mismatches
  - ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
  - intel_idle: Allow loading ACPI tables for any family
  - net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
  - netfilter: ctnetlink: fix refcount leak on table dump
  - udp: also consider secpath when evaluating ipsec use for checksumming
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
  - KVM: VMX: Handle forced exit due to preemption timer in fastpath
  - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
  - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
  - libceph: prevent potential out-of-bounds reads in handle_auth_done()
  - net: usb: pegasus: fix memory leak in update_eth_regs_async()
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
  - !20540 urma: added support for ipoverurma
  - team: fix check for port enabled in team_queue_override_port_prio_changed()
  - mm/page_alloc: prevent pcp corruption with SMP=n
  - !20528 Fix CVE-2025-71083
  - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
  - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
  - smb: client: don't wait for info->send_pending == 0 on error
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
  - ACPI: processor: perflib: Move problematic pr->performance check
  - ACPI: processor: perflib: Fix initial _PPC limit application
  - Documentation: ACPI: Fix parent device references
  - fs: Prevent file descriptor table allocations exceeding INT_MAX
  - sunvdc: Balance device refcount in vdc_port_mpgroup_check
  - PCI: Extend isolated function probing to LoongArch
  - NFSD: detect mismatch of file handle and delegation stateid in OPEN op
  - net: dpaa: fix device leak when querying time stamp info
  - net: ti: icss-iep: fix device and OF node leaks at probe
  - net: mtk_eth_soc: fix device leak at probe
  - net: enetc: fix device and OF node leak at probe
  - net: gianfar: fix device leak when querying time stamp info
  - net: phy: micrel: fix KSZ8081/KSZ8091 cable test
  - gpio: mlxbf3: use platform_get_irq_optional()
  - gpio: mlxbf2: use platform_get_irq_optional()
  - gpio: virtio: Fix config space reading.
  - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
  - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  - rcu: Fix racy re-initialization of irq_work causing hangs
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work
  - drm/tilcdc: Fix removal actions in case of failed probe
  - drm/tilcdc: request and mapp iomem with devres
  - urma: fix update topo logic
  - dmaengine: stm32: dmamux: fix device leak on route allocation
  - pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD
  - null_blk: fix kmemleak by releasing references to fault configfs items
  - inet: frags: flush pending skbs in fqdir_pre_exit()
  - inet: frags: add inet_frag_queue_flush()
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
  - md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
  - md/dm-raid: don't call md_reap_sync_thread() directly
  - ACPICA: Avoid walking the Namespace if start_node is NULL
  - arm64: entry: xcall/xint: make asm conditionals compatible with clang IAS
  - LoongArch: BPF: Sign extend kfunc call arguments
  - genirq/msi:: Fix kabi break of struct msi_desc
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
  - NFS: Fix a deadlock involving nfs_release_folio()
  - Revert "[Huawei] Revert "NFS: fix up nfs_release_folio() to try to release the page""
  - urma: added support for ipoverurma
  - drm/ttm: Avoid NULL pointer deref for evicted BOs
  - XSched: Update XSched manual
  - svcrdma: bound check rq_pages index in inline path
  - ipv6: Fix use-after-free in inet6_addr_del().
  - ipv4: ip_gre: make ipgre_header() robust
  - net: fix memory leak in skb_segment_list for GRO packets
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue
  - ipv4: Fix reference count leak when using error routes with nexthop objects
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  - udp: Deal with race between UDP socket address change and rehash
  - EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
  - x86/tsc: Use topology_max_packages() to get package number
  - EDAC/amd64: Use unicast instead of broadcast to access the cs_config register
  - EDAC/amd64: Correct the address translation for hygon family 18h model 4h
  - KVM: arm64: Mark some header functions as inline
  - KVM: arm64: Refactor exit handlers
  - x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio


author: Li Nan <linan122@huawei.com> - 6.6.0-140.0.0.121
changelog:
  - !20820 ub/obmm: add sysfs interface for mempool statistics & bugfixes
  - ub/obmm: fix wrong pxm_numa parameter validation
  - ub/obmm: Remove unused parameters from obmm_addr_check.c
  - ub/obmm: Enhance mem_allocator_granu validation
  - ub/obmm: simplify allocator naming scheme
  - ub/obmm: fix allow_slow logic and optimize conti_alloc_memory
  - ub/obmm: add sysfs interface with fine-grained memory statistics
  - !20804  net: hv_netvsc: reject RSS hash key programming without RX indirection table
  - !20813  migrate: correct lock ordering for hugetlb file folios
  - !20812  libceph: make calc_target() set t->paused, not just clear it
  - !20719 drivers/ub/sentry: some bugfix
  - !20798 urma: log should not retrieve eid_idx from uctx
  - !20808 urma: support triple bonding device
  - urma: log should not retrieve eid_idx from uctx
  - migrate: correct lock ordering for hugetlb file folios
  - libceph: make calc_target() set t->paused, not just clear it
  - !20745 vfio platform VFIO support for hisi05a1 devices
  - urma: support triple bonding device
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table
  - !20789  gic: Add hip09 support for HISILICON_ERRATUM_165010801
  - !20726  tracing: Add recursion protection in kernel stack trace recording
  - !20668  irqchip/gic-v3-its: Avoid truncating memory addresses
  - !20795 ub: udma: support query and set qos info.
  - !20791 Migration/urma:optimize performance in live migration.
  - ub: udma: Support for UE link establishment message.
  - Migration/urma: optimize performance in live migration.
  - !20787 ub: cdma: modify the method of assigning values to the structure
  - !20759 ubcore: hotfix route query for port eid on the same node.
  - ub: udma: support query and set qos info.
  - Revert "ub: ubase: Support for RC saved by queue granularity"
  - ubcore: hotfix route query for port eid on the same node.
  - !20676 urma: set/get sl
  - !20765 urma: bugfix of UAF and double free in ubcm
  - !20778 ub: ubase&unic: Fixes some bugfix in resetting and dfx ability
  - gic: Add hip09 support for HISILICON_ERRATUM_165010801
  - vfio/platform: Add CONFIG_VFIO_HISI05A1 to openeuler_defconfig and turn it on by default
  - vfio/platform: VFIO support for hisi05a1 devices
  - ub: cdma: modify the method of assigning values to the structure
  - urma: set/get sl
  - ub: ubase: support to query ub dl pkt stats and real-time peak bandwidth
  - ub: ubase: Support for RC saved by queue granularity
  - ub: ubase: Traverse mailbox AE events using interrupts and polling.
  - ub: ubase: Modify ubase ctrlq trace to distinguish between MUE and UE messages
  - net: unic: The function of dumping himac registers is added.
  - ub: ubase: Fix MAC is_pfc sync, optimize list ops and code style
  - ub: ubase: Retain the initial tm qset configuration and restore it
  - net: unic: Fixed an issue in the bond IP address notification and pause configuration when an exception occurs.
  - ub: ubase: Add a retransmission function to improve reliability.
  - net: unic: Increase the readability and reliability of loopback code
  - net: unic: Synchronize the code modify for ip management and deactivation
  - net: unic: Increase the readability and reliability of VLAN feature.
  - net: unic: Added unic DFX log information.
  - ub: ubase: Add and correct comments for some functions and data structures
  - net: unic: Notify MAMI when the bond port status changes
  - ub: ubase: Support for HIMAC reset during ELR reset and Optimize ELR reset
  - !20768 iommu/ummu-core: Fix separate page table compatibility
  - !20665 [OLK-6.6] Enhance CMA memory usage reporting for CSV3
  - !20764 net: hns3: fix double free issue for tx spare buffer
  - urma: bugfix of UAF and double free in ubcm
  - iommu/ummu-core: Fix separate page table compatibility
  - net: hns3: fix double free issue for tx spare buffer
  - drivers/ub/sentry: fix memory leak in sentry_msg_helper
  - drivers/ub/sentry: initialize some variables
  - drivers/ub/sentry: fix potential buffer overflow in convert_str_to_smh_msg()
  - drivers/ub/sentry: fix potential null pointer reference in sentry_uvb_comm
  - drivers/ub/sentry: add input parameter verification for exported symbols
  - tracing: Add recursion protection in kernel stack trace recording
  - x86/csv: Enhance CMA memory usage reporting for CSV3
  - irqchip/gic-v3-its: Avoid truncating memory addresses


author: Li Nan <linan122@huawei.com> - 6.6.0-141.0.0.123
changelog:
  - !20704 kernel support hisi-cca-da
  - !20180 [virtCCA Live Migration 2]virtcca secure cvm supports live migration
  - !20905 v2  KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
  - !20965 iommu/ummu: Optimized TID invalidation and tdev initialization
  - !20964 iommu/ummu: Support TID and EID Granularity for MPAM
  - !20970 ub: ubase&unic: Supporting the black box capability of the ubase&unic driver
  - hisi-cca-da: Start dev by rsi call
  - hisi-cca-da: Set ripas of the bar region as RIPAS_DEV
  - hisi-cca-da: Support swiotlb and realm memory use
  - hisi-cca-da: Add smmu info when dev attach
  - hisi-cca-da: Transfer realm msix access to rmm
  - hisi-cca-da: Support pcipc sriov capability
  - hisi-cca-da: Delay realm memory release to kvm_destroy_realm
  - hisi-cca-da: Create realm s2 host pgtable and map msi mmio to rmm
  - hisi-cca-da: Add cca realm s2 pgtable framework
  - hisi-cca-da: Use bitmap to determine whether the command can be forwarded
  - hisi-cca-da: Restrict Realm SMMU to stage-2 domain only
  - hisi-cca-da: Add cmd forward mechanism in realm smmu
  - hisi-cca-da: Add realm smmu event and gerror irq initialization
  - hisi-cca-da: Add realm smmu stream table initialization
  - hisi-cca-da: Add realm smmu cmdq and evtq initialization
  - hisi-cca-da: Add realm smmu initialization
  - hisi-cca-da: Add relam iommu support to iommufd
  - hisi-cca-da: Add realm iommu support for vfio-iommu-type1
  - hisi-cca-da: Support dev map and unmap
  - hisi-cca-da: Support dev validate and dev start
  - hisi-cca-da: VFIO support ccada
  - hisi-cca-da: Support dev delegate and dev attach
  - hisi-cca-da: Support root dev delegate and dev init
  - hisi-cca-da: Add hisilicon extension smc and ccada cmd
  - hisi-cca-da: Add hisi ccada feature config
  - !20751 ARM CCA supports hugepage
  - !20944 ub: ubmempfd: supports for D2H mapping and demapping
  - !20888  HiSock Enhancement
  - ub: ubase&unic: Supporting the black box capability of the ubase&unic driver.
  - net: unic: Resolve the residual MAC address problem
  - net: unic: Optimized the code for the cmd structure and FEC function.
  - ub: ubase: add log for post mailbox timeout
  - ub: ubus: Remove black box header file to include dir
  - rme: Remove the secret bit of the vring desc addr
  - rme: improve hisi-cca data mmap and destroy method
  - !20943 uvb: fix wd_obtain logic err
  - !20942 urma: fix bond device id not release
  - !20892  dcache: Limit the minimal number of bucket to two
  - rme: isolate page when do delegation to avoid migration
  - rme: hisi-cca supports different levels for mapping ram
  - rme: rename ccal to hisi-cca
  - rme: support set ripas for ccal realm vm
  - rme: support destroy ram data for ccal realm vm
  - rme: support populate region for ccal realm vm
  - rme: support map ram for ccal realm vm
  - rme: support config ccal realm vm
  - rme: support ccal RMI calls
  - rme: realm vm supports wfx handler
  - !20952 urma: introduce ipourma module
  - iommu/ummu-core: Simplifies tdev initialization resources
  - iommu/ummu: Optimized log printing
  - iommu/ummu: Use passed gfp_mask in map_pages callback
  - uvb: fix wd_obtain logic err
  - !20949 ub: udma: support user ctl function.
  - urma: fix bond device id not release
  - !20901 drivers/ub/sentry: some bugfix
  - ub: ubmempfd: supports for D2H mapping and demapping
  - ub: ubmempfd: supports providing services to the QEMU process through file nodes
  - [virtCCA Live Migration 2]virtcca secure cvm supports live migration
  - urma: query priority and enable bit, support ring size configuration
  - urma: implement debugfs, improve boundary checks and error handling logic
  - urma: implement data plane interaction and statistics
  - urma: implement ipourma network device operations
  - urma: ipourma resource management
  - urma: ipourma resource management and err code
  - urma: introduce ipourma main module
  - iommu/ummu: Optimized the TID invalidation configuration
  - iommu/ummu: Optimized SVA permission table memory allocation approach
  - iommu/ummu: Adapt UMMU SVA interface adjustment
  - iommu/ummu: Support TID and EID Granularity for MPAM
  - !20848 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !20847 urma: sl resource query error
  - !20908 [OLK-6.6][linux-6.6.y sync] Backport 6.6.108-6.6.110 LTS Patches
  - !20084 Loongarch: Enable CONFIG_CRYPTO_XTS for disk encryption
  - !20929  PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug
  - drivers/ub/sentry: fix check input parameters
  - ub: udma: support user ctl function.
  - ub: udma: support uboe function.
  - ub: udma: bugfix related to query aux info.
  - !20935 ub: ubmem_vmmu: supports IOMMU driver for the UB memory MMU in VMs
  - drivers/ub/sentry: do not use magic numbers
  - !20876 urma: Kernel-mode specific implementations file for Jetty extension interface
  - urma: sl resource query error
  - !20873 sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4
  - !20875 sunrpc: fix race in cache cleanup causing stale nextcheck time
  - ub: ubmem_vmmu: supports IOMMU driver for the UB memory MMU in VMs
  - ub: ubmem_vmmu: supports parsing and configuring the hardware node information
  - ub: ubmem_vmmu: HiSilicon ubmem_vmmu Architecture Implementation
  - !20806 Fix CVE-2025-71225
  - !20896  scsi: qla2xxx: Free sp in error path to fix system crash
  - !20894  scsi: qla2xxx: Delay module unload while fabric scan in progress
  - !20893  scsi: qla2xxx: Validate sp before freeing associated memory
  - !20802 Fix CVE-2026-23110
  - urma: Kernel-mode specific implementations file for Jetty extension interface
  - drivers/ub/sentry: fix memory leak in process_urma_data()
  - drivers/ub/sentry: initialize some variables
  - PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug
  - !20770 ub: ubdevshm: supports the memory user to obtain and release shared memory
  - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
  - mm: consider non-anon swap cache folios in folio_expected_ref_count()
  - mm: simplify folio_expected_ref_count()
  - ASoC: qcom: audioreach: fix potential null pointer dereference
  - gcc-plugins: Remove TODO_verify_il for GCC >= 16
  - crypto: sha256 - fix crash at kexec
  - drm/i915/backlight: Return immediately when scale() finds invalid parameters
  - minmax.h: remove some #defines that are only expanded once
  - minmax.h: simplify the variants of clamp()
  - minmax.h: move all the clamp() definitions after the min/max() ones
  - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
  - minmax.h: reduce the #define expansion of min(), max() and clamp()
  - minmax.h: update some comments
  - minmax.h: add whitespace around operators and after commas
  - minmax: fix up min3() and max3() too
  - minmax: improve macro expansion and type checking
  - minmax: don't use max() in situations that want a C constant expression
  - minmax: simplify min()/max()/clamp() implementation
  - minmax: make generic MIN() and MAX() macros available everywhere
  - drm/ast: Use msleep instead of mdelay for edid read
  - gpiolib: Extend software-node support to support secondary software-nodes
  - ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
  - s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
  - kmsan: fix out-of-bounds access to shadow memory
  - afs: Fix potential null pointer dereference in afs_put_server
  - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
  - i40e: improve VF MAC filters accounting
  - i40e: add mask to apply valid bits for itr_idx
  - HID: asus: add support for missing PX series fn keys
  - drm/gma500: Fix null dereference in hdmi teardown
  - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
  - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
  - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
  - net: dsa: lantiq_gswip: do also enable or disable cpu port
  - selftests: fib_nexthops: Fix creation of non-FDB nexthops
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
  - bnxt_en: correct offset handling for IPv6 destination address
  - vhost: Take a reference on the task in struct vhost_task.
  - Bluetooth: hci_sync: Fix hci_resume_advertising_sync
  - ethernet: rvu-af: Remove slash from the driver name
  - can: peak_usb: fix shift-out-of-bounds issue
  - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
  - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
  - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
  - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
  - bpf: Reject bpf_timer for PREEMPT_RT
  - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  - wifi: virt_wifi: Fix page fault on connect
  - cpufreq: Initialize cpufreq-based invariance before subsys
  - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
  - arm64: dts: imx8mp: Correct thermal sensor index
  - mm: folio_may_be_lru_cached() unless folio_test_large()
  - mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
  - mm/gup: check ref_count instead of lru before migration
  - mm: add folio_expected_ref_count() for reference count calculation
  - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
  - ALSA: usb-audio: Add mute TLV for playback volumes on more devices
  - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  - i2c: designware: Add quirk for Intel Xe
  - mmc: sdhci-cadence: add Mobileye eyeQ support
  - usb: core: Add 0x prefix to quirks debug output
  - ALSA: usb-audio: Fix build with CONFIG_INPUT=n
  - ALSA: usb-audio: Convert comma to semicolon
  - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  - ALSA: usb-audio: Fix block comments in mixer_quirks
  - firewire: core: fix overlooked update of subsystem ABI version
  - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
  - !20843 [OLK-6.6][linux-6.6.y sync] Backport 6.6.107-6.6.108 LTS Patches
  - !20869 ub:hisi-ubus: fix bug of security smatch
  - !20861  CVE-2026-23163
  - ub: ubdevshm: supports the memory user to obtain and release shared memory
  - ub: ubdevshm: supports granting and revoking shared memory permissions
  - ub: ubdevshm: supports the registration and deregistration of shared memory segments
  - ub: ubdevshm: supports the registration and deregistration
  - KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
  - !20886  Fix CVE-2026-23205
  - !20803 Fix CVE-2026-23112
  - !20868  sched/fair: Prefer steal within LLC and fallback to upper LLC newidle_balance on failure
  - !20811  smb/server: fix refcount leak in smb2_open()
  - !20810  smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
  - !20809  smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
  - sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4
  - sunrpc: fix race in cache cleanup causing stale nextcheck time
  - scsi: qla2xxx: Free sp in error path to fix system crash
  - scsi: qla2xxx: Delay module unload while fabric scan in progress
  - scsi: qla2xxx: Validate sp before freeing associated memory
  - dcache: Limit the minimal number of bucket to two
  - !20872 Fix CVE-2026-23220
  - !20846 Fix CVE-2026-23193
  - !20815 Fix CVE-2026-23216
  - !20859 Fix CVE-2026-23179
  - !20871  CVE-2026-23096
  - !20858 ub: ubase: resolve the cmdq crq overflow problem
  - bpf: Deprecate hisock unused kfuncs and orig ingress logic
  - bpf: Add local connect support for hisock
  - bpf: Add ipv4-mapped ipv6 addr support for hisock
  - bpf: Add target comm parse to hisock_cmd
  - bpf: Add multi port parse to hisock_cmd
  - bpf: Only deploy hisock in server
  - bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
  - bpf: Add bpf_handle_ingress/egress_ptype kfunc
  - bpf: Add bpf_get_skb_ethhdr kfunc
  - bpf: Add bpf_set_ingress/egress_dev kfunc
  - bpf: Add bpf_set_ingress_dst kfunc
  - bpf: Add BPF_HISOCK_INGRESS attach type
  - cgroup: make cgroup_bpf_prog_attach work when cgroup2 is not mounted
  - smb: client: fix potential UAF and double free in smb2_open_file()
  - smb/client: fix memory leak in smb2_open_file()
  - !20852  ASoC: amd: fix memory leak in acp3x pdm dma ops
  - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
  - uacce: fix cdev handling in the cleanup path
  - Revert "uacce: fix for cdev memory leak"
  - ub:hisi-ubus: fix bug of security smatch
  - ub:ubus: injected route event
  - ub:ubus: Black Box Development
  - !20865 urma: urma support uboe
  - sched/fair: Prefer steal within LLC and fallback to upper LLC newidle_balance on failure
  - urma: urma support uboe
  - !20857 ub_fwctl driver adds support for querying some functions
  - ub:ub_fwctl:Add illegal verification for scc
  - ub:ub_fwctl:Support querying the historical status of port links
  - drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
  - drm/amdkfd: Don't use sw fault filter if retry cam enabled
  - ub:ub_fwctl:Support querying firmware version numbers
  - ub: ub_fwctl: Support querying real-time bandwidth statistics
  - ub:ub_fwctl:Support querying statistical indicators at the ub port and uboe port levels
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
  - !20854 [URMA] add ping server for urma_ping
  - urma: add ping server
  - ub: ubase: resolve the cmdq crq overflow problem
  - ub: ubase: Optimized the QoS code naming to improve code readability.
  - ub: ubase&unic: optimizing code and configuration settings.
  - net: unic: not support query and configure ip by control plane in UBoE
  - net: unic: fix the automatically enable uc guid promisc mode.
  - !20844 urma:kernel header of userctl
  - urma: Kernel-mode header file for Jetty extension interface
  - ASoC: amd: fix memory leak in acp3x pdm dma ops
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
  - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
  - !20835 Fix CVE-2026-23084
  - minmax: add a few more MIN_T/MAX_T users
  - minmax: simplify and clarify min_t()/max_t() implementation
  - minmax: avoid overly complicated constant expressions in VM code
  - rtc: pcf2127: fix SPI command byte for PCF2131 backport
  - xhci: dbc: Fix full DbC transfer ring after several reconnects
  - xhci: dbc: decouple endpoint allocation from initialization
  - phy: ti: omap-usb2: fix device leak at unbind
  - phy: Use device_get_match_data()
  - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
  - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
  - ASoC: wm8974: Correct PLL rate rounding
  - ASoC: wm8940: Correct typo in control name
  - ASoC: wm8940: Correct PLL rate rounding
  - io_uring: include dying ring in task_work "should cancel" state
  - io_uring: backport io_should_terminate_tw()
  - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
  - selftests: mptcp: avoid spurious errors on TCP disconnect
  - selftests: mptcp: connect: catch IO errors on listen side
  - rds: ib: Increment i_fastreg_wrs before bailing out
  - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
  - mmc: mvsdio: Fix dma_unmap_sg() nents value
  - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
  - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
  - btrfs: tree-checker: fix the incorrect inode ref size check
  - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
  - LoongArch: Check the return value when creating kobj
  - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
  - LoongArch: Update help info of ARCH_STRICT_ALIGN
  - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
  - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
  - net: liquidio: fix overflow in octeon_init_instr_queue()
  - bonding: don't set oif to bond dev when getting NS target destination
  - net/mlx5e: Consider aggregated port speed during rate configuration
  - i40e: remove redundant memory barrier when cleaning Tx descs
  - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
  - selftests: mptcp: sockopt: fix error messages
  - mptcp: tfo: record 'deny join id0' info
  - mptcp: set remote_deny_join_id0 on SYN recv
  - dpaa2-switch: fix buffer pool seeding for control traffic
  - btrfs: fix invalid extref key setup when replaying dentry
  - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
  - wifi: mac80211: fix incorrect type for ret
  - wifi: mac80211: increase scan_ies_len for S1G
  - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
  - !20769 [OLK-6.6][linux-6.6.y sync] Backport 6.6.106-6.6.107 LTS Patches
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
  - !20776 ub:ubfi: Release the chosen node
  - !20817  CVE-2026-23094
  - !20819  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  - ub:ubus: Add port num check
  - !20379 [OLK-6.6][sync from OLK-5.10]io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - !20830  sched/soft_domain: Increasing NR_MAX_CLUSTER to 32
  - sched/soft_domain: Increasing NR_MAX_CLUSTER to 32
  - btrfs: fix incorrect readahead expansion length
  - x86: disable image size check for test builds
  - drm/i915/power: fix size for for_each_set_bit() in abox iteration
  - drm/amdgpu: fix a memory leak in fence cleanup when unloading
  - net: mdiobus: release reset_gpio in mdiobus_unregister_device()
  - phy: ti-pipe3: fix device leak at unbind
  - phy: tegra: xusb: fix device and OF node leak at probe
  - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
  - usb: gadget: midi2: Fix MIDI2 IN EP max packet size
  - usb: gadget: midi2: Fix missing UMP group attributes initialization
  - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
  - RISC-V: Remove unnecessary include from compat.h
  - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
  - hrtimer: Remove unused function
  - regulator: sy7636a: fix lifecycle of power good gpio
  - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
  - hsr: use rtnl lock when iterating over ports
  - net: hsr: Add VLAN CTAG filter support
  - net: hsr: Add support for MC filtering at the slave device
  - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
  - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
  - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
  - igb: fix link test skipping when interface is admin down
  - docs: networking: can: change bcm_msg_head frames member to support flexible array
  - tunnels: reset the GSO metadata before reusing the skb
  - net: bridge: Bounce invalid boolopts
  - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
  - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
  - USB: serial: option: add Telit Cinterion FN990A w/audio compositions
  - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
  - serial: sc16is7xx: fix bug in flow control levels init
  - tty: hvc_console: Call hvc_kick in hvc_write unconditionally
  - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
  - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
  - Input: iqs7222 - avoid enabling unused interrupts
  - mm/khugepaged: fix the address passed to notifier on testing young
  - btrfs: fix corruption reading compressed range when block size is smaller than page size
  - btrfs: use readahead_expand() on compressed extents
  - mm/damon/sysfs: fix use-after-free in state_show()
  - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
  - mtd: nand: raw: atmel: Fix comment in timings preparation
  - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
  - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
  - mm/damon/core: set quota->charged_from to jiffies at first charge window
  - fuse: prevent overflow in copy_file_range return value
  - fuse: check if copy_file_range() returns larger than requested size
  - mtd: rawnand: stm32_fmc2: fix ECC overwrite
  - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
  - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
  - i2c: i801: Hide Intel Birch Stream SoC TCO WDT
  - ocfs2: fix recursive semaphore deadlock in fiemap call
  - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
  - compiler-clang.h: define __SANITIZE_*__ macros only when undefined
  - EDAC/altera: Delete an inappropriate dma_free_coherent() call
  - rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
  - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
  - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
  - s390/cpum_cf: Deny all sampling events by counter PMU
  - NFSv4/flexfiles: Fix layout merge mirror check.
  - NFSv4.2: Serialise O_DIRECT i/o and copy range
  - NFSv4.2: Serialise O_DIRECT i/o and clone range
  - NFSv4.2: Serialise O_DIRECT i/o and fallocate()
  - NFS: Serialise O_DIRECT i/o and truncate()
  - fs/nfs/io: make nfs_start_io_*() killable
  - ftrace/samples: Fix function size computation
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
  - media: i2c: imx214: Fix link frequency validation
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
  - nfsd: Fix a regression in nfsd_setattr()
  - kasan: fix GCC mem-intrinsic prefix with sw tags
  - kunit: kasan_test: disable fortify string checker on kasan_strings() test
  - io_uring: fix kabi broken in struct io_ring_ctx
  - io_uring: Support forcing sq thread to be idle and woken up by hrtimer
  - dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  - uacce: fix isolate sysfs check condition
  - Revert "uacce: fix isolate sysfs check condition"
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
  - smb/server: fix refcount leak in smb2_open()
  - smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
  - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
  - md: suspend array while updating raid_disks via sysfs
  - scsi: core: Wake up the error handler when final completions race against each other
  - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
  - ub:ubfi: Release the chosen node
  - ub:ubus: Delete unused functions
  - Loongarch: Enable CONFIG_CRYPTO_XTS for disk encryption


author: Li Nan <linan122@huawei.com> - 6.6.0-142.0.0.124
changelog:
  - !21194 hisi-cca-da: Revert smmu realm enabled condition for arm_smmu_domain_finalise.
  - !21192 urma: bugfix of ubagg&ubcore&uburma
  - !21183  platform/x86: classmate-laptop: Add missing NULL pointer checks
  - urma: bugfix of ubagg&ubcore&uburma
  - hisi-cca-da: Revert smmu realm enabled condition for arm_smmu_domain_finalise.
  - platform/x86: classmate-laptop: Add missing NULL pointer checks
  - !21167 urma: fix kernel codecheck issues.
  - !21174 urma: change return value for provider err
  - !21127 urma: copy linked ports when importing bond jetty/seg
  - !20247 ubcore: query primary eid in ipourma loopback mode.
  - !21077 Fix hisi cca bugs
  - ubcore: route query refine and ipo loopback adapt.
  - hisi-cca-da: Transfer PCIe ECAM access requests to RMM for realm device.
  - hisi-cca-da: Write NS STE for PF drivers.
  - hisi-cca-da: Provide IO interfaces
  - hisi-cca-da: Destroy mmu stage2 pagetable after closing vfio devices
  - !21045  scsi: hisi_sas: Fix NULL pointer exception when do user_scan()
  - hisi-cca-da: Automatically unbind PF/VF drivers and prevent probe.
  - !21165  tools/interference: add ifstool utility for kernel interference statistics
  - !21166 urma: fix jfce uaf in batch cleanup
  - !21043 urma: fix tjetty ref in ping server
  - urma: change return value for provider err
  - !21128  sched/rt: Skip currently executing CPU in rto_next_cpu()
  - !21129  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - urma: fix jfce uaf in batch cleanup
  - !21074 ipmi: Add HiSilicon IPMI Page Soft Offline driver
  - !21076 [OLK-6.6][linux-6.6.y sync] Backport 6.6.112-6.6.113 LTS Patches
  - urma: fix kernel codecheck issues.
  - tools/interference: add ifstool utility for kernel interference statistics
  - !20291 [Hygon][6.6][Bugfix] Bug fix for EDAC decode address fail issue on Hygon Dhyana processor
  - !21092  kexec: derive purgatory entry from symbol
  - !21154  sched: Add SOFT_DOMAIN feature interface for cgroup2
  - !21153  fix CVE-2025-39981
  - Revert "hisi-cca-da: Delay realm memory release to kvm_destroy_realm"
  - urma: fix tjetty ref in ping server
  - rme: Enforce isolation to solve compile error without config CONFIG_HISI_CCA
  - hisi-cca-da: Improve hisi cca dev validate and delegate
  - hisi-cca-da: Fix smmu enable rme problem
  - hisi-cca-da: Fix msi region shared problem
  - sched: Add SOFT_DOMAIN feature interface for cgroup2
  - Bluetooth: MGMT: Fix memory leak in set_ssp_complete
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
  - overflow: Introduce __DEFINE_FLEX for having no initializer
  - overflow: Fix direct struct member initialization in _DEFINE_FLEX()
  - overflow: Change DEFINE_FLEX to take __counted_by member
  - overflow: add DEFINE_FLEX() for on-stack allocs
  - Bluetooth: MGMT: Fix possible UAFs
  - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete()
  - !21103  Revert "mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()"
  - !21104 v2  vsock/virtio: cap TX credit to local buffer size
  - !21070  Fixes CVE-2026-23100
  - !21135 RDMA/hns: Support configure and query the CNP DSCP through sysfs
  - !21088  ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
  - RDMA/hns: Support configure and query the CNP DSCP through sysfs
  - RDMA/hns: Support query FW cap bit
  - RDMA/hns: Support query HW ID.
  - !20934  smb/server: fix refcount leak in parse_durable_handle_context()
  - !21004  regmap: Fix race condition in hwspinlock irqsave routine
  - !19568 [OLK-6.6]fix txgbe clang compile warning
  - urma: copy linked ports when importing bond jetty/seg
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat()
  - sched/rt: Skip currently executing CPU in rto_next_cpu()
  - !21073  scsi: qla2xxx: Fix bsg_done() causing double free
  - !21114  CVE-2024-57979
  - !21113  iommu: disable SVA when CONFIG_X86 is set
  - !20957  dmaengine: xilinx: xdma: Fix regmap max_register
  - !21087 net: unic: Multiple stability fixes for tx timeout, DFX capability and concurrent activation/reset
  - pps: Fix a use-after-free - fix kabi
  - pps: Fix a use-after-free
  - !21078  of: unittest: Fix memory leak in unittest_data_add()
  - !21079  *** fix CVE-2026-23208 ***
  - !21082  ALSA: aloop: Fix racy access at PCM trigger
  - !21083  bus: fsl-mc: fix use-after-free in driver_override_show()
  - iommu: disable SVA when CONFIG_X86 is set
  - vsock/virtio: cap TX credit to local buffer size
  - Revert "mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()"
  - !20983 Fix CVE-2026-23139
  - !20878 Fix CVE-2026-23230
  - kexec: derive purgatory entry from symbol
  - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
  - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
  - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
  - rtc: interface: Alarm race handling should not discard preceding error
  - perf test stat tests: Fix for virtualized machines
  - perf test stat: Update test expectations and events
  - perf test stat: Avoid hybrid assumption when virtualized
  - writeback: Avoid excessively long inode switching times
  - writeback: Avoid softlockup when switching many inodes
  - cramfs: Verify inode mode when loading from disk
  - fs: Add 'initramfs_options' to set initramfs mount options
  - minixfs: Verify inode mode when loading from disk
  - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
  - irqchip/sifive-plic: Make use of __assign_bit()
  - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled
  - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
  - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
  - s390/bpf: Describe the frame using a struct instead of constants
  - s390/bpf: Centralize frame offset calculations
  - s390/bpf: Change seen_reg to a mask
  - ACPI: property: Do not pass NULL handles to acpi_attach_data()
  - ACPI: property: Add code comments explaining what is going on
  - ACPI: property: Disregard references in data-only subnode lists
  - ACPI: battery: Add synchronization between interface updates
  - ACPI: battery: Check for error code from devm_mutex_init() call
  - ACPI: battery: initialize mutexes through devm_ APIs
  - ACPI: battery: allocate driver data through devm_ APIs
  - arm64: mte: Do not flag the zero page as PG_mte_tagged
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
  - !20790  dm: use bio_clone_blkg_association
  - ipmi: Add HiSilicon IPMI Page Soft Offline driver
  - net: unic: Resolve network unavailability caused by concurrent activation and reset
  - net: unic: Provide the DFX capability for querying MNG table
  - net: unic: Delete the elr reset process after the tx timeout
  - bus: fsl-mc: fix use-after-free in driver_override_show()
  - ALSA: aloop: Fix racy access at PCM trigger
  - ALSA: usb-audio: Use the right limit for PCM OOB check
  - ALSA: usb-audio: Prevent excessive number of frames
  - of: unittest: Fix memory leak in unittest_data_add()
  - !21034  CVE-2026-23140
  - !21016  net: fix segmentation of forwarding fraglist GRO
  - !21017  mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
  - !21018  CVE-2026-23209
  - !21019  ipv6: annotate data-race in ndisc_router_discovery()
  - !20881  ipvlan: Make the addrs_lock be per port
  - rme: Imporve range delegate
  - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
  - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
  - PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()
  - misc: fastrpc: Save actual DMA size in fastrpc_map structure
  - misc: fastrpc: Add missing dev_err newlines
  - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
  - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
  - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
  - media: mc: Clear minor number before put device
  - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
  - ACPICA: Allow to skip Global Lock initialization
  - ext4: validate ea_ino and size in check_xattrs
  - ext4: correctly handle queries for metadata mappings
  - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
  - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
  - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
  - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0
  - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
  - selftests: mptcp: join: validate C-flag + def limit
  - spi: cadence-quadspi: Flush posted register writes before DAC access
  - spi: cadence-quadspi: Flush posted register writes before INDAC access
  - PCI: tegra194: Handle errors in BPMP response
  - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
  - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
  - PCI: rcar-host: Drop PMSR spinlock
  - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
  - PCI/AER: Support errors introduced by PCIe r6.0
  - PCI/AER: Fix missing uevent on recovery when a reset is requested
  - PCI/ERR: Fix uevent on failure to recover
  - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
  - PCI/sysfs: Ensure devices are powered for config reads
  - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
  - rseq/selftests: Use weak symbol reference, not definition, to link with glibc
  - rtc: interface: Fix long-standing race when setting alarm
  - rtc: interface: Ensure alarm irq is enabled when UIE is enabled
  - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
  - mmc: core: SPI mode remove cmd7
  - mtd: rawnand: fsmc: Default to autodetect buswidth
  - xtensa: simdisk: add input size check in proc_write_simdisk
  - sparc: fix error handling in scan_one_device()
  - sparc64: fix hugetlb for sun4u
  - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
  - sched/deadline: Fix race in push_dl_task()
  - pwm: berlin: Fix wrong register in suspend/resume
  - powerpc/pseries/msi: Fix potential underflow and leak issue
  - powerpc/powernv/pci: Fix underflow and leak issue
  - power: supply: max77976_charger: fix constant current reporting
  - pinctrl: samsung: Drop unused S3C24xx driver data
  - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
  - parisc: don't reference obsolete termio struct for TC* constants
  - openat2: don't trigger automounts with RESOLVE_NO_XDEV
  - of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
  - lib/genalloc: fix device leak in of_gen_pool_get()
  - KEYS: trusted_tpm1: Compare HMAC values in constant time
  - iommu/vt-d: PRS isn't usable if PDS isn't supported
  - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
  - init: handle bootloader identifier in kernel parameters
  - iio: xilinx-ams: Unmask interrupts after updating alarms
  - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
  - iio: frequency: adf4350: Fix prescaler usage.
  - iio: dac: ad5421: use int type to store negative error codes
  - iio: dac: ad5360: use int type to store negative error codes
  - fs/ntfs3: Fix a resource leak bug in wnd_extend()
  - fbdev: Fix logic error in "offb" name match
  - crypto: rockchip - Fix dma_unmap_sg() nents value
  - crypto: atmel - Fix dma_unmap_sg() direction
  - crypto: aspeed - Fix dma_unmap_sg() direction
  - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
  - bus: mhi: ep: Fix chained transfer handling in read path
  - btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  - blk-crypto: fix missing blktrace bio split events
  - drm/nouveau: fix bad ret code in nouveau_bo_move_prep
  - drm/rcar-du: dsi: Fix 1/2/3 lane support
  - media: lirc: Fix error handling in lirc_register()
  - media: venus: firmware: Use correct reset sequence for IRIS2
  - media: pci: ivtv: Add missing check after DMA map
  - media: mc: Fix MUST_CONNECT handling for pads with no links
  - media: i2c: mt9v111: fix incorrect type for ret
  - media: cx18: Add missing check after DMA map
  - firmware: meson_sm: fix device leak at probe
  - xen/events: Update virq_to_irq on migration
  - xen/events: Return -EEXIST for bound VIRQs
  - xen/manage: Fix suspend error path
  - xen/events: Cleanup find_virq() return codes
  - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required
  - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
  - arm64: dts: ti: k3-am62a-main: Fix main padcfg length
  - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
  - arm64: dts: qcom: msm8939: Add missing MDSS reset
  - arm64: dts: qcom: msm8916: Add missing MDSS reset
  - ACPI: debug: fix signedness issues in read/write helpers
  - ACPI: property: Fix buffer properties extraction for subnodes
  - gpio: wcd934x: mark the GPIO controller as sleeping
  - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
  - smb: client: fix missing timestamp updates after utime(2)
  - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
  - drm/amd/display: Properly disable scaling on DCE6
  - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
  - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
  - drm/amdgpu: Add additional DCE6 SCL registers
  - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
  - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
  - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
  - perf python: split Clang options when invoking Popen
  - tools build: Align warning options with perf
  - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
  - drm/vmwgfx: Fix copy-paste typo in validation
  - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
  - LoongArch: Init acpi_gbl_use_global_lock to false
  - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
  - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
  - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
  - clk: tegra: do not overallocate memory for bpmp clocks
  - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
  - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
  - clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()
  - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
  - perf evsel: Ensure the fallback message is always written to
  - perf tools: Add fallback for exclude_guest
  - perf test: Add a test for default perf stat command
  - perf test: Don't leak workload gopipe in PERF_RECORD_*
  - perf session: Fix handling when buffer exceeds 2 GiB
  - perf arm_spe: Correct memory level for remote access
  - perf arm_spe: Correct setting remote access
  - rtc: optee: fix memory leak on driver removal
  - rtc: x1205: Fix Xicor X1205 vendor prefix
  - perf util: Fix compression checks returning -1 as bool
  - clk: at91: peripheral: fix return value
  - libperf event: Ensure tracing data is multiple of 8 sized
  - perf evsel: Avoid container_of on a NULL leader
  - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
  - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  - clocksource/drivers/clps711x: Fix resource leaks in error paths
  - fscontext: do not consume log entries when returning -EMSGSIZE
  - fs: always return zero on success from replace_fd()
  - !21067 [OLK-6.6][linux-6.6.y sync] Backport 6.6.111-6.6.112 LTS Patches
  - scsi: qla2xxx: Fix bsg_done() causing double free
  - !21065 Fix CVE-2026-23069
  - !21062 v4  Support multi-level cgroup
  - !20987 Fix CVE-2026-23212
  - !20982 Fix CVE-2026-23119
  - !20979 Fix CVE-2026-23111
  - !20974 Fix CVE-2026-23099
  - !20973 Fix CVE-2026-23105
  - !20972 Fix CVE-2026-23074
  - !20884  ksmbd: add chann_lock to protect ksmbd_chann_list xarray
  - !20947 Fix CVE-2026-23101
  - ext4: clear i_state_flags when alloc inode
  - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
  - fs/ntfs3: fix mount failure for sparse runs in run_unpack()
  - !20825  efivarfs: fix error propagation in efivar_entry_get()
  - !20824  io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
  - !20950 ub:ubus: protect iterator ue_list and mue_list with ub_bus_sem
  - mm/rmap: fix two comments related to huge_pmd_unshare()
  - mm/hugetlb: fix two comments related to huge_pmd_unshare()
  - mm/hugetlb: fix hugetlb_pmd_shared()
  - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
  - !20728 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
  - vsock/virtio: fix potential underflow in virtio_transport_get_credit()
  - !21001 Fix CVE-2026-23229
  - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
  - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
  - !20999 Fix CVE-2026-23173
  - usb: typec: tipd: Clear interrupts first
  - bus: fsl-mc: Check return value of platform_get_resource()
  - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
  - Input: atmel_mxt_ts - allow reset GPIO to sleep
  - misc: fastrpc: Skip reference for DMA handles
  - misc: fastrpc: fix possible map leak in fastrpc_put_args
  - misc: fastrpc: Fix fastrpc_map_lookup operation
  - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
  - ext4: fix checks for orphan inodes
  - ksmbd: fix error code overwriting in smb2_get_info_filesystem()
  - LoongArch: Automatically disable kaslr if boot from kexec_file
  - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
  - mfd: rz-mtu3: Fix MTU5 NFCR register offset
  - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
  - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  - vhost: vringh: Modify the return value check
  - net/mlx5: fw reset, add reset timeout work
  - net/mlx5: pagealloc: Fix reclaim race during command interface teardown
  - net/mlx5: Stop polling for command response if interface goes down
  - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
  - nfp: fix RSS hash key size when RSS is not supported
  - mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands
  - drivers/base/node: fix double free in register_one_node()
  - hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  - KEYS: X.509: Fix Basic Constraints CA flag parsing
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
  - vhost: vringh: Fix copy_to_iter return value check
  - RDMA/siw: Always report immediate post SQ errors
  - usb: vhci-hcd: Prevent suspending virtually attached devices
  - NFSv4.1: fix backchannel max_resp_sz verification check
  - coresight: trbe: Return NULL pointer for allocation failures
  - coresight: etm4x: Support atclk
  - coresight-etm4x: Conditionally access register TRCEXTINSELR
  - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
  - PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert()
  - vfio/pds: replace bitmap_free with vfree
  - sparc: fix accurate exception reporting in copy_{from,to}_user for M7
  - sparc: fix accurate exception reporting in copy_to_user for Niagara 4
  - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available
  - wifi: ath10k: avoid unnecessary wait for service ready message
  - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
  - IB/sa: Fix sa_local_svc_timeout_ms read race
  - RDMA/core: Resolve MAC of next-hop device without ARP support
  - f2fs: fix zero-sized extent for precache extents
  - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
  - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
  - scsi: qla2xxx: edif: Fix incorrect sign of error code
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
  - f2fs: fix to truncate first page in error path of f2fs_truncate()
  - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  - RDMA/cm: Rate limit destroy CM ID timeout error message
  - drivers/base/node: handle error properly in register_one_node()
  - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
  - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
  - iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
  - iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed()
  - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
  - fs: ntfs3: Fix integer overflow in run_unpack()
  - drm/msm/dpu: fix incorrect type for ret
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  - misc: genwqe: Fix incorrect cmd field being reported in error
  - usb: gadget: configfs: Correctly set use_os_string at bind
  - usb: phy: twl6030: Fix incorrect type for ret
  - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  - tcp: fix __tcp_close() to only send RST when required
  - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
  - wifi: mwifiex: send world regulatory domain to driver
  - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
  - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  - drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  - drm/amd/pm: Fix si_upload_smc_data (v3)
  - drm/amd/pm: Disable ULV even if unsupported (v3)
  - drm/amdgpu: Power up UVD 3 for FW validation (v2)
  - coresight: Only register perf symlink for sinks with alloc_buffer
  - inet: ping: check sock_net() in ping_get_port() and ping_lookup()
  - media: st-delta: avoid excessive stack usage
  - ALSA: lx_core: use int type to store negative error codes
  - media: rj54n1cb0c: Fix memleak in rj54n1_probe()
  - scsi: myrs: Fix dma_alloc_coherent() error check
  - hwrng: nomadik - add ARM_AMBA dependency
  - crypto: keembay - Add missing check after sg_nents_for_len()
  - drm/amd/display: Remove redundant semicolons
  - serial: max310x: Add error checking in probe()
  - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
  - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
  - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
  - media: zoran: Remove zoran_fh structure
  - drm/bridge: it6505: select REGMAP_I2C
  - f2fs: fix condition in __allow_reserved_blocks()
  - drm/radeon/r600_cs: clean up of dead code in r600_cs
  - drm/panel: novatek-nt35560: Fix invalid return value
  - bpf: Enforce expected_attach_type for tailcall compatibility
  - i2c: designware: Add disabling clocks when probe fails
  - i2c: designware: Fix clock issue when PM is disabled
  - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
  - thermal/drivers/qcom/lmh: Add missing IRQ includes
  - thermal/drivers/qcom: Make LMH select QCOM_SCM
  - hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems
  - once: fix race by moving DO_ONCE to separate section
  - smp: Fix up and expand the smp_call_function_many() kerneldoc
  - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
  - i3c: master: svc: Recycle unused IBI slot
  - i3c: master: svc: Use manual response for IBI events
  - ACPICA: Fix largest possible resource descriptor index
  - pwm: tiehrpwm: Fix corner case in clock divisor calculation
  - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
  - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
  - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
  - cpuidle: qcom-spm: fix device and OF node leaks at probe
  - firmware: firmware: meson-sm: fix compile-test default
  - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
  - null_blk: Fix the description of the cache_size module argument
  - pinctrl: renesas: Use int type to store negative error codes
  - power: supply: cw2015: Fix a alignment coding style issue
  - PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
  - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property
  - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS
  - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax
  - block: use int to store blk_stack_limits() return value
  - selftests/nolibc: fix EXPECT_NZ macro
  - regulator: scmi: Use int type to store negative error codes
  - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
  - ARM: at91: pm: fix MCKx restore routine
  - pinctrl: meson-gxl: add missing i2c_d pinmux
  - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
  - leds: flash: leds-qcom-flash: Update torch current clamp setting
  - ARM: dts: renesas: porter: Fix CAN pin group
  - libbpf: Fix reuse of DEVMAP
  - bpf: Remove migrate_disable in kprobe_multi_link_prog_run
  - bpf/selftests: Fix test_tcpnotify_user
  - regmap: Remove superfluous check for !config in __regmap_init()
  - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
  - x86/vdso: Fix output operand size of RDPID
  - smb: server: fix IRD/ORD negotiation with the client
  - coresight: trbe: Prevent overflow in PERF_IDX2OFF()
  - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
  - selftests: arm64: Check fread return value in exec_target
  - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast
  - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
  - filelock: add FL_RECLAIM to show_fl_flags() macro
  - !21022  KVM: Don't clobber irqfd routing type when deassigning irqfd
  - !20998  ceph: fix oops due to invalid pointer for kfree() in parse_longname()
  - !21023  l2tp: avoid one data-race in l2tp_tunnel_del_work()
  - xsched: fix potential NULL dereference in xsched_quota_timeout_update
  - xsched: remove the standalone xcu_cfs_cg_deinit() helper
  - xsched: restructure xcu_cgrp_subsys teardown to align with cpu_cgrp_subsys lifecycle
  - xsched: simplify root group check by direct comparison with root_xcg
  - xsched: replace magic number with SCHED_CLASS_MAX_LENGTH for scheduler class string length
  - xsched/core: immediate cleanup of remaining operators on task exit
  - xsched: add init_fair_xsched_group() for XCU-specific fair group initialization
  - xsched: modify xcu_cg_initialize_components helper
  - xsched: refactor xsched_entity initialization
  - xsched: change rq_init() parameter from struct xsched_cu to struct xsched_rq
  - xsched: harden and clarify xcu_move_task() logic
  - xsched: move throttling-related fields from xsched_group_xcu_priv to xsched_rq_cfs
  - xsched/quota: add throttled flag to cfs_rq for robust hierarchical enqueue under throttling
  - xsched/quota: support multi-level cgroup
  - xsched: remove redundant xcu parameter from dequeue_ctx
  - xsched: update group shares using xcu_grp_shares_add/sub helpers
  - xsched: delete unused code
  - xsched/cfs: propagate group activation/deactivation up the hierarchy
  - xsched/cfs: move xruntime updates to pick/put paths
  - xsched: add has_running hook to xsched classes for wake-up eligibility check
  - !21012 [OLK-6.6][linux-6.6.y sync] Backport 6.6.110-6.6.111 LTS Patches
  - scsi: hisi_sas: Fix NULL pointer exception when do user_scan()
  - !21013  CVE-2026-23177
  - !21007  bonding: fix use-after-free due to enslave fail after slave array update
  - !21006  net: Fix CVE-2026-23204
  - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
  - bpf, test_run: Subtract size of xdp_frame from allowed metadata size
  - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
  - bpf: Make variables in bpf_prog_test_run_xdp less confusing
  - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
  - !21015  libceph: reset sparse-read state in osd_fault()
  - !21024 ub: udma: bugfix related to print messages.
  - !20980 Fix CVE-2026-23126
  - !20922 Fix CVE-2026-23133
  - ub: udma: bugfix related to print messages.
  - l2tp: avoid one data-race in l2tp_tunnel_del_work()
  - KVM: Don't clobber irqfd routing type when deassigning irqfd
  - ipv6: annotate data-race in ndisc_router_discovery()
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path
  - macvlan: fix error recovery in macvlan_common_newlink()
  - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
  - net: fix segmentation of forwarding fraglist GRO
  - can: rcar_canfd: Fix CAN-FD mode as default
  - libceph: reset sparse-read state in osd_fault()
  - !21008 uvb: fix cis call return value and obtain
  - mm, shmem: prevent infinite loop on truncate race
  - mm/shmem, swap: fix race of truncate and swap entry split
  - net/9p: fix double req put in p9_fd_cancelled
  - riscv: mm: Do not restrict mmap address based on hint
  - riscv: mm: Use hint address in mmap if available
  - driver core/PM: Set power.no_callbacks along with power.no_pm
  - serial: stm32: allow selecting console when the driver is module
  - hid: fix I2C read buffer overflow in raw_event() for mcp2221
  - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  - ALSA: usb-audio: Kill timer properly at removal
  - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list
  - can: rcar_canfd: Fix controller mode setting
  - can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
  - btrfs: ref-verify: handle damaged extent root tree
  - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
  - perf subcmd: avoid crash in exclude_cmds when excludes is empty
  - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
  - dm-integrity: limit MAX_TAG_SIZE to 255
  - ASoC: amd: acp: Adjust pdm gain value
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
  - USB: serial: option: add SIMCom 8230C compositions
  - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
  - !20931 Fix CVE-2026-23060
  - uvb: fix cis call return value and obtain
  - bonding: fix use-after-free due to enslave fail after slave array update
  - net/sched: cls_u32: use skb_header_pointer_careful()
  - net: add skb_header_pointer_careful() helper
  - regmap: Fix race condition in hwspinlock irqsave routine
  - crypto: virtio - Add spinlock protection with virtqueue notification
  - net/mlx5e: TC, delete flows only for existing peers
  - !20967 net: hns3: modify code of judging if SMMU DMA is enabled
  - ceph: fix oops due to invalid pointer for kfree() in parse_longname()
  - !20969 Fix CVE-2026-23125
  - !20948 v4  arm64: Add memory poison recovery support for various paths
  - !20975  CVE-2026-23102
  - !20977 v4  support apei_page_offline_policy
  - bonding: annotate data-races around slave->last_rx
  - netfilter: nf_conncount: update last_gc only when GC has been performed
  - bonding: provide a net pointer to __skb_flow_dissect()
  - netdevsim: fix a race issue related to the operation on bpf_bound_progs list
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
  - apei/ghes: Add sysctl interface to control soft-offline page isolation
  - Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  - arm64/fpsimd: signal: Fix restoration of SVE context
  - arm64/fpsimd: signal: Consistently read FPSIMD context
  - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state
  - bonding: limit BOND_MODE_8023AD to Ethernet devices
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
  - net/sched: Enforce that teql can only be used as root qdisc
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  - drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
  - net: hns3: modify code of judging if SMMU DMA is enabled
  - dmaengine: xilinx: xdma: Fix regmap max_register
  - ub:ubus: protect iterator ue_list and mue_list with ub_bus_sem
  - ub:ubus: Avoid getting empty uent from ubc
  - ub:hisi-ubus: Use GFP_ATOMIC when alloc memory
  - arm64: send sig fault for user task when apei_claim_sea fails
  - arm64: add ras log during do_sea
  - arm64: move getting valid siaddr to the top of do_sea
  - arm64: mm: shmem: support poison recovery from shmem_file_read_iter()
  - arm64: fs: support poison recovery from __kernel_read()
  - iov_iter: add mc support for copy_page_to_iter
  - arm64: mm: support recovery from copy_{from/to}_user_page()
  - iov_iter: get rid of 'copy_mc' flag
  - leds: led-class: Only Add LED to leds_list when it is fully ready
  - wifi: ath10k: fix dma_free_coherent() pointer
  - smb/server: fix refcount leak in parse_durable_handle_context()
  - ksmbd: add chann_lock to protect ksmbd_chann_list xarray
  - ipvlan: Make the addrs_lock be per port
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races
  - efivarfs: fix error propagation in efivar_entry_get()
  - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
  - dm: use bio_clone_blkg_association
  - RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor
  - net: txgbe: fix clang compile warning


author: Li Nan <linan122@huawei.com> - 6.6.0-143.0.0.125
changelog:
  - !21258 ub:hisi-ubus: Review of Readability Modifications
  - !21293 urma: update urma_admin agg expose flag
  - urma: update urma_admin agg expose
  - !21227 [OLK-6.6][linux-6.6.y sync] Backport 6.6.114-6.6.115 LTS Patches
  - !21270  l2tp: fix double dst_release() on sk_dst_cache race
  - !21272  mptcp: fix soft lockup in mptcp_recvmsg()
  - !20994 urma: support comm endpoint
  - !21245 urma: support non-root execute 'urma_ping' and 'urma_admin show topo'
  - !21271 urma: fix useless copy_logic_device and use expose instead.
  - urma: support non-root execute in containers
  - urma: fix useless copy_logic_device and use expose instead.
  - ub:hisi-ubus: Review of Readability Modifications
  - mptcp: fix soft lockup in mptcp_recvmsg()
  - mptcp: fix MSG_PEEK stream corruption
  - l2tp: fix double dst_release() on sk_dst_cache race
  - urma: update urma_admin agg expose
  - !21252  arm64: Set __nocfi on swsusp_arch_resume()
  - !21226 hisi-cca-da: Fix potential data overflow.
  - !19706 [OLK-6.6]:update patches for sw64 architecture
  - !21253  xattr: switch to CLASS(fd)
  - !21255 ub: cdma: cdma bug fix
  - !21241 net/ipv4:scmtcp: fix soft lockup caused by spin_lock in soft irq
  - ub: cdma: cdma bug fix
  - xattr: switch to CLASS(fd)
  - arm64: Set __nocfi on swsusp_arch_resume()
  - hisi-cca-da: Fix error where multiple devices share the same SMMU domain.
  - net/ipv4:scmtcp: fix soft lockup caused by spin_lock in soft irq
  - net/ipv4:scmtcp: fix panic caused by file_htable_del_flist
  - !21237 urma: change warn log into info for topo query
  - hisi-cca-da: Fix potential data overflow.
  - !21210 urma: fix tjetty tp type in ping server
  - !21224  arm64/mpam: Fix warning of schedule state in resctrl_arch_mon_ctx_alloc()
  - !21240 urma: update urma_admin agg expose
  - !21042 net/ipv4: introduce IPPROTO_SCMTCP for SCM_RIGHTS
  - urma: update urma_admin agg expose
  - net/ipv4: introduce IPPROTO_SCMTCP for SCM_RIGHTS
  - !21238 urma: delete ubcm_genl implementation
  - urma: delete ubcm_genl implementation
  - urma: change warn log into info for topo query
  - tcpm: allow looking for role_sw device in the main node
  - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
  - most: usb: fix double free on late probe failure
  - arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation
  - net: enetc: fix build warning when PAGE_SIZE is greater than 128K
  - gpio: ljca: Initialize num before accessing item in ljca_gpio_config
  - s390/cio: Update purge function to unregister the unused subchannels
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
  - xfs: always warn about deprecated mount options
  - devcoredump: Fix circular locking dependency with devcd->mutex.
  - serial: 8250_mtk: Enable baud clock and manage in runtime PM
  - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
  - serial: 8250_dw: handle reset control deassert error
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
  - tcpm: switch check for role_sw device with fw_node
  - most: usb: hdm_probe: Fix calling put_device() before device initialization
  - most: usb: Fix use-after-free in hdm_disconnect
  - mei: me: add wildcat lake P DID
  - comedi: fix divide-by-zero in comedi_buf_munge()
  - binder: remove "invalid inc weak" check
  - x86/microcode: Fix Entrysign revision check for Zen1/Naples
  - xhci: dbc: enable back DbC in resume if it was enabled before suspend
  - usb: raw-gadget: do not limit transfer length
  - usb/core/quirks: Add Huawei ME906S to wakeup quirk
  - USB: serial: option: add Telit FN920C04 ECM compositions
  - USB: serial: option: add Quectel RG255C
  - USB: serial: option: add UNISOC UIS7720
  - sched: Remove never used code in mm_cid_get()
  - io_uring: correct __must_hold annotation in io_install_fixed_file
  - gpio: ljca: Fix duplicated IRQ mapping
  - gpio: update Intel LJCA USB GPIO driver
  - hwmon: (sht3x) Fix error handling
  - RISC-V: Don't print details of CPUs disabled in DT
  - RISC-V: Define pgprot_dmacoherent() for non-coherent devices
  - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode
  - spi: spi-nxp-fspi: add extra delay after dll locked
  - selftests: mptcp: join: mark implicit tests as skipped if not supported
  - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
  - net: ravb: Ensure memory write completes before ringing TX doorbell
  - net: ravb: Enforce descriptor type ordering
  - net: usb: rtl8150: Fix frame padding
  - net: stmmac: dwmac-rk: Fix disabling set_clock_selection
  - ocfs2: clear extent cache after moving/defragmenting extents
  - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
  - cifs: Fix TCP_Server_Info::credits to be signed
  - gpio: 104-idio-16: Define maximum valid register address offset
  - gpio: pci-idio-16: Define maximum valid register address offset
  - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC
  - net: bonding: fix possible peer notify event loss or dup issue
  - arm64, mm: avoid always making PTE dirty in pte_mkwrite()
  - !21236  Fix TLBI broadcast optimization loss and incorrect dvmbm handling
  - KVM: arm64: Fix CCA guest panic when dvmbm is enabled
  - !21228 ub:ubus: add reset function
  - !21220  selftests/bpf: Add cross-build support for urandom_read et al
  - !21214  optimize lightweight load balancing
  - ub:ubus: add reset function
  - !21218 ub_fwctl modifies the interception and concurrency verification of commands in different scenarios
  - !21221 iommu/ummu: Modify the ummu/tid permission
  - selftests: net: fix server bind failure in sctp_vrf.sh
  - selftests/net: convert sctp_vrf.sh to run it in unique namespace
  - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb()
  - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
  - net: enetc: correct the value of ENETC_RXB_TRUESIZE
  - net: enetc: fix the deadlock of enetc_mdio_lock
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush().
  - rtnetlink: Allow deleting FDB entries in user namespace
  - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size()
  - Unbreak 'make tools/*' for user-space targets
  - smb: server: let smb_direct_flush_send_list() invalidate a remote key first
  - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
  - m68k: bitops: Fix find_*_bit() signatures
  - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
  - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
  - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
  - dlm: check for defined force value in dlm_lockspace_release
  - hfs: validate record offset in hfsplus_bmap_alloc
  - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
  - hfs: make proper initalization of struct hfs_find_data
  - hfs: clear offset and space out of valid records in b-tree node
  - nios2: ensure that memblock.current_limit is set when setting pfn limits
  - exec: Fix incorrect type for ret
  - !21222 ub: ubase: Added the interface for obtaining hardware version information
  - !21175 iommu/ummu: Optimize ummu register compatibility ubmem processing
  - !21216  Fix RT priority Setting
  - arm64/mpam: Fix warning of schedule state in resctrl_arch_mon_ctx_alloc()
  - iommu/ummu: Modify the ummu/tid permission
  - ub: ubase&unic: Optimize the code for log information
  - ub: ubase: Solve The out-of-bounds problem of accessing a variable of the u16 type through unsigned long
  - ub: ubase: Fix the issue where the himac reset cannot be triggered during an elr reset
  - ub:ub_fwctl:Add a mutex lock
  - ub:ub_fwctl:Add interception and validation for unsupported environment commands
  - ub: ubase: Added the interface for obtaining hardware version information.
  - selftests/bpf: Add cross-build support for urandom_read et al
  - !21217  Revert "drivers: core: synchronize really_probe() and dev_uevent()"
  - !21205  arm64/mpam: Fix wrong closid config access when CDP is enabled
  - !21169 [OLK-6.6][linux-6.6.y sync] Backport 6.6.113-6.6.114 LTS Patches
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()"
  - !21213 ub:ubus: alter nl ssu credit ras recover
  - iommu/ummu: Optimize the duplicate code
  - xsched: initialize tgid before configuring RT priority
  - xsched: fix typo in xcu cgroup subsys released callback name
  - xsched: refactor xse_this_grp_xcu to xse_this_cfs_rq for clarity and correctness
  - sched: expand sysctl_sched_features to unsigned long
  - sched: Fix kabi breakage of struct sched_domain for newidle_stats
  - sched/fair: Proportional newidle balance
  - ub:ubus: alter nl ssu credit ras recover
  - ub:ubus add some missing code to openeuler
  - change bus instance create EID_BYPASS
  - urma: fix tjetty tp type in ping server
  - iommu/ummu: Optimize the definition of 'hisi_ummu_tdev_info'
  - iommu/ummu: Delete the unused interface of the UMMU
  - arm64/mpam: Fix wrong closid config access when CDP is enabled
  - Revert "fs/resctrl: Fix configuration to wrong control group when CDP is enabled"
  - iommu/ummu: Remove the constraint that l_tid must be valid
  - iommu/ummu: Remove redundant read register operations
  - iommu/ummu: Optimize the UMMU instance matching logic
  - iommu/ummu: Improve the reliability of ummu initialization
  - iommu/ummu: Modify parameter for separated page table
  - drm/amd: Fix suspend failure with secure display TA
  - PCI: tegra194: Reset BARs when running in PCIe endpoint mode
  - PCI: j721e: Fix programming sequence of "strap" settings
  - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
  - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
  - PCI/sysfs: Ensure devices are powered for config reads (part 2)
  - nfsd: decouple the xprtsec policy check from check_nfsd_access()
  - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
  - xfs: use deferred intent items for reaping crosslinked blocks
  - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
  - iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
  - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
  - phy: cdns-dphy: Store hs_clk_rate and return it
  - iio: imu: inv_icm42600: Simplify pm_runtime setup
  - PM: runtime: Add new devm functions
  - xfs: fix log CRC mismatches between i386 and other architectures
  - xfs: rename the old_crc variable in xlog_recover_process
  - NFSD: Fix last write offset handling in layoutcommit
  - NFSD: Minor cleanup in layoutcommit processing
  - NFSD: Rework encoding and decoding of nfsd4_deviceid
  - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
  - block: fix race between set_blocksize and read paths
  - arm64: errata: Apply workarounds for Neoverse-V3AE
  - arm64: cputype: Add Neoverse-V3AE definitions
  - selftests: arg_parsing: Ensure data is flushed to disk before reading.
  - HID: multitouch: fix name of Stylus input devices
  - HID: hid-input: only ignore 0 battery events for digitizers
  - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
  - selftests/bpf: make arg_parsing.c more robust to crashes
  - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
  - drm/rockchip: vop2: use correct destination rectangle height check
  - drm/amd/powerplay: Fix CIK shutdown temperature
  - drm/i915/guc: Skip communication warning on reset in progress
  - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
  - ASoC: nau8821: Generalize helper to clear IRQ status
  - ASoC: nau8821: Cancel jdet_work before handling jack ejection
  - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
  - drm/bridge: lt9211: Drop check for last nibble of version register
  - riscv: kprobes: Fix probe address validation
  - nvme-multipath: Skip nr_active increments in RETRY disposition
  - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
  - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
  - tls: don't rely on tx_work during send()
  - tls: always set record_type in tls_process_cmsg
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg
  - net: tls: wait for async completion on last message
  - tls: trim encrypted message to match the plaintext on short splice
  - tg3: prevent use of uninitialized remote_adv and local_adv variables
  - tcp: fix tcp_tso_should_defer() vs large RTT
  - amd-xgbe: Avoid spurious link down messages during interface toggle
  - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
  - doc: fix seg6_flowlabel path
  - net: dlink: handle dma_map_single() failure properly
  - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
  - dax: skip read lock assertion for read-only filesystems
  - HID: multitouch: fix sticky fingers
  - usb: gadget: f_rndis: Refactor bind path to use __free()
  - usb: gadget: f_ncm: Refactor bind path to use __free()
  - usb: gadget: f_acm: Refactor bind path to use __free()
  - usb: gadget: f_ecm: Refactor bind path to use __free()
  - usb: gadget: Introduce free_usb_request helper
  - usb: gadget: Store endpoint pointer in usb_request
  - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
  - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
  - drm/exynos: exynos7_drm_decon: remove ctx->suspended
  - drm/exynos: exynos7_drm_decon: properly clear channels during bind
  - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
  - drm/msm/a6xx: Fix PDC sleep sequence
  - drm/msm/adreno: De-spaghettify the use of memory barriers
  - eventpoll: Replace rwlock with spinlock
  - epoll: Remove ep_scan_ready_list() in comments
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
  - drm/amd: Check whether secure display TA loaded successfully
  - drm/amdgpu: use atomic functions with memory barriers for vm fault info
  - cifs: parse_dfs_referrals: prevent oob on malformed input
  - can: gs_usb: increase max interface to U8_MAX
  - can: gs_usb: gs_make_candev(): populate net_device->dev_port
  - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
  - ext4: wait for ongoing I/O to complete before freeing blocks
  - jbd2: ensure that all ongoing I/O complete before freeing blocks
  - f2fs: fix wrong block mapping for multi-devices
  - r8152: add error handling in rtl8152_driver_init
  - sw64: ebpf: port arch_prepare_bpf_trampoline()
  - sw64: fix random mmap base range
  - sw64: paravirt: add pv steal_time support in guest side
  - sw64: kvm: add pv steal time support
  - sw64: pci: remove redundant debug control


author: Li Nan <linan122@huawei.com> - 6.6.0-144.0.0.127
changelog:
  - !21367 ub: udma: bugfix related to jfr id.
  - !21356 ub: ubase: Improving the reliability of CtrlQ and fasten reboot
  - !21357 urma: fix add obj type compile error
  - ub: udma: bugfix related to jfr id.
  - urma: fix add obj type compile error
  - ub: ubase: optimized reboot time required
  - !21350 urma: add obj type in ubcore delete uobj error
  - !21343 urma: support ubp methods
  - !21351  arm64: fix compile error if CONFIG_ARCH_HAS_COPY_MC not enabled
  - urma: support ubp methods;
  - !21320 urma: decrease session creation max timeout
  - !21323 urma: tp reuse in RC transmode
  - !21319 urma: remove legacy bonding dev create/delete
  - !21342 iommu/ummu: Optimize resource management and eliminate redundant interfaces
  - ub: ubase: Improving the reliability of CtrlQ.
  - arm64: fix compile error if CONFIG_ARCH_HAS_COPY_MC not enabled
  - urma: add obj type in ubcore delete uobj error
  - urma: Kernel-mode file for tp reuse in RC transmode
  - iommu/ummu-core: Delete the redundant fields of struct ummu_mpam.
  - ub:ubfi: Delete device load debug logs
  - iommu/ummu-core: Fix kref imbalance in VMA split scenario
  - iommu/ummu-core: Prevent FREE_TID while mmap is active
  - iommu/ummu: Add deprecation markers for ummu SVA APIs
  - !21324 mfs: fix mfsd_prefetch.cpp compile error
  - !21303 net/ipv4:scmtcp: fix scmtcp_sk_recvmsg() return incorrect fds due to RLIMIT_NOFILE
  - !20936 gmem: fix several issues
  - !21267 drivers/ub/sentry: set the priority to prevent machine being hung up when the load is heavy
  - !21333 v4  hugetlb: drain pcp for movable zone before alloc
  - drivers/ub/sentry: set the priority
  - hugetlb: drain pcp for movable zone before alloc
  - !21325  mm/hugetlb: fix memory offline failure due to hwpoisoned file hugetlb
  - gmem: only create vma->vm_obj when peer_va_alloc_fixed return true
  - gmem: check vma->vm_obj in vm_object_split to avoid NULL ptr deference
  - gmem: hold mmap_read lock while executing gmem_unmap_region
  - gmem: Fix a potential double free in exit_mm() by reordering the intialization of mm->gm_as in dup_mm()
  - gmem: fix hmemcpy src/dest conflict deadlock under concurrency
  - gmem: fix NULL ptr deference in vm_object_merge
  - mm/hugetlb: fix memory offline failure due to hwpoisoned file hugetlb
  - mfs: fix mfsd_prefetch.cpp compile error
  - !21310 CCA: Add the RSI interface for obtaining the device certificate.
  - urma: remove legacy bonding dev create/delete
  - urma: Decrease session creation max timeout
  - !21316 ub: udma: Move the request for RC context from UDMA to UBASE
  - net/ipv4:scmtcp: fix scmtcp_sk_recvmsg() return incorrect fds due to RLIMIT_NOFILE
  - ub: ubase: Move the request for RC context from UDMA to UBASE
  - !19936 [Intel-SIG]: sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode
  - !21302 [OLK-6.6]:update patches for sw64 architecture
  - ub: udma: bugfix related to deactivate tp.
  - ub: udma: bugfix related to jetty group.
  - !21311  mm/shrinker: Implementation of register_shrinker() and unregister_shrinker()
  - !21312 urma: support remove ubagg & uburma ko
  - !21223 kvm: add skip vmovp feature support
  - CCA: Add the RSI interface for obtaining the device certificate.
  - urma: support remove ubagg & uburma ko
  - KVM: arm64: vgic-v4: Elide VMOVP on vCPU scheduling within same affinity group
  - !21276 ub/ubdevshm: Fix some issues
  - !21292 [OLK-6.6][linux-6.6.y sync] Backport 6.6.115-6.6.116 LTS Patches
  - !21309 ub:ub_fwctl:Modify the query to address issues that do not meet expectations
  - ub/ubmem-mmu: Fix some issues
  - ub/ubmempfd: Add module author
  - ub/ubdevshm: Fix some issues
  - mm/shrinker: Implementation of register_shrinker() and unregister_shrinker()
  - gpio: regmap: Fix memleak in error path in gpio_regmap_register()
  - perf: sched: Fix perf crash with new is_user_task() helper
  - ub:ub_fwctl:Modify the statistical port link up/down to only count 10 times
  - ub:ub_fwctl:When modifying the link information of a query port, verify non-existent ports
  - !21307 ub: ubase&unic: Stability and Functionality Fixes Collection
  - net: unic: correct DMA direction for TX path
  - net: unic: Fix the bug that could cause nconsistent resource state or double-free
  - net: unic: optimize MAC address deletion to avoid sleeping in spinlock
  - ub: ubase: Resolve integer wraparound
  - ub: ubase: Resolve cache coherence and set smp_rmb
  - ub: ubase&unic: adjust the encoding format of the ubase&unic driver.
  - ub: ubase: Support udma get ue msg info.
  - net: unic: The FPGA and EVB compilation macros are deleted from the unic driver.
  - ub: ubase: The debugfs function supports querying the Ethernet port rate.
  - sw64: adapt arch_tlbbatch_add_pending according to upstream
  - sw64: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled
  - sw64: add support for batched TLB flushing during unmap
  - sw64: fix the parameter passing logic of memblock_mark_nomap
  - sw64: add HUGE_VMAP support for c4
  - sw64: define get_cycles macro
  - sw64: cpuidle: refine C6 state stability
  - sw64: add barriers and tlb flush for set_atc
  - sw64: adapt kernel page table for kdump
  - sw64: adapt kernel page table for memory hotplug
  - sw64: set PTBR_SYS before accessing vmalloc area
  - sw64: set execute permission for virtual machine's hmcode text section
  - sw64: adjust the marking and definitions of some kernel mapping functions
  - sw64: adapt kernel page table for S4
  - sw64: fix an inappropriate lock in __set_memory
  - sw64: enable kernel page table
  - sw64: use ioremap to map IO address in functions like __get_cpu_nums()
  - sw64: move non-boot core's kernel page table enabling logic to hmcode
  - sw64: use ioremap to map IO address
  - sw64: map legacy I/O to K segment
  - sw64: setup early_ioremap
  - sw64: reset ATC for kvm
  - sw64: setup mapping for efi_mm
  - sw64: set protection for kernel page table
  - sw64: modify codes with fixmap
  - sw64: map the early and the final page table
  - sw64: add fixmap support
  - sw64: fix mmap_base exceeding Java assertion address
  - sw64: add memb before/after atomic
  - sw64: add EDAC support with dynamic node and MC detection
  - sw64: fix: getcpu passed a null pointer error
  - sw64: iommu: refactor iommu v2 initialization
  - sw64: cache: fix shared_cpu_map when PPTT is invalid
  - sw64: add alternative runtime patching
  - sw64: pci: fix IO_BASE if numa_off
  - sw64: use ioremap to map spaces for cpufreq and S3
  - sw64: pci: add sunway pci controller for Command Completed errata
  - sw64: add definitions for kernel-required CPU capabilities
  - sw64: kvm: add qemu-gdb watchpoint support
  - sw64: kvm: fix srcu lock leak in pv steal time
  - gpio: idio-16: Define fixed direction of the GPIO lines
  - gpio: regmap: add the .fixed_direction_output configuration parameter
  - gpio: regmap: Allow to allocate regmap-irq device
  - bits: introduce fixed-type GENMASK_U*()
  - bits: add comments and newlines to #if, #else and #endif directives
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
  - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
  - xhci: dbc: Improve performance by removing delay in transfer event polling.
  - xhci: dbc: Allow users to modify DbC poll interval via sysfs
  - xhci: dbc: poll at different rate depending on data transfer activity
  - serial: sc16is7xx: reorder code to remove prototype declarations
  - serial: sc16is7xx: remove unused to_sc16is7xx_port macro
  - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported
  - selftests: mptcp: disable add_addr retrans in endpoint_tests
  - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
  - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
  - btrfs: use level argument in log tree walk callback replay_one_buffer()
  - btrfs: always drop log root tree reference in btrfs_replay_log()
  - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
  - btrfs: zoned: refine extent allocator hint selection
  - btrfs: zoned: return error from btrfs_zone_finish_endio()
  - EDAC/mc_sysfs: Increase legacy channel support to 16
  - x86/bugs: Fix reporting of LFENCE retpoline
  - x86/bugs: Report correct retbleed mitigation status
  - perf: Skip user unwind if the task is a kernel thread
  - perf: Have get_perf_callchain() return NULL if crosstask and user are set
  - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL
  - audit: record fanotify event regardless of presence of rules
  - sched/topology,x86: Fix build warning
  - sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode
  - sched: Create architecture specific sched domain distances


author: Liu Chao <liuchao173@huawei.com> - 30-7
changelog:
  - disable make test because cannot find /lib/modules/`uname -r`/build
  - add extramodules to depmod search path


author: jinsaihang <jinsaihang@h-partners.com> - 1:0.9.9-13
changelog:
  - Type:bugfix
  - CVE:NA  
  - SUG:NA  
  - DESC:check whether the directory is a user source code directory


author: fuanan <fuanan3@h-partners.com> - 1:0.9.9-19
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:backport upstream patch
         backport-lookup-fix-local-bind-check.patch


author: qujingling <qujingling@huawei.com> - 1:0.9.9-20
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:remove __find_parent_obj_in_dir_for_oot and support link in changed_obj


author: Linux_zhang <244695981@qq.com> - 2:1.0.8-2
changelog:
  - fix CHILD_MAX at build time to prevent BEP discrepancies caused by varying CHILD_MAX values across repeated builds


author: wangli <3214053332@qq.com> - 1.1.0-1
changelog:
  -   add some test files
  -   prepare corresponding script for ras\rac\rahub to deploy config file respectively
  -   update part of file paths
  -   update to 1.1.0


author: gwei3 <11015100@qq.com> - 1.1.2-1
changelog:
  -   update to 1.1.2
  -   add slice length checks to avoid buffer overflow while extracting and verifying
  -   update integration test data to meet restapi parameter check requirement
  -   modify raagent/main.go file, change log to logger, os.Exit returns different values based on diff errors
  -   close RAS restapi server in signal handler
  -   Add parameter format checking for pcr/bios/ima in POST {id}/newbasevalue API
  -   Fix bugs in v1.1.1
      bug 1: hostintegritytool.sh can only add the 2nd part of ima policy into /etc/ima/ima-policy.
      bug 2: running hostintegritytool.sh multiple times will add duplicated linux cmdlines in /etc/default/grub.
      bug 3: rahub config path was assigned wrong values, which is caused by copy/paste
  -   fix the issue that Makefile not sync vendor
  -   modify readme file


author: gwei3 <11015100@qq.com> - 1.1.2-2
changelog:
  -   update BuildRequires & Requires to replace openssl* with compat-openssl11* to adapt to latest Mainline
  -   remove redundent clean label in spec file


author: leezhenxiang <1172294056@qq.com> - 2.0.0-1
changelog:
  -   update to 2.0.0
  -   add qcaserver, attester, and tas packages
  -   add BuildRequires itrustee_sdk-devel, cjson-devel and Requires itrustee_sdk, cjson
  -   modify makefile to adapt to different architectures
  -   specify the build requires in rac and attester package


author: bizhiyuan <bizhiyuan@kylinos.cn> - 4.13.0-23
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter and AWS Policy based authentication type


author: chengyechun <chengyechun1@huawei.com> - 4.9.2-7
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:File growth can be calculated only if it is strictly greater than
         fix the error of retransmission


author: xuxuepeng <xuxuepeng1@huawei.com> - 0.0.1-8
changelog:
  - Type:Enhancement
  - ID:NA
  - SUG:NA
  - DESC: Simplify Store api, remove unnecessary validation
          Check if a path is abstract before connection
          Add vsock support.


author: Wenlong Zhang <zhangwenlong@loongson.cn> - 0.0.1-12
changelog:
  - Type:Fix
  - ID:NA
  - SUG:NA
  - DESC:just use vendor on loongarch64
         add loongarch64 support for nix


author: wujie <wujie@nj.iscas.ac.cn> - 1.0.13-3
changelog:
  - Add riscv64 support from http://fedora.riscv.rocks/koji/buildinfo?buildID=24988
    Author is David Abdurachmanov <david.abdurachmanov@gmail.com>


author: Weifeng Su <suweifeng1@huawei.com> - 7.8.2-1
changelog:
  - upgrade to version 7.8.2:
    -Resolve warning in GCC11
    -Fix comparison warning in add_chunk_as
    -Address Clang 16 AO_pt_lock issue
    -Handle Mingw64-GCC _atomic_errors
    -Fix linker errors in OpenBSD build
    -Update get_chunk for mmap placement
    -Correct typos in names/comments
    -Update CMake version to 3.5


author: cenhuilin <cenhuilin@kylinos.cn> - 2.39.1-29
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:lsblk: fix memory leak [coverity scan]
         lsblk: fix possible use-after-free


author: yixiangzhike <yixiangzhike007@163.com> - 2.39.1-31
changelog:
  - backport community patches
      fix columns reduction
      fix memory leak issue in read_Subid_range
      fix off-by-one in maximum last sector calculation
      fix memory corruption in size calculation
      fix memory corruption in read buffers


author: wangzhiqiang <swangzhiqiang95@huawei.com> - 3.0.4-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Add BDPluginSpec constructor and use it in plugin_specs_from_names


author: tianmuyang <tianmuyang@huawei.com> 2:1.2.2-11
changelog:
  - Adaption for sched type eBPF program:
    backport-libbpf-Adaption-for-sched-type-eBPF-program.patch


author: yaoxin <yao_xin001@hoperun.com> - 1.27.4-1
changelog:
  - Update to 1.27.4 for fix CVE-2024-6381 and CVE-2024-6383
  - libbson Fixes:
    * Fix build with Visual Studio 2013.
    * Fix parsing of colon in timezone.
    * Error on failure to init subdocument in bson_iter_visit_all.
    * Fix string handling in bson_string_new and bson_string_append.
    * Fix iteration in bson_strfreev.
    * Use aligned alloc for bson_array_builder_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Fix conversion warning with GCC 12.
    * Fixes to some format strings in trace logs.
    * Allow mongoc_buffer_t to be larger than INT_MAX.
    * Add bson_array_builder_t.
  - libmongoc Fixes:
    * Fix possible crash reading malformed wire protocol message.
    * Upgraded bundled Zlib from 1.2.3 to 1.3.1
    * Close leftover connections to removed servers.
    * Fix possible crash when client is configured with empty password.
    * Fix possible hang if mongoc_gridfs_file_readv is called with a corrupt chunk with incomplete data.
    * Fix 32-bit compile with 64-bit time_t
    * Restore support for Sphinx 1.7.6 for man page build.
    * Disable shared libmongoc targets if ENABLE_SHARED=OFF
    * Fix documentation build with Python 3.9.
    * Fix data race in mongoc_cursor_get_host.
    * Add back support for BUILD_VERSION CMake option. BUILD_VERSION was unintentionally removed in 1.25.0.
    * Send recoveryToken in transactions when connected to a load balancer.


