linux-nvidia (6.8.0-1056.59) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1056.59 -proposed tracker (LP: #2151929)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2026.05.18)

  [ Ubuntu: 6.8.0-130.130 ]

  * noble/linux: 6.8.0-130.130 -proposed tracker (LP: #2154560)
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465)
    - Revert "UBUNTU: SAUCE: Fix skb_vlan_inet_prepare() usage"
  * Kernel regression (6.8.0-117.generic) (LP: #2153556)
    - net: bonding: update the slave array for broadcast mode
    - bonding: do not set usable_slaves for broadcast mode
  * perf_cpu_map__merge fails to compile on ppc46el, s390x on noble linux
    (LP: #2152194)
    - SAUCE: temporary fix attempt for size eceed
  * Some powerpc test from ubuntu_kernel_selftests timeout with 45 seconds
    (LP: #2141536)
    - selftests/powerpc: Lower run time of count_stcx_fail test
    - selftests/powerpc: Give all tests 2 minutes timeout
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809)
    - auxdisplay: arm-charlcd: fix release_mem_region() size
    - hfsplus: return error when node already exists in hfs_bnode_create
    - rcu: s/boost_kthread_mutex/kthread_mutex
    - rcu/exp: Move expedited kthread worker creation functions above
      rcutree_prepare_cpu()
    - rcu: Refactor expedited handling check in rcu_read_unlock_special()
    - rcu: Remove local_irq_save/restore() in
      rcu_preempt_deferred_qs_handler()
    - rcu: Fix rcu_read_unlock() deadloop due to softirq
    - audit: move the compat_xxx_class[] extern declarations to audit_arch.h
    - i3c: Move device name assignment after i3c_bus_init
    - fs: add <linux/init_task.h> for 'init_fs'
    - i3c: master: Update hot-join flag only on success
    - gfs2: Retries missing in gfs2_{rename,exchange}
    - gfs2: Fix use-after-free in iomap inline data write path
    - i3c: dw: Initialize spinlock to avoid upsetting lockdep
    - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
    - tpm: st33zp24: Fix missing cleanup on get_burstcount() error
    - btrfs: qgroup: return correct error when deleting qgroup relation item
    - btrfs: fix block_group_tree dirty_list corruption
    - smb: client: fix potential UAF and double free in smb2_open_file()
    - xen/virtio: Don't use grant-dma-ops when running as Dom0
    - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
    - io_uring/sync: validate passed in offset
    - cpuidle: menu: Cleanup after loadavg removal
    - cpuidle: governors: menu: Always check timers with tick stopped
    - md/raid10: fix any_working flag handling in raid10_sync_request
    - iomap: fix submission side handling of completion side errors
    - ublk: Validate SQE128 flag before accessing the cmd
    - x86/xen: make some functions static
    - Partial revert "x86/xen: fix balloon target initialization for PVH dom0"
    - PM: wakeup: Handle empty list in wakeup_sources_walk_start()
    - perf: arm_spe: Properly set hw.state on failures
    - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
    - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
    - crypto: qat - fix warning on adf_pfvf_pf_proto.c
    - selftests/bpf: veristat: fix printing order in output_stats()
    - libbpf: Fix OOB read in btf_dump_get_bitfield_value
    - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
    - crypto: cavium - fix dma_free_coherent() size
    - crypto: octeontx - fix dma_free_coherent() size
    - crypto: hisilicon/zip - adjust the way to obtain the req in the callback
      function
    - crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware
      queue unavailable
    - hrtimer: Fix trace oddity
    - bpf, sockmap: Fix incorrect copied_seq calculation
    - bpf, sockmap: Fix FIONREAD for sockmap
    - crypto: hisilicon/trng - modifying the order of header files
    - crypto: hisilicon/trng - support tfms sharing the device
    - bpf: Fix bpf_xdp_store_bytes proto for read-only arg
    - scsi: efct: Use IRQF_ONESHOT and default primary handler
    - EDAC/altera: Remove IRQF_ONESHOT
    - mfd: wm8350-core: Use IRQF_ONESHOT
    - sched/rt: Skip currently executing CPU in rto_next_cpu()
    - pstore/ram: fix buffer overflow in persistent_ram_save_old()
    - soc: qcom: smem: handle ENOMEM error during probe
    - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
    - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
    - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings
    - clk: qcom: Return correct error code in qcom_cc_probe_by_index()
    - arm64: dts: qcom: sdm630: fix gpu_speed_bin size
    - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
    - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
    - powerpc/uaccess: Move barrier_nospec() out of
      allow_read_{from/write}_user()
    - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in
      cmd_db_dev_probe
    - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
    - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event
      handling
    - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
    - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree
      node
    - arm64: dts: amlogic: axg: assign the MMC signal clocks
    - arm64: dts: amlogic: gx: assign the MMC signal clocks
    - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
    - arm64: dts: amlogic: g12: assign the MMC A signal clock
    - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0
    - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
    - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
    - workqueue: Factor out assign_rescuer_work()
    - workqueue: Only assign rescuer work when really needed
    - workqueue: Process rescuer work items one-by-one using a cursor
    - smack: /smack/doi must be > 0
    - smack: /smack/doi: accept previously used values
    - ASoC: nau8821: Consistently clear interrupts before unmasking
    - ASoC: nau8821: Avoid unnecessary blocking in IRQ handler
    - ASoC: nau8821: Fixup nau8821_enable_jack_detect()
    - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
    - drm/msm/disp/dpu: add merge3d support for sc7280
    - regulator: core: move supply check earlier in set_machine_constraints()
    - HID: playstation: Add missing check for input_ff_create_memless
    - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x
    - media: ccs: Accommodate C-PHY into the calculation
    - drm/msm/a2xx: fix pixel shader start on A225
    - platform/chrome: cros_typec_switch: Don't touch struct
      fwnode_handle::dev
    - media: uvcvideo: Fix allocation for small frame sizes
    - platform/chrome: cros_ec_lightbar: Fix response size initialization
    - spi: tools: Add include folder to .gitignore
    - Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
    - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
    - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors
    - PCI/PM: Avoid redundant delays on D3hot->D3cold
    - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails
    - Documentation: tracing: Add ring-buffer mapping
    - docs: fix WARNING document not included in any toctree
    - Documentation: trace: Refactor toctree
    - Documentation: tracing: Add PCI tracepoint documentation
    - PCI: Do not attempt to set ExtTag for VFs
    - PCI/portdrv: Fix potential resource leak
    - quota: fix livelock between quotactl and freeze_super
    - net: mctp-i2c: fix duplicate reception of old data
    - mctp i2c: initialise event handler read bytes
    - wifi: cfg80211: stop NAN and P2P in cfg80211_leave
    - netfilter: nf_tables: reset table validation state on abort
    - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
    - netfilter: nf_conncount: increase the connection clean up limit to 64
    - netfilter: nft_compat: add more restrictions on netlink attributes
    - netfilter: nf_conncount: fix tracking of connections from localhost
    - module: add helper function for reading module_buildid()
    - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup()
    - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
    - iommu/vt-d: Flush cache for PASID table before using it
    - dm: use bio_clone_blkg_association
    - nfsd: never defer requests during idmap lookup
    - fat: avoid parent link count underflow in rmdir
    - tcp: tcp_tx_timestamp() must look at the rtx queue
    - wifi: ath10k: sdio: add missing lock protection in
      ath10k_sdio_fw_crashed_dump()
    - PCI: Initialize RCB from pci_configure_device()
    - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
    - PCI: Add defines for bridge window indexing
    - PCI/ACPI: Restrict program_hpx_type2() to AER bits
    - ipc: don't audit capability check in ipc_permissions()
    - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
    - of: unittest: fix possible null-pointer dereferences in
      of_unittest_property_copy()
    - mptcp: fix receive space timestamp initialization
    - octeontx2-af: Fix PF driver crash with kexec kernel booting
    - bonding: only set speed/duplex to unknown, if getting speed failed
    - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
    - nfc: hci: shdlc: Stop timers and work before freeing context
    - netfilter: nft_set_hash: fix get operation on big endian
    - netfilter: nft_counter: fix reset of counters on 32bit archs
    - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
    - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
    - net: hns3: fix double free issue for tx spare buffer
    - procfs: fix missing RCU protection when reading real_parent in
      do_task_stat()
    - smb: client: correct value for smbd_max_fragmented_recv_size
    - net: sunhme: Fix sbus regression
    - net: Add skb_dstref_steal and skb_dstref_restore
    - net: Switch to skb_dstref_steal/skb_dstref_restore for ip_route_input
      callers
    - xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
    - serial: caif: fix use-after-free in caif_serial ldisc_close()
    - octeon_ep: disable per ring interrupts
    - octeon_ep: ensure dbell BADDR updation
    - ionic: Rate limit unknown xcvr type messages
    - octeontx2-pf: Unregister devlink on probe failure
    - RDMA/rtrs: server: remove dead code
    - IB/cache: update gid cache on client reregister event
    - RDMA/hns: Fix WQ_MEM_RECLAIM warning
    - RDMA/hns: Notify ULP of remaining soft-WCs during reset
    - power: supply: ab8500: Fix use-after-free in power_supply_changed()
    - power: supply: act8945a: Fix use-after-free in power_supply_changed()
    - power: supply: bq256xx: Fix use-after-free in power_supply_changed()
    - power: supply: bq25980: Fix use-after-free in power_supply_changed()
    - power: supply: cpcap-battery: Fix use-after-free in
      power_supply_changed()
    - power: supply: goldfish: Fix use-after-free in power_supply_changed()
    - power: supply: rt9455: Fix use-after-free in power_supply_changed()
    - power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
    - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
    - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
    - power: supply: wm97xx: Fix NULL pointer dereference in
      power_supply_changed()
    - RDMA/rtrs-srv: fix SG mapping
    - RDMA/rxe: Fix double free in rxe_srq_from_init
    - tools/power/x86/intel-speed-select: Fix file descriptor leak in
      isolate_cpus()
    - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
    - crypto: ccp - Add an S4 restore flow
    - crypto: ccp - Factor out ring destroy handling to a helper
    - crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when PSP_CMD_TEE_RING_INIT
      fails
    - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
    - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
    - RDMA/rxe: Fix race condition in QP timer handlers
    - svcrdma: Increase the per-transport rw_ctx count
    - svcrdma: Reduce the number of rdma_rw contexts per-QP
    - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
    - cxl: Fix premature commit_end increment on decoder commit failure
    - mtd: parsers: ofpart: fix OF node refcount leak in
      parse_fixed_partitions()
    - mtd: spinand: Fix kernel doc
    - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
    - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
    - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
    - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
    - scsi: ufs: host: mediatek: Require CONFIG_PM
    - scsi: csiostor: Fix dereference of null pointer rn
    - nvdimm: virtio_pmem: serialize flush requests
    - fs/nfs: Fix readdir slow-start regression
    - tracing: Properly process error handling in event_hist_trigger_parse()
    - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
    - fbdev: of_display_timing: Fix device node reference leak in
      of_get_display_timings()
    - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
    - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs
    - clk: qcom: rcg2: compute 2d using duty fraction directly
    - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
    - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops
    - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops
    - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops
    - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
    - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
    - clk: qcom: gcc-ipq5018: flag sleep clock as critical
    - clk: Move clk_{save,restore}_context() to COMMON_CLK section
    - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
    - clk: qcom: gfx3d: add parent to parent request map
    - clk: mediatek: Fix error handling in runtime PM setup
    - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
    - dma: dma-axi-dmac: fix SW cyclic transfers
    - staging: greybus: lights: avoid NULL deref
    - serial: imx: change SERIAL_IMX_CONSOLE to bool
    - serial: SH_SCI: improve "DMA support" prompt
    - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
    - iio: pressure: mprls0025pa: fix scan_type struct
    - watchdog: starfive-wdt: Fix PM reference leak in probe error path
    - coresight: etm3x: Fix cpulocked warning on cpuhp
    - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
    - mfd: arizona: Fix regulator resource leak on
      wm5102_clear_write_sequencer() failure
    - mfd: simple-mfd-i2c: Add MAX77705 support
    - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA
    - mfd: simple-mfd-i2c: Add SpacemiT P1 support
    - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order
    - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support
    - [Config] Disable new Delta TN48M CPLD support by default
    - drivers: iio: mpu3050: use dev_err_probe for regulator request
    - usb: bdc: fix sleep during atomic
    - pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
    - ovl: Fix uninit-value in ovl_fill_real
    - iio: sca3000: Fix a resource leak in sca3000_probe()
    - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
    - pinctrl: single: fix refcount leak in pcs_add_gpio_func()
    - leds: qcom-lpg: Check the return value of regmap_bulk_write()
    - backlight: qcom-wled: Support ovp values for PMI8994
    - backlight: qcom-wled: Change PM8950 WLED configurations
    - dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
    - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data
    - fs/ntfs3: prevent infinite loops caused by the next valid being the same
    - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
    - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
    - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check
    - kbuild: Add objtool to top-level clean target
    - selftests/memfd: delete unused declarations
    - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
    - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
    - cpuidle: Skip governor when only one idle state is available
    - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
    - net: sparx5/lan969x: fix DWRR cost max to match hardware register width
    - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
    - net: mscc: ocelot: split xmit into FDMA and register injection paths
    - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
    - ipv6: Fix out-of-bound access in fib6_add_rt2node().
    - net: sparx5/lan969x: fix PTP clock max_adj value
    - net: usb: catc: enable basic endpoint checking
    - xen-netback: reject zero-queue configuration from guest
    - net/rds: rds_sendmsg should not discard payload_len
    - net: bridge: mcast: always update mdb_n_entries for vlan contexts
    - selftests: forwarding: vxlan_bridge_1d: fix test failure with
      br_netfilter enabled
    - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with
      br_netfilter enabled
    - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
    - net: remove WARN_ON_ONCE when accessing forward path array
    - ipv6: fix a race in ip6_sock_set_v6only()
    - bpftool: Fix truncated netlink dumps
    - ping: annotate data-races in ping_lookup()
    - icmp: move icmp_global.credit and icmp_global.stamp to per netns storage
    - icmp: icmp_msgs_per_sec and icmp_msgs_burst sysctls become per netns
    - icmp: prevent possible overflow in icmp_global_allow()
    - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more)
    - inet: move icmp_global_{credit,stamp} to a separate cache line
    - octeontx2-af: Fix default entries mcam entry action
    - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
    - net/mlx5: Fix multiport device check over light SFs
    - apparmor: fix NULL sock in aa_sock_file_perm
    - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
    - apparmor: fix rlimit for posix cpu timers
    - apparmor: remove apply_modes_to_perms from label_match
    - apparmor: make label_match return a consistent value
    - apparmor: fix invalid deref of rawdata when export_binary is unset
    - apparmor: fix aa_label to return state from compount and component match
    - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
    - drm/amdgpu: Fix memory leak in amdgpu_ras_init()
    - drm/i915/acpi: free _DSM package when no connectors
    - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init
    - drm/amdkfd: fix debug watchpoints for logical devices
    - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
    - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
    - spi: wpcm-fiu: Fix uninitialized res
    - spi: wpcm-fiu: Simplify with dev_err_probe()
    - spi: wpcm-fiu: Fix potential NULL pointer dereference in
      wpcm_fiu_probe()
    - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
    - efi: Fix reservation of unaccepted memory table
    - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not
      found
    - x86/hyperv: Fix error pointer dereference
    - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk
    - drm/amd/display: Use same max plane scaling limits for all 64 bpp
      formats
    - MIPS: Work around LLVM bug when gp is used as global register variable
    - ext4: don't cache extent during splitting extent
    - ext4: fix memory leak in ext4_ext_shift_extents()
    - ext4: use optimized mballoc scanning regardless of inode format
    - ata: pata_ftide010: Fix some DMA timings
    - ata: libata-scsi: refactor ata_scsi_translate()
    - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
    - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
    - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
    - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
    - perf test stat: Update test expectations and events
    - perf test stat tests: Fix for virtualized machines
    - perf unwind-libdw: Fix invalid reference counts
    - perf callchain: Fix srcline printing with inlines
    - libsubcmd: Fix null intersection case in exclude_cmds()
    - libperf: Don't remove -g when EXTRA_CFLAGS are used
    - libperf build: Always place libperf includes first
    - rtc: interface: Alarm race handling should not discard preceding error
    - hfsplus: fix volume corruption issue for generic/498
    - fs/buffer: add alert in try_to_free_buffers() for folios without buffers
    - hfsplus: pretend special inodes as regular files
    - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
    - minix: Add required sanity checking to minix_check_superblock()
    - btrfs: handle user interrupt properly in btrfs_trim_fs()
    - smb: client: add proper locking around ses->iface_last_update
    - gfs2: fiemap page fault fix
    - smb: client: prevent races in ->query_interfaces()
    - tools/power cpupower: Reset errno before strtoull()
    - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
    - perf/arm-cmn: Support CMN-600AE
    - arm64: Add support for TSV110 Spectre-BHB mitigation
    - rnbd-srv: Zero the rsp buffer before using it
    - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE
      is set
    - EFI/CPER: don't dump the entire memory region
    - APEI/GHES: ensure that won't go past CPER allocated record
    - EFI/CPER: don't go past the ARM processor CPER record buffer
    - ACPI: processor: Fix NULL-pointer dereference in
      acpi_processor_errata_piix4()
    - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
    - md-cluster: fix NULL pointer dereference in process_metadata_update
    - cpufreq: dt-platdev: Block the driver from probing on more QC platforms
    - s390/perf: Disable register readout on sampling events
    - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
    - xenbus: Use .freeze/.thaw to handle xenbus devices
    - blk-mq-debugfs: add missing debugfs_mutex in
      blk_mq_debugfs_register_hctxs()
    - sparc: Synchronize user stack on fork and clone
    - sparc: don't reference obsolete termio struct for TC* constants
    - bpf: verifier improvement in 32bit shift sign extension pattern
    - clocksource/drivers/sh_tmu: Always leave device running after probe
    - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency
      on OF
    - PCI/MSI: Unmap MSI-X region on error
    - crypto: hisilicon/qm - move the barrier before writing to the mailbox
      register
    - mailbox: bcm-ferxrm-mailbox: Use default primary handler
    - char: tpm: cr50: Remove IRQF_ONESHOT
    - pstore: ram_core: fix incorrect success return when vmap() fails
    - arm64: tegra: smaug: Add usb-role-switch support
    - parisc: Prevent interrupts during reboot
    - drm/display/dp_mst: Add protection against 0 vcpi
    - spi-geni-qcom: initialize mode related registers to 0
    - spi-geni-qcom: use xfer->bits_per_word for can_dma()
    - media: dvb-core: dmxdevfilter must always flush bufs
    - spi: stm32: fix Overrun issue at < 8bpw
    - drm/v3d: Set DMA segment size to avoid debug warnings
    - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
    - media: omap3isp: isppreview: always clamp in preview_try_format()
    - media: omap3isp: set initial format
    - media: mediatek: vcodec: Don't try to decode 422/444 VP9
    - drm/amdgpu: add support for HDP IP version 6.1.1
    - drm/amdgpu: avoid a warning in timedout job handler
    - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards
    - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
    - ASoC: wm8962: Don't report a microphone if it's shorted to ground on
      plug
    - spi: spi-mem: Limit octal DTR constraints to octal DTR situations
    - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START
    - media: adv7180: fix frame interval in progressive mode
    - media: pvrusb2: fix URB leak in pvr2_send_request_ex
    - media: solo6x10: Check for out of bounds chip_id
    - media: cx25821: Fix a resource leak in cx25821_dev_setup()
    - media: v4l2-async: Fix error handling on steps after finding a match
    - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
    - drm: Account property blob allocations to memcg
    - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
    - virt: vbox: uapi: Mark inner unions in packed structs as packed
    - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
    - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional
      parts
    - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
    - media: rkisp1: Fix filter mode register configuration
    - HID: multitouch: add eGalaxTouch EXC3188 support
    - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
    - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro
    - gpio: aspeed-sgpio: Change the macro to support deferred probe
    - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio
    - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
    - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional()
      in max98390_i2c_probe()
    - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE
    - hwmon: (f71882fg) Add F81968 support
    - ASoC: es8328: Add error unwind in resume
    - modpost: Amend ppc64 save/restfpr symnames for -Os build
    - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
    - jfs: Add missing set_freezable() for freezable kthread
    - jfs: nlink overflow in jfs_rename
    - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero
    - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
    - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H
    - dm: replace -EEXIST with -EBUSY
    - dm: remove fake timeout to avoid leak request
    - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
    - wifi: libertas: fix WARNING in usb_tx_block
    - iommu/amd: move wait_on_sem() out of spinlock
    - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode
    - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
    - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
    - wifi: ath12k: fix preferred hardware mode calculation
    - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
    - ipv6: exthdrs: annotate data-race over multiple sysctl
    - ext4: mark group add fast-commit ineligible
    - ext4: move ext4_percpu_param_init() before ext4_mb_init()
    - ext4: mark group extend fast-commit ineligible
    - netfilter: nf_conntrack: Add allow_clash to generic protocol handler
    - netfilter: xt_tcpmss: check remaining length before reading optlen
    - openrisc: define arch-specific version of nop()
    - net: usb: r8152: fix transmit queue timeout
    - wifi: iwlwifi: mvm: check the validity of noa_len
    - net/rds: No shortcut out of RDS_CONN_ERROR
    - gro: change the BUG_ON() in gro_pull_from_frag0()
    - ipv4: igmp: annotate data-races around idev->mr_maxdelay
    - net: hns3: extend HCLGE_FD_AD_QID to 11 bits
    - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
    - wifi: iwlegacy: add missing mutex protection in
      il3945_store_measurement()
    - ipv4: fib: Annotate access to struct fib_alias.fa_state.
    - Bluetooth: hci_conn: Set link_policy on incoming ACL connections
    - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
    - Bluetooth: btusb: Add new VID/PID for RTL8852CE
    - Bluetooth: btusb: Add device ID for Realtek RTL8761BU
    - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
    - wifi: rtw89: pci: restore LDO setting after device resume
    - wifi: ath10k: fix lock protection in
      ath10k_wmi_event_peer_sta_ps_state_chg()
    - net: usb: sr9700: remove code to drive nonexistent multicast filter
    - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
    - net/rds: Clear reconnect pending bit
    - PCI: Mark ASM1164 SATA controller to avoid bus reset
    - PCI: Fix pci_slot_lock () device locking
    - PCI: Enable ACS after configuring IOMMU for OF platforms
    - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
    - PCI: Mark Nvidia GB10 to avoid bus reset
    - myri10ge: avoid uninitialized variable use
    - nfc: nxp-nci: remove interrupt trigger type
    - RDMA/rtrs-clt: For conn rejection use actual err number
    - ata: libata: avoid long timeouts on hot-unplugged SATA DAS
    - hisi_acc_vfio_pci: update status after RAS error
    - scsi: buslogic: Reduce stack usage
    - vhost: fix caching attributes of MMIO regions by setting them explicitly
    - tracing: Fix false sharing in hwlat get_sample()
    - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX
      channel is uninitialized
    - mailbox: pcc: Remove spurious IRQF_ONESHOT usage
    - mailbox: imx: Skip the suspend flag for i.MX7ULP
    - mailbox: sprd: mask interrupts that are not handled
    - remoteproc: mediatek: Break lock dependency to `prepare_lock`
    - mailbox: sprd: clear delivery flag before handling TX done
    - clk: microchip: core: correct return value on *_get_parent()
    - m68k: nommu: fix memmove() with differently aligned src and dest for
      68000
    - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of
      NUC15)
    - staging: rtl8723bs: fix missing status update on sdio_alloc_irq()
      failure
    - serial: 8250_dw: handle clock enable errors in runtime_resume
    - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
    - fpga: of-fpga-region: Fail if any bridge is missing
    - dmaengine: sun6i: Choose appropriate burst length under maxburst
    - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
    - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
    - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
    - staging: rtl8723bs: fix memory leak on failure path
    - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA
      termination is done
    - fix it87_wdt early reboot by reporting running timer
    - binder: don't use %pK through printk
    - watchdog: imx7ulp_wdt: handle the nowayout option
    - phy: mvebu-cp110-utmi: fix dr_mode property read from dts
    - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
    - Revert "mfd: da9052-spi: Change read-mask to write-mask"
    - iio: Use IRQF_NO_THREAD
    - iio: magnetometer: Remove IRQF_ONESHOT
    - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
    - fs/ntfs3: drop preallocated clusters for sparse and compressed files
    - fs/ntfs3: avoid calling run_get_entry() when run == NULL in
      ntfs_read_run_nb_ra()
    - ceph: supply snapshot context in ceph_uninline_data()
    - libceph: define and enforce CEPH_MAX_KEY_LEN
    - thermal: int340x: Fix sysfs group leak on DLVR registration failure
    - include: uapi: netfilter_bridge.h: Cover for musl libc
    - ARM: 9467/1: mm: Don't use %pK through printk
    - drm/amd/display: Avoid updating surface with the same surface under MPO
    - drm/amdgpu: Adjust usleep_range in fence wait
    - ALSA: usb-audio: Update the number of packets properly at receiving
    - drm/amdgpu: Add HAINAN clock adjustment
    - drm/radeon: Add HAINAN clock adjustment
    - ALSA: usb-audio: Add sanity check for OOB writes at silencing
    - btrfs: replace BUG() with error handling in __btrfs_balance()
    - drm/amd/display: Remove conditional for shaper 3DLUT power-on
    - rtc: zynqmp: correct frequency value
    - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
    - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
    - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
    - xfrm: skip templates check for packet offload tunnel mode
    - ipmi: ipmb: initialise event handler read bytes
    - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
    - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
    - net: usb: lan78xx: scan all MDIO addresses on LAN7801
    - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
    - net: ethernet: xscale: Check for PTP support properly
    - wifi: cfg80211: wext: fix IGTK key ID off-by-one
    - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
    - [Config] Remove WARN_ALL_UNSEEDED_RANDOM
    - Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
    - Bluetooth: hci_qca: Cleanup on all setup failures
    - Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
    - Bluetooth: L2CAP: Fix not checking output MTU is acceptable on
      L2CAP_ECRED_CONN_REQ
    - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
    - tipc: fix duplicate publication key in tipc_service_insert_publ()
    - RDMA/core: Fix stale RoCE GIDs during netdev events at registration
    - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
    - RDMA/efa: Fix typo in efa_alloc_mr()
    - net: usb: pegasus: enable basic endpoint checking
    - RDMA/umem: Fix double dma_buf_unpin in failure path
    - net/mlx5: DR, Fix circular locking dependency in dump
    - net/mlx5: Fix missing devlink lock in SRIOV enable error path
    - net: consume xmit errors of GSO frames
    - dpaa2-switch: validate num_ifs to prevent out-of-bounds write
    - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
    - rpmsg: core: fix race in driver_override_show() and use core helper
    - clk: renesas: rzg2l: Fix intin variable size
    - clk: renesas: rzg2l: Select correct div round macro
    - ASoC: SOF: ipc4-control: If there is no data do not send bytes update
    - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
    - ASoC: SOF: ipc4-control: Use the correct size for
      scontrol->ipc_control_data
    - ASoC: SOF: ipc4-control: Keep the payload size up to date
    - fpga: dfl: use subsys_initcall to allow built-in drivers to be added
    - dm-verity: correctly handle dm_bufio_client_create() failure
    - media: mediatek: encoder: Fix uninitialized scalar variable issue
    - media: mtk-mdp: Fix error handling in probe function
    - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
    - media: verisilicon: AV1: Fix enable cdef computation
    - media: verisilicon: AV1: Fix tx mode bit setting
    - ARM: omap2: Fix reference count leaks in omap_control_init()
    - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3()
      succeeding
    - arm64: Disable branch profiling for all arm64 code
    - HID: hid-pl: handle probe errors
    - HID: magicmouse: Do not crash on missing msc->input
    - HID: prodikeys: Check presence of pm->input_ep82
    - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
    - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
    - media: verisilicon: AV1: Set IDR flag for intra_only frame type
    - media: radio-keene: fix memory leak in error path
    - media: cx88: Add missing unmap in snd_cx88_hw_params()
    - media: cx23885: Add missing unmap in snd_cx23885_hw_params()
    - media: cx25821: Add missing unmap in snd_cx25821_hw_params()
    - media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
    - media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
    - media: i2c: ov01a10: Fix the horizontal flip control
    - media: i2c: ov01a10: Fix reported pixel-rate value
    - media: i2c: ov01a10: Fix analogue gain range
    - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
    - media: i2c: ov01a10: Fix test-pattern disabling
    - media: qcom: camss: vfe: Fix out-of-bounds access in
      vfe_isr_reg_update()
    - media: ccs: Avoid possible division by zero
    - media: i2c: ov5647: Initialize subdev before controls
    - media: i2c: ov5647: Correct pixel array offset
    - media: i2c: ov5647: Correct minimum VBLANK value
    - media: i2c: ov5647: Sensor should report RAW color space
    - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
    - media: i2c: ov5647: use our own mutex for the ctrl lock
    - dm-integrity: fix a typo in the code for write/discard race
    - dm: clear cloned request bio pointer when last clone bio completes
    - soc: ti: k3-socinfo: Fix regmap leak on probe failure
    - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
    - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
    - clk: clk-apple-nco: Add "apple,t8103-nco" compatible
    - media: i2c: ov01a10: Fix digital gain range
    - clk: tegra: tegra124-emc: Fix potential memory leak in
      tegra124_clk_register_emc()
    - s390/pci: Handle futile config accesses of disabled devices directly
    - dm-integrity: fix recalculation in bitmap mode
    - dm-unstripe: fix mapping bug when there are multiple targets in a table
    - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
    - media: venus: vdec: fix error state assignment for zero bytesused
    - media: venus: vdec: restrict EOS addr quirk to IRIS2 only
    - drm: of: drm_of_panel_bridge_remove(): fix device_node leak
    - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
    - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
    - xfs: mark data structures corrupt on EIO and ENODATA
    - media: verisilicon: AV1: Fix tile info buffer size
    - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in
      scalable mode
    - mfd: core: Add locking around 'mfd_of_node_list'
    - xfs: delete attr leaf freemap entries when empty
    - xfs: fix freemap adjustments when adding xattrs to leaf blocks
    - xfs: fix remote xattr valuelblk check
    - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
    - PCI: endpoint: Fix swapped parameters in
      pci_{primary/secondary}_epc_epf_unlink() functions
    - md/bitmap: fix GPF in write_page caused by resize race
    - nfsd: fix return error code for nfsd_map_name_to_[ug]id
    - nvmem: Drop OF node reference on nvmem_add_one_cell() failure
    - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
    - bus: fsl-mc: fix an error handling in fsl_mc_device_add()
    - dm mpath: make pg_init_delay_msecs settable
    - tools: Fix bitfield dependency failure
    - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
    - iio: gyro: itg3200: Fix unchecked return value in read_raw
    - mm/highmem: fix __kmap_to_page() build error
    - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
    - ocfs2: fix reflink preserve cleanup issue
    - kexec: derive purgatory entry from symbol
    - Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling
      SR-IOV"
    - PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
    - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
    - btrfs: continue trimming remaining devices on failure
    - remoteproc: imx_rproc: Fix invalid loaded resource table detection
    - perf/arm-cmn: Reject unsupported hardware configurations
    - scsi: ufs: core: Flush exception handling work when RPM level is zero
    - usb: dwc3: gadget: Move vbus draw to workqueue context
    - usb: dwc2: fix resume failure if dr_mode is host
    - mtd: rawnand: pl353: Fix software ECC support
    - tipc: fix RCU dereference race in tipc_aead_users_dec()
    - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
    - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe()
      error path
    - PCI: Fix pci_slot_trylock() error handling
    - parisc: kernel: replace kfree() with put_device() in create_tree_node()
    - staging: rtl8723bs: fix null dereference in find_network
    - cifs: Fix locking usage for tcon fields
    - MIPS: rb532: Fix MMIO UART resource registration
    - ceph: supply snapshot context in ceph_zero_partial_object()
    - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
    - LoongArch: Prefer top-down allocation after arch_mem_init()
    - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
    - LoongArch: Disable instrumentation for setup_ptwalker()
    - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
    - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
    - octeontx2-af: CGX: fix bitmap leaks
    - net: macb: Fix tx/rx malfunction after phy link down and up
    - tracing: Fix to set write permission to per-cpu buffer_size_kb
    - io_uring/filetable: clamp alloc_hint to the configured alloc range
    - net: intel: fix PCI device ID conflict between i40e and ipw2200
    - atm: fore200e: fix use-after-free in tasklets during device removal
    - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
    - fbcon: check return value of con2fb_acquire_newinfo()
    - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
    - fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
    - fbdev: ffb: fix corrupted video output on Sun FFB1
    - fbcon: Remove struct fbcon_display.inverse
    - cifs: some missing initializations on replay
    - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
    - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
    - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
    - x86/kexec: Copy ACPI root pointer address from config table
    - arm64: Force the use of CNTVCT_EL0 in __delay()
    - net: nfc: nci: Fix parameter validation for packet data
    - tracing: Fix checking of freed trace_event_file for hist files
    - tracing: Wake up poll waiters for hist files when removing an event
    - NTB: ntb_transport: Fix too small buffer for debugfs_name
    - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
    - arm64: Fix sampling the "stable" virtual counter in preemptible section
    - gfs2: Fix slab-use-after-free in qd_put
    - io_uring: use release-acquire ordering for IORING_SETUP_R_DISABLED
    - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature
    - OPP: Return correct value in dev_pm_opp_get_level
    - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id()
    - perf/x86/core: Do not set bit width for unavailable counters
    - genirq: Set IRQF_COND_ONESHOT in devm_request_irq().
    - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq()
    - media: pci: mg4b: Use IRQF_NO_THREAD
    - firmware: arm_ffa: Correct 32-bit response handling in
      NOTIFICATION_INFO_GET
    - arm64: dts: qcom: msm8994-octagon: Fix Analog Devices vendor prefix of
      AD7147
    - arm64: dts: mediatek: mt8183-jacuzzi-pico6: Fix typo in pinmux node
    - arm64: dts: qcom: qrb4210-rb2: Fix UART3 wakeup IRQ storm
    - arm64: dts: qcom: x1e: bus is 40-bits (fix 64GB models)
    - media: chips-media: wave5: Fix memory leak on codec_info allocation
      failure
    - drm/amd: Drop "amdgpu kernel modesetting enabled" message
    - drm/amdkfd: Fix signal_eviction_fence() bool return value
    - drm/xe: Unregister drm device on probe error
    - HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients
    - wifi: cfg80211: Fix use_for flag update on BSS refresh
    - PCI: Check parent for NULL in of_pci_bus_release_domain_nr()
    - netfilter: nfnetlink_queue: optimize verdict lookup with hash table
    - netfilter: nfnetlink_queue: do shared-unconfirmed check before
      segmentation
    - netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE with null
      interval
    - power: supply: pm8916_bms_vm: Fix use-after-free in
      power_supply_changed()
    - power: supply: pm8916_lbc: Fix use-after-free in power_supply_changed()
    - RDMA/mlx5: Fix UMR hang in LAG error state unload
    - IB/mlx5: Fix port speed query for representors
    - platform/x86/amd/pmf: Prevent TEE errors after hibernate
    - crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails
    - power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler
    - clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs
    - clk: qcom: gcc-sm4450: Update the SDCC RCGs to use shared_floor_ops
    - clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use shared_floor_ops
    - dma: dma-axi-dmac: fix HW scatter-gather not looking at the queue
    - iio: pressure: mprls0025pa: fix interrupt flag
    - objpool: fix the overestimation of object pooling metadata size
    - ipvs: do not keep dest_dst if dev is going down
    - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels
    - AppArmor: Allow apparmor to handle unaligned dfa tables
    - apparmor: Fix & Optimize table creation from possibly unaligned memory
    - apparmor: avoid per-cpu hold underflow in aa_get_buffer
    - drm/amd/display: Fix out-of-bounds stream encoder index v3
    - btrfs: use the correct type to initialize block reserve for delayed refs
    - Drivers: hv: vmbus: Use kthread for vmbus interrupts on PREEMPT_RT
    - i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init
    - APEI/GHES: ARM processor Error: don't go past allocated memory
    - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[]
    - powercap: intel_rapl: Add PL4 support for Ice Lake
    - alpha: fix user-space corruption during memory compaction
    - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display)
    - ACPI: battery: fix incorrect charging status when current is zero
    - perf/x86/msr: Add Airmont NP
    - perf/x86/cstate: Add Airmont NP
    - bpf: Recognize special arithmetic shift in the verifier
    - firmware: arm_ffa: Unmap Rx/Tx buffers on init failure
    - gpu/panel-edp: add AUO panel entry for B140HAN06.4
    - drm/amdgpu: fix NULL pointer issue buffer funcs
    - ASoC: SOF: ipc4: Support for sending payload along with LARGE_CONFIG_GET
    - media: chips-media: wave5: Fix conditional in start_streaming
    - media: chips-media: wave5: Process ready frames when CMD_STOP sent to
      Encoder
    - drm/amd/display: Fix dsc eDP issue
    - drm/panel: Fix a possible null-pointer dereference in
      jdi_panel_dsi_remove()
    - media: mt9m114: Avoid a reset low spike during probe()
    - media: mt9m114: Return -EPROBE_DEFER if no endpoint is found
    - ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk
    - PCI: Add Intel Nova Lake audio Device ID
    - drm/amd/display: Disable FEC when powering down encoders
    - drm/amd/display: avoid dig reg access timeout on usb4 link training fail
    - hwmon: (dell-smm) Add support for Dell OptiPlex 7080
    - HID: logitech-hidpp: Add support for Logitech K980
    - ASoC: SOF: Intel: hda: Fix NULL pointer dereference
    - spi: geni-qcom: Fix abort sequence execution for serial engine errors
    - ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx
    - wifi: rtw89: 8922a: set random mac if efuse contains zeroes
    - wifi: rtw89: ser: enable error IMR after recovering from L1
    - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
    - wifi: rtw89: mac: correct page number for CSI response
    - wifi: ath11k: Fix failure to connect to a 6 GHz AP
    - ipv6: annotate data-races over sysctl.flowlabel_reflect
    - ext4: use reserved metadata blocks when splitting extent on endio
    - Bluetooth: btusb: Add support for MediaTek7920 0489:e158
    - net: sfp: add quirk for Lantech 8330-265D
    - PCI/AER: Clear stale errors on reporting agents upon probe
    - scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event
    - riscv: vector: init vector context with proper vlenb
    - HID: i2c-hid: Add FocalTech FT8112
    - 9p/xen: protect xen_9pfs_front_free against concurrent calls
    - soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list
    - most: remove usage of the deprecated ida_simple_xx() API
    - most: core: fix resource leak in most_register_interface error paths
    - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
    - serial: 8250: 8250_omap.c: Add support for handling UART error
      conditions
    - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs
    - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90
    - drm/amd/display: Fix writeback on DCN 3.2+
    - drm/amd/display: Fix system resume lag issue
    - drm/amd/display: bypass post csc for additional color spaces in dal
    - spi: spidev: fix lock inversion between spi_lock and buf_lock
    - Bluetooth: L2CAP: Avoid -Wflex-array-member-not-at-end warnings
    - Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too
      short
    - kcm: fix zero-frag skb in frag_list on partial sendmsg error
    - net/mlx5: E-switch, Clear legacy flag when moving to switchdev
    - net/mlx5e: Separate address related variables to be in struct
    - net/mlx5e: Support routed networks during IPsec MACs initialization
    - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query
    - drm/tests: shmem: Swap names of export tests
    - KVM: x86: Return "unsupported" instead of "invalid" on access to
      unsupported PV MSR
    - media: amphion: Drop min_queued_buffers assignment
    - media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()
    - media: i2c: ov01a10: Fix passing stream instead of pad to
      v4l2_subdev_state_get_format()
    - media: ccs: Fix setting initial sub-device state
    - platform/x86: ISST: Add missing write block check
    - bus: omap-ocp2scp: fix OF populate on driver rebind
    - media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop
    - drm/buddy: Prevent BUG_ON by validating rounded allocation
    - xfs: remove xfs_attr_leaf_hasname
    - mfd: qcom-pm8xxx: Fix OF populate on driver rebind
    - mfd: omap-usb-host: Fix OF populate on driver rebind
    - xfs: fix the xattr scrub to detect freemap/entries array collisions
    - pinctrl: intel: Add code name documentation
    - vhost: move vdpa group bound check to vhost_vdpa
    - clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
    - mm/slab: use unsigned long for orig_size to ensure proper metadata align
    - drm/amd/display: Increase DCN35 SR enter/exit latency
    - drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
    - mm: numa_memblks: Identify the accurate NUMA ID of CFMW
    - drm/amdgpu: keep vga memory on MacBooks with switchable graphics
    - most: core: fix leak on early registration failure
    - Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
    - Upstream stable to v6.6.128, v6.12.75
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2026-23249
    - xfs: check for deleted cursors when revalidating two btrees
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2025-71267
    - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2025-71265
    - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent
      metadata
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2025-71266
    - fs: ntfs3: check return value of indx_find to avoid infinite loop
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2026-23241
    - audit: add missing syscalls to read class
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2025-71239
    - audit: add fchmodat2() to change attributes class
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2026-31411
    - net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2026-23243
    - RDMA/umad: Reject negative data_len in ib_umad_write
  * Noble update: upstream stable patchset 2026-05-01 (LP: #2150809) //
    CVE-2026-23242
    - RDMA/siw: Fix potential NULL pointer dereference in header processing
  * Noble update: upstream stable patchset 2026-04-17 (LP: #2148714)
    - scsi: qla2xxx: Fix bsg_done() causing double free
    - PCI: endpoint: Remove unused field in struct pci_epf_group
    - bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show
      functions
    - bus: fsl-mc: fix use-after-free in driver_override_show()
    - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
    - gpio: sprd: Change sprd_gpio lock to raw_spin_lock
    - ALSA: hda/realtek: Add quirk for Inspur S14-G1
    - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel
    - romfs: check sb_set_blocksize() return value
    - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used
    - platform/x86: classmate-laptop: Add missing NULL pointer checks
    - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
    - ASoC: amd: yc: Add quirk for HP 200 G2a 16
    - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
    - platform/x86: panasonic-laptop: Fix sysfs group leak in error path
    - ASoC: cs42l43: Correct handling of 3-pole jack load detection
    - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
    - gpiolib: acpi: Fix gpio count with string references
    - LoongArch: Rework KASAN initialization for PTW-enabled systems
    - Revert "wireguard: device: enable threaded NAPI"
    - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
    - mm/hugetlb: fix hugetlb_pmd_shared()
    - mm/hugetlb: fix two comments related to huge_pmd_unshare()
    - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using
      mmu_gather
    - cpuset: Fix missing adaptation for cpuset_is_populated
    - LoongArch: Add writecombine support for DMW-based ioremap()
    - fbdev: rivafb: fix divide error in nv3_arb()
    - fbdev: smscufx: properly copy ioctl memory to kernelspace
    - f2fs: fix to add gc count stat in f2fs_gc_range
    - f2fs: fix out-of-bounds access in sysfs attribute read/write
    - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent
      atomic commit and checkpoint writes
    - f2fs: fix to avoid UAF in f2fs_write_end_io()
    - f2fs: fix to avoid mapping wrong physical block for swapfile
    - USB: serial: option: add Telit FN920C04 RNDIS compositions
    - bnxt_en: Change FW message timeout warning
    - bnxt_en: hide CONFIG_DETECT_HUNG_TASK specific code
    - ALSA: hda/realtek: Enable headset mic for Acer Nitro 5
    - drm/amd/display: remove assert around dpp_base replacement
    - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
    - Upstream stable to v6.6.126, v6.6.127, v6.12.73, v6.12.74
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260)
    - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
    - crypto: octeontx - Fix length check to avoid truncation in
      ucode_load_store
    - crypto: virtio - Remove duplicated virtqueue_kick in
      virtio_crypto_skcipher_crypt_req
    - scsi: qla2xxx: Allow recovery for tape devices
    - scsi: qla2xxx: Query FW again before proceeding with login
    - Revert "netfilter: nf_tables: missing objects with no memcg accounting"
    - netfilter: nf_tables: missing objects with no memcg accounting
    - vsock/test: verify socket options after setting them
    - selftests: mptcp: pm: ensure unknown flags are ignored
    - gpio: omap: do not register driver in probe()
    - net: tunnel: make skb_vlan_inet_prepare() return drop reasons
    - Upstream stable to v6.6.125, v6.12.71, v6.12.72
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71233
    - PCI: endpoint: Avoid creating sub-groups asynchronously
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71231
    - crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2026-23169
    - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-40005
    - spi: cadence-quadspi: Implement refcount to handle unbind during busy
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71232
    - scsi: qla2xxx: Free sp in error path to fix system crash
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71235
    - scsi: qla2xxx: Delay module unload while fabric scan in progress
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71236
    - scsi: qla2xxx: Validate sp before freeing associated memory
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71229
    - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2025-71237
    - nilfs2: Fix potential block overflow that cause system hang
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2026-23229
    - crypto: virtio - Add spinlock protection with virtqueue notification
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2026-23222
    - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2026-23228
    - smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2026-23220
    - ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error
      paths
  * Noble update: upstream stable patchset 2026-04-13 (LP: #2148260) //
    CVE-2026-23230
    - smb: client: split cached_fid bitfields to avoid shared-byte RMW races
  * CVE-2026-23272
    - netfilter: nf_tables: unconditionally bump set->nelems before insertion
  * CVE-2026-31418
    - netfilter: ipset: drop logically empty buckets in mtype_del
  * CVE-2026-23392
    - netfilter: nf_tables: release flowtable after rcu grace period on error
  * CVE-2026-23278
    - netfilter: nf_tables: always walk all pending catchall elements
  * GRO managed-frag use-after-free leading to local privilege escalation
    (LP: #2154172)
    - net: gro: don't merge zcopy skbs
  * AppArmor Vulnerabilities  (LP: #2151747)
    - apparmor: Fix incorrect profile->signal range check
    - SAUCE: apparmor: pass big_resp to handler
    - SAUCE: apparmor: remove redundant kref_init for listener->count
    - SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47337
    - SAUCE: apparmor: fix NULL pointer dereference in bind_map_addr
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47336
    - SAUCE: apparmor: fix use of unintialized variable in net opt level
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47335
    - SAUCE: apparmor: fix possible NULL pointer dereference by adding a NULL
      check
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47334
    - SAUCE: apparmor: fix sleep prone memory allocation under a spin_lock
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47333
    - SAUCE: apparmor: fix dfa unpacking size of the notification filter
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47332
    - SAUCE: apparmor: fix size check against type instead of pointer
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47331
    - SAUCE: apparmor: fix changing rules list without a lock
  * apparmor: LLVM/clang build failure due to uninitialized variable in
    notify.c (LP: #2148809) // CVE-2026-47330
    - SAUCE: apparmor: initialize variable used in uninitialized context
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47329
    - SAUCE: apparmor: fix name validation bypass on notification
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47327 //
    CVE-2026-47328
    - SAUCE: apparmor: fix glob memory leak after kstrdup
  * AppArmor Vulnerabilities  (LP: #2151747) // CVE-2026-47326
    - SAUCE: apparmor: fix inverted NULL check after aa_get_buffer
  * CVE-2026-46300
    - net: skbuff: preserve shared-frag marker during coalescing
    - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  * net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
    - net/rds: reset op_nents when zerocopy page pin fails
  * CVE-2026-46333
    - ptrace: slightly saner 'get_dumpable()' logic
  * CVE-2026-43500
    - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
    - rxrpc: Parse received packets before dealing with timeouts
    - rxrpc: Fix potential UAF after skb_unshare() failure
    - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
    - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
  * CVE-2026-31676 // CVE-2026-43500
    - rxrpc: only handle RESPONSE during service challenge
  * CVE-2026-43284
    - xfrm: esp: avoid in-place decrypt on shared skb frags
  * CVE-2026-31419
    - net: bonding: fix use-after-free in bond_xmit_broadcast()
  * CVE-2026-31431
    - crypto: scatterwalk - Backport memcpy_sglist()
    - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
    - crypto: algif_aead - Revert to operating out-of-place
    - crypto: algif_aead - snapshot IV for async AEAD requests
    - crypto: authenc - use memcpy_sglist() instead of null skcipher
    - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
      decryption
    - crypto: authencesn - Fix src offset when decrypting in-place
    - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
    - crypto: algif_aead - Fix minimum RX size check for decryption
  * CVE-2026-31533
    - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  * CVE-2026-31504
    - net: fix fanout UAF in packet_release() via NETDEV_UP race

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 04 Jun 2026 10:45:59 -0500

linux-nvidia (6.8.0-1055.58) noble; urgency=medium

  [ Ubuntu: 6.8.0-124.124 ]

  * GRO managed-frag use-after-free leading to local privilege escalation
    (LP: #2154172)
    - net: gro: don't merge zcopy skbs

  [ Ubuntu: 6.8.0-121.121 ]

  * apparmor (LP: #2151747)
    - apparmor: Fix incorrect profile->signal range check
    - SAUCE: apparmor: pass big_resp to handler
    - SAUCE: apparmor: remove redundant kref_init for listener->count
    - SAUCE: apparmor: fix NULL pointer dereference in unpack_pdb
  * apparmor (LP: #2151747) // CVE-2026-47337
    - SAUCE: apparmor: fix NULL pointer dereference in bind_map_addr
  * apparmor (LP: #2151747) // CVE-2026-47336
    - SAUCE: apparmor: fix use of unintialized variable in net opt level
  * apparmor (LP: #2151747) // CVE-2026-47335
    - SAUCE: apparmor: fix possible NULL pointer dereference by adding a NULL
      check
  * apparmor (LP: #2151747) // CVE-2026-47334
    - SAUCE: apparmor: fix sleep prone memory allocation under a spin_lock
  * apparmor (LP: #2151747) // CVE-2026-47333
    - SAUCE: apparmor: fix dfa unpacking size of the notification filter
  * apparmor (LP: #2151747) // CVE-2026-47332
    - SAUCE: apparmor: fix size check against type instead of pointer
  * apparmor (LP: #2151747) // CVE-2026-47331
    - SAUCE: apparmor: fix changing rules list without a lock
  * apparmor: LLVM/clang build failure due to uninitialized variable in
    notify.c (LP: #2148809) // CVE-2026-47330
    - SAUCE: apparmor: initialize variable used in uninitialized context
  * apparmor (LP: #2151747) // CVE-2026-47329
    - SAUCE: apparmor: fix name validation bypass on notification
  * apparmor (LP: #2151747) // CVE-2026-47327 // CVE-2026-47328
    - SAUCE: apparmor: fix glob memory leak after kstrdup
  * apparmor (LP: #2151747) // CVE-2026-47326
    - SAUCE: apparmor: fix inverted NULL check after aa_get_buffer

  [ Ubuntu: 6.8.0-120.120 ]

  * noble/linux: 6.8.0-120.120 -proposed tracker (LP: #2153733)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
  * CVE-2026-46300
    - net: skbuff: preserve shared-frag marker during coalescing
    - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  * net/rds: reset op_nents when zerocopy page pin fails (LP: #2153962)
    - net/rds: reset op_nents when zerocopy page pin fails
  * CVE-2026-46333
    - ptrace: slightly saner 'get_dumpable()' logic
  * CVE-2026-43500
    - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
    - rxrpc: Parse received packets before dealing with timeouts
    - rxrpc: Fix potential UAF after skb_unshare() failure
    - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
    - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
  * CVE-2026-31676 // CVE-2026-43500
    - rxrpc: only handle RESPONSE during service challenge
  * CVE-2026-43284
    - xfrm: esp: avoid in-place decrypt on shared skb frags

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 26 May 2026 11:08:16 -0500

linux-nvidia (6.8.0-1054.57) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1054.57 -proposed tracker (LP: #2151050)

  [ Ubuntu: 6.8.0-117.117 ]

  * noble/linux: 6.8.0-117.117 -proposed tracker (LP: #2151070)
  * CVE-2026-31419
    - net: bonding: fix use-after-free in bond_xmit_broadcast()
  * CVE-2026-31431
    - crypto: scatterwalk - Backport memcpy_sglist()
    - crypto: algif_aead - use memcpy_sglist() instead of null skcipher
    - crypto: algif_aead - Revert to operating out-of-place
    - crypto: algif_aead - snapshot IV for async AEAD requests
    - crypto: authenc - use memcpy_sglist() instead of null skcipher
    - crypto: authencesn - Do not place hiseq at end of dst for out-of-place
      decryption
    - crypto: authencesn - Fix src offset when decrypting in-place
    - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
    - crypto: algif_aead - Fix minimum RX size check for decryption
  * CVE-2026-31533
    - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  * CVE-2026-31504
    - net: fix fanout UAF in packet_release() via NETDEV_UP race

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 06 May 2026 10:21:01 -0500

linux-nvidia (6.8.0-1053.56) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1053.56 -proposed tracker (LP: #2150029)

  [ Ubuntu: 6.8.0-116.116 ]

  * noble/linux: 6.8.0-116.116 -proposed tracker (LP: #2150048)
  * Linux kernel  6.17.0-22.22  breaks amdxdna (LP: #2149766)
    - Revert "iommu: disable SVA when CONFIG_X86 is set"
  * Revert "netfilter: conntrack: fix erronous removal of offload bit"
    (LP: #2149762)
    - Revert "netfilter: conntrack: fix erronous removal of offload bit"

  [ Ubuntu: 6.8.0-114.114 ]

  * noble/linux: 6.8.0-114.114 -proposed tracker (LP: #2148397)
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465)
    - SAUCE: Fix skb_vlan_inet_prepare() usage

  [ Ubuntu: 6.8.0-112.112 ]

  * noble/linux: 6.8.0-112.112 -proposed tracker (LP: #2147982)
  * Canonical Kmod 2025 key rotation (LP: #2147447)
    - [Packaging] ubuntu-compatible-signing -- make Ubuntu-Compatible-Signing
      extensible
    - [Packaging] ubuntu-compatible-signing -- allow consumption of positive
      certs
    - [Packaging] ubuntu-compatible-signing -- report the livepatch:2025 key
    - [Config] prepare for Canonical Kmod key rotation
    - [Packaging] ubuntu-compatible-signing -- report the kmod:2025 key
  * Remount ext4 to readonly with data=journal mode may dump call trace
    (LP: #2147400)
    - ext4: fix stale xarray tags after writeback
  * Compile error due to nonexistent struct member with CONFIG_PCI_EPF_TEST
    (LP: #2147065)
    - SAUCE: Revert "PCI: endpoint: pci-epf-test: Limit PCIe BAR size for
      fixed BARs"
  * BUG: kernel NULL pointer dereference in amdgpu (LP: #2144577)
    - drm/amdgpu: validate the flush_gpu_tlb_pasid()
    - drm/amdgpu: Fix validating flush_gpu_tlb_pasid()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841)
    - x86/kfence: fix booting on 32bit non-PAE systems
    - platform/x86: intel_telemetry: Fix swapped arrays in PSS output
    - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest
      state
    - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
    - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
    - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system
      wakeup
    - rbd: check for EOD after exclusive lock is ensured to be held
    - ARM: 9468/1: fix memset64() on big-endian
    - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    - binder: fix BR_FROZEN_REPLY error log
    - binderfs: fix ida_alloc_max() upper bound
    - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test
      failures
    - tracing: Fix ftrace event field alignments
    - net: usb: sr9700: support devices with virtual driver CD
    - block,bfq: fix aux stat accumulation destination
    - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
    - HID: intel-ish-hid: Update ishtp bus match to support device ID table
    - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
    - HID: intel-ish-hid: Reset enum_devices_done before enumeration
    - HID: playstation: Center initial joystick axes to prevent spurious
      events
    - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
    - netfilter: replace -EEXIST with -EBUSY
    - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
    - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
    - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
    - wifi: mac80211: collect station statistics earlier when disconnect
    - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
    - ASoC: amd: yc: Fix microphone on ASUS M6500RE
    - ASoC: tlv320adcx140: Propagate error codes during probe
    - spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs
      initialization
    - wifi: cfg80211: Fix bitrate calculation overflow for HE rates
    - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
    - wifi: mac80211: correctly check if CSA is active
    - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
    - platform/x86: intel_telemetry: Fix PSS event register mask
    - platform/x86: hp-bioscfg: Skip empty attribute names
    - net: add skb_header_pointer_careful() helper
    - net: don't touch dev->stats in BPF redirect paths
    - tipc: use kfree_sensitive() for session key material
    - net: ethernet: adi: adin1110: Check return value of
      devm_gpiod_get_optional() in adin1110_check_spi()
    - drm/mgag200: fix mgag200_bmc_stop_scanout()
    - hwmon: (occ) Mark occ_init_attribute() as __printf
    - ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
    - gve: Correct ethtool rx_dropped calculation
    - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed
      transfer
    - spi: tegra210-quad: Move curr_xfer read inside spinlock
    - spi: tegra210-quad: Protect curr_xfer assignment in
      tegra_qspi_setup_transfer_one
    - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
    - spi: tegra210-quad: Protect curr_xfer clearing in
      tegra_qspi_non_combined_seq_xfer
    - spi: tegra114: Preserve SPI mode bits in def_command1_reg
    - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
    - PCI/ERR: Ensure error recoverability at all times
    - ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55
    - PCI: qcom: Remove ASPM L0s support for MSM8996 SoC
    - HID: logitech: add HID++ support for Logitech MX Anywhere 3S
    - ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio
    - net: phy: add phy_interface_weight()
    - net: phy: add phy_interface_copy()
    - net: sfp: pre-parse the module support
    - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module
    - net: sfp: convert sfp quirks to modify struct sfp_module_support
    - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
    - drm/amd/display: fix wrong color value mapping on MCM shaper LUT
    - drm/xe/query: Fix topology query pointer advance
    - ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update()
    - gpiolib-acpi: Update file references in the Documentation and
      MAINTAINERS
    - Upstream stable to v6.6.124, v6.12.70
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23214
    - btrfs: reject new transactions if the fs is fully read-only
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23213
    - drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-71225
    - md: suspend array while updating raid_disks via sysfs
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-68823
    - ublk: fix deadlock when reading partition table
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23191
    - ALSA: aloop: Fix racy access at PCM trigger
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23215
    - x86/vmware: Fix hypercall clobbers
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23182
    - spi: tegra: Fix a memory leak in tegra_slink_probe()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23190
    - ASoC: amd: fix memory leak in acp3x pdm dma ops
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23254
    - net: gro: fix outer network offset
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23180
    - dpaa2-switch: add bounds check for if_id in IRQ handler
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23256
    - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23257
    - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23258
    - net: liquidio: Initialize netdev pointer before queue setup
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23206
    - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23204
    - net/sched: cls_u32: use skb_header_pointer_careful()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23205
    - smb/client: fix memory leak in smb2_open_file()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23176
    - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23216
    - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23193
    - scsi: target: iscsi: Fix use-after-free in
      iscsit_dec_session_usage_count()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23260
    - regmap: maple: free entry on mas_store_gfp() failure
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23179
    - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23261
    - nvme-fc: release admin tagset if init fails
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23178
    - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-71268
    - btrfs: fix reservation leak in some error paths when inserting inline
      extent
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-71270
    - LoongArch: Enable exception fixup for specific ADE subcode
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-71220
    - smb/server: call ksmbd_session_rpc_close() on error path in
      create_smb2_pipe()
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-71222
    - wifi: wlcore: ensure skb headroom before skb_push
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-71224
    - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23262
    - gve: Fix stats report corruption on queue count change
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2025-38201
    - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23198
    - KVM: Don't clobber irqfd routing type when deassigning irqfd
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23264
    - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
  * Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
    CVE-2026-23187
    - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543)
    - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
    - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
    - net: bcmasp: fix early exit leak with fixed phy
    - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
    - ipv6: use the right ifindex when replying to icmpv6 from localhost
    - ice: stop counting UDP csum mismatch as rx_errors
    - net/mlx5e: Report rx_discards_phy via rx_dropped
    - net/mlx5e: Account for netdev stats in ndo_get_stats64
    - net: bridge: fix static key check
    - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
    - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
    - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
    - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
    - dma/pool: distinguish between missing and exhausted atomic pools
    - pinctrl: meson: mark the GPIO controller as sleeping
    - riscv: compat: fix COMPAT_UTS_MACHINE definition
    - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
    - ASoC: fsl: imx-card: Do not force slot width to sample width
    - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
    - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
    - gpio: pca953x: mask interrupts in irq shutdown
    - scsi: qla2xxx: edif: Fix dma_free_coherent() size
    - mptcp: only reset subflow errors when propagated
    - selftests: mptcp: check no dup close events after error
    - selftests: mptcp: check subflow errors in close events
    - selftests: mptcp: join: fix local endp not being tracked
    - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
    - drm/amdgpu/soc21: fix xclk for APUs
    - drm/amdgpu/gfx10: fix wptr reset in KGQ init
    - drm/amdgpu/gfx11: fix wptr reset in KGQ init
    - mm/kfence: randomize the freelist on initialization
    - arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state
    - arm64/fpsimd: signal: Consistently read FPSIMD context
    - btrfs: prevent use-after-free on page private data in
      btrfs_subpage_clear_uptodate()
    - net/sched: act_ife: convert comma to semicolon
    - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
    - drm/msm/a6xx: fix bogus hwcg register updates
    - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
    - mptcp: avoid dup SUB_CLOSED events after disconnect
    - ksmbd: fix recursive locking in RPC handle list access
    - bpf/selftests: test_select_reuseport_kern: Remove unused header
    - can: at91_can: Fix memory leak in at91_can_probe()
    - net: phy: micrel: fix clk warning when removing the driver
    - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect
    - net/mlx5: Initialize events outside devlink lock
    - net/mlx5: Fix vhca_id access call trace use before alloc
    - bcache: fix improper use of bi_end_io
    - bcache: use bio cloning for detached device requests
    - bcache: fix I/O accounting leak in detached_dev_do_request
    - gpio: rockchip: Stop calling pinctrl for set_direction
    - mm/memory-failure: improve memory failure action_result messages
    - mm/memory-failure: fix redundant updates for already poisoned pages
    - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison
    - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail
      page pfn
    - gpiolib: acpi: Fix potential out-of-boundary left shift
    - rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0
    - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR
      TX pins
    - [Config] remove PINCTRL_SM8350_LPASS_LPI
    - Upstream stable to v6.6.123, v6.12.69
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23148
    - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23166
    - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23151
    - Bluetooth: MGMT: Fix memory leak in set_ssp_complete
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23163
    - drm/amdgpu: fix NULL pointer dereference in
      amdgpu_gmc_filter_faults_remove
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23159
    - perf: sched: Fix perf crash with new is_user_task() helper
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2024-58096
    - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2025-40039
    - ksmbd: Fix race condition in RPC handle list access
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23093
    - ksmbd: smbd: fix dma_unmap_sg() nents
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23102
    - arm64/fpsimd: signal: Fix restoration of SVE context
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23170
    - drm/imx/tve: fix probe device leak
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23168
    - flex_proportions: make fprop_new_period() hardirq safe
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23156
    - efivarfs: fix error propagation in efivar_entry_get()
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23167
    - nfc: nci: Fix race between rfkill and nci_unregister_device().
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23173
    - net/mlx5e: TC, delete flows only for existing peers
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23150
    - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23164
    - rocker: fix memory leak in rocker_world_port_post_fini()
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23172
    - net: wwan: t7xx: fix potential skb->frags overflow in RX path
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23212
    - bonding: annotate data-races around slave->last_rx
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23160
    - octeon_ep: Fix memory leak in octep_device_setup()
  * Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
    CVE-2026-23146
    - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  * CVE-2026-23394
    - af_unix: Give up GC if MSG_PEEK intervened.
  * [SRU] MIPI camera is not working after upgrading to 6.17-oem
    (LP: #2145171)
    - SAUCE: ACPI: respect items already in honor_dep before skipping
  * ADATA SU680 causes repeated SATA resets and I/O errors on Ubuntu unless
    link power management is forced to max_performance (LP: #2144060)
    - ata: libata-core: disable LPM on ADATA SU680 SSD
  *  intel_idle: add Clearwater Forest SoC support (LP: #2144006)
    - intel_idle: add Clearwater Forest SoC support
  * Noble kernel 6.8.0-108 does not compile when KASAN enabled (LP: #2144914)
    - mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
  * Generic noble linux throws warning from file tegra-i2c.c (LP: #2143152)
    - i2c: tegra: Use internal reset when reset property is not available
  * [SRU] Duplicated entries in /proc/<pid>/mountinfo (LP: #2143083)
    - namespace: fix proc mount iteration
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465)
    - firmware: imx: scu-irq: Set mu_resource_id before get handle
    - efi/cper: Fix cper_bits_to_str buffer handling and return value
    - ASoC: codecs: wsa884x: fix codec initialisation
    - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
    - net: bridge: annotate data-races around fdb->{updated,used}
    - net: update netdev_lock_{type,name}
    - vsock/test: add a final full barrier after run all tests
    - net/mlx5e: Restore destroying state bit after profile cleanup
    - btrfs: store fs_info in space_info
    - btrfs: factor out init_space_info() from create_space_info()
    - btrfs: factor out check_removing_space_info() from
      btrfs_free_block_groups()
    - btrfs: introduce btrfs_space_info sub-group
    - btrfs: fix memory leaks in create_space_info() error paths
    - selftests: drv-net: fix RPS mask handling for high CPU numbers
    - ASoC: tlv320adcx140: fix word length
    - textsearch: describe @list member in ts_ops search
    - mm, kfence: describe @slab parameter in __kfence_obj_info()
    - dmaengine: xilinx_dma: Fix uninitialized addr_width when
      "xlnx,addrwidth" property is missing
    - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
    - phy: phy-snps-eusb2: refactor constructs names
    - phy: drop probe registration printks
    - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
    - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
    - HID: usbhid: paper over wrong bNumDescriptor field
    - scsi: core: Fix error handler encryption support
    - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
    - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
    - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
    - phy: rockchip: inno-usb2: fix communication disruption in gadget mode
    - phy: freescale: imx8m-pcie: assert phy reset during power on
    - phy: rockchip: inno-usb2: fix disconnection in gadget mode
    - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
    - usb: dwc3: Check for USB4 IP_NAME
    - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
    - USB: OHCI/UHCI: Add soft dependencies on ehci_platform
    - USB: serial: option: add Telit LE910 MBIM composition
    - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
    - nvme-pci: disable secondary temp for Wodposit WPBSNM8
    - hrtimer: Fix softirq base check in update_needs_ipi()
    - EDAC/x38: Fix a resource leak in x38_probe1()
    - EDAC/i3200: Fix a resource leak in i3200_probe1()
    - tcpm: allow looking for role_sw device in the main node
    - x86/resctrl: Add missing resctrl initialization for Hygon
    - x86/resctrl: Fix memory bandwidth counter width for Hygon
    - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
    - LoongArch: Fix PMU counter allocation for mixed-type event groups
    - drm/amd/display: Bump the HDMI clock to 340MHz
    - drm/amd: Clean up kfd node on surprise disconnect
    - drm/amdkfd: fix a memory leak in device_queue_manager_init()
    - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
    - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
    - dmaengine: apple-admac: Add "apple,t8103-admac" compatible
    - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
    - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
    - dmaengine: ti: k3-udma: fix device leak on udma lookup
    - io_uring: move local task_work in exit cancel loop
    - posix-clock: Store file pointer in struct posix_clock_context
    - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.
    - selftest/ptp: update ptp selftest to exercise the gettimex options
    - testptp: Add option to open PHC in readonly mode
    - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
    - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
    - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
    - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
    - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
    - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
    - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
    - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
    - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
    - ata: libata: Add cpr_log to ata_dev_print_features() early return
    - ata: libata-core: Introduce ata_dev_config_lpm()
    - ata: libata: Call ata_dev_config_lpm() for ATAPI devices
    - ata: libata: Print features also for ATAPI devices
    - ice: initialize ring_stats->syncp
    - ice: Avoid detrimental cleanup for bond during interface stop
    - igc: fix race condition in TX timestamp read for register 0
    - net: usb: dm9601: remove broken SR9700 support
    - selftests: net: fib-onlink-tests: Convert to use namespaces by default
    - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on
      usb_submit_urb() error
    - amd-xgbe: avoid misleading per-packet error log
    - tools: ynl: Specify --no-line-number in ynl-regen.sh.
    - veth: fix data race in veth_get_ethtool_stats
    - octeontx2: cn10k: fix RX flowid TCAM mask handling
    - serial: 8250_pci: Fix broken RS485 for F81504/508/512
    - comedi: dmm32at: serialize use of paged registers
    - w1: fix redundant counter decrement in w1_attach_slave_device()
    - Revert "nfc/nci: Add the inconsistency check between the input data
      length and count"
    - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
    - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
    - scsi: storvsc: Process unsupported MODE_SENSE_10
    - arm64: dts: rockchip: remove dangerous max-link-speed from helios64
    - arm64: dts: rockchip: Fix voltage threshold for volume keys for
      Pinephone Pro
    - x86/kfence: avoid writing L1TF-vulnerable PTEs
    - comedi: Fix getting range information for subdevices 16 to 255
    - iio: adc: ad7280a: handle spi_setup() errors in probe()
    - kconfig: fix static linking of nconf
    - riscv: clocksource: Fix stimecmp update hazard on RV32
    - ALSA: usb: Increase volume range that triggers a warning
    - net: hns3: fix data race in hns3_fetch_stats
    - be2net: fix data race in be_get_new_eqd
    - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
    - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
    - usbnet: limit max_mtu based on device's hard_mtu
    - drm/amd/pm: Don't clear SI SMC table when setting power limit
    - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
    - selftests: net: amt: wait longer for connection before sending packets
    - net: dsa: fix off-by-one in maximum bridge ID determination
    - octeontx2-af: Fix error handling
    - net: openvswitch: fix data race in ovs_vport_get_upcall_stats
    - vsock/test: fix seqpacket message bounds test
    - x86: make page fault handling disable interrupts properly
    - of: fix reference count leak in of_alias_scan()
    - of: platform: Use default match table for /firmware
    - iio: accel: iis328dq: fix gain values
    - iio: adc: ad9467: fix ad9434 vref mask
    - iio: chemical: scd4x: fix reported channel endianness
    - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
    - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
    - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
    - octeontx2: Fix otx2_dma_map_page() error return code
    - slimbus: core: fix runtime PM imbalance on report present
    - platform/x86: hp-bioscfg: Fix automatic module loading
    - perf/x86/intel: Do not enable BTS for guests
    - selftests/bpf: Check for timeout in perf_link test
    - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup
      failure
    - iio: core: add missing mutex_destroy in iio_dev_release()
    - iio: core: add separate lockdep class for info_exist_lock
    - mm/rmap: fix two comments related to huge_pmd_unshare()
    - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
    - iio: adc: exynos_adc: fix OF populate on driver rebind
    - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
    - mm: kmsan: fix poisoning of high-order non-compound pages
    - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
    - ASoC: codecs: wsa881x: Drop unused version readout
    - ASoC: codecs: wsa881x: fix unnecessary initialisation
    - ASoC: codecs: wsa883x: fix unnecessary initialisation
    - nvme-fc: rename free_ctrl callback to match name pattern
    - nvme-pci: do not directly handle subsys reset fallout
    - nvme: fix PCIe subsystem reset controller state transition
    - net: phy: fix phy_uses_state_machine()
    - pnfs/blocklayout: Fix memory leak in bl_parse_scsi()
    - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions
    - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip
    - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type
    - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
    - xfs: Fix the return value of xfs_rtcopy_summary()
    - phy: ti: gmii-sel: fix regmap leak on probe failure
    - LoongArch: dts: loongson-2k0500: Add default interrupt controller
      address cells
    - LoongArch: dts: loongson-2k1000: Add default interrupt controller
      address cells
    - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names
    - LoongArch: dts: loongson-2k2000: Add default interrupt controller
      address cells
    - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume
      blocking
    - HID: intel-ish-hid: Fix -Wcast-function-type-strict in
      devm_ishtp_alloc_workqueue()
    - xfs: set max_agbno to allow sparse alloc of last full inode chunk
    - selftests/bpf: Test invalid narrower ctx load
    - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection
    - mm/page_alloc: batch page freeing in decay_pcp_high
    - ata: libata-sata: Improve link_power_management_supported sysfs
      attribute
    - igc: Restore default Qbv schedule when changing channels
    - vsock/virtio: Coalesce only linear skb
    - platform/x86/amd: Fix memory leak in wbrf_record()
    - drm/imagination: Wait for FW trace update command completion
    - ice: Fix persistent failure in ice_get_rxfh
    - sched/fair: Fix pelt clock sync when entering idle
    - drm/nouveau: add missing DCB connector types
    - drm/nouveau: implement missing DCB connector types; gracefully handle
      unknown connectors
    - dpll: Prevent duplicate registrations
    - mei: trace: treat reg parameter as string
    - s390/ap: Fix wrong APQN fill calculation
    - net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick
    - gpio: cdev: Correct return code on memory allocation failure
    - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and
      PKTDMA
    - exfat: fix refcount leak in exfat_find
    - accel/ivpu: Fix race condition when unbinding BOs
    - btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
    - vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put()
    - vsock/virtio: Rename virtio_vsock_alloc_skb()
    - vsock/virtio: Move SKB allocation lower-bound check to callers
    - vsock/virtio: Rename virtio_vsock_skb_rx_put()
    - vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers
    - vsock/virtio: Allocate nonlinear SKBs for handling large transmit
      buffers
    - net: Introduce skb_copy_datagram_from_iter_full()
    - vsock/virtio: Fix message iterator handling on transmit path
    - Upstream stable to v6.6.122, v6.12.67, v6.12.68
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-38591
    - bpf: Reject narrower access to pointer ctx fields
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23035
    - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-22996
    - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23000
    - net/mlx5e: Fix crash on profile change rollback failure
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23053
    - NFS: Fix a deadlock involving nfs_release_folio()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23050
    - pNFS: Fix a deadlock when returning a delegation during open()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23005
    - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2024-58097
    - wifi: ath11k: fix RCU stall while reaping monitor destination ring
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-68365
    - fs/ntfs3: Initialize allocated memory before use
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-37926
    - ksmbd: fix use-after-free in ksmbd_session_rpc_open
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23030
    - phy: rockchip: inno-usb2: Fix a double free bug in
      rockchip_usb2phy_probe()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23025
    - mm/page_alloc: prevent pcp corruption with SMP=n
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71186
    - dmaengine: stm32: dmamux: fix device leak on route allocation
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23078
    - ALSA: scarlett2: Fix buffer overflow in config retrieval
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23142
    - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir
      setup failure
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23075
    - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-68725
    - bpf: Do not let BPF test infra emit invalid GSO types to stack
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23097
    - migrate: correct lock ordering for hugetlb file folios
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23108
    - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23080
    - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23061
    - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23058
    - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23085
    - irqchip/gic-v3-its: Avoid truncating memory addresses
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23116
    - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23098
    - netrom: fix double-free in nr_route_frame()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23063
    - uacce: ensure safe queue release with state management
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23056
    - uacce: implement mremap in uacce_vm_ops to return -EPERM
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23094
    - uacce: fix isolate sysfs check condition
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23096
    - uacce: fix cdev handling in the cleanup path
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23091
    - intel_th: fix device leak on output open()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23088
    - tracing: Fix crash on synthetic stacktrace field usage
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23090
    - slimbus: core: fix device reference leak on report present
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23128
    - arm64: Set __nocfi on swsusp_arch_resume()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23107
    - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23073
    - wifi: rsi: Fix memory corruption due to not set vif driver data size
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23135
    - wifi: ath12k: fix dma_free_coherent() pointer
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23133
    - wifi: ath10k: fix dma_free_coherent() pointer
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71200
    - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400
      mode
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23089
    - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23076
    - ALSA: ctxfi: Fix potential OOB access in audio mixer handling
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71199
    - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc
      driver
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23101
    - leds: led-class: Only Add LED to leds_list when it is fully ready
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23064
    - net/sched: act_ife: avoid possible NULL deref
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23086
    - vsock/virtio: cap TX credit to local buffer size
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23069
    - vsock/virtio: fix potential underflow in virtio_transport_get_credit()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23119
    - bonding: provide a net pointer to __skb_flow_dissect()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23084
    - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23124
    - ipv6: annotate data-race in ndisc_router_discovery()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23121
    - mISDN: annotate data-race around dev->work
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23126
    - netdevsim: fix a race issue related to the operation on bpf_bound_progs
      list
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23059
    - scsi: qla2xxx: Sanitize payload size to prevent member overflow
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23110
    - scsi: core: Wake up the error handler when final completions race
      against each other
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23071
    - regmap: Fix race condition in hwspinlock irqsave routine
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23068
    - spi: spi-sprd-adi: Fix double free in probe error path
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23123
    - interconnect: debugfs: initialize src_node and dst_node to empty strings
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71198
    - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event
      detection
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23113
    - io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23062
    - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23131
    - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23087
    - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71197
    - w1: therm: Fix off-by-one buffer overflow in alarms_store
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23105
    - net/sched: qfq: Use cl_is_active to determine whether class is active in
      qfq_rm_from_ag
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23103
    - ipvlan: Make the addrs_lock be per port
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23120
    - l2tp: avoid one data-race in l2tp_tunnel_del_work()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23083
    - fou: Don't allow 0 for FOU_ATTR_IPPROTO.
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23095
    - gue: Fix skb memleak with inner IP protocol 0.
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23125
    - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23099
    - bonding: limit BOND_MODE_8023AD to Ethernet devices
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71194
    - btrfs: fix deadlock in wait_current_trans() due to ignored transaction
      type
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71185
    - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23026
    - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71188
    - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71163
    - dmaengine: idxd: fix device leaks on compat bind and unbind
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71189
    - dmaengine: dw: dmamux: fix OF node leak on route allocation failure
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71190
    - dmaengine: bcm-sba-raid: fix device leak on probe
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71191
    - dmaengine: at_hdmac: fix device leak on of_dma_xlate()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23049
    - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23144
    - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23145
    - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-22997
    - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session
      upon receiving the second rts
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23031
    - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23032
    - null_blk: fix kmemleak by releasing references to fault configfs items
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23033
    - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71196
    - phy: stm32-usphyc: Fix off by one in probe()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71193
    - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71162
    - dmaengine: tegra-adma: Fix use-after-free
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2025-71195
    - dmaengine: xilinx: xdma: Fix regmap max_register
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23006
    - ASoC: tlv320adcx140: fix null pointer
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-22999
    - net/sched: sch_qfq: do not free existing class in qfq_change_class()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23010
    - ipv6: Fix use-after-free in inet6_addr_del().
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23054
    - net: hv_netvsc: reject RSS hash key programming without RX indirection
      table
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23011
    - ipv4: ip_gre: make ipgre_header() robust
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23001
    - macvlan: fix possible UAF in macvlan_forward_source()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23003
    - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23141
    - btrfs: send: check for inline extents in range_is_hole_in_parent()
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-22998
    - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23037
    - can: etas_es58x: allow partial RX URB allocation to succeed
  * Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
    CVE-2026-23038
    - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058)
    - NFSD: Fix permission check for read access to executable-only files
    - atm: Fix dma_free_coherent() size
    - mei: me: add nova lake point S DID
    - lib/crypto: aes: Fix missing MMU protection for AES S-box
    - counter: 104-quad-8: Fix incorrect return value in IRQ handler
    - drm/pl111: Fix error handling in pl111_amba_probe
    - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
    - gpio: rockchip: mark the GPIO controller as sleeping
    - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
    - net: Add locking to protect skb->dev access in ip_output
    - nfsd: Fix a regression in nfsd_setattr()
    - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr()
    - nfsd: set security label during create operations
    - csky: fix csky_cmpxchg_fixup not working
    - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
    - alpha: don't reference obsolete termio struct for TC* constants
    - dm-snapshot: fix 'scheduling while atomic' on real-time kernels
    - NFSv4: ensure the open stateid seqid doesn't go backwards
    - NFS: Fix up the automount fs_context to use the correct cred
    - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
    - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
    - smb/client: fix NT_STATUS_NO_DATA_DETECTED value
    - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
    - scsi: ufs: core: Fix EH failure after W-LUN resume error
    - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe
      failure scanned in again after probe failed"
    - arm64: dts: add off-on-delay-us for usdhc2 regulator
    - ARM: dts: imx6q-ba16: fix RTC interrupt level
    - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics
      i.MX8M Plus DHCOM
    - netfilter: nft_synproxy: avoid possible data-race on update operation
    - gpio: pca953x: Add support for level-triggered interrupts
    - gpio: pca953x: handle short interrupt pulses on PCAL devices
    - netfilter: nf_tables: fix memory leak in nf_tables_newrule()
    - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
    - inet: ping: Fix icmp out counting
    - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
    - net/mlx5e: Don't print error message due to invalid module
    - net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
    - bnxt_en: Fix potential data corruption with HW GRO/LRO
    - net: enetc: fix build warning when PAGE_SIZE is greater than 128K
    - arp: do not assume dev_hard_header() does not change skb->head
    - ALSA: ac97bus: Use guard() for mutex locks
    - NFS: trace: show TIMEDOUT instead of 0x6e
    - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
    - NFSD: Remove NFSERR_EAGAIN
    - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than
      4K
    - bpf: Make variables in bpf_prog_test_run_xdp less confusing
    - bpf: Support specifying linear xdp packet data size for
      BPF_PROG_TEST_RUN
    - powercap: fix race condition in register_control_type()
    - powercap: fix sscanf() error return value handling
    - ALSA: usb-audio: Update for native DSD support quirks
    - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
    - ASoC: fsl_sai: Add missing registers to cache default
    - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
    - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
    - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
    - btrfs: tracepoints: use btrfs_root_id() to get the id of a root
    - crypto: qat - fix duplicate restarting msg during AER error
    - netfilter: nft_set_pipapo: fix range overlap detection
    - vsock: Make accept()ed sockets use custom setsockopt()
    - btrfs: only enforce free space tree if v1 cache is required for bs < ps
      cases
    - riscv: pgtable: Cleanup useless VA_USER_XXX definitions
    - idpf: keep the netdev when a reset fails
    - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
    - ata: libata-core: Disable LPM on ST2000DM008-2FR102
    - drm/amd/display: Fix DP no audio issue
    - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
    - spi: cadence-quadspi: Prevent lost complete() call during indirect read
    - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
    - Upstream stable to v6.6.121, v6.12.66
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-71184
    - btrfs: fix NULL dereference on root when tracing inode eviction
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-71182
    - can: j1939: make j1939_session_activate() fail if device is no longer
      registered
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-71160
    - netfilter: nf_tables: avoid chain re-validation if possible
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22994
    - bpf: Fix reference count leak in bpf_prog_test_run_xdp()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23140
    - bpf, test_run: Subtract size of xdp_frame from allowed metadata size
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-71192
    - ALSA: ac97: fix a double free in snd_ac97_controller_register()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23021
    - net: usb: pegasus: fix memory leak in update_eth_regs_async()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22976
    - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate
      in qfq_reset
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22979
    - net: fix memory leak in skb_segment_list for GRO packets
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22977
    - net: sock: fix hardened usercopy panic in sock_recv_errqueue
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22982
    - net: mscc: ocelot: Fix crash when adding interface under a lag
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23019
    - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23139
    - netfilter: nf_conncount: update last_gc only when GC has been performed
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-40149
    - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-68803
    - NFSD: NFSv4 file creation neglects setting ACL
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23047
    - libceph: make calc_target() set t->paused, not just clear it
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23136
    - libceph: reset sparse-read state in osd_fault()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22992
    - libceph: return the handler error from mon_handle_auth_done()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22991
    - libceph: make free_choose_arg_map() resilient to partial allocation
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22990
    - libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22984
    - libceph: prevent potential out-of-bounds reads in handle_auth_done()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22978
    - wifi: avoid kernel-infoleak from struct iw_point
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-71180
    - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2025-71183
    - btrfs: always detect conflicting inodes when logging inode refs
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-23020
    - net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
  * Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
    CVE-2026-22980
    - nfsd: provide locking for v4_end_grace
  * CVE-2024-50004
    - drm/amd/display: update DML2 policy
      EnhancedPrefetchScheduleAccelerationFinal DCN35
  * CVE-2026-23274
    - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
  * CVE-2026-23351
    - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
  * CVE-2026-23231
    - netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  * macvlan: observe an RCU grace period in macvlan_common_newlink() error
    path (LP: #2144380) // CVE-2026-23209
    - macvlan: observe an RCU grace period in macvlan_common_newlink() error
      path
  * CVE-2026-23112
    - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 29 Apr 2026 16:54:52 -0500

linux-nvidia (6.8.0-1052.55) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1052.55 -proposed tracker (LP: #2147872)

  [ Ubuntu: 6.8.0-111.111 ]

  * noble/linux: 6.8.0-111.111 -proposed tracker (LP: #2147890)
  * CVE-2026-23231
    - netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
  * macvlan: observe an RCU grace period in macvlan_common_newlink() error
    path (LP: #2144380) // CVE-2026-23209
    - macvlan: observe an RCU grace period in macvlan_common_newlink() error
      path
  * CVE-2026-23112
    - nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 16 Apr 2026 14:15:19 -0500

linux-nvidia (6.8.0-1051.54) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1051.54 -proposed tracker (LP: #2143460)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2026.03.09)

  * linux-nvidia-6.8: Avoid arm_smmu_update_ctx_desc_devices() WARNINGs in
    IOMMU groups with mixed PASID Support (LP: #2144814)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Skip non-PASID devices in SVA context
      descriptor updates

  * Backport arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS
    faults (LP: #2143602)
    - arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults

  [ Ubuntu: 6.8.0-110.110 ]

  * noble/linux: 6.8.0-110.110 -proposed tracker (LP: #2144887)
  * ITS mitigation is not enabled on affected CPUs (LP: #2144730)
    - x86/bugs: Rename CONFIG_RETPOLINE => CONFIG_MITIGATION_RETPOLINE
    - x86/bugs: Rename CONFIG_RETHUNK => CONFIG_MITIGATION_RETHUNK
    - [Config] rename config options RETHUNK and RETPOLINE

  [ Ubuntu: 6.8.0-108.108 ]

  * noble/linux: 6.8.0-108.108 -proposed tracker (LP: #2143478)
  * linux-riscv-6.8 is FTBFS because of missing patches (LP: #2142235)
    - riscv, bpf: Unify 32-bit sign-extension to emit_sextw
    - riscv, bpf: Unify 32-bit zero-extension to emit_zextw
    - riscv, bpf: Simplify sext and zext logics in branch instructions
    - riscv, bpf: Add necessary Zbb instructions
    - riscv, bpf: Optimize sign-extention mov insns with Zbb support
    - riscv, bpf: Optimize bswap insns with Zbb support
  * ADT test for linux package failed with "fatal: unable to connect to
    git.launchpad.net" (LP: #2143033)
    - [Packaging] d/t/ubuntu-regression-suite: use https to clone
  * Coresight fails to build on 6.8.0-102 due to missing function and arg
    definitions (LP: #2142337)
    - SAUCE: Revert "coresight: catu: Support atclk"
    - SAUCE: Revert "coresight: catu: Move ACPI support from AMBA driver to
      platform driver"
    - SAUCE: Revert "coresight: tmc: Support atclk"
    - SAUCE: Revert "coresight: tmc: Move ACPI support from AMBA driver to
      platform driver"
    - SAUCE: Revert "Coresight: Set correct cs_mode for TPDM to fix disable
      issue"
    - SAUCE: Revert "Coresight: Set correct cs_mode for dummy source to fix
      disable issue"
  * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
    (LP: #2141276)
    - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()
  * Fix conntrack use after free when ovs hardware offload is enabled
    (LP: #2139322)
    - netfilter: conntrack: remove skb argument from nf_ct_refresh
    - netfilter: conntrack: rework offload nf_conn timeout extension logic
    - netfilter: conntrack: fix erronous removal of offload bit
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789)
    - xhci: fix stale flag preventig URBs after link state error is cleared
    - Revert "xfrm: destroy xfrm_state synchronously on net exit path"
    - xfrm: flush all states in xfrm_state_fini
    - leds: spi-byte: Use devm_led_classdev_register_ext()
    - Documentation: process: Also mention Sasha Levin as stable tree
      maintainer
    - USB: serial: option: add Foxconn T99W760
    - USB: serial: option: add Telit Cinterion FE910C04 new compositions
    - USB: serial: option: move Telit 0x10c7 composition in the right place
    - USB: serial: ftdi_sio: match on interface number for jtag
    - serial: add support of CPCI cards
    - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
    - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
    - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
    - spi: xilinx: increase number of retries before declaring stall
    - spi: imx: keep dma request disabled before dma transfer setup
    - drm/vmwgfx: Use kref in vmw_bo_dirty
    - Bluetooth: btrtl: Avoid loading the config file on security chips
    - smb: fix invalid username check in smb3_fs_context_parse_param()
    - ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
    - HID: hid-input: Extend Elan ignore battery quirk to USB
    - pinctrl: qcom: msm: Fix deadlock in pinmux configuration
    - platform/x86: acer-wmi: Ignore backlight event
    - HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
    - platform/x86: huawei-wmi: add keys for HONOR models
    - platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
    - platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
    - HID: elecom: Add support for ELECOM M-XT3URBK (018F)
    - LoongArch: Mask all interrupts during kexec/kdump
    - samples: work around glibc redefining some of our defines wrong
    - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
    - drm/panel: visionox-rm69299: Don't clear all mode flags
    - USB: Fix descriptor count when handling invalid MBIM extended descriptor
    - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
    - clk: renesas: Use str_on_off() helper
    - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
    - clk: renesas: cpg-mssr: Read back reset registers to assure values
      latched
    - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
    - objtool: Fix standalone --hacks=jump_label
    - objtool: Fix weak symbol detection
    - sched/fair: Forfeit vruntime on yield
    - irqchip/irq-bcm7038-l1: Fix section mismatch
    - irqchip/irq-bcm7120-l2: Fix section mismatch
    - irqchip/irq-brcmstb-l2: Fix section mismatch
    - irqchip/imx-mu-msi: Fix section mismatch
    - irqchip/qcom-irq-combiner: Fix section mismatch
    - crypto: authenc - Correctly pass EINPROGRESS back up to the caller
    - rculist: Add hlist_nulls_replace_rcu() and
      hlist_nulls_replace_init_rcu()
    - inet: Avoid ehash lookup race in inet_ehash_insert()
    - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
    - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1
      props
    - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
    - arm64: dts: imx8mp-venice-gw702x: remove off-board uart
    - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
    - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
    - uio: uio_fsl_elbc_gpcm:: Add null pointer check to
      uio_fsl_elbc_gpcm_probe
    - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to
      other
    - clk: qcom: camcc-sm6350: Fix PLL config of PLL2
    - crypto: hisilicon/qm - restore original qos values
    - s390/smp: Fix fallback CPU detection
    - s390/ap: Don't leak debug feature files if AP instructions are not
      available
    - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
    - firmware: imx: scu-irq: fix OF node leak in
    - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
    - phy: mscc: Fix PTP for VSC8574 and VSC8572
    - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
    - ARM: dts: renesas: gose: Remove superfluous port property
    - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
    - Revert "mtd: rawnand: marvell: fix layouts"
    - mtd: nand: relax ECC parameter validation check
    - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and
      remove
    - task_work: Fix NMI race condition
    - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
    - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
    - soc: qcom: smem: fix hwspinlock resource leak in probe error paths
    - pinctrl: stm32: fix hwspinlock resource leak in probe function
    - i3c: fix refcount inconsistency in i3c_master_register
    - i3c: master: svc: Prevent incomplete IBI transaction
    - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
    - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
    - interconnect: debugfs: Fix incorrect error handling for NULL path
    - perf lock contention: Load kernel map before lookup
    - perf record: skip synthesize event when open evsel failed
    - power: supply: cw2015: Check devm_delayed_work_autocancel() return code
    - power: supply: rt9467: Return error on failure in
      rt9467_set_value_from_ranges()
    - power: supply: rt9467: Prevent using uninitialized local variable in
      rt9467_set_value_from_ranges()
    - power: supply: wm831x: Check wm831x_set_bits() return value
    - power: supply: apm_power: only unset own apm_get_power_status
    - scsi: target: Do not write NUL characters into ASCII configfs output
    - fs/9p: Don't open remote file with APPEND mode when writeback cache is
      used
    - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
    - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
    - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
    - x86/boot: Fix page table access in 5-level to 4-level paging transition
    - efi/libstub: Fix page table access in 5-level to 4-level paging
      transition
    - mfd: da9055: Fix missing regmap_del_irq_chip() in error path
    - ext4: correct the checking of quota files before moving extents
    - perf/x86/intel: Correct large PEBS flag check
    - regulator: core: disable supply if enabling main regulator fails
    - scsi: stex: Fix reboot_notifier leak in probe error path
    - staging: most: i2c: Drop explicit initialization of struct
      i2c_device_id::driver_data to 0
    - [Config] remove MOST_I2C driver
    - dt-bindings: PCI: amlogic: Fix the register name of the DBI region
    - RDMA/rtrs: server: Fix error handling in get_or_create_srv
    - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node
      properties
    - ntfs3: init run lock for extend inode
    - scsi: ufs: core: fix incorrect buffer duplication in
      ufshcd_read_string_desc()
    - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
    - powerpc/32: Fix unpaired stwcx. on interrupt exit
    - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
    - coresight: etm4x: Correct polling IDLE bit
    - coresight: etm4x: Extract the trace unit controlling
    - coresight: etm4x: Add context synchronization before enabling trace
    - clk: renesas: r9a06g032: Fix memory leak in error path
    - lib/vsprintf: Check pointer before dereferencing in time_and_date()
    - ACPI: property: Fix fwnode refcount leak in
      acpi_fwnode_graph_parse_endpoint()
    - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
    - leds: netxbig: Fix GPIO descriptor leak in error paths
    - PCI: keystone: Exit ks_pcie_probe() for invalid mode
    - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK
      5A
    - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
    - ps3disk: use memcpy_{from,to}_bvec index
    - bpf: Handle return value of ftrace_set_filter_ip in register_fentry
    - selftests/bpf: Fix failure paths in send_signal test
    - watchdog: wdat_wdt: Fix ACPI table leak in probe function
    - watchdog: starfive: Fix resource leak in probe error path
    - tracefs: fix a leak in eventfs_create_events_dir()
    - NFSD/blocklayout: Fix minlength check in proc_layoutget
    - drm/msm/a2xx: stop over-complaining about the legacy firmware
    - bpf: Improve program stats run-time calculation
    - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within
      RMA limit
    - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE
      format
    - fs/ntfs3: out1 also needs to put mi
    - fs/ntfs3: Prevent memory leaks in add sub record
    - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
    - net/ipv6: Remove expired routes with a separated list of routes.
    - ipv6: clear RA flags when adding a static route
    - perf arm-spe: Extend branch operations
    - perf arm_spe: Fix memset subclass in operation
    - pwm: bcm2835: Make sure the channel is enabled after pwm_request()
    - wifi: mac80211: fix CMAC functions not handling errors
    - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
    - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
    - phy: renesas: rcar-gen3-usb2: Fix an error handling path in
      rcar_gen3_phy_usb2_probe()
    - net: phy: adin1100: Fix software power-down ready condition
    - cpuset: Treat cpusets in attaching as populated
    - usb: chaoskey: fix locking for O_NONBLOCK
    - usb: dwc2: disable platform lowlevel hw resources during shutdown
    - usb: dwc2: fix hang during shutdown if set as peripheral
    - usb: dwc2: fix hang during suspend if set as peripheral
    - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
    - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
    - selftests/bpf: Improve reliability of test_perf_branches_no_hw()
    - crypto: ccree - Correctly handle return of sg_nents_for_len
    - RISC-V: KVM: Fix guest page fault within HLV* instructions
    - RDMA/bnxt_re: Fix the inline size for GenP7 devices
    - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
    - staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
    - btrfs: fix leaf leak in an error path in btrfs_del_items()
    - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
    - drm/nouveau: restrict the flush page to a 32-bit address
    - iomap: factor out a iomap_dio_done helper
    - iomap: always run error completions in user context
    - wifi: ieee80211: correct FILS status codes
    - backlight: lp855x: Fix lp855x.h kernel-doc warnings
    - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-
      metal
    - RDMA/irdma: Fix data race in irdma_sc_ccq_arm
    - RDMA/irdma: Fix data race in irdma_free_pble
    - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
    - ASoC: fsl_xcvr: clear the channel status control memory
    - drm/amd/display: Fix logical vs bitwise bug in
      get_embedded_panel_info_v2_1()
    - hwmon: sy7636a: Fix regulator_enable resource leak on error path
    - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
    - ublk: prevent invalid access with DEBUG
    - ext4: improve integrity checking in __mb_check_buddy by enhancing
      order-0 validation
    - virtio_vdpa: fix misleading return in void function
    - virtio: fix typo in virtio_device_ready() comment
    - virtio: fix whitespace in virtio_config_ops
    - virtio: fix virtqueue_set_affinity() docs
    - vdpa/pds: use %pe for ERR_PTR() in event handler registration
    - ASoC: Intel: catpt: Fix error path in hw_params()
    - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system
      suspend
    - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during
      system suspend
    - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during
      system suspend
    - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during
      system suspend
    - resource: replace open coded resource_intersection()
    - resource: introduce is_type_match() helper and use it
    - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
    - netfilter: flowtable: check for maximum number of encapsulations in
      bridge vlan
    - netfilter: nf_conncount: rework API to use sk_buff directly
    - netfilter: nft_connlimit: update the count if add was skipped
    - net: stmmac: fix rx limit check in stmmac_rx_zc()
    - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
    - selftests: bonding: add ipvlan over bond testing
    - selftests: bonding: add delay before each xvlan_over_bond connectivity
      check
    - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
    - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
    - md/raid5: fix IO hang when array is broken with IO inflight
    - clk: keystone: fix compile testing
    - perf tools: Fix split kallsyms DSO counting
    - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
    - pinctrl: single: Fix incorrect type for error return variable
    - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
    - 9p: fix cache/debug options printing in v9fs_show_options
    - NFS: Avoid changing nlink when file removes and attribute updates race
    - fs/nls: Fix utf16 to utf8 conversion
    - NFS: Initialise verifiers for visible dentries in readdir and lookup
    - NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
    - Revert "nfs: ignore SB_RDONLY when remounting nfs"
    - Revert "nfs: clear SB_RDONLY before getting superblock"
    - Revert "nfs: ignore SB_RDONLY when mounting nfs"
    - Expand the type of nfs_fattr->valid
    - NFS: Fix inheritance of the block sizes when automounting
    - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
    - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
    - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
      of_dma_configure()
    - ASoC: ak4458: Disable regulator when error happens
    - ASoC: ak5558: Disable regulator when error happens
    - blk-mq: Abort suspend when wakeup events are pending
    - block: fix comment for op_is_zone_mgmt() to include RESET_ALL
    - nvme-auth: use kvfree() for memory allocated with kvcalloc()
    - dma/pool: eliminate alloc_pages warning in atomic_pool_expand
    - ALSA: uapi: Fix typo in asound.h comment
    - rtc: gamecube: Check the return value of ioremap()
    - ARM: 9464/1: fix input-only operand modification in
      load_unaligned_zeropad()
    - dm-raid: fix possible NULL dereference with undefined raid type
    - dm log-writes: Add missing set_freezable() for freezable kthread
    - efi/cper: Add a new helper function to print bitmasks
    - efi/cper: Adjust infopfx size to accept an extra space
    - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
    - ocfs2: fix memory leak in ocfs2_merge_rec_left()
    - LoongArch: Add machine_kexec_mask_interrupts() implementation
    - net: lan743x: Allocate rings outside ZONE_DMA
    - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
    - usb: phy: Initialize struct usb_phy list_head
    - ipv6: add exception routes to GC list in rt6_insert_exception
    - btrfs: do not skip logging new dentries when logging a new name
    - btrfs: fix a potential path leak in print_data_reloc_error()
    - bpf, arm64: Do not audit capability check in do_jit()
    - btrfs: fix memory leak of fs_devices in degraded seed device path
    - iomap: account for unaligned end offsets when truncating read range
    - sched/fair: Revert max_newidle_lb_cost bump
    - x86/ptrace: Always inline trivial accessors
    - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint()
      only
    - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
    - cpufreq: s5pv210: fix refcount leak
    - cpuidle: menu: Use residency threshold in polling state override
      decisions
    - livepatch: Match old_sympos 0 and 1 in klp_find_func()
    - fs/ntfs3: Support timestamps prior to epoch
    - kbuild: Use objtree for module signing key path
    - hfsplus: fix volume corruption issue for generic/070
    - hfsplus: fix volume corruption issue for generic/073
    - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
    - btrfs: scrub: always update btrfs_scrub_progress::last_physical
    - gfs2: fix remote evict for read-only filesystems
    - smb/server: fix return value of smb2_ioctl()
    - ksmbd: use rwsem instead of rwlock for lease break
    - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
    - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
    - net: fec: ERR007885 Workaround for XDP TX path
    - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
    - mlxsw: spectrum_router: Fix possible neighbour reference count leak
    - broadcom: b44: prevent uninitialized value usage
    - netfilter: nf_conncount: fix leaked ct in error paths
    - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
    - netfilter: nf_tables: pass context structure to nft_parse_register_load
    - netfilter: nf_tables: allow loads only when register is initialized
    - netfilter: nf_tables: remove redundant chain validation on register
      store
    - net/mlx5: fw reset, clear reset requested on drain_fw_reset
    - net/mlx5: Drain firmware reset in shutdown callback
    - net/mlx5: fw_tracer, Handle escaped percent properly
    - net/mlx5: Skip HotPlug check on sync reset using hot reset
    - net/mlx5: Serialize firmware reset with devlink
    - net: enetc: do not transmit redirected XDP frames when the link is down
    - net: hns3: using the num_tqps to check whether tqp_index is out of range
      when vf get ring info from mbx
    - hwmon: (tmp401) fix overflow caused by default conversion rate value
    - MIPS: Fix a reference leak bug in ip22_check_gio()
    - drm/panel: sony-td4353-jdi: Enable prepare_prev_first
    - x86/xen: Move Xen upcall handler
    - x86/xen: Fix sparse warning in enlighten_pv.c
    - spi: cadence-quadspi: Fix clock disable on probe failure path
    - block: rnbd-clt: Fix leaked ID in init_dev()
    - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
    - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk
      table
    - can: gs_usb: gs_can_open(): fix error handling
    - ACPI: PCC: Fix race condition by removing static qualifier
    - ACPI: CPPC: Fix missing PCC check for guaranteed_perf
    - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
    - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
    - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
    - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
    - ipmi: Fix the race between __scan_channels() and deliver_response()
    - ipmi: Fix __scan_channels() failing to rescan channels
    - firmware: imx: scu-irq: Init workqueue before request mbox channel
    - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
    - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
    - powerpc/addnote: Fix overflow on 32-bit builds
    - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
    - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
    - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
    - fuse: Always flush the page cache before FOPEN_DIRECT_IO write
    - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
    - reset: fix BIT macro reference
    - exfat: fix remount failure in different process environments
    - usbip: Fix locking bug in RT-enabled kernels
    - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
    - usb: xhci: limit run_graceperiod for only usb 3.0 devices
    - usb: usb-storage: No additional quirks need to be added to the EL-R12
      optical drive.
    - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
    - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
    - i2c: designware: Disable SMBus interrupts to prevent storms from mis-
      configured firmware
    - nvme-fc: don't hold rport lock when putting ctrl
    - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI
      quirks
    - block: rnbd-clt: Fix signedness bug in init_dev()
    - vhost/vsock: improve RCU read sections around vhost_vsock_get()
    - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
    - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
    - s390/dasd: Fix gendisk parent after copy pair swap
    - block: rate-limit capacity change info log
    - floppy: fix for PAGE_SIZE != 4KB
    - kallsyms: Fix wrong "big" kernel symbol type read from procfs
    - fs/ntfs3: fix mount failure for sparse runs in run_unpack()
    - ktest.pl: Fix uninitialized var in config-bisect.pl
    - ext4: clear i_state_flags when alloc inode
    - ext4: fix incorrect group number assertion in mb_check_buddy
    - ext4: align max orphan file size with e2fsprogs limit
    - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
    - jbd2: use a weaker annotation in journal handling
    - media: v4l2-mem2mem: Fix outdated documentation
    - mptcp: schedule rtx timer only after pushing data
    - usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
    - media: pvrusb2: Fix incorrect variable used in trace message
    - phy: broadcom: bcm63xx-usbh: fix section mismatches
    - USB: lpc32xx_udc: Fix error handling in probe
    - usb: phy: isp1301: fix non-OF device reference imbalance
    - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
    - usb: dwc3: keep susphy enabled during exit to avoid controller faults
    - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
    - intel_th: Fix error handling in intel_th_output_open
    - cpuidle: governors: teo: Drop misguided target residency check
    - cpufreq: nforce2: fix reference count leak in nforce2
    - NFSD: use correct reservation type in nfsd4_scsi_fence_client
    - f2fs: fix age extent cache insertion skip on counter overflow
    - tools/testing/nvdimm: Use per-DIMM device handle
    - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on
      #SMI)
    - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with
      period=0
    - KVM: x86: Explicitly set new periodic hrtimer expiration in
      apic_timer_fn()
    - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
    - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
    - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
    - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
    - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed
      VMRUN)
    - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
    - xfs: fix a memory leak in xfs_buf_item_init()
    - PM: runtime: Do not clear needs_force_resume with enabled runtime PM
    - r8169: fix RTL8117 Wake-on-Lan in DASH mode
    - nfsd: Mark variable __maybe_unused to avoid W=1 build break
    - svcrdma: return 0 on success from svc_rdma_copy_inline_range
    - s390/ipl: Clear SBP flag when bootprog is set
    - gpio: regmap: Fix memleak in error path in gpio_regmap_register()
    - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
    - selftests: openvswitch: Fix escape chars in regexp.
    - crypto: caam - Add check for kcalloc() in test_len()
    - amba: tegra-ahb: Fix device leak on SMMU enable
    - tracing: Fix fixed array of synthetic event
    - soc: qcom: ocmem: fix device leak on lookup
    - soc: amlogic: canvas: fix device leak on lookup
    - rpmsg: glink: fix rpmsg device leak
    - platform/x86: intel: chtwc_int33fe: don't dereference swnode args
    - i2c: amd-mp2: fix reference leak in MP2 PCI device
    - hwmon: (max16065) Use local variable to avoid TOCTOU
    - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
    - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
    - wifi: rtw88: limit indirect IO under powered off for RTL8822CS
    - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
    - wifi: mac80211: do not use old MBSSID elements
    - i40e: fix scheduling in set_rx_mode
    - net: mdio: aspeed: add dummy read to avoid read-after-write issue
    - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
    - platform/x86: msi-laptop: add missing sysfs_remove_group()
    - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
    - amd-xgbe: reset retries and mode on RX adapt failures
    - Revert "UBUNTU: SAUCE: selftests: net: fix "buffer overflow detected"
      for tap.c"
    - selftests: net: fix "buffer overflow detected" for tap.c
    - genalloc.h: fix htmldocs warning
    - firewire: nosy: Fix dma_free_coherent() size
    - net: dsa: b53: skip multicast entries for fdb_dump()
    - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group
      struct
    - RDMA/efa: Remove possible negative shift
    - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
    - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
    - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
    - RDMA/bnxt_re: Fix to use correct page size for PDE table
    - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
    - RDMA/bnxt_re: fix dma_free_coherent() pointer
    - blk-mq: don't schedule block kworker on isolated CPUs
    - blk-mq: skip CPU offline notify on unmapped hctx
    - selftests/ftrace: traceonoff_triggers: strip off names
    - ntfs: Do not overwrite uptodate pages
    - ASoC: stm32: sai: fix device leak on probe
    - ASoC: stm32: sai: fix clk prepare imbalance on probe failure
    - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of
      appl_ptr
    - ASoC: qcom: q6asm-dai: perform correct state check before closing
    - ASoC: qcom: q6adm: the the copp device only during last instance
    - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
    - iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
    - iommu/apple-dart: fix device leak on of_xlate()
    - iommu/exynos: fix device leak on of_xlate()
    - iommu/ipmmu-vmsa: fix device leak on of_xlate()
    - iommu/mediatek-v1: fix device leak on probe_device()
    - iommu/mediatek-v1: fix device leaks on probe()
    - iommu/mediatek: fix device leak on of_xlate()
    - iommu/omap: fix device leaks on probe_device()
    - iommu/qcom: fix device leak on of_xlate()
    - iommu/sun50i: fix device leak on of_xlate()
    - iommu/tegra: fix device leak on probe_device()
    - HID: logitech-dj: Remove duplicate error logging
    - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
    - SAUCE: Revert "arm64: dts: ti: k3-j721e-sk: Add DT nodes for power
      regulators"
    - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power
      regulator
    - powerpc, mm: Fix mprotect on book3s 32-bit
    - leds: leds-lp50xx: Allow LED 0 to be added to module bank
    - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
    - leds: leds-lp50xx: Enable chip before any communication
    - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
    - mfd: max77620: Fix potential IRQ chip conflict when probing two devices
    - media: rc: st_rc: Fix reset control resource leak
    - parisc: entry.S: fix space adjustment on interruption for 64-bit
      userspace
    - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
    - powerpc/pseries/cmm: call balloon_devinfo_init() also without
      CONFIG_BALLOON_COMPACTION
    - firmware: stratix10-svc: Add mutex in stratix10 memory management
    - dm-ebs: Mark full buffer dirty even on partial write
    - dm-bufio: align write boundary on physical block size
    - fbdev: gbefb: fix to use physical address instead of dma address
    - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
    - fbdev: tcx.c fix mem_map to correct smem_start offset
    - media: cec: Fix debugfs leak on bus_register() failure
    - media: msp3400: Avoid possible out-of-bounds array accesses in
      msp3400c_thread()
    - media: renesas: rcar_drif: fix device node reference leak in
      rcar_drif_bond_enabled
    - media: samsung: exynos4-is: fix potential ABBA deadlock on init
    - media: TDA1997x: Remove redundant cancel_delayed_work in probe
    - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
    - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
    - media: vpif_capture: fix section mismatch
    - media: vpif_display: fix section mismatch
    - media: amphion: Cancel message work before releasing the VPU core
    - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
    - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
    - media: mediatek: vcodec: Fix a reference leak in
      mtk_vcodec_fw_vpu_init()
    - LoongArch: Add new PCI ID for pci_fixup_vgadev()
    - LoongArch: Correct the calculation logic of thread_count
    - LoongArch: Fix build errors for CONFIG_RANDSTRUCT
    - LoongArch: Use __pmd()/__pte() for swap entry conversions
    - LoongArch: Use unsigned long for _end and _text
    - compiler_types.h: add "auto" as a macro for "__auto_type"
    - kasan: refactor pcpu kasan vmalloc unpoison
    - idr: fix idr_alloc() returning an ID out of range
    - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
    - samples/ftrace: Adjust LoongArch register restore order in direct calls
    - fjes: Add missing iounmap in fjes_hw_init()
    - LoongArch: BPF: Zero-extend bpf_tail_call() index
    - nfsd: Drop the client reference in client_states_open()
    - net: usb: sr9700: fix incorrect command used to write single register
    - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to
      macb_open()
    - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
    - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
    - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
    - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
    - drm/mgag200: Fix big-endian support
    - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in
      prepare_fb
    - blk-mq: add helper for checking if one CPU is mapped to specified hctx
    - mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in
      mptcp_do_fastclose().
    - ALSA: wavefront: Use standard print API
    - ALSA: wavefront: Use guard() for spin locks
    - ALSA: wavefront: Clear substream pointers on close
    - ext4: fix string copying in parse_apply_sb_mount_options()
    - jbd2: fix the inconsistency between checksum and data in memory for
      journal sb
    - btrfs: don't rewrite ret from inode_permission
    - mm/ksm: fix exec/fork inheritance support for prctl
    - usb: ohci-nxp: Use helper function devm_clk_get_enabled()
    - usb: ohci-nxp: fix device leak on probe failure
    - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
    - f2fs: use f2fs_err_ratelimited() to avoid redundant logs
    - ARM: dts: microchip: sama7g5: fix uart fifo size to 32
    - fuse: fix readahead reclaim deadlock
    - PCI: brcmstb: Fix disabling L0s capability
    - lockd: fix vfs_test_lock() calls
    - mm: simplify folio_expected_ref_count()
    - mm: consider non-anon swap cache folios in folio_expected_ref_count()
    - pmdomain: imx: Fix reference count leak in imx_gpc_probe()
    - net: phy: mediatek: fix nvmem cell reference leak in
      mt798x_phy_calibration
    - drm/amdgpu: Forward VMID reservation errors
    - drm/mediatek: Fix probe memory leak
    - drm/mediatek: Fix probe resource leaks
    - drm/tilcdc: request and mapp iomem with devres
    - tty: introduce and use tty_port_tty_vhangup() helper
    - xhci: dbgtty: fix device unregister: fixup
    - usb: xhci: move link chain bit quirk checks into one helper function.
    - LoongArch: Refactor register restoration in ftrace_common_return
    - f2fs: remove unused GC_FAILURE_PIN
    - f2fs: keep POSIX_FADV_NOREUSE ranges
    - f2fs: drop inode from the donation list when the last file is closed
    - f2fs: fix to propagate error from f2fs_enable_checkpoint()
    - f2fs: fix to detect recoverable inode during dryrun of
      find_fsync_dnodes()
    - media: verisilicon: Fix CPU stalls on G2 bus error
    - mm/balloon_compaction: we cannot have isolated pages in the balloon list
    - mm/balloon_compaction: convert balloon_page_delete() to
      balloon_page_finalize()
    - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
    - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-
      Exit
    - media: amphion: Add a frame flush mode for decoder
    - media: amphion: Make some vpu_v4l2 functions static
    - media: amphion: Remove vpu_vb_is_codecconfig
    - mm/damon/tests/vaddr-kunit: handle alloc failures in
      damon_test_split_evenly_fail()
    - mm/damon/tests/vaddr-kunit: handle alloc failures on
      damon_do_test_apply_three_regions()
    - sched/fair: Small cleanup to sched_balance_newidle()
    - sched/fair: Small cleanup to update_newidle_cost()
    - sched/fair: Proportional newidle balance
    - RDMA/rxe: Fix the failure of ibv_query_device() and
      ibv_query_device_ex() tests
    - mm/damon/tests/vaddr-kunit: handle alloc failures on
      damon_test_split_evenly_succ()
    - mm/damon/tests/core-kunit: handle alloc failres in
      damon_test_new_filter()
    - mm/damon/tests/core-kunit: handle allocation failures in
      damon_test_regions()
    - mm/damon/tests/core-kunit: handle memory failure from
      damon_test_target()
    - mm/damon/tests/core-kunit: handle alloc failures on
      damon_test_split_regions_of()
    - mm/damon/tests/core-kunit: handle alloc failures on
      damos_test_filter_out()
    - mm/damon/tests/core-kunit: handle alloc failures in
      damon_test_set_regions()
    - mm/damon/tests/core-kunit: handle alloc failures in
      damon_test_ops_registration()
    - mm/damon/tests/core-kunit: handle alloc failure on
      damon_test_set_attrs()
    - virtio_console: fix order of fields cols and rows
    - pwm: stm32: Always program polarity
    - tty: fix tty_port_tty_*hangup() kernel-doc
    - firmware: arm_scmi: Fix unused notifier-block in unregister
    - ext4: filesystems without casefold feature cannot be mounted with
      siphash
    - drm/amdkfd: Fix GPU mappings for APU after prefetch
    - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1
    - smack: fix bug: setting task label silently ignores input garbage
    - wifi: ath10k: Avoid vdev delete timeout when firmware is already down
    - wifi: ath10k: Add missing include of export.h
    - wifi: ath10k: move recovery check logic into a new work
    - wifi: ath11k: restore register window after global reset
    - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets
    - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
    - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
    - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
    - block/mq-deadline: Introduce dd_start_request()
    - block/mq-deadline: Switch back to a single dispatch list
    - perf annotate: Check return value of evsel__get_arch() properly
    - arm64: dts: exynos: gs101: fix sysreg_apm reg property
    - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to
      other
    - soc: qcom: gsbi: fix double disable caused by devm
    - wifi: ath11k: fix VHT MCS assignment
    - arm64: dts: qcom: sm8650: set ufs as dma coherent
    - perf: Remove get_perf_callchain() init_nr argument
    - bpf: Refactor stack map trace depth calculation into helper function
    - perf/x86/intel/cstate: Remove PC3 support from LunarLake
    - drm/imagination: Fix reference to
      devm_platform_get_and_ioremap_resource()
    - power: supply: rt5033_charger: Fix device node reference leaks
    - power: supply: max17040: Check iio_read_channel_processed() return code
    - libbpf: Fix parsing of multi-split BTF
    - locktorture: Fix memory leak in param_set_cpumask()
    - crypto: iaa - Fix incorrect return value in save_iaa_wq()
    - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
    - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
    - RAS: Report all ARM processor CPER information to userspace
    - vhost: Fix kthread worker cgroup failure handling
    - vfio/pci: Use RCU for error/request triggers to avoid circular locking
    - net: phy: aquantia: check for NVMEM deferral
    - perf tools: Mark split kallsyms DSOs as loaded
    - perf hist: In init, ensure mem_info is put on error paths
    - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when
      the last task migrates out
    - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
    - nfs/vfs: discard d_exact_alias()
    - NFS: Initialise verifiers for visible dentries in
      _nfs4_open_and_get_state
    - drm/plane: Fix IS_ERR() vs NULL check in
      drm_plane_create_hotspot_properties()
    - regulator: fixed: Rely on the core freeing the enable GPIO
    - drm/nouveau: refactor deprecated strcpy
    - drm/amdkfd: Use huge page size to check split svm range alignment
    - block: return unsigned int from queue_dma_alignment
    - fs/ntfs3: check for shutdown in fsync
    - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
    - wifi: cfg80211: use cfg80211_leave() in iftype change
    - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC
      load
    - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad"
    - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170
    - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135
    - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
    - netfilter: nf_nat: remove bogus direction check
    - iommufd/selftest: Add coverage for reporting max_pasid_log2 via
      IOMMU_HW_INFO
    - iommufd/selftest: Update hw_info coverage for an input data_type
    - iommufd/selftest: Make it clearer to gcc that the access is not out of
      bounds
    - hwmon: (dell-smm) Limit fan multiplier to avoid overflow
    - drm/xe: Restore engine registers before restarting schedulers after GT
      reset
    - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds
    - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition
    - scsi: smartpqi: Add support for Hurray Data new controller PCI device
    - exfat: zero out post-EOF page cache on file extension
    - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA
      systems
    - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister()
    - wifi: mt76: Fix DTS power-limits on little endian systems
    - usb: gadget: lpc32xx_udc: fix clock imbalance in error path
    - mei: gsc: add dependency on Xe driver
    - serial: sh-sci: Check that the DMA cookie is valid
    - powerpc: Add reloc_offset() to font bitmap pointer used for
      bootx_printf()
    - xfs: fix stupid compiler warning
    - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
    - drm/amd/display: Fix scratch registers offsets for DCN35
    - drm/displayid: pass iter to drm_find_displayid_extension()
    - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu()
    - soc: apple: mailbox: fix device leak on lookup
    - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes
    - i40e: validate ring_len parameter against hardware-specific values
    - idpf: reduce mbx_task schedule delay to 300us
    - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event
      names
    - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit()
    - vfio/pds: Fix memory leak in pds_vfio_dirty_enable()
    - md: Fix static checker warning in analyze_sbs
    - ASoC: codecs: lpass-tx-macro: fix SM6115 support
    - iommu/amd: Propagate the error code returned by __modify_irte_ga() in
      modify_irte_ga()
    - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions
    - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
    - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
    - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
    - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
    - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
    - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
    - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init()
      on error
    - mm/damon/tests/sysfs-kunit: handle alloc failures on
      damon_sysfs_test_add_targets()
    - mm/damon/tests/core-kunit: handle alloc failures on
      damon_test_split_at()
    - mm/damon/tests/core-kunit: handle memory alloc failure from
      damon_test_aggregate()
    - mm/damon/tests/core-kunit: handle alloc failures on
      dasmon_test_merge_regions_of()
    - mm/damon/tests/core-kunit: handle alloc failures on
      damon_test_merge_two()
    - mm/damon/tests/core-kunit: handle alloc failures in
      damon_test_update_monitoring_result()
    - kasan: unpoison vms[area] addresses with a common tag
    - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
    - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident
    - drm/mediatek: Fix probe device leaks
    - drm/i915: Fix format string truncation warning
    - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table
    - drm/xe: Adjust long-running workload timeslices to reasonable values
    - drm/xe: Use usleep_range for accurate long-running workload timeslicing
    - drm/xe: Drop preempt-fences when destroying imported dma-bufs.
    - drm/imagination: Disallow exporting of PM/FW protected objects
    - gfs2: fix freeze error handling
    - sched/eevdf: Remove min_vruntime_copy
    - sched/eevdf: Fix min_vruntime vs avg_vruntime
    - serial: core: fix OF node leak
    - serial: core: Restore sysfs fwnode information
    - mptcp: pm: ignore unknown endpoint flags
    - f2fs: clear SBI_POR_DOING before initing inmem curseg
    - f2fs: add timeout in f2fs_enable_checkpoint()
    - f2fs: dump more information for f2fs_{enable,disable}_checkpoint()
    - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list()
    - gpiolib: acpi: Handle deferred list via new API
    - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter
    - gpiolib: acpi: Move quirks to a separate file
    - gpiolib: acpi: Add a quirk for Acer Nitro V15
    - gpiolib: acpi: Add quirk for ASUS ProArt PX13
    - gpiolib: acpi: Add quirk for Dell Precision 7780
    - serial: core: Fix serial device initialization
    - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio
    - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume
    - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter
    - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
    - vfio/pci: Disable qword access to the PCI ROM bar
    - iomap: allocate s_dio_done_wq for async reads as well
    - mptcp: ensure context reset on disconnect()
    - Upstream stable to v6.6.120, v6.12.62, v6.12.63, v6.12.64, v6.12.65
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2024-36347
    - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo
    - x86/microcode/AMD: Select which microcode patch to load
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-40164
    - usbnet: Fix using smp_processor_id() in preemptible code warnings
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-40325
    - md/raid10: wait barrier before returning discard request with REQ_NOWAIT
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68206
    - netfilter: nft_ct: add seqadj extension for natted connections
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71068
    - svcrdma: bound check rq_pages index in inline path
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71135
    - md/raid5: fix possible null-pointer dereferences in
      raid5_store_group_thread_cnt()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-38234
    - sched/rt: Fix race in push_rt_task
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68811
    - svcrdma: use rc_pageoff for memcpy byte offset
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68810
    - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71109
    - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32
      bits
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68770
    - bnxt_en: Fix XDP_TX path
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71072
    - shmem: fix recovery on rename failures
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68374
    - md: fix rcu protection in md_wakeup_thread
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68378
    - bpf: Fix stackmap overflow check in __bpf_get_stackid()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2024-57795
    - RDMA/rxe: Remove the direct link to net_device
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-38022
    - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device"
      problem
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71140
    - media: mediatek: vcodec: Use spinlock for context list protection lock
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71105
    - f2fs: use global inline_xattr_slab instead of per-sb slab cache
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68772
    - f2fs: fix to avoid updating compression context during writeback
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-22111
    - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-22022
    - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71141
    - drm/tilcdc: Fix removal actions in case of failed probe
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71127
    - wifi: mac80211: Discard Beacon frames to non-broadcast address
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71088
    - mptcp: fallback earlier on simult connection
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71065
    - f2fs: fix to avoid potential deadlock
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68345
    - ALSA: hda: cs35l41: Fix NULL pointer dereference in
      cs35l41_hda_read_acpi()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68344
    - ALSA: wavefront: Fix integer overflow in sample size validation
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71077
    - tpm: Cap the number of PCR banks
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71130
    - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71138
    - drm/msm/dpu: Add missing NULL pointer check for pingpong interface
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71083
    - drm/ttm: Avoid NULL pointer deref for evicted BOs
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71079
    - net: nfc: fix deadlock between nfc_unregister_device and
      rfkill_fop_write
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71129
    - LoongArch: BPF: Sign extend kfunc call arguments
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71093
    - e1000: fix OOB in e1000_tbi_should_accept()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71084
    - RDMA/cm: Fix leaking the multicast GID table reference
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71096
    - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71136
    - media: adv7842: Avoid possible out-of-bounds array accesses in
      adv7842_cp_log_status()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71143
    - clk: samsung: exynos-clkout: Assign .num before accessing .hws
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71078
    - powerpc/64s/slb: Fix SLB multihit issue during SLB preload
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71089
    - iommu: disable SVA when CONFIG_X86 is set
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71081
    - ASoC: stm32: sai: fix OF node leak on probe
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71153
    - ksmbd: Fix memory leak in get_file_all_info()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71133
    - RDMA/irdma: avoid invalid read in irdma_net_event
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71086
    - net: rose: fix invalid array index in rose_kill_by_device()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71097
    - ipv4: Fix reference count leak when using error routes with nexthop
      objects
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71085
    - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71095
    - net: stmmac: fix the crash issue for zero copy XDP_TX action
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71137
    - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71101
    - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package
      parsing
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71094
    - net: usb: asix: validate PHY address before use
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71132
    - smc91x: fix broken irq-context in PREEMPT_RT
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71154
    - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71091
    - team: fix check for port enabled in
      team_queue_override_port_prio_changed()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71098
    - ip6_gre: make ip6gre_header() robust
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71082
    - Bluetooth: btusb: revert use of devm_kzalloc in btusb
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71131
    - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71087
    - iavf: fix off-by-one issues in iavf_config_rss_reg()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71071
    - iommu/mediatek: fix use-after-free on probe deferral
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71111
    - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71113
    - crypto: af_alg - zero initialize memory allocated via sock_kmalloc
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71149
    - io_uring/poll: correctly handle io_poll_add() return value on update
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68778
    - btrfs: don't log conflicting inode if it's a dir moved in the current
      transaction
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71119
    - powerpc/kexec: Enable SMT before waking offline CPUs
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71120
    - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in
      gss_read_proxy_verf
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71148
    - net/handshake: restore destructor on submit failure
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68788
    - fsnotify: do not generate ACCESS/MODIFY events on child for special
      files
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71125
    - tracing: Do not register unsupported perf events
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71104
    - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV
      timer
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71116
    - libceph: make decode_pool() more resilient against corrupted osdmaps
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71121
    - parisc: Do not reprogram affinitiy on ASP chip
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71102
    - scs: fix a wrong parameter in __scs_magic
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68804
    - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68771
    - ocfs2: fix kernel BUG in ocfs2_find_victim_chain
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68808
    - media: vidtv: initialize local pointers upon transfer of memory
      ownership
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68769
    - f2fs: fix return value of f2fs_recover_fsync_data()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71069
    - f2fs: invalidate dentry cache on failed whiteout creation
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68796
    - f2fs: fix to avoid updating zero-sized extent in extent cache
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71107
    - f2fs: ensure node page reads complete before f2fs_put_super() finishes
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68782
    - scsi: target: Reset t_task_cdb pointer in error case
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71075
    - scsi: aic94xx: fix use-after-free in device removal path
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68818
    - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in
      abort path"
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68797
    - char: applicom: fix NULL pointer dereference in ac_ioctl
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68819
    - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71126
    - mptcp: avoid deadlock on fallback while reinjecting
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68820
    - ext4: xattr: fix null pointer deref in ext4_raw_inode()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68814
    - io_uring: fix filename leak in __io_openat_prep()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71147
    - KEYS: trusted: Fix a memory leak in tpm2_load_cmd
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71151
    - cifs: Fix memory and information leak in smb3_reconfigure()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71108
    - usb: typec: ucsi: Handle incorrect num_connectors capability
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71114
    - via_wdt: fix critical boot hang due to unnamed resource allocation
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68783
    - ALSA: usb-mixer: us16x08: validate meter packet indices
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68776
    - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68773
    - spi: fsl-cpm: Check length parity before switching to 16 bit mode
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68777
    - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68806
    - ksmbd: fix buffer validation by including null terminator size in EA
      length
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71150
    - ksmbd: Fix refcount leak when invalid session is found on session lookup
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68786
    - ksmbd: skip lock-range check on equal size to avoid size==0 underflow
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68789
    - hwmon: (ibmpex) fix use-after-free in high/low store
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71112
    - net: hns3: add VLAN id validation before using
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71064
    - net: hns3: using the num_tqps in the vf driver to apply for resources
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68775
    - net/handshake: duplicate handshake cancellations leak socket
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68816
    - net/mlx5: fw_tracer, Validate format string parameters
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68795
    - ethtool: Avoid overflowing userspace buffer on stats query
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71122
    - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68815
    - net/sched: ets: Remove drr class from the active list if it changes to
      strict
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68799
    - caif: fix integer underflow in cffrml_receive()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68813
    - ipvs: fix ipv4 null-ptr-deref in route error path
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68785
    - net: openvswitch: fix middle attribute validation in push_nsh() action
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68800
    - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route
      stats
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68801
    - mlxsw: spectrum_router: Fix neighbour use-after-free
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71066
    - net/sched: ets: Always remove class from active list before deleting in
      ets_qdisc_change
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68787
    - netrom: Fix memory leak in nr_sendmsg()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68809
    - ksmbd: vfs: fix race on m_flags in vfs_cache
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68817
    - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68767
    - hfsplus: Verify inode mode when loading from disk
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68774
    - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71067
    - ntfs: set dummy blocksize to read boot_block when mounting
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-71118
    - ACPICA: Avoid walking the Namespace if start_node is NULL
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68780
    - sched/deadline: only set free_cpus for online runqueues
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68798
    - perf/x86/amd: Check event before enable to avoid GPF
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68794
    - iomap: adjust read range correctly for non-block-aligned positions
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68346
    - ALSA: dice: fix buffer overflow in detect_stream_formats()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68766
    - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68756
    - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of
      set->tag_list_lock
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68753
    - ALSA: firewire-motu: add bounds check in put_user loop for DSP events
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68347
    - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68764
    - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68349
    - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in
      pnfs_mark_layout_stateid_invalid
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68325
    - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68354
    - regulator: core: Protect regulator_supply_alias_list with
      regulator_list_mutex
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68758
    - backlight: led-bl: Add devlink to supplier LEDs
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68765
    - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68763
    - crypto: starfive - Correctly handle return of sg_nents_for_len
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68740
    - ima: Handle error code returned by ima_filter_rule_match()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68362
    - wifi: rtl818x: rtl8187: Fix potential buffer underflow in
      rtl8187_rx_cb()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68741
    - scsi: qla2xxx: Fix improper freeing of purex item
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68742
    - bpf: Fix invalid prog->stats access when update_effective_progs fails
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68759
    - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68363
    - bpf: Check skb->transport_header is set in bpf_skb_check_mtu
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68744
    - bpf: Free special fields when update [lru_,]percpu_hash maps
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68364
    - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68366
    - nbd: defer config unlock in nbd_genl_connect
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68367
    - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68755
    - staging: most: remove broken i2c driver
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68371
    - scsi: smartpqi: Fix device resources accessed after device removal
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68372
    - nbd: defer config put in recv_work
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68746
    - spi: tegra210-quad: Fix timeout handling
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68379
    - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68380
    - wifi: ath11k: fix peer HE MCS assignment
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68724
    - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68727
    - ntfs3: Fix uninit buffer allocated by __getname()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68728
    - ntfs3: fix uninit memory after failed mi_read in mi_format_new
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68757
    - drm/vgem-fence: Fix potential deadlock on release
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68732
    - gpu: host1x: Fix race in syncpt alloc/free
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68733
    - smack: fix bug: unprivileged task can create labels
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68254
    - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68255
    - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68256
    - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68257
    - comedi: check device's attached status in compat ioctls
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68258
    - comedi: multiq3: sanitize config options in multiq3_attach()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68332
    - comedi: c6xdigio: Fix invalid PNP driver unregistration
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68265
    - nvme: fix admin request_queue lifetime
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68266
    - bfs: Reconstruct file type when loading from disk
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68259
    - KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68335
    - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68261
    - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68336
    - locking/spinlock/debug: Fix data-race in do_raw_write_lock
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68263
    - ksmbd: ipc: fix use-after-free in ipc_msg_send_request
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68264
    - ext4: refresh inline data size before write operations
  * Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
    CVE-2025-68337
    - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system
      corrupted
  * CVE-2026-23111
    - netfilter: nf_tables: fix inverted genmask check in
      nft_map_catchall_activate()
  * CVE-2026-23209
    - macvlan: fix error recovery in macvlan_common_newlink()
  * CVE-2026-23074
    - net/sched: Enforce that teql can only be used as root qdisc
  * CVE-2026-23060
    - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN
      spec

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 02 Apr 2026 09:36:10 -0500

linux-nvidia (6.8.0-1050.53) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1050.53 -proposed tracker (LP: #2144249)

  [ Ubuntu: 6.8.0-107.107 ]

  * noble/linux: 6.8.0-107.107 -proposed tracker (LP: #2144267)
  * CVE-2026-23074
    - net/sched: Enforce that teql can only be used as root qdisc
  * CVE-2026-23060
    - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN
      spec
  * CVE-2026-23111
    - netfilter: nf_tables: fix inverted genmask check in
      nft_map_catchall_activate()

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 19 Mar 2026 17:35:40 -0500

linux-nvidia (6.8.0-1049.52) noble; urgency=medium

  [ Ubuntu: 6.8.0-106.106 ]

  * Miscellaneous upstream changes
    - apparmor: validate DFA start states are in bounds in unpack_pdb
    - apparmor: fix memory leak in verify_header
    - apparmor: replace recursive profile removal with iterative approach
    - apparmor: fix: limit the number of levels of policy namespaces
    - apparmor: fix side-effect bug in match_char() macro usage
    - apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
    - apparmor: Fix double free of ns_name in aa_replace_profiles()
    - apparmor: fix unprivileged local user can do privileged policy
      management
    - apparmor: fix differential encoding verification
    - apparmor: fix race on rawdata dereference
    - apparmor: fix race between freeing data and fs accessing it

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 06 Mar 2026 16:41:11 -0600

linux-nvidia (6.8.0-1048.51) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1048.51 -proposed tracker (LP: #2141097)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2026.02.09)

  * Coresight fails to build on 6.8.0-102 due to missing function and arg
    definitions (LP: #2142337)
    - SAUCE: Revert "coresight: catu: Support atclk"
    - SAUCE: Revert "coresight: catu: Move ACPI support from AMBA driver to
      platform driver"
    - SAUCE: Revert "coresight: tmc: Support atclk"
    - SAUCE: Revert "coresight: tmc: Move ACPI support from AMBA driver to
      platform driver"
    - SAUCE: Revert "Coresight: Set correct cs_mode for TPDM to fix disable
      issue"
    - SAUCE: Revert "Coresight: Set correct cs_mode for dummy source to fix
      disable issue"

  * tegra-qspi: Fix race condition causing NULL pointer dereference
    (LP: #2139640)
    - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed
      transfer
    - spi: tegra210-quad: Move curr_xfer read inside spinlock
    - spi: tegra210-quad: Protect curr_xfer assignment in
      tegra_qspi_setup_transfer_one
    - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
    - spi: tegra210-quad: Protect curr_xfer clearing in
      tegra_qspi_non_combined_seq_xfer
    - spi: tegra210-quad: Protect curr_xfer check in IRQ handler

  [ Ubuntu: 6.8.0-104.104 ]

  * noble/linux: 6.8.0-104.104 -proposed tracker (LP: #2141774)
  * Change of ABI in 6.8.0 kernel breaks some OTT modules (LP: #2141778)
    - Revert "net: tls: Cancel RX async resync request on rcd_delta overflow"
    - Revert "net: tls: Change async resync helpers argument"

  [ Ubuntu: 6.8.0-103.103 ]

  * noble/linux: 6.8.0-103.103 -proposed tracker (LP: #2141411)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2026.02.09)
  * xhci_find_slot_id_by_port kernel panic on boot on arm64 (LP: #2141314)
    - Revert "xhci: fix stale flag preventig URBs after link state error is
      cleared"
  * Boot up hang with ucsi call trace while plug power cord or device on tbt5
    port (LP: #2127764)
    - SAUCE: usb: typec: ucsi: Fix workqueue destruction race during connector
      cleanup
  * TBT call trace while connecting TBT4 monitor on TBT5 port (LP: #2137613)
    - thunderbolt: Show path name in debug log when path is deactivated
    - thunderbolt: Log path activation failures without WARN backtraces
  *  x86: tsc: Fix TSC clock source being disabled when SNC is enabled causing
    fall back to less precise HPET (LP: #2138120)
    - x86/tsc: Use topology_max_packages() to get package number
  * Random flickering with Intel i915 (CoffeeLake and WhiskeyLake) on Linux
    6.8 (LP: #2136958)
    - SAUCE: iommu/intel: disable DMAR for CFL and WHL integrated gfx
  * CXL: Fix slab-out-of-bounds in cxl_setup_parent_dport (LP: #2130240)
    - cxl/pci: Get AER capability address from RCRB only for RCH dport
    - cxl/test: Skip cxl_setup_parent_dport() for emulated dports
  * net:tap in ubuntu_kselftests_net fails on Noble (buffer overflow detected)
    (LP: #2067642)
    - SAUCE: selftests: net: fix "buffer overflow detected" for tap.c
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633)
    - Bluetooth: SMP: Fix not generating mackey and ltk when repairing
    - net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
    - net: aquantia: Add missing descriptor cache invalidation on ATL2
    - net: lan966x: Fix the initialization of taprio
    - net/mlx5e: Fix validation logic in rate limiting
    - drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
    - net: dsa: sja1105: simplify static configuration reload
    - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing
      traffic
    - net: fec: cancel perout_timer when PEROUT is disabled
    - net: fec: do not update PEROUT if it is enabled
    - net: fec: do not allow enabling PPS and PEROUT simultaneously
    - net: fec: do not register PPS event for PEROUT
    - iio: st_lsm6dsx: Fixed calibrated timestamp calculation
    - usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
    - mailbox: mailbox-test: Fix debugfs_create_dir error checking
    - mailbox: pcc: Refactor error handling in irq handler into separate
      function
    - mailbox: pcc: don't zero error register
    - spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
    - spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
    - spi: spi-mem: Allow specifying the byte order in Octal DTR mode
    - spi: spi-mem: Extend spi-mem operations with a per-operation maximum
      frequency
    - spi: spi-mem: Add a new controller capability
    - spi: nxp-fspi: Support per spi-mem operation frequency switches
    - spi: nxp-fspi: Propagate fwnode in ACPI case as well
    - spi: bcm63xx: fix premature CS deassertion on RX-only transactions
    - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
    - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
    - iio:common:ssp_sensors: Fix an error handling path ssp_probe()
    - iio: accel: fix ADXL355 startup race condition
    - iio: adc: ad7280a: fix ad7280_store_balance_timer()
    - MIPS: mm: Prevent a TLB shutdown on initial uniquification
    - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
    - ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
    - ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
    - can: sja1000: fix max irq loop handling
    - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
    - dm-verity: fix unreliable memory allocation
    - drivers/usb/dwc3: fix PCI parent check
    - thunderbolt: Add support for Intel Wildcat Lake
    - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
    - mptcp: clear scheduled subflows on retransmit
    - serial: amba-pl011: prefer dma_mapping_error() over explicit address
      checking
    - usb: cdns3: Fix double resource release in cdns3_pci_probe
    - USB: storage: Remove subclass and protocol overrides from Novatek quirk
    - usb: dwc3: pci: add support for the Intel Nova Lake -S
    - usb: dwc3: pci: Sort out the Intel device IDs
    - xhci: dbgtty: Fix data corruption when transmitting data form DbC to
      host
    - xhci: dbgtty: fix device unregister
    - USB: serial: ftdi_sio: add support for u-blox EVK-M101
    - USB: serial: option: add support for Rolling RW101R-GL
    - drm: sti: fix device leaks at component probe
    - net: dsa: microchip: common: Fix checks on irq_find_mapping()
    - net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
    - nfsd: Replace clamp_t in nfsd4_get_drc_mem()
    - usb: udc: Add trace event for usb_gadget_set_state
    - usb: typec: ucsi: psy: Set max current to zero when disconnected
    - can: rcar_canfd: Fix CAN-FD mode as default
    - iio: adc: rtq6056: Correct the sign bit index
    - net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
    - net: dsa: microchip: Free previously initialized ports on init failures
    - mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
    - iio: humditiy: hdc3020: fix units for temperature and humidity
      measurement
    - arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
    - nvmem: layouts: fix nvmem_layout_bus_uevent
    - xhci: fix stale flag preventig URBs after link state error is cleared
    - drm/amd/display: Don't change brightness for disabled connectors
    - KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
    - KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
    - KVM: nSVM: Fix and simplify LBR virtualization handling with nested
    - KVM: SVM: Fix redundant updates of LBR MSR intercepts
    - wifi: ath12k: correctly handle mcast packets for clients
    - drm/i915/dp: Initialize the source OUI write timestamp always
    - SAUCE: bpf: introduce __MAX_BPF_PROG_TYPE delimiter
    - Upstream stable to v6.6.119, v6.12.61
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68340
    - team: Move team device type change at the end of team_port_add
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68282
    - usb: gadget: udc: fix use-after-free in usb_gadget_state_work
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68283
    - libceph: replace BUG_ON with bounds check for map->max_osd
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68284
    - libceph: prevent potential out-of-bounds writes in
      handle_auth_session_key()
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68285
    - libceph: fix potential use-after-free in have_mon_and_osd_map()
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68286
    - drm/amd/display: Check NULL before accessing
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68287
    - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests()
      call paths
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68331
    - usb: uas: fix urb unmapping issue when the uas device is remove during
      ongoing data transfer
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-40345
    - usb: storage: sddr55: Reject out-of-bound new_pba
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68288
    - usb: storage: Fix memory leak in USB bulk transport
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68327
    - usb: renesas_usbhs: Fix synchronous external abort on unbind
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68289
    - usb: gadget: f_eem: Fix memory leak in eem_unwrap
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68290
    - most: usb: fix double free on late probe failure
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68328
    - firmware: stratix10-svc: fix bug in saving controller data
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68295
    - smb: client: fix memory leak in cifs_construct_tcon()
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68297
    - ceph: fix crash in process_v2_sparse_read() for encrypted directories
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68339
    - atm/fore200e: Fix possible data race in fore200e_open()
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68330
    - iio: accel: bmc150: Fix irq assumption regression
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68301
    - net: atlantic: fix fragment overflow handling in RX path
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68302
    - net: sxgbe: fix potential NULL dereference in sxgbe_rx()
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68303
    - platform/x86: intel: punit_ipc: fix memory corruption
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68305
    - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68342
    - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
      accessing data
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68343
    - can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
      accessing header
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68307
    - can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted
      URBs
  * Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
    CVE-2025-68308
    - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624)
    - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
    - shmem: fix tmpfs reconfiguration (remount) when noswap is set
    - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
    - mptcp: Disallow MPTCP subflows from sockmap
    - ata: libata-scsi: Fix system suspend for a security locked drive
    - smb: client: introduce close_cached_dir_locked()
    - ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
    - net: dsa: microchip: lan937x: Fix RGMII delay tuning
    - Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
    - Input: goodix - add support for ACPI ID GDIX1003
    - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
    - MIPS: Malta: Fix !EVA SOC-it PCI MMIO
    - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
    - LoongArch: Don't panic if no valid cache info for PCI
    - mptcp: fix ack generation for fallback msk
    - mptcp: fix premature close in case of fallback
    - mptcp: avoid unneeded subflow-level drops
    - mptcp: decouple mptcp fastclose from tcp close
    - mptcp: do not fallback when OoO is present
    - drm/tegra: dc: Fix reference leak in tegra_dc_couple()
    - drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
    - drm/amd/display: Increase DPCD read retries
    - drm/amd/display: Move sleep into each retry for retrieve_link_cap()
    - xfrm: Determine inner GSO type from packet inner protocol
    - xfrm: Prevent locally generated packets from direct output in tunnel
      mode
    - pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
    - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
    - net: dsa: hellcreek: fix missing error handling in LED registration
    - net: mlxsw: linecards: fix missing error check in
      mlxsw_linecard_devlink_info_get()
    - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to
      errnos
    - pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
    - LoongArch: Use UAPI types in ptrace UAPI header
    - bcma: don't register devices disabled in OF
    - cifs: fix typo in enable_gcm_256 module parameter
    - scsi: core: Fix a regression triggered by scsi_host_busy()
    - x86/microcode/AMD: Limit Entrysign signature checking to known
      generations
    - selftests: net: use BASH for bareudp testing
    - net: tls: Cancel RX async resync request on rcd_delta overflow
    - kconfig/mconf: Initialize the default locale at startup
    - kconfig/nconf: Initialize the default locale at startup
    - f2fs: compress: change the first parameter of page_array_{alloc,free} to
      sbi
    - s390/mm: Fix __ptep_rdp() inline assembly
    - ALSA: usb-audio: fix uac2 clock source at terminal parser
    - tracing/tools: Fix incorrcet short option in usage text for --threads
    - smb: client: fix incomplete backport in cfids_invalidation_worker()
    - uio_hv_generic: Set event for all channels on the device
    - maple_tree: fix tracepoint string pointers
    - selftests: mptcp: join: endpoints: longer transfer
    - HID: amd_sfh: Stop sensor before starting
    - arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
    - mptcp: fix duplicate reset on fastclose
    - selftests: mptcp: join: endpoints: longer timeout
    - selftests: mptcp: join: userspace: longer timeout
    - drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
    - xfrm: set err and extack on failure to create pcpu SA
    - pinctrl: realtek: Select REGMAP_MMIO for RTD driver
    - selftests: net: lib: Do not overwrite error messages
    - af_unix: Cache state->msg in unix_stream_read_generic().
    - af_unix: Read sk_peek_offset() again after sleeping in
      unix_stream_read_generic().
    - net: tls: Change async resync helpers argument
    - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
    - drm/xe: Prevent BIT() overflow when handling invalid prefetch region
    - tty/vt: fix up incorrect backport to stable releases
    - Upstream stable to v6.6.118, v6.12.60
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68213
    - idpf: fix possible vport_config NULL pointer deref in remove
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68223
    - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40257
    - mptcp: fix a race in mptcp_pm_del_add_timer()
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68231
    - mm/mempool: fix poisoning order>0 pages with HIGHMEM
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68198
    - crash: fix crashkernel resource shrink
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40266
    - KVM: arm64: Check the untrusted offset in FF-A memory share
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68220
    - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return
      NULL on error
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-38627
    - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40248
    - vsock: Ignore signal/timeout on connect() if already established
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68219
    - cifs: fix memory leak in smb3_fs_context_parse_param error path
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40250
    - net/mlx5: Clean up only new IRQ glue on request_irq() failure
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40251
    - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68222
    - pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40252
    - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont()
      and qede_tpa_end()
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40253
    - s390/ctcm: Fix double-kfree
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68218
    - nvme-multipath: fix lockdep WARN due to partition scan work
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40254
    - net: openvswitch: remove never-working support for setting nsh fields
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68233
    - drm/tegra: Add call to put_pid()
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40258
    - mptcp: fix race condition in mptcp_schedule_work()
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68229
    - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40259
    - scsi: sg: Do not sleep in atomic context
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40261
    - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68235
    - nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68217
    - Input: pegasus-notetaker - fix potential out-of-bounds access
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40262
    - Input: imx_sc_key - fix memory corruption on unload
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40263
    - Input: cros_ec_keyb - fix an invalid memory access
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-40264
    - be2net: pass wrb_params in case of OS2BMC
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68227
    - mptcp: Fix proto fallback detection with BPF
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68237
    - mtdchar: fix integer overflow in read/write ioctls
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68238
    - mtd: rawnand: cadence: fix DMA device NULL pointer dereference
  * Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
    CVE-2025-68214
    - timers: Fix NULL function pointer race in timer_shutdown_sync()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460)
    - net: usb: asix_devices: Check return value of usbnet_get_endpoints
    - fbdev: atyfb: Check if pll_ops->init_pll failed
    - ACPI: button: Call input_free_device() on failing input device
      registration
    - Bluetooth: rfcomm: fix modem control handling
    - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
    - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
    - mptcp: drop bogus optimization in __mptcp_check_push()
    - mptcp: restore window probe
    - ASoC: qdsp6: q6asm: do not sleep while atomic
    - wifi: ath10k: Fix memory leak on unsupported WMI command
    - wifi: ath11k: Add missing platform IDs for quirk table
    - wifi: ath12k: free skb during idr cleanup callback
    - drm/msm/a6xx: Fix GMU firmware parser
    - ALSA: usb-audio: fix control pipe direction
    - scsi: ufs: core: Initialize value of an attribute returned by uic cmd
    - ASoC: Intel: avs: Unprepare a stream when XRUN occurs
    - ASoC: fsl_sai: fix bit order for DSD format
    - libbpf: Fix powerpc's stack register definition in bpf_tracing.h
    - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during
      reset
    - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
    - Bluetooth: ISO: Fix another instance of dst_type handling
    - Bluetooth: hci_core: Fix tracking of periodic advertisement
    - drm/etnaviv: fix flush sequence logic
    - net: hns3: return error code when function fails
    - sfc: fix potential memory leak in efx_mae_process_mport()
    - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
    - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
    - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
    - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
    - block: make REQ_OP_ZONE_OPEN a write operation
    - drm/mediatek: Fix device use-after-free on unbind
    - mptcp: fix MSG_PEEK stream corruption
    - cpuidle: governors: menu: Rearrange main loop in menu_select()
    - cpuidle: governors: menu: Select polling state in some more cases
    - net: phy: dp83867: Disable EEE support as not implemented
    - [Config] disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP for s390x
    - drm/sched: Fix race in drm_sched_entity_select_rq()
    - soc: aspeed: socinfo: Add AST27xx silicon IDs
    - soc: qcom: smem: Fix endian-unaware access of num_entries
    - spi: loopback-test: Don't use %pK through printk
    - bpf: Don't use %pK through printk
    - pinctrl: single: fix bias pull up/down handling in pin_config_set
    - mmc: host: renesas_sdhi: Fix the actual clock
    - memstick: Add timeout to prevent indefinite waiting
    - irqchip/sifive-plic: Respect mask state when setting affinity
    - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
    - arc: Fix __fls() const-foldability via __builtin_clzl()
    - selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
    - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
    - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
    - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
    - power: supply: qcom_battmgr: add OOI chemistry
    - hwmon: (k10temp) Add device ID for Strix Halo
    - hwmon: (sbtsi_temp) AMD CPU extended temperature range support
    - pinctrl: keembay: release allocated memory in detach path
    - power: supply: sbs-charger: Support multiple devices
    - hwmon: sy7636a: add alias
    - irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
    - arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
    - soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
    - ARM: tegra: transformer-20: add missing magnetometer interrupt
    - ARM: tegra: transformer-20: fix audio-codec interrupt
    - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
    - ACPICA: dispatcher: Use acpi_ds_clear_operands() in
      acpi_ds_call_control_method()
    - tee: allow a driver to allocate a tee_device without a pool
    - bpf: Do not limit bpf_cgroup_from_id to current's namespace
    - video: backlight: lp855x_bl: Set correct EPROM start for LP8556
    - tools/cpupower: fix error return value in cpupower_write_sysfs()
    - pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
    - power: supply: qcom_battmgr: handle charging state change notifications
    - bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
    - cpuidle: Fail cpuidle device registration if there is one already
    - spi: rpc-if: Add resume support for RZ/G3E
    - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
    - riscv: bpf: Fix uninitialized symbol 'retval_off'
    - bpf: Clear pfmemalloc flag when freeing all fragments
    - nvme: Use non zero KATO for persistent discovery connections
    - uprobe: Do not emulate/sstep original instruction when ip is changed
    - hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
    - hwmon: (dell-smm) Add support for Dell OptiPlex 7040
    - tools/cpupower: Fix incorrect size in cpuidle_state_disable()
    - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
    - tools/power x86_energy_perf_policy: Enhance HWP enable
    - tools/power x86_energy_perf_policy: Prefer driver HWP limits
    - mfd: stmpe: Remove IRQ domain upon removal
    - mfd: stmpe-i2c: Add missing MODULE_LICENSE
    - mfd: madera: Work around false-positive -Wininitialized warning
    - mfd: da9063: Split chip variant reading in two bus transactions
    - drm/amd/display: ensure committing streams is seamless
    - drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
    - drm/amd/display: add more cyan skillfish devices
    - drm/amd/display: update dpp/disp clock from smu clock table
    - drm/amd/pm: Use cached metrics data on aldebaran
    - drm/amd/pm: Use cached metrics data on arcturus
    - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
    - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
    - PCI: Disable MSI on RDC PCI to PCIe bridges
    - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
    - selftests/net: Ensure assert() triggers in psock_tpacket.c
    - wifi: rtw88: sdio: use indirect IO for device registers before power-on
    - drm/amdkfd: return -ENOTTY for unsupported IOCTLs
    - media: pci: ivtv: Don't create fake v4l2_fh
    - media: amphion: Delete v4l2_fh synchronously in .release()
    - drm/tidss: Use the crtc_* timings when programming the HW
    - drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
    - drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
    - drm/tidss: Set crtc modesetting parameters with adjusted mode
    - media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for
      VIDEO_CAMERA_SENSOR
    - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
    - net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
    - ice: Don't use %pK through printk or tracepoints
    - thunderbolt: Use is_pciehp instead of is_hotplug_bridge
    - powerpc/eeh: Use result of error_detected() in uevent
    - s390/pci: Use pci_uevent_ers() in PCI recovery
    - bridge: Redirect to backup port when port is administratively down
    - scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
    - scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO
      mode change
    - scsi: ufs: host: mediatek: Change reset sequence for improved stability
    - scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
    - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
    - drm/amdkfd: Handle lack of READ permissions in SVM mapping
    - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before
      setting register
    - iio: adc: imx93_adc: load calibrated values even calibration failed
    - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
    - char: misc: Make misc_register() reentry for miscdevice who wants
      dynamic minor
    - char: misc: Does not request module for miscdevice with dynamic minor
    - net: When removing nexthops, don't call synchronize_net if it is not
      necessary
    - net: Call trace_sock_exceed_buf_limit() for memcg failure with
      SK_MEM_RECV.
    - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
    - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
    - rds: Fix endianness annotation for RDS_MPATH_HASH
    - scsi: mpi3mr: Fix controller init failure on fault during queue creation
    - scsi: pm80xx: Fix race condition caused by static variables
    - extcon: adc-jack: Fix wakeup source leaks on device unbind
    - remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
    - net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
    - fuse: zero initialize inode private data
    - drm/amdkfd: fix vram allocation failure for a special case
    - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
    - media: fix uninitialized symbol warnings
    - drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
    - mips: lantiq: danube: add missing properties to cpu node
    - mips: lantiq: danube: add model to EASY50712 dts
    - mips: lantiq: danube: add missing device_type in pci node
    - mips: lantiq: xway: sysctrl: rename stp clock
    - mips: lantiq: danube: rename stp node on EASY50712 reference board
    - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
    - scsi: pm8001: Use int instead of u32 to store error codes
    - ptp: Limit time setting of PTP clocks
    - dmaengine: sh: setup_xref error handling
    - dmaengine: mv_xor: match alloc_wc and free_wc
    - dmaengine: dw-edma: Set status for callback_result
    - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
    - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
    - drm/amdgpu: Allow kfd CRIU with no buffer objects
    - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
    - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
    - media: adv7180: Add missing lock in suspend callback
    - media: adv7180: Do not write format to device in set_fmt
    - media: adv7180: Only validate format in querystd
    - media: verisilicon: Explicitly disable selection api ioctls for decoders
    - ALSA: usb-audio: apply quirk for MOONDROP Quark2
    - net: call cond_resched() less often in __release_sock()
    - smsc911x: add second read of EEPROM mac when possible corruption seen
    - iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
    - drm/amd: add more cyan skillfish PCI ids
    - drm/amdgpu: don't enable SMU on cyan skillfish
    - drm/amdgpu: add support for cyan skillfish gpu_info
    - usb: gadget: f_hid: Fix zero length packet transfer
    - drm/msm: make sure to not queue up recovery more than once
    - char: Use list_del_init() in misc_deregister() to reinitialize list
      pointer
    - media: ov08x40: Fix the horizontal flip control
    - media: i2c: og01a1b: Specify monochrome media bus format instead of
      Bayer
    - scsi: ufs: host: mediatek: Enhance recovery on resume failure
    - scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
    - net: phy: marvell: Fix 88e1510 downshift counter errata
    - scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode
      changes
    - wifi: mac80211: Fix HE capabilities element check
    - phy: cadence: cdns-dphy: Enable lower resolutions in dphy
    - phy: renesas: r8a779f0-ether-serdes: add new step added to latest
      datasheet
    - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
    - net: sh_eth: Disable WoL if system can not suspend
    - selftests: net: replace sleeps in fcnal-test with waits
    - media: redrat3: use int type to store negative error codes
    - selftests: traceroute: Use require_command()
    - netfilter: nf_reject: don't reply to icmp error messages
    - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of
      PV_UNHALT
    - selftests: Disable dad for ipv6 in fcnal-test.sh
    - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
    - [Config] disable 8139TOO_PIO for armhf
    - selftests: Replace sleep with slowwait
    - HID: asus: add Z13 folio to generic group for multitouch to work
    - watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
    - crypto: sun8i-ce - remove channel timeout field
    - PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
    - crypto: caam - double the entropy delay interval for retry
    - net/cls_cgroup: Fix task_get_classid() during qdisc run
    - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
    - wifi: mt76: mt7996: Temporarily disable EPCS
    - ALSA: serial-generic: remove shared static buffer
    - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
    - drm/amd: Avoid evicting resources at S5
    - drm/amd/display: Fix DVI-D/HDMI adapters
    - drm/amd/display: Disable VRR on DCE 6
    - ethernet: Extend device_get_mac_address() to use NVMEM
    - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
    - drm/amdgpu: reject gang submissions under SRIOV
    - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to
      clean net/lib dependency
    - scsi: ufs: core: Disable timestamp functionality if not supported
    - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during
      TGT_RESET
    - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in
      lpfc_cleanup
    - scsi: lpfc: Define size of debugfs entry for xri rebalancing
    - allow finish_no_open(file, ERR_PTR(-E...))
    - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
    - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
    - ipv6: np->rxpmtu race annotation
    - ASoC: qcom: sc8280xp: explicitly set S16LE format in
      sc8280xp_be_hw_params_fixup()
    - net: phy: clear link parameters on admin link down
    - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
    - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
    - wifi: ath10k: Fix connection after GTK rekeying
    - net: intel: fm10k: Fix parameter idx set but not used
    - sparc/module: Add R_SPARC_UA64 relocation handling
    - sparc64: fix prototypes of reads[bwl]()
    - vfio: return -ENOTTY for unsupported device feature
    - PCI/PM: Skip resuming to D0 if device is disconnected
    - remoteproc: qcom: q6v5: Avoid handling handover twice
    - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
    - drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
    - NFSv4: handle ERR_GRACE on delegation recalls
    - NFSv4.1: fix mount hang after CREATE_SESSION failure
    - net: bridge: Install FDB for bridge MAC on VLAN 0
    - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
    - accel/habanalabs/gaudi2: fix BMON disable configuration
    - scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
    - accel/habanalabs: return ENOMEM if less than requested pages were pinned
    - accel/habanalabs/gaudi2: read preboot status after recovering from dirty
      state
    - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
    - ext4: increase IO priority of fastcommit
    - ASoC: stm32: sai: manage context in set_sysclk callback
    - ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
    - net/mlx5e: Don't query FEC statistics when FEC is disabled
    - net: macb: avoid dealing with endianness in macb_set_hwaddr()
    - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI
      frames
    - ALSA: usb-audio: add mono main switch to Presonus S1824c
    - exfat: limit log print for IO error
    - 6pack: drop redundant locking and refcounting
    - page_pool: Clamp pool size to max 16K pages
    - ksmbd: use sock_create_kern interface to create kernel socket
    - smb: client: transport: avoid reconnects triggered by pending task work
    - char: misc: restrict the dynamic range to exclude reserved minors
    - ACPICA: Update dsmethod.c to get rid of unused variable warning
    - RDMA/irdma: Fix SD index calculation
    - RDMA/irdma: Remove unused struct irdma_cq fields
    - RDMA/irdma: Set irdma_cq cq_num field during CQ create
    - RDMA/hns: Fix the modification of max_send_sge
    - RDMA/hns: Fix wrong WQE data when QP wraps around
    - btrfs: mark dirty extent range for out of bound prealloc extents
    - fs/hpfs: Fix error code for new_inode() failure in
      mkdir/create/mknod/symlink
    - um: Fix help message for ssl-non-raw
    - clk: sunxi-ng: sun6i-rtc: Add A523 specifics
    - rtc: pcf2127: clear minute/second interrupt
    - ARM: at91: pm: save and restore ACR during PLL disable/enable
    - clk: at91: clk-master: Add check for divide by 3
    - clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
    - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
    - NTB: epf: Allow arbitrary BAR mapping
    - 9p: fix /sys/fs/9p/caches overwriting itself
    - cpufreq: tegra186: Initialize all cores to max frequencies
    - 9p: sysfs_init: don't hardcode error to ENOMEM
    - scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
    - ACPI: property: Return present device nodes only on fwnode interface
    - tools bitmap: Add missing asm-generic/bitsperlong.h include
    - tools: lib: thermal: don't preserve owner in install
    - tools: lib: thermal: use pkg-config to locate libnl3
    - rtc: pcf2127: fix watchdog interrupt mask on pcf2131
    - kbuild: uapi: Strip comments before size type check
    - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
    - ceph: add checking of wait_for_completion_killable() return value
    - ceph: refactor wake_up_bit() pattern of calling
    - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
    - media: uvcvideo: Use heuristic to find stream entity
    - net: libwx: fix device bus LAN ID
    - riscv: Improve exception and system call latency
    - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
    - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
    - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for
      bcm63xx
    - selftests/net: fix out-of-order delivery of FIN in gro:tcp test
    - selftests/net: use destination options instead of hop-by-hop
    - netdevsim: add Makefile for selftests
    - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing
      ethtool-common.sh
    - net: vlan: sync VLAN features with lower device
    - net: dsa: b53: fix resetting speed and pause on forced link
    - net: dsa: b53: fix enabling ip multicast
    - net: dsa: b53: stop reading ARL entries if search is done
    - sctp: Hold RCU read lock while iterating over address list
    - sctp: Hold sock lock while iterating over address list
    - bnxt_en: Fix a possible memory leak in bnxt_ptp_init
    - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
    - net/mlx5e: Use extack in get module eeprom by page callback
    - net/mlx5e: Fix return value in case of module EEPROM read error
    - net/mlx5e: SHAMPO, Fix skb size check for 64K pages
    - net: dsa: microchip: Fix reserved multicast address table programming
    - net: bridge: fix MST static key usage
    - tracing: Fix memory leaks in create_field_var()
    - drm/amd/display: Enable mst when it's detected but yet to be initialized
    - rtc: rx8025: fix incorrect register reference
    - x86/microcode/AMD: Add more known models to entry sign checking
    - smb: client: validate change notify buffer before copy
    - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
    - scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
    - extcon: adc-jack: Cleanup wakeup source only if it was enabled
    - drm/amdgpu: Fix function header names in amdgpu_connectors.c
    - drm/amd/display: Fix black screen with HDMI outputs
    - riscv: stacktrace: fix backtracing through exceptions
    - selftests: netdevsim: set test timeout to 10 minutes
    - drm/i915: Fix conversion between clock ticks and nanoseconds
    - smb: client: fix refcount leak in smb2_set_path_attr
    - iommufd: Make vfio_compat's unmap succeed if the range is already empty
    - drm/amd: Fix suspend failure with secure display TA
    - compiler_types: Move unused static inline functions warning to W=2
    - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid
      rfence errors
    - riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
    - drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
    - NFS4: Fix state renewals missing after boot
    - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
    - NFS: check if suid/sgid was cleared after a write as needed
    - HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
    - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
    - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
    - selftests: net: local_termination: Wait for interfaces to come up
    - net: fec: correct rx_bytes statistic for the case SHIFT16 is set
    - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
    - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
    - net/smc: fix mismatch between CLC header and proposal
    - net/handshake: Fix memory leak in tls_handshake_accept()
    - net: mdio: fix resource leak in mdiobus_register_device()
    - wifi: mac80211: skip rate verification for not captured PSDUs
    - net_sched: act_connmark: use RCU in tcf_connmark_dump()
    - net/mlx5e: Fix maxrate wraparound in threshold between units
    - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
    - net/mlx5e: Fix potentially misleading debug message
    - net_sched: limit try_bulk_dequeue_skb() batches
    - virtio-net: fix incorrect flags recording in big mode
    - hsr: Fix supervision frame sending on HSRv0
    - ACPI: CPPC: Check _CPC validity for only the online CPUs
    - ACPI: CPPC: Perform fast check switch only for online CPUs
    - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
    - Bluetooth: L2CAP: export l2cap_chan_hold for modules
    - cifs: stop writeback extension when change of size is detected
    - cifs: Fix uncached read into ITER_KVEC iterator
    - acpi,srat: Fix incorrect device handle check for Generic Initiator
    - regulator: fixed: fix GPIO descriptor leak on register failure
    - ASoC: cs4271: Fix regulator leak on probe failure
    - ASoC: codecs: va-macro: fix resource leak in probe error path
    - ASoC: tas2781: fix getting the wrong device number
    - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
    - NFS: enable nconnect for RDMA
    - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
    - NFS: sysfs: fix leak when nfs_client kobject add fails
    - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
    - acpi/hmat: Fix lockdep warning for hmem_register_resource()
    - irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
    - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
    - mtd: onenand: Pass correct pointer to IRQ handler
    - arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
    - ARM: dts: imx51-zii-rdu1: Fix audmux node names
    - HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
    - ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
    - HID: uclogic: Fix potential memory leak in error path
    - KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
    - gcov: add support for GCC 15
    - strparser: Fix signed/unsigned mismatch bug
    - dma-mapping: benchmark: Restore padding to ensure uABI remained
      consistent
    - LoongArch: Use correct accessor to read FWPC/MWPC
    - LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
    - selftests/tracing: Run sample events to clear page cache events
    - wifi: mac80211: reject address change while connecting
    - mm/mm_init: fix hash table order logging in alloc_large_system_hash()
    - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
    - crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
    - smb: client: fix cifs_pick_channel when channel needs reconnect
    - spi: Try to get ACPI GPIO IRQ earlier
    - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
    - selftests/user_events: fix type cast for write_index packed member in
      perf_test
    - LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
    - EDAC/altera: Handle OCRAM ECC enable after warm reset
    - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
    - btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
    - btrfs: do not update last_log_commit when logging inode due to a new
      name
    - pmdomain: samsung: plug potential memleak during probe
    - selftests: mptcp: connect: fix fallback note due to OoO
    - selftests: mptcp: join: rm: set backup flag
    - selftests: mptcp: connect: trunc: read all recv data
    - Revert "perf dso: Add missed dso__put to dso__load_kcore"
    - mm, percpu: do not consider sleepable allocations atomic
    - netpoll: remove netpoll_srcu
    - net: netpoll: Individualize the skb pool
    - net: netpoll: flush skb pool during cleanup
    - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
    - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
    - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
    - scsi: ufs: core: Add fill_crypto_prdt variant op
    - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
    - scsi: ufs: core: Add a quirk for handling broken LSDBS field in
      controller capabilities register
    - scsi: ufs: core: Add a quirk to suppress link_startup_again
    - scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel
      ADL
    - filemap: cap PTE range to be created to allowed zero fill in
      folio_map_range()
    - mm/memory: do not populate page table entries beyond i_size
    - mm/truncate: unmap large folio on split failure
    - net: netpoll: ensure skb_pool list is always initialized
    - memory tiers: use default_dram_perf_ref_source in log message
    - memcg: fix data-race KCSAN bug in rstats
    - s390/pci: Restore IRQ unconditionally for the zPCI device
    - wifi: ath11k: add support for MU EDCA
    - wifi: ath11k: avoid bit operation on key flags
    - wifi: mac80211: don't mark keys for inactive links as uploaded
    - wifi: mac80211: fix key tailroom accounting leak
    - kunit: test_dev_action: Correctly cast 'priv' pointer to long*
    - bpf: Find eligible subprogs for private stack support
    - bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth
    - bpf: Do not audit capability check in do_jit()
    - Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave
    - Bluetooth: ISO: Fix BIS connection dst_type handling
    - dpll: spec: add missing module-name and clock-id to pin-get reply
    - ASoC: fsl_sai: Fix sync error in consumer mode
    - ACPI: fan: Use ACPI handle when retrieving _FST
    - drm/sched: avoid killing parent entity on child SIGKILL
    - drm/nouveau: Fix race in nouveau_sched_fini()
    - drm/ast: Clear preserved bits from register output value
    - drm/amd: Check that VPE has reached DPM0 in idle handler
    - drm/amd/display: Fix incorrect return of vblank enable on unconfigured
      crtc
    - firmware: qcom: scm: preserve assign_mem() error return value
    - soc: ti: pruss: don't use %pK through printk
    - bpf: Use tnums for JEQ/JNE is_branch_taken logic
    - ACPI: video: force native for Lenovo 82K8
    - libbpf: Fix USDT SIB argument handling causing unrecognized register
      error
    - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU
    - thermal: gov_step_wise: Allow cooling level to be reduced earlier
    - thermal: intel: selftests: workload_hint: Mask unsupported types
    - cpufreq: ondemand: Update the efficient idle check for Intel extended
      Families
    - pwm: pca9685: Use bulk write to atomicially update registers
    - i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C
    - hwmon: (dell-smm) Remove Dell Precision 490 custom config data
    - selftests/bpf: Fix flaky bpf_cookie selftest
    - mfd: core: Increment of_node's refcount before linking it to the
      platform device
    - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs
    - drm/amdgpu: add range check for RAS bad page address
    - drm/amdgpu: Check vcn sram load return value
    - ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks
    - drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off
    - wifi: rtw89: print just once for unknown C2H events
    - PCI/ERR: Update device error_state already after reset
    - scsi: ufs: host: mediatek: Fix PWM mode switch issue
    - HID: pidff: Use direction fix only for conditional effects
    - HID: pidff: PERMISSIVE_CONTROL quirk autodetection
    - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID
    - dm error: mark as DM_TARGET_PASSES_INTEGRITY
    - bnxt_en: Add Hyper-V VF ID
    - idpf: do not linearize big TSO packets
    - net: wangxun: limit tx_max_coalesced_frames_irq
    - rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table
    - net: ipv4: allow directed broadcast routes to use dst hint
    - scsi: mpi3mr: Fix I/O failures during controller reset
    - drm/amd/display: Support HW cursor 180 rot for any number of pipe splits
    - media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS
    - ASoC: SOF: ipc4-pcm: Add fixup for channels
    - drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest
    - inet_diag: annotate data-races in inet_diag_bc_sk()
    - scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on
      suspend
    - drm/xe/guc: Increase GuC crash dump buffer size
    - drm: panel-backlight-quirks: Make EDID match optional
    - PCI: imx6: Enable the Vaux supply if available
    - drm/xe/guc: Set upper limit of H2G retries over CTB
    - crypto: ccp: Skip SEV and SNP INIT for kdump boot
    - drm/amd/display: Fix pbn_div Calculation Error
    - tty/vt: Add missing return value for VT_RESIZE in vt_ioctl()
    - PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs
    - selftests: mptcp: join: allow more time to send ADD_ADDR
    - scsi: ufs: host: mediatek: Correct system PM flow
    - selftests: traceroute: Return correct value on failure
    - openrisc: Add R_OR1K_32_PCREL relocation type module support
    - wifi: mt76: mt76_eeprom_override to int
    - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error
    - drm/amd/display: Set up pixel encoding for YCBCR422
    - drm/amd/display: fix dml ms order of operations
    - scsi: lpfc: Clean up allocated queues when queue setup mbox commands
      fail
    - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted
    - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point
      topology
    - wifi: rtw89: renew a completion for each H2C command waiting C2H event
    - usb: xhci-pci: add support for hosts with zero USB3 ports
    - RDMA/ipoib: Remove NULL check before dev_{put, hold}
    - IB/ipoib: Ignore L3 master device
    - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state
    - wifi: mac80211: Track NAN interface start/stop
    - crypto: hisilicon/qm - invalidate queues in use
    - crypto: hisilicon/qm - adjust the internal processing sequence of the vf
      enable and disable
    - crypto: hisilicon/qm - clear all VF configurations in the hardware
    - selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt
    - net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463
    - drm/amd/display: Init dispclk from bootup clock for DCN314
    - drm/amd/display: Fix for test crash due to power gating
    - drm/amd/display: change dc stream color settings only in atomic commit
    - ACPI: scan: Update honor list for RPMI System MSI
    - vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices
    - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922
    - net: stmmac: est: Drop frames causing HLBS error
    - usb: xhci-pci: Fix USB2-only root hub registration
    - drm/amd/display: Add fallback path for YCBCR422
    - RDMA/hns: Fix recv CQ and QP cache affinity
    - clk: clocking-wizard: Fix output clock register offset for Versal
      platforms
    - LoongArch: Handle new atomic instructions for probes
    - net: wwan: t7xx: add support for HP DRMR-H01
    - ceph: fix potential race condition in ceph_ioctl_lazyio()
    - net: ionic: add dma_wmb() before ringing TX doorbell
    - net: ionic: map SKB after pseudo-header checksum prep
    - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type
    - bnxt_en: Refactor bnxt_free_ctx_mem()
    - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem()
    - net: wan: framer: pef2256: Switch to devm_mfd_add_devices()
    - drm/amdgpu/smu: Handle S0ix for vangogh
    - drm/amd/display: update color on atomic commit time
    - drm/mediatek: Add pm_runtime support for GCE power control
    - arm64: kprobes: check the return value of set_memory_rox()
    - NFS4: Apply delay_retrans to async operations
    - HID: nintendo: Wait longer for initial probe
    - HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL
    - NFSD: Skip close replay processing if XDR encoding fails
    - net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout
    - net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism
    - proc: fix the issue of proc_mem_open returning NULL
    - ext4: introduce ITAIL helper
    - LoongArch: KVM: Add delay until timer interrupt injected
    - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes
    - ftrace: Fix BPF fexit with livepatch
    - btrfs: zoned: fix conventional zone capacity calculation
    - btrfs: release root after error in data_reloc_print_warning_inode()
    - pmdomain: imx: Fix reference count leak in imx_gpc_remove
    - selftests: mptcp: join: userspace: longer transfer
    - selftests: mptcp: join: properly kill background tasks
    - wifi: cfg80211: add an hrtimer based delayed work item
    - proc: proc_maps_open allow proc_mem_open to return NULL
    - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
    - Upstream stable to v6.6.117, v6.12.58, v6.12.59
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68204
    - pmdomain: arm: scmi: Fix genpd leak on provider registration failure
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-22107
    - net: dsa: sja1105: fix kasan out-of-bounds warning in
      sja1105_table_delete_entry()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-39981
    - Bluetooth: MGMT: Fix possible UAFs
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-22121
    - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-23129
    - wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq()
      in error path
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40287
    - exfat: fix improper check of dentry.stream.valid_size
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40289
    - drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68201
    - drm/amdgpu: remove two invalid BUG_ON()s
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68180
    - drm/amd/display: Fix NULL deref in debugfs odm_combine_segments
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68322
    - parisc: Avoid crash due to unaligned access in unwinder
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40305
    - 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40307
    - exfat: validate cluster allocation bits of the allocation bitmap
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68190
    - drm/amdgpu/atom: Check kcalloc() for WS buffer in
      amdgpu_atom_execute_table_locked()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68315
    - f2fs: fix to detect potential corrupted nid in free_nid_list
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40339
    - drm/amdgpu: fix nullptr err of vm_handle_moved
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68311
    - tty: serial: ip22zilog: Use platform device for probing
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68313
    - x86/CPU/AMD: Add RDSEED fix for Zen5
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40360
    - drm/sysfb: Do not dereference NULL pointer in plane reset
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68734
    - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40272
    - mm/secretmem: fix use-after-free race in fault handler
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40077
    - f2fs: fix to avoid overflow while left shift operation
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68245
    - net: netpoll: fix incorrect refcount handling causing incorrect cleanup
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40293
    - iommufd: Don't overflow during division for dirty tracking
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40303
    - btrfs: ensure no dirty metadata is written back for an fs with errors
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68184
    - drm/mediatek: Disable AFBC support on Mediatek DRM driver
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40268
    - cifs: client: fix memory leak in smb3_fs_context_parse_param
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40269
    - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40271
    - fs/proc: fix uaf in proc_readdir_de()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68241
    - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68246
    - ksmbd: close accepted socket when per-IP limit rejects connection
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40273
    - NFSD: free copynotify stateid in nfs4_free_ol_stateid()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68208
    - bpf: account for current allocated stack depth in
      widen_imprecise_scalars()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68200
    - bpf: Add bpf_prog_run_data_pointers()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40275
    - ALSA: usb-audio: Fix NULL pointer dereference in
      snd_usb_mixer_controls_badd
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40277
    - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40278
    - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-
      infoleak
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40279
    - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40280
    - tipc: Fix use-after-free in tipc_mon_reinit_self().
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40281
    - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40282
    - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40283
    - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40284
    - Bluetooth: MGMT: cancel mesh send timer when hdev removed
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40285
    - smb/server: fix possible refcount leak in smb2_sess_setup()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40286
    - smb/server: fix possible memory leak in smb2_read()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40288
    - drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68244
    - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40292
    - virtio-net: fix received length check in big packets
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40328
    - smb: client: fix potential UAF in smb2_close_cached_fid()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40294
    - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40329
    - drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68320
    - lan966x: Fix sleeping in atomic context
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68192
    - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40331
    - sctp: Prevent TOCTOU out-of-bounds write
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40301
    - Bluetooth: hci_event: validate skb length for unknown CC opcode
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40358
    - riscv: stacktrace: Disable KASAN checks for non-current tasks
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40304
    - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68183
    - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68173
    - ftrace: Fix softlockup in ftrace_module_enable
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40306
    - orangefs: fix xattr related buffer overflow...
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40308
    - Bluetooth: bcsp: receive data only if registered
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40309
    - Bluetooth: SCO: Fix UAF on sco_conn_free
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40310
    - amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40311
    - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68185
    - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode
      dereferencing
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68176
    - PCI: cadence: Check for the existence of cdns_pcie::ops before using it
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68168
    - jfs: fix uninitialized waitqueue in transaction manager
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40312
    - jfs: Verify inode mode when loading from disk
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40333
    - f2fs: fix infinite loop in __insert_extent_tree()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68321
    - page_pool: always add GFP_NOWARN for ATOMIC allocations
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68191
    - udp_tunnel: use netdev_warn() instead of netdev_WARN()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40313
    - ntfs3: pretend $Extend records as regular files
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40314
    - usb: cdns3: gadget: Use-after-free during failed initialization and exit
      of cdnsp gadget
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40337
    - net: stmmac: Correctly handle Rx checksum offload errors
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68194
    - media: imon: make send_packet() more robust
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40363
    - net: ipv6: fix field-spanning memcpy warning in AH output
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68178
    - blk-cgroup: fix possible deadlock while configuring policy
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40341
    - futex: Don't leak robust_list pointer on exec race
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40342
    - nvme-fc: use lock accessing port_state and rport state
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40343
    - nvmet-fc: avoid scheduling association deletion twice
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68177
    - cpufreq/longhaul: handle NULL policy in longhaul_exit
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40315
    - usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68310
    - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68179
    - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40317
    - regmap: slimbus: fix bus_context pointer in regmap init calls
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40318
    - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68312
    - usbnet: Prevents free active kevent
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68172
    - crypto: aspeed - fix double free caused by devm
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40319
    - bpf: Sync pending IRQ work before freeing ring buffer
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-68171
    - x86/fpu: Ensure XFD state on signal delivery
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40320
    - smb: client: fix potential cfid UAF in smb2_query_info_compound
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40321
    - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP
      Mode
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40322
    - fbdev: bitblit: bound-check glyph index in bit_putcs*
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40211
    - ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40323
    - fbcon: Set fb_display[i]->mode to NULL when the mode is released
  * Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
    CVE-2025-40324
    - NFSD: Fix crash in nfsd4_read_release()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282)
    - exec: Fix incorrect type for ret
    - hfs: clear offset and space out of valid records in b-tree node
    - hfs: make proper initalization of struct hfs_find_data
    - dlm: check for defined force value in dlm_lockspace_release
    - hfsplus: return EIO when type of hidden directory mismatch in
      hfsplus_fill_super()
    - lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
    - m68k: bitops: Fix find_*_bit() signatures
    - powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
    - drivers/perf: hisi: Relax the event ID check in the framework
    - smb: server: let smb_direct_flush_send_list() invalidate a remote key
      first
    - Unbreak 'make tools/*' for user-space targets
    - net/mlx5e: Return 1 instead of 0 in invalid case in
      mlx5e_mpwrq_umr_entry_size()
    - rtnetlink: Allow deleting FDB entries in user namespace
    - net: enetc: correct the value of ENETC_RXB_TRUESIZE
    - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
    - can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of
      can_dropped_invalid_skb()
    - selftests: net: fix server bind failure in sctp_vrf.sh
    - net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
    - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ
    - arm64, mm: avoid always making PTE dirty in pte_mkwrite()
    - net: bonding: fix possible peer notify event loss or dup issue
    - dma-debug: don't report false positives with
      DMA_BOUNCE_UNALIGNED_KMALLOC
    - gpio: pci-idio-16: Define maximum valid register address offset
    - gpio: 104-idio-16: Define maximum valid register address offset
    - Revert "cpuidle: menu: Avoid discarding useful information"
    - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
    - can: netlink: can_changelink(): allow disabling of automatic restart
    - cifs: Fix TCP_Server_Info::credits to be signed
    - MIPS: Malta: Fix keyboard resource preventing i8042 driver from
      registering
    - net: stmmac: dwmac-rk: Fix disabling set_clock_selection
    - net: usb: rtl8150: Fix frame padding
    - net: ravb: Enforce descriptor type ordering
    - net: ravb: Ensure memory write completes before ringing TX doorbell
    - selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
    - selftests: mptcp: join: mark implicit tests as skipped if not supported
    - spi: spi-nxp-fspi: add extra delay after dll locked
    - firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw
      mode
    - RISC-V: Define pgprot_dmacoherent() for non-coherent devices
    - RISC-V: Don't print details of CPUs disabled in DT
    - hwmon: (sht3x) Fix error handling
    - gpio: ljca: Fix duplicated IRQ mapping
    - io_uring: correct __must_hold annotation in io_install_fixed_file
    - sched: Remove never used code in mm_cid_get()
    - USB: serial: option: add UNISOC UIS7720
    - USB: serial: option: add Quectel RG255C
    - USB: serial: option: add Telit FN920C04 ECM compositions
    - usb/core/quirks: Add Huawei ME906S to wakeup quirk
    - usb: raw-gadget: do not limit transfer length
    - xhci: dbc: enable back DbC in resume if it was enabled before suspend
    - x86/microcode: Fix Entrysign revision check for Zen1/Naples
    - binder: remove "invalid inc weak" check
    - mei: me: add wildcat lake P DID
    - misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
    - tcpm: switch check for role_sw device with fw_node
    - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
    - serial: 8250_dw: handle reset control deassert error
    - serial: 8250_exar: add support for Advantech 2 port card with Device ID
      0x0018
    - serial: 8250_mtk: Enable baud clock and manage in runtime PM
    - devcoredump: Fix circular locking dependency with devcd->mutex.
    - xfs: always warn about deprecated mount options
    - fuse: allocate ff->release_args only if release is needed
    - audit: record fanotify event regardless of presence of rules
    - perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of
      current->mm == NULL
    - perf: Have get_perf_callchain() return NULL if crosstask and user are
      set
    - perf: Skip user unwind if the task is a kernel thread
    - x86/bugs: Report correct retbleed mitigation status
    - x86/bugs: Fix reporting of LFENCE retpoline
    - EDAC/mc_sysfs: Increase legacy channel support to 16
    - btrfs: zoned: return error from btrfs_zone_finish_endio()
    - btrfs: zoned: refine extent allocator hint selection
    - btrfs: scrub: replace max_t()/min_t() with clamp() in
      scrub_throttle_dev_io()
    - btrfs: always drop log root tree reference in btrfs_replay_log()
    - btrfs: use level argument in log tree walk callback replay_one_buffer()
    - btrfs: use smp_mb__after_atomic() when forcing COW in
      create_pending_snapshot()
    - arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
    - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
    - selftests: mptcp: disable add_addr retrans in endpoint_tests
    - selftests: mptcp: join: mark 'delete re-add signal' as skipped if not
      supported
    - serial: sc16is7xx: remove useless enable of enhanced features
    - xhci: dbc: poll at different rate depending on data transfer activity
    - xhci: dbc: Allow users to modify DbC poll interval via sysfs
    - xhci: dbc: Improve performance by removing delay in transfer event
      polling.
    - xhci: dbc: Avoid event polling busyloop if pending rx transfers are
      inactive.
    - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall
      event
    - bits: add comments and newlines to #if, #else and #endif directives
    - bits: introduce fixed-type GENMASK_U*()
    - gpio: regmap: Allow to allocate regmap-irq device
    - gpio: regmap: add the .fixed_direction_output configuration parameter
    - gpio: idio-16: Define fixed direction of the GPIO lines
    - PCI: Test for bit underflow in pcie_set_readrq()
    - arm64: sysreg: Correct sign definitions for EIESB and DoubleLock
    - s390/mm: Use __GFP_ACCOUNT for user page table allocations
    - ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop
    - riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id()
    - perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK
    - cpuset: Use new excpus for nocpu error check when enabling root
      partition
    - btrfs: abort transaction on specific error places when walking log tree
    - btrfs: abort transaction in the process_one_buffer() log tree walk
      callback
    - btrfs: abort transaction if we fail to update inode in log replay dir
      fixup
    - btrfs: tree-checker: add inode extref checks
    - docs: kdoc: handle the obsolescensce of docutils.ErrorString()
    - bonding: return detailed error when loading native XDP fails
    - btrfs: tree-checker: fix bounds check in check_inode_extref()
    - Upstream stable to v6.6.115, v6.6.116, v6.12.56, v6.12.57
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-37860
    - sfc: fix NULL dereferences in ef100_process_design_param()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-21833
    - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-22105
    - bonding: check xdp prog when set bond mode
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-38643
    - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-23130
    - f2fs: fix to avoid panic once fallocation fails for pinfile
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40353
    - arm64: mte: Do not warn if the page is already tagged in copy_highpage()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-39678
    - platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40235
    - btrfs: directly free partially initialized fs_info in
      btrfs_check_leaked_roots()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40238
    - net/mlx5: Fix IPsec cleanup over MPV device
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40242
    - gfs2: Fix unlikely race in gdlm_put_lock
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40083
    - net/sched: sch_qfq: Fix null-deref in agg_dequeue
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40084
    - ksmbd: transport_ipc: validate payload size before reading handle
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40220
    - fuse: fix livelock in synchronous file put from fuseblk workers
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40237
    - fs/notify: call exportfs_encode_fid with s_umount
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-68249
    - most: usb: hdm_probe: Fix calling put_device() before device
      initialization
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40223
    - most: usb: Fix use-after-free in hdm_disconnect
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40106
    - comedi: fix divide-by-zero in comedi_buf_munge()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40226
    - firmware: arm_scmi: Account for failed debug initialization
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40231
    - vsock: fix lock inversion in vsock_assign_transport()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40233
    - ocfs2: clear extent cache after moving/defragmenting extents
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40346
    - arch_topology: Fix incorrect error check in
      topology_parse_cpu_capacity()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40240
    - sctp: avoid NULL dereference when chunk data buffer is missing
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40350
    - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding
      RQ
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40347
    - net: enetc: fix the deadlock of enetc_mdio_lock
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40243
    - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40351
    - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40349
    - hfs: validate record offset in hfsplus_bmap_alloc
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40244
    - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
  * Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
    CVE-2025-40245
    - nios2: ensure that memblock.current_limit is set when setting pfn limits
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267)
    - r8152: add error handling in rtl8152_driver_init
    - f2fs: fix wrong block mapping for multi-devices
    - jbd2: ensure that all ongoing I/O complete before freeing blocks
    - ext4: wait for ongoing I/O to complete before freeing blocks
    - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already
      running
    - btrfs: fix incorrect readahead expansion length
    - can: gs_usb: gs_make_candev(): populate net_device->dev_port
    - can: gs_usb: increase max interface to U8_MAX
    - drm/amdgpu: use atomic functions with memory barriers for vm fault info
    - drm/amd: Check whether secure display TA loaded successfully
    - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
    - epoll: Remove ep_scan_ready_list() in comments
    - eventpoll: Replace rwlock with spinlock
    - drm/msm/adreno: De-spaghettify the use of memory barriers
    - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in
      functions
    - drm/exynos: exynos7_drm_decon: properly clear channels during bind
    - drm/exynos: exynos7_drm_decon: remove ctx->suspended
    - media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
    - usb: gadget: Store endpoint pointer in usb_request
    - usb: gadget: Introduce free_usb_request helper
    - HID: multitouch: fix sticky fingers
    - dax: skip read lock assertion for read-only filesystems
    - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
    - net: dlink: handle dma_map_single() failure properly
    - doc: fix seg6_flowlabel path
    - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
    - amd-xgbe: Avoid spurious link down messages during interface toggle
    - tcp: fix tcp_tso_should_defer() vs large RTT
    - tg3: prevent use of uninitialized remote_adv and local_adv variables
    - tls: trim encrypted message to match the plaintext on short splice
    - net: tls: wait for async completion on last message
    - tls: wait for async encrypt in case of error during latter iterations of
      sendmsg
    - tls: always set record_type in tls_process_cmsg
    - tls: don't rely on tx_work during send()
    - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
    - net: usb: lan78xx: fix use of improperly initialized dev->chipid in
      lan78xx_reset
    - nvme-multipath: Skip nr_active increments in RETRY disposition
    - riscv: kprobes: Fix probe address validation
    - drm/bridge: lt9211: Drop check for last nibble of version register
    - ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
    - ASoC: nau8821: Cancel jdet_work before handling jack ejection
    - ASoC: nau8821: Generalize helper to clear IRQ status
    - ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
    - drm/i915/guc: Skip communication warning on reset in progress
    - drm/amd/powerplay: Fix CIK shutdown temperature
    - drm/rockchip: vop2: use correct destination rectangle height check
    - sched/balancing: Rename newidle_balance() => sched_balance_newidle()
    - sched/fair: Fix pelt lost idle time detection
    - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
    - selftests/bpf: make arg_parsing.c more robust to crashes
    - HID: hid-input: only ignore 0 battery events for digitizers
    - HID: multitouch: fix name of Stylus input devices
    - selftests: arg_parsing: Ensure data is flushed to disk before reading.
    - arm64: cputype: Add Neoverse-V3AE definitions
    - arm64: errata: Apply workarounds for Neoverse-V3AE
    - NFSD: Rework encoding and decoding of nfsd4_deviceid
    - NFSD: Minor cleanup in layoutcommit processing
    - xfs: rename the old_crc variable in xlog_recover_process
    - xfs: fix log CRC mismatches between i386 and other architectures
    - PM: runtime: Add new devm functions
    - iio: imu: inv_icm42600: Simplify pm_runtime setup
    - phy: cdns-dphy: Store hs_clk_rate and return it
    - phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
    - iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
    - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime
      suspended
    - quota: remove unneeded return value of register_quota_format
    - phy: cadence: cdns-dphy: Update calibration wait time for startup state
      machine
    - PCI: Add PCI_VDEVICE_SUB helper macro
    - ixgbevf: Add support for Intel(R) E610 device
    - ixgbevf: fix getting link speed data for E610 devices
    - nfsd: decouple the xprtsec policy check from check_nfsd_access()
    - PCI/sysfs: Ensure devices are powered for config reads (part 2)
    - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
    - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl"
      exists
    - PCI: j721e: Fix programming sequence of "strap" settings
    - perf/core: Fix address filter match with backing files
    - perf/core: Fix MMAP event path names with backing files
    - perf/core: Fix MMAP2 event device with backing files
    - drm/msm/a6xx: Fix PDC sleep sequence
    - can: m_can: m_can_handle_state_errors(): fix CAN state transition to
      Error Active
    - can: m_can: m_can_chip_config(): bring up interface in correct state
    - drm/amdgpu: add ip offset support for cyan skillfish
    - drm/amdgpu: add support for cyan skillfish without IP discovery
    - drm/amdgpu: fix handling of harvesting for ip_discovery firmware
    - nvme/tcp: handle tls partially sent records in write_space()
    - nfsd: Use correct error code when decoding extents
    - nfsd: Drop dprintk in blocklayout xdr functions
    - NFSD: Implement large extent array support in pNFS
    - NFSD: Fix last write offset handling in layoutcommit
    - wifi: rtw89: avoid possible TX wait initialization race
    - xfs: use deferred intent items for reaping crosslinked blocks
    - md/raid0: Handle bio_split() errors
    - md/raid1: Handle bio_split() errors
    - md/raid10: Handle bio_split() errors
    - md: fix mssing blktrace bio split events
    - x86/resctrl: Refactor resctrl_arch_rmid_read()
    - x86/resctrl: Fix miscount of bandwidth event when reactivating
      previously unavailable RMID
    - d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier
    - dmaengine: Add missing cleanup on module unload
    - Upstream stable to v6.6.114, v6.12.55
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40105
    - vfs: Don't leak disconnected dentries on umount
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40092
    - usb: gadget: f_ncm: Refactor bind path to use __free()
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40101
    - btrfs: fix memory leaks when rejecting a non SINGLE data profile without
      an RST
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40166
    - drm/xe/guc: Check GuC running state before deregistering exec queue
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40104
    - ixgbevf: fix mailbox API compatibility by negotiating supported features
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40087
    - NFSD: Define a proc_layoutcommit for the FlexFiles layout type
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40196
    - fs: quota: create dedicated workqueue for quota_release_work
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40088
    - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40085
    - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40172
    - accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40176
    - tls: wait for pending async decryptions if tls_strp_msg_hold fails
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40173
    - net/ip6_tunnel: Prevent perpetual tunnel growth
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40095
    - usb: gadget: f_rndis: Refactor bind path to use __free()
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40094
    - usb: gadget: f_acm: Refactor bind path to use __free()
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40093
    - usb: gadget: f_ecm: Refactor bind path to use __free()
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40165
    - media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40096
    - drm/sched: Fix potential double free in
      drm_sched_job_add_resv_dependencies
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40099
    - cifs: parse_dfs_referrals: prevent oob on malformed input
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40100
    - btrfs: do not assert we found block group item when creating free space
      tree
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40167
    - ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  * Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
    CVE-2025-40103
    - smb: client: Fix refcount leak for cifs_sb_tlink
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158)
    - fs: always return zero on success from replace_fd()
    - fscontext: do not consume log entries when returning -EMSGSIZE
    - clocksource/drivers/clps711x: Fix resource leaks in error paths
    - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
    - asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
    - perf evsel: Avoid container_of on a NULL leader
    - libperf event: Ensure tracing data is multiple of 8 sized
    - clk: at91: peripheral: fix return value
    - perf util: Fix compression checks returning -1 as bool
    - rtc: x1205: Fix Xicor X1205 vendor prefix
    - rtc: optee: fix memory leak on driver removal
    - perf arm_spe: Correct setting remote access
    - perf arm-spe: Rename the common data source encoding
    - perf arm_spe: Correct memory level for remote access
    - perf session: Fix handling when buffer exceeds 2 GiB
    - perf test: Don't leak workload gopipe in PERF_RECORD_*
    - perf test: Add a test for default perf stat command
    - perf tools: Add fallback for exclude_guest
    - perf evsel: Ensure the fallback message is always written to
    - clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
    - clk: mediatek: clk-mux: Do not pass flags to
      clk_mux_determine_rate_flags()
    - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
    - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
    - clk: tegra: do not overallocate memory for bpmp clocks
    - ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
    - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
    - LoongArch: Init acpi_gbl_use_global_lock to false
    - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
    - drm/vmwgfx: Fix copy-paste typo in validation
    - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
    - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
    - tools build: Align warning options with perf
    - perf python: split Clang options when invoking Popen
    - tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
    - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
    - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
    - drm/amdgpu: Add additional DCE6 SCL registers
    - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
    - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
    - drm/amd/display: Properly disable scaling on DCE6
    - netfilter: nf_tables: drop unused 3rd argument from validate callback
      ops
    - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
    - smb: client: fix missing timestamp updates after utime(2)
    - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
    - gpio: wcd934x: mark the GPIO controller as sleeping
    - bpf: Avoid RCU context warning when unpinning htab with internal structs
    - ACPI: property: Fix buffer properties extraction for subnodes
    - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
    - ACPI: debug: fix signedness issues in read/write helpers
    - arm64: dts: qcom: msm8916: Add missing MDSS reset
    - arm64: dts: qcom: msm8939: Add missing MDSS reset
    - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
    - arm64: dts: ti: k3-am62a-main: Fix main padcfg length
    - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in
      amx3_idle_init
    - dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-
      required
    - xen/events: Cleanup find_virq() return codes
    - xen/manage: Fix suspend error path
    - xen/events: Update virq_to_irq on migration
    - firmware: meson_sm: fix device leak at probe
    - media: cx18: Add missing check after DMA map
    - media: i2c: mt9v111: fix incorrect type for ret
    - media: mc: Fix MUST_CONNECT handling for pads with no links
    - media: pci: ivtv: Add missing check after DMA map
    - media: venus: firmware: Use correct reset sequence for IRIS2
    - media: lirc: Fix error handling in lirc_register()
    - drm/rcar-du: dsi: Fix 1/2/3 lane support
    - drm/nouveau: fix bad ret code in nouveau_bo_move_prep
    - blk-crypto: fix missing blktrace bio split events
    - bus: mhi: ep: Fix chained transfer handling in read path
    - bus: mhi: host: Do not use uninitialized 'dev' pointer in
      mhi_init_irq_setup()
    - copy_sighand: Handle architectures where sizeof(unsigned long) <
      sizeof(u64)
    - crypto: aspeed - Fix dma_unmap_sg() direction
    - crypto: atmel - Fix dma_unmap_sg() direction
    - crypto: rockchip - Fix dma_unmap_sg() nents value
    - fbdev: Fix logic error in "offb" name match
    - fs/ntfs3: Fix a resource leak bug in wnd_extend()
    - iio: dac: ad5360: use int type to store negative error codes
    - iio: dac: ad5421: use int type to store negative error codes
    - iio: frequency: adf4350: Fix prescaler usage.
    - iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
    - iio: xilinx-ams: Unmask interrupts after updating alarms
    - init: handle bootloader identifier in kernel parameters
    - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in
      resume
    - iommu/vt-d: PRS isn't usable if PDS isn't supported
    - KEYS: trusted_tpm1: Compare HMAC values in constant time
    - lib/genalloc: fix device leak in of_gen_pool_get()
    - of: unittest: Fix device reference count leak in
      of_unittest_pci_node_verify
    - openat2: don't trigger automounts with RESOLVE_NO_XDEV
    - parisc: don't reference obsolete termio struct for TC* constants
    - parisc: Remove spurious if statement from raw_copy_from_user()
    - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
    - pinctrl: samsung: Drop unused S3C24xx driver data
    - power: supply: max77976_charger: fix constant current reporting
    - powerpc/powernv/pci: Fix underflow and leak issue
    - powerpc/pseries/msi: Fix potential underflow and leak issue
    - sched/deadline: Fix race in push_dl_task()
    - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
    - sparc64: fix hugetlb for sun4u
    - sparc: fix error handling in scan_one_device()
    - mtd: rawnand: fsmc: Default to autodetect buswidth
    - mmc: core: SPI mode remove cmd7
    - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
    - rtc: interface: Ensure alarm irq is enabled when UIE is enabled
    - rtc: interface: Fix long-standing race when setting alarm
    - rseq/selftests: Use weak symbol reference, not definition, to link with
      glibc
    - PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
    - PCI/sysfs: Ensure devices are powered for config reads
    - PCI/ERR: Fix uevent on failure to recover
    - PCI/AER: Fix missing uevent on recovery when a reset is requested
    - PCI/AER: Support errors introduced by PCIe r6.0
    - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on
      exit
    - PCI: rcar-host: Drop PMSR spinlock
    - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
    - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
    - PCI: tegra194: Handle errors in BPMP response
    - spi: cadence-quadspi: Flush posted register writes before INDAC access
    - spi: cadence-quadspi: Flush posted register writes before DAC access
    - x86/umip: Check that the instruction opcode is at least two bytes
    - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT
      aliases)
    - selftests: mptcp: join: validate C-flag + def limit
    - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
    - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
    - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
    - mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when
      max_huge_pages=0
    - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
    - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
    - ext4: increase i_disksize to offset + len in
      ext4_update_disksize_before_punch()
    - ext4: correctly handle queries for metadata mappings
    - ext4: fix an off-by-one issue during moving extents
    - ext4: guard against EA inode refcount underflow in xattr update
    - ext4: validate ea_ino and size in check_xattrs
    - ACPICA: Allow to skip Global Lock initialization
    - ext4: free orphan info with kvfree
    - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
    - Squashfs: add additional inode sanity checking
    - media: mc: Clear minor number before put device
    - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register
      value
    - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
    - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
    - ksmbd: add max ip connections parameter
    - misc: fastrpc: Add missing dev_err newlines
    - misc: fastrpc: Save actual DMA size in fastrpc_map structure
    - PCI: endpoint: Remove surplus return statement from
      pci_epf_test_clean_dma_chan()
    - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
    - KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2
    - ipmi: Fix handling of messages with provided receive message pointer
    - arm64: kprobes: call set_memory_rox() for kprobe page
    - arm64: mte: Do not flag the zero page as PG_mte_tagged
    - ACPI: battery: allocate driver data through devm_ APIs
    - ACPI: battery: initialize mutexes through devm_ APIs
    - ACPI: battery: Check for error code from devm_mutex_init() call
    - ACPI: battery: Add synchronization between interface updates
    - ACPI: property: Disregard references in data-only subnode lists
    - ACPI: property: Add code comments explaining what is going on
    - ACPI: property: Do not pass NULL handles to acpi_attach_data()
    - s390/bpf: Change seen_reg to a mask
    - s390/bpf: Centralize frame offset calculations
    - s390/bpf: Describe the frame using a struct instead of constants
    - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
    - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
    - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is
      disabled
    - mptcp: pm: in-kernel: usable client side with C-flag
    - irqchip/sifive-plic: Make use of __assign_bit()
    - irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
    - minixfs: Verify inode mode when loading from disk
    - fs: Add 'initramfs_options' to set initramfs mount options
    - cramfs: Verify inode mode when loading from disk
    - writeback: Avoid softlockup when switching many inodes
    - writeback: Avoid excessively long inode switching times
    - perf test stat: Avoid hybrid assumption when virtualized
    - rseq: Protect event mask against membarrier IPI
    - perf vendor events arm64 AmpereOneX: Fix typo - should be
      l1d_cache_access_prefetches
    - ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer
      size
    - ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead
      of buffer time
    - ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel
    - s390/cio: Update purge function to unregister the unused subchannels
    - mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend()
    - mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend()
    - mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data()
    - cifs: Fix copy_to_iter return value check
    - ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on
      reset)
    - media: s5p-mfc: remove an unused/uninitialized variable
    - media: ti: j721e-csi2rx: Use devm_of_platform_populate
    - media: ti: j721e-csi2rx: Fix source subdev link creation
    - drm/xe/uapi: loosen used tracking restriction
    - PCI: xilinx-nwl: Fix ECAM programming
    - PCI: tegra194: Reset BARs when running in PCIe endpoint mode
    - s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR
    - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000
    - ext4: add ext4_sb_bread_nofail() helper function for
      ext4_free_branches()
    - mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
    - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace
    - copy_file_range: limit size if in compat mode
    - Upstream stable to v6.6.113, v6.12.54
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40198
    - ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40159
    - xsk: Harden userspace-supplied xdp_desc validation
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40221
    - media: pci: mg4b: fix uninitialized iio scan data
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40180
    - mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40178
    - pid: Add a judgment for ns null in pid_nr_ns
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40202
    - ipmi: Rework user message limit handling
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40032
    - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before
      release
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40038
    - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40042
    - tracing: Fix race condition in kprobe initialization causing NULL
      pointer dereference
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40200
    - Squashfs: reject negative file sizes in squashfs_read_inode()
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40179
    - ext4: verify orphan file size is not too big
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40218
    - mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40219
    - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40193
    - xtensa: simdisk: add input size check in proc_write_simdisk
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40204
    - sctp: Fix MAC comparison to be constant-time
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40192
    - Revert "ipmi: fix msg stack when IPMI is disconnected"
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40188
    - pwm: berlin: Fix wrong register in suspend/resume
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40201
    - kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in
      sys_prlimit64() paths
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40194
    - cpufreq: intel_pstate: Fix object lifecycle issue in
      update_qos_request()
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40205
    - btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40160
    - xen/events: Return -EEXIST for bound VIRQs
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40206
    - netfilter: nft_objref: validate objref and objrefmap expressions
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40183
    - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40187
    - net/sctp: fix a null dereference in sctp_disposition
      sctp_sf_do_5_1D_ce()
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40111
    - drm/vmwgfx: Fix Use-after-free in validation
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40110
    - drm/vmwgfx: Fix a null-ptr access in the cursor snooper
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40001
    - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
  * Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
    CVE-2025-40207
    - media: v4l2-subdev: Fix alloc failure check in
      v4l2_subdev_call_state_try()
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072)
    - media: tunner: xc5000: Refactor firmware load
    - USB: serial: option: add SIMCom 8230C compositions
    - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    - ASoC: amd: acp: Adjust pdm gain value
    - dm-integrity: limit MAX_TAG_SIZE to 255
    - platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
    - perf subcmd: avoid crash in exclude_cmds when excludes is empty
    - ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
    - btrfs: ref-verify: handle damaged extent root tree
    - can: rcar_canfd: Fix controller mode setting
    - platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042
      quirks list
    - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
    - hid: fix I2C read buffer overflow in raw_event() for mcp2221
    - serial: stm32: allow selecting console when the driver is module
    - [Config] enable SERIAL_STM32_CONSOLE
    - staging: axis-fifo: fix maximum TX packet length check
    - staging: axis-fifo: fix TX handling on copy_from_user() failure
    - staging: axis-fifo: flush RX FIFO on read errors
    - driver core/PM: Set power.no_callbacks along with power.no_pm
    - riscv: mm: Use hint address in mmap if available
    - riscv: mm: Do not restrict mmap address based on hint
    - filelock: add FL_RECLAIM to show_fl_flags() macro
    - init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
    - seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too
      fast
    - selftests: arm64: Check fread return value in exec_target
    - gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
    - coresight: trbe: Prevent overflow in PERF_IDX2OFF()
    - perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
    - smb: server: fix IRD/ORD negotiation with the client
    - x86/vdso: Fix output operand size of RDPID
    - arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
    - regmap: Remove superfluous check for !config in __regmap_init()
    - bpf/selftests: Fix test_tcpnotify_user
    - bpf: Remove migrate_disable in kprobe_multi_link_prog_run
    - libbpf: Fix reuse of DEVMAP
    - ARM: dts: renesas: porter: Fix CAN pin group
    - leds: flash: leds-qcom-flash: Update torch current clamp setting
    - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
    - ACPI: processor: idle: Fix memory leak when register cpuidle device
      failed
    - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
    - pinctrl: meson-gxl: add missing i2c_d pinmux
    - blk-mq: check kobject state_in_sysfs before deleting in
      blk_mq_unregister_hctx
    - ARM: at91: pm: fix MCKx restore routine
    - arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
    - regulator: scmi: Use int type to store negative error codes
    - selftests/nolibc: fix EXPECT_NZ macro
    - block: use int to store blk_stack_limits() return value
    - PM: sleep: core: Clear power.must_resume in noirq suspend error path
    - ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS
      to use correct boolean syntax
    - ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property
      to use correct boolean syntax in DTS
    - ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer
      property
    - PM / devfreq: mtk-cci: Fix potential error pointer dereference in
      probe()
    - power: supply: cw2015: Fix a alignment coding style issue
    - pinctrl: renesas: Use int type to store negative error codes
    - null_blk: Fix the description of the cache_size module argument
    - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
    - nbd: restrict sockets to TCP and UDP
    - firmware: firmware: meson-sm: fix compile-test default
    - cpuidle: qcom-spm: fix device and OF node leaks at probe
    - arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
    - arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
    - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
    - pwm: tiehrpwm: Fix corner case in clock divisor calculation
    - ACPICA: Fix largest possible resource descriptor index
    - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
    - i3c: master: svc: Use manual response for IBI events
    - i3c: master: svc: Recycle unused IBI slot
    - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
    - bpf: Explicitly check accesses to bpf_sock_addr
    - smp: Fix up and expand the smp_call_function_many() kerneldoc
    - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in
      host headers
    - once: fix race by moving DO_ONCE to separate section
    - hwmon: (mlxreg-fan) Separate methods of fan setting coming from
      different subsystems
    - thermal/drivers/qcom: Make LMH select QCOM_SCM
    - thermal/drivers/qcom/lmh: Add missing IRQ includes
    - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
    - i2c: designware: Fix clock issue when PM is disabled
    - i2c: designware: Add disabling clocks when probe fails
    - bpf: Enforce expected_attach_type for tailcall compatibility
    - drm/panel: novatek-nt35560: Fix invalid return value
    - drm/radeon/r600_cs: clean up of dead code in r600_cs
    - f2fs: fix condition in __allow_reserved_blocks()
    - drm/bridge: it6505: select REGMAP_I2C
    - media: zoran: Remove zoran_fh structure
    - phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
    - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
    - usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
    - serial: max310x: Add error checking in probe()
    - drm/amd/display: Remove redundant semicolons
    - crypto: keembay - Add missing check after sg_nents_for_len()
    - hwrng: nomadik - add ARM_AMBA dependency
    - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
    - scsi: myrs: Fix dma_alloc_coherent() error check
    - media: rj54n1cb0c: Fix memleak in rj54n1_probe()
    - RDMA/mlx5: Fix vport loopback forcing for MPV device
    - ALSA: lx_core: use int type to store negative error codes
    - media: st-delta: avoid excessive stack usage
    - crypto: hisilicon/zip - remove unnecessary validation for high-
      performance mode configurations
    - crypto: hisilicon - re-enable address prefetch after device resuming
    - crypto: hisilicon/qm - check whether the input function and PF are on
      the same device
    - inet: ping: check sock_net() in ping_get_port() and ping_lookup()
    - coresight: Only register perf symlink for sinks with alloc_buffer
    - drm/amdgpu: Power up UVD 3 for FW validation (v2)
    - drm/amd/pm: Disable ULV even if unsupported (v3)
    - drm/amd/pm: Fix si_upload_smc_data (v3)
    - drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
    - drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
    - drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
    - drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
    - wifi: mwifiex: send world regulatory domain to driver
    - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
    - tcp: fix __tcp_close() to only send RST when required
    - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
    - usb: phy: twl6030: Fix incorrect type for ret
    - usb: gadget: configfs: Correctly set use_os_string at bind
    - tty: n_gsm: Don't block input queue by waiting MSC
    - misc: genwqe: Fix incorrect cmd field being reported in error
    - pps: fix warning in pps_register_cdev when register device fail
    - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
    - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
    - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
    - drm/msm/dpu: fix incorrect type for ret
    - fs: ntfs3: Fix integer overflow in run_unpack()
    - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
    - iio: consumers: Fix handling of negative channel scale in
      iio_convert_raw_to_processed()
    - iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
    - netfilter: ipset: Remove unused htable_bits in macro ahash_region
    - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
    - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the
      watchdog
    - drivers/base/node: handle error properly in register_one_node()
    - RDMA/cm: Rate limit destroy CM ID timeout error message
    - wifi: mt76: fix potential memory leak in mt76_wmac_probe()
    - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
    - f2fs: fix to truncate first page in error path of f2fs_truncate()
    - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
    - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
    - scsi: qla2xxx: edif: Fix incorrect sign of error code
    - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
    - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
    - f2fs: fix zero-sized extent for precache extents
    - RDMA/core: Resolve MAC of next-hop device without ARP support
    - IB/sa: Fix sa_local_svc_timeout_ms read race
    - Documentation: trace: historgram-design: Separate sched_waking histogram
      section heading and the following diagram
    - wifi: mac80211: fix Rx packet handling when pubsta information is not
      available
    - sparc: fix accurate exception reporting in copy_{from_to}_user for
      UltraSPARC
    - sparc: fix accurate exception reporting in copy_{from_to}_user for
      UltraSPARC III
    - sparc: fix accurate exception reporting in copy_{from_to}_user for
      Niagara
    - sparc: fix accurate exception reporting in copy_to_user for Niagara 4
    - sparc: fix accurate exception reporting in copy_{from,to}_user for M7
    - vfio/pds: replace bitmap_free with vfree
    - crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
    - RDMA/rxe: Fix race in do_task() when draining
    - wifi: rtw89: avoid circular locking dependency in ser_state_run()
    - PCI: tegra194: Fix duplicate PLL disable in
      pex_ep_event_pex_rst_assert()
    - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
    - coresight-etm4x: Conditionally access register TRCEXTINSELR
    - coresight: etm4x: Support atclk
    - coresight: trbe: Return NULL pointer for allocation failures
    - NFSv4.1: fix backchannel max_resp_sz verification check
    - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
    - usb: vhci-hcd: Prevent suspending virtually attached devices
    - RDMA/siw: Always report immediate post SQ errors
    - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
    - vhost: vringh: Fix copy_to_iter return value check
    - Bluetooth: MGMT: Fix not exposing debug UUID on
      MGMT_OP_READ_EXP_FEATURES_INFO
    - Bluetooth: ISO: Fix possible UAF on iso_conn_free
    - Bluetooth: ISO: don't leak skb in ISO_CONT RX
    - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
    - KEYS: X.509: Fix Basic Constraints CA flag parsing
    - hwrng: ks-sa - fix division by zero in ks_sa_rng_init
    - ocfs2: fix double free in user_cluster_connect()
    - drivers/base/node: fix double free in register_one_node()
    - mtd: rawnand: atmel: Fix error handling path in
      atmel_nand_controller_add_nands
    - nfp: fix RSS hash key size when RSS is not supported
    - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not
      configurable
    - net: dlink: handle copy_thresh allocation failure
    - net/mlx5: Stop polling for command response if interface goes down
    - net/mlx5: pagealloc: Fix reclaim race during command interface teardown
    - net/mlx5: fw reset, add reset timeout work
    - smb: client: fix crypto buffers in non-linear memory
    - vhost: vringh: Modify the return value check
    - bpf: Reject negative offsets for ALU ops
    - Squashfs: fix uninit-value in squashfs_get_parent
    - uio_hv_generic: Let userspace take care of interrupt mask
    - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
    - ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
    - fs: udf: fix OOB read in lengthAllocDescs handling
    - net: nfc: nci: Add parameter validation for packet data
    - mfd: rz-mtu3: Fix MTU5 NFCR register offset
    - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
    - dm: fix queue start/stop imbalance under suspend/load/resume races
    - dm: fix NULL pointer dereference in __dm_suspend()
    - LoongArch: Automatically disable kaslr if boot from kexec_file
    - ksmbd: fix error code overwriting in smb2_get_info_filesystem()
    - ext4: fix checks for orphan inodes
    - mm: hugetlb: avoid soft lockup when mprotect to large memory area
    - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
    - misc: fastrpc: Fix fastrpc_map_lookup operation
    - misc: fastrpc: fix possible map leak in fastrpc_put_args
    - misc: fastrpc: Skip reference for DMA handles
    - Input: atmel_mxt_ts - allow reset GPIO to sleep
    - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info
      leak
    - sunrpc: fix null pointer dereference on zero-length checksum
    - remoteproc: pru: Fix potential NULL pointer dereference in
      pru_rproc_set_ctable()
    - pinctrl: check the return value of pinmux_ops::get_function_name()
    - bus: fsl-mc: Check return value of platform_get_resource()
    - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
    - usb: typec: tipd: Clear interrupts first
    - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
    - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
    - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
    - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188
    - netfs: Prevent duplicate unlocking
    - nvmem: layouts: fix automatic module loading
    - uprobes: uprobe_warn should use passed task
    - lsm: CONFIG_LSM can depend on CONFIG_SECURITY
    - vdso: Add struct __kernel_old_timeval forward declaration to gettime.h
    - selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing
      vDSO
    - PM / devfreq: rockchip-dfi: double count on RK3588
    - soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure
    - soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure
    - pwm: tiehrpwm: Don't drop runtime PM reference in .free()
    - pwm: tiehrpwm: Make code comment in .free() more useful
    - pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation
    - spi: fix return code when spi device has too many chipselects
    - bpf: Mark kfuncs as __noclone
    - crypto: octeontx2 - Call strscpy() with correct size argument
    - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count
    - idpf: fix Rx descriptor ready check barrier in splitq
    - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device
    - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE
    - HID: hidraw: tighten ioctl command parsing
    - wifi: ath12k: fix wrong logging ID used for CE
    - coresight: tmc: Move ACPI support from AMBA driver to platform driver
    - coresight: tmc: Support atclk
    - coresight: catu: Move ACPI support from AMBA driver to platform driver
    - coresight: catu: Support atclk
    - PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion
    - PCI: rcar-gen4: Assure reset occurs before DBI access
    - Bluetooth: ISO: free rx_skb if not consumed
    - PCI: j721e: Fix incorrect error message in probe()
    - Upstream stable to v6.6.111, v6.6.112, v6.12.52, v6.12.53
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40031
    - tee: fix register_shm_helper()
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40037
    - fbdev: simplefb: Fix use after free in simplefb_detach_genpds()
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40047
    - io_uring/waitid: always prune wait queue entry in io_waitid_wait()
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40057
    - ptp: Add a upper bound on max_vclocks
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40058
    - iommu/vt-d: Disallow dirty tracking if incoherent page walk
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40059
    - coresight: Fix incorrect handling for return value of devm_kzalloc
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40155
    - iommu/vt-d: debugfs: Fix legacy mode page table dump logic
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40079
    - riscv, bpf: Sign extend struct ops return values properly
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40000
    - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40026
    - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40027
    - net/9p: fix double req put in p9_fd_cancelled
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40109
    - crypto: rng - Ensure set_ent is always present
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-38105
    - ALSA: usb-audio: Kill timer properly at removal
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-40107
    - can: hi311x: fix null pointer dereference when resuming from sleep
      before interface was enabled
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-39995
    - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in
      probe
  * Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
    CVE-2025-39994
    - media: tuner: xc5000: Fix use-after-free in xc5000_release
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938)
    - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
    - firewire: core: fix overlooked update of subsystem ABI version
    - ALSA: usb-audio: Fix block comments in mixer_quirks
    - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
    - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
    - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
    - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
    - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
    - ALSA: usb-audio: Convert comma to semicolon
    - ALSA: usb-audio: Fix build with CONFIG_INPUT=n
    - usb: core: Add 0x prefix to quirks debug output
    - mmc: sdhci-cadence: add Mobileye eyeQ support
    - i2c: designware: Add quirk for Intel Xe
    - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
    - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
    - ALSA: usb-audio: Add mute TLV for playback volumes on more devices
    - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
    - mm: add folio_expected_ref_count() for reference count calculation
    - mm/gup: check ref_count instead of lru before migration
    - mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
    - mm: folio_may_be_lru_cached() unless folio_test_large()
    - arm64: dts: imx8mp: Correct thermal sensor index
    - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
    - cpufreq: Initialize cpufreq-based invariance before subsys
    - smb: server: don't use delayed_work for post_recv_credits_work
    - wifi: virt_wifi: Fix page fault on connect
    - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
    - bpf: Reject bpf_timer for PREEMPT_RT
    - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
    - ethernet: rvu-af: Remove slash from the driver name
    - Bluetooth: hci_sync: Fix hci_resume_advertising_sync
    - bnxt_en: correct offset handling for IPv6 destination address
    - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
    - selftests: fib_nexthops: Fix creation of non-FDB nexthops
    - net: dsa: lantiq_gswip: do also enable or disable cpu port
    - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to
      port_setup()
    - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries
      added to the CPU port
    - HID: asus: add support for missing PX series fn keys
    - i40e: add mask to apply valid bits for itr_idx
    - i40e: improve VF MAC filters accounting
    - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
    - fbcon: Fix OOB access in font allocation
    - s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
    - ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
    - gpiolib: Extend software-node support to support secondary software-
      nodes
    - drm/ast: Use msleep instead of mdelay for edid read
    - minmax: make generic MIN() and MAX() macros available everywhere
    - minmax: simplify min()/max()/clamp() implementation
    - minmax: don't use max() in situations that want a C constant expression
    - minmax: improve macro expansion and type checking
    - minmax: fix up min3() and max3() too
    - minmax.h: add whitespace around operators and after commas
    - minmax.h: update some comments
    - minmax.h: reduce the #define expansion of min(), max() and clamp()
    - minmax.h: move all the clamp() definitions after the min/max() ones
    - minmax.h: simplify the variants of clamp()
    - minmax.h: remove some #defines that are only expanded once
    - drm/i915/backlight: Return immediately when scale() finds invalid
      parameters
    - ALSA: usb-audio: Fix code alignment in mixer_quirks
    - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA
    - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info
    - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
    - net: sfp: add quirk for FLYPRO copper SFP+ module
    - HID: amd_sfh: Add sync across amd sfh work functions
    - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store()
    - crypto: sha256 - fix crash at kexec
    - gcc-plugins: Remove TODO_verify_il for GCC >= 16
    - Upstream stable to v6.6.109, v6.6.110, v6.12.50, v6.12.51
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39991
    - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39992
    - mm: swap: check for stable address space before operating on the VMA
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40013
    - ASoC: qcom: audioreach: fix potential null pointer dereference
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40016
    - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39996
    - media: b2c2: Fix use-after-free causing by irq_check_work in
      flexcop_pci_remove
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39998
    - scsi: target: target_core_configfs: Add length check to avoid buffer
      overflow
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40009
    - fs/proc/task_mmu: check p->vec_buf for NULL
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39973
    - i40e: add validation for ring_len param
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-38709
    - loop: Avoid updating block size under exclusive owner
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39967
    - fbcon: fix integer overflow in fbcon_do_set_font
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40006
    - mm/hugetlb: fix folio is still mapped when deleted
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40008
    - kmsan: fix out-of-bounds access to shadow memory
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40010
    - afs: Fix potential null pointer dereference in afs_put_server
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40021
    - tracing: dynevent: Add a missing lockdown check on dynevent
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39968
    - i40e: add max boundary check for VF filters
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39969
    - i40e: fix validation of VF state in get resources
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39970
    - i40e: fix input validation logic for action_meta
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39971
    - i40e: fix idx validation in config queues msg
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39972
    - i40e: fix idx validation in i40e_validate_queue_map
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39977
    - futex: Prevent use-after-free during requeue-PI
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40011
    - drm/gma500: Fix null dereference in hdmi teardown
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39978
    - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39980
    - nexthop: Forbid FDB status change while nexthop is in a group
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40024
    - vhost: Take a reference on the task in struct vhost_task.
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39982
    - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-40020
    - can: peak_usb: fix shift-out-of-bounds issue
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39985
    - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39986
    - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39987
    - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
  * Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
    CVE-2025-39988
    - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867)
    - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is
      not supported
    - wifi: mac80211: fix incorrect type for ret
    - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section
      mismatch
    - bonding: set random address only when slaves already exist
    - power: supply: bq27xxx: fix error return in case of no bq27000 hdq
      battery
    - power: supply: bq27xxx: restrict no-battery detection to bq27000
    - LoongArch: Update help info of ARCH_STRICT_ALIGN
    - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
    - LoongArch: Check the return value when creating kobj
    - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
    - btrfs: tree-checker: fix the incorrect inode ref size check
    - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S
      interface
    - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
    - rds: ib: Increment i_fastreg_wrs before bailing out
    - selftests: mptcp: connect: catch IO errors on listen side
    - selftests: mptcp: avoid spurious errors on TCP disconnect
    - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
    - io_uring: backport io_should_terminate_tw()
    - io_uring: include dying ring in task_work "should cancel" state
    - ASoC: wm8940: Correct PLL rate rounding
    - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error
      message
    - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
    - selftests: mptcp: userspace pm: validate deny-join-id0 flag
    - xhci: dbc: decouple endpoint allocation from initialization
    - xhci: dbc: Fix full DbC transfer ring after several reconnects
    - rtc: pcf2127: fix SPI command byte for PCF2131 backport
    - mptcp: propagate shutdown to subflows when possible
    - minmax: avoid overly complicated constant expressions in VM code
    - minmax: simplify and clarify min_t()/max_t() implementation
    - minmax: add a few more MIN_T/MAX_T users
    - nvme: fix PI insert on write
    - btrfs: fix invalid extref key setup when replaying dentry
    - dpaa2-switch: fix buffer pool seeding for control traffic
    - mptcp: set remote_deny_join_id0 on SYN recv
    - mptcp: tfo: record 'deny join id0' info
    - selftests: mptcp: sockopt: fix error messages
    - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
    - ice: store max_frame and rx_buf_len only in ice_rx_ring
    - i40e: remove redundant memory barrier when cleaning Tx descs
    - bonding: don't set oif to bond dev when getting NS target destination
    - octeon_ep: fix VF MAC address lifecycle handling
    - net: liquidio: fix overflow in octeon_init_instr_queue()
    - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
    - dm-raid: don't set io_min and io_opt for raid1
    - mm: revert "mm: vmscan.c: fix OOM on swap stress test"
    - mmc: mvsdio: Fix dma_unmap_sg() nents value
    - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
    - ASoC: wm8940: Correct typo in control name
    - ASoC: wm8974: Correct PLL rate rounding
    - ASoC: Intel: catpt: Expose correct bit depth to userspace
    - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()
    - smb: client: fix filename matching of deferred files
    - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG
      Z13
    - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk
    - x86/bugs: Add SRSO_USER_KERNEL_NO support
    - x86/bugs: KVM: Add support for SRSO_MSR_FIX
    - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count
      transitions
    - mptcp: pm: nl: announce deny-join-id0 flag
    - Upstream stable to v6.6.108, v6.12.49
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39932
    - smb: client: let smbd_destroy() call
      disable_work_sync(&info->post_send_credits_work)
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39940
    - dm-stripe: fix a possible integer overflow
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39948
    - ice: fix Rx page leak on multi-buffer frames
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39950
    - net/tcp: Fix a NULL pointer dereference when using TCP-AO with
      TCP_REPAIR
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39961
    - iommu/amd/pgtbl: Fix possible race while increase page table level
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-22106
    - vmxnet3: unregister xdp rxq info in the reset path
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39929
    - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39931
    - crypto: af_alg - Set merge to zero early in af_alg_sendmsg
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39934
    - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39937
    - net: rfkill: gpio: Fix crash due to dereferencering uninitialized
      pointer
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39938
    - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source
      graph failed
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39942
    - ksmbd: smbdirect: verify remaining_data_length respects
      max_fragmented_recv_size
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39943
    - ksmbd: smbdirect: validate data_offset and data_length field of
      smb_direct_data_transfer
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39944
    - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39945
    - cnic: Fix use-after-free bugs in cnic_delete_task
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39955
    - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39947
    - net/mlx5e: Harden uplink netdev access against device unbind
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39949
    - qed: Don't collect too many protection override GRC elements
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39951
    - um: virtio_uml: Fix use-after-free after put_device in probe
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39953
    - cgroup: split cgroup_destroy_wq into 3 workqueues
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39957
    - wifi: mac80211: increase scan_ies_len for S1G
  * Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
    CVE-2025-39952
    - wifi: wilc1000: avoid buffer overflow in WID string configuration
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681)
    - mm: introduce and use {pgd,p4d}_populate_kernel()
    - kasan: fix GCC mem-intrinsic prefix with sw tags
    - ima: limit the number of ToMToU integrity violations
    - flexfiles/pNFS: fix NULL checks on result of
      ff_layout_choose_ds_for_read
    - SUNRPC: call xs_sock_process_cmsg for all cmsg
    - NFSv4: Don't clear capabilities that won't be reset
    - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
    - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
    - tracing: Fix tracing_marker may trigger page fault during
      preempt_disable
    - ftrace/samples: Fix function size computation
    - fs/nfs/io: make nfs_start_io_*() killable
    - NFS: Serialise O_DIRECT i/o and truncate()
    - NFSv4.2: Serialise O_DIRECT i/o and fallocate()
    - NFSv4.2: Serialise O_DIRECT i/o and clone range
    - NFSv4.2: Serialise O_DIRECT i/o and copy range
    - NFSv4/flexfiles: Fix layout merge mirror check.
    - s390/cpum_cf: Deny all sampling events by counter PMU
    - proc: fix type confusion in pde_set_flags()
    - EDAC/altera: Delete an inappropriate dma_free_coherent() call
    - compiler-clang.h: define __SANITIZE_*__ macros only when undefined
    - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM
      wakeups
    - mtd: rawnand: stm32_fmc2: fix ECC overwrite
    - fuse: check if copy_file_range() returns larger than requested size
    - fuse: prevent overflow in copy_file_range return value
    - mm/damon/core: set quota->charged_from to jiffies at first charge window
    - drm/mediatek: fix potential OF node use-after-free
    - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
    - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
    - mtd: nand: raw: atmel: Fix comment in timings preparation
    - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
    - btrfs: use readahead_expand() on compressed extents
    - btrfs: fix corruption reading compressed range when block size is
      smaller than page size
    - mm/khugepaged: fix the address passed to notifier on testing young
    - Input: iqs7222 - avoid enabling unused interrupts
    - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk
      table
    - tty: hvc_console: Call hvc_kick in hvc_write unconditionally
    - serial: sc16is7xx: fix bug in flow control levels init
    - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
    - USB: serial: option: add Telit Cinterion FN990A w/audio compositions
    - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
    - net: bridge: Bounce invalid boolopts
    - tunnels: reset the GSO metadata before reusing the skb
    - docs: networking: can: change bcm_msg_head frames member to support
      flexible array
    - igb: fix link test skipping when interface is admin down
    - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when
      j1939_local_ecu_get() failed
    - can: j1939: j1939_local_ecu_get(): undo increment when
      j1939_local_ecu_get() fails
    - net: hsr: Add VLAN CTAG filter support
    - hsr: use rtnl lock when iterating over ports
    - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
    - dmaengine: idxd: Remove improper idxd_free
    - dmaengine: idxd: Fix refcount underflow on module unload
    - dmaengine: idxd: Fix double free in idxd_setup_wqs()
    - regulator: sy7636a: fix lifecycle of power good gpio
    - hrtimer: Remove unused function
    - hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
    - hrtimers: Unconditionally update target CPU base after offline timer
      migration
    - RISC-V: Remove unnecessary include from compat.h
    - xhci: fix memory leak regression when freeing xhci vdev devices depth
      first
    - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
    - usb: gadget: midi2: Fix missing UMP group attributes initialization
    - usb: gadget: midi2: Fix MIDI2 IN EP max packet size
    - dmaengine: dw: dmamux: Fix device reference leak in
      rzn1_dmamux_route_allocate
    - phy: tegra: xusb: fix device and OF node leak at probe
    - phy: ti-pipe3: fix device leak at unbind
    - net: mdiobus: release reset_gpio in mdiobus_unregister_device()
    - drm/amdgpu: fix a memory leak in fence cleanup when unloading
    - drm/i915/power: fix size for for_each_set_bit() in abox iteration
    - nvme-pci: skip nvme_write_sq_db on empty rqlist
    - ext4: introduce linear search for dentries
    - drm/i915/pmu: Fix zero delta busyness issue
    - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed
    - Revert "drm/amd/display: Optimize cursor position updates"
    - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
    - drm/amdgpu: Add back JPEG to video caps for carrizo and newer
    - trace/fgraph: Fix error handling
    - NFS: nfs_invalidate_folio() must observe the offset and size arguments
    - s390/pai: Deny all events not handled by this PMU
    - btrfs: fix squota compressed stats leak
    - netlink: specs: mptcp: add missing 'server-side' attr
    - netlink: specs: mptcp: clearly mention attributes
    - netlink: specs: mptcp: replace underscores with dashes in names
    - netlink: specs: mptcp: fix if-idx attribute type
    - ceph: fix race condition where r_parent becomes stale before sending
      message
    - mtd: spinand: winbond: Fix oob_layout for W25N01JW
    - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO
      runtime PM wakeups"
    - drm/amd/display: use udelay rather than fsleep
    - netfilter: nft_set_rbtree: continue traversal if element is inactive
    - netfilter: nf_tables: place base_seq in struct net
    - netfilter: nf_tables: make nft_set_do_lookup available unconditionally
    - netfilter: nf_tables: restart set lookup on base_seq change
    - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties
    - phy: ti: omap-usb2: fix device leak at unbind
    - Upstream stable to v6.6.107, v6.12.48
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39927
    - ceph: fix race condition validating r_parent before applying state
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39923
    - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39869
    - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39873
    - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted
      SKB
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39911
    - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39876
    - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39881
    - kernfs: Fix UAF in polling when open file is released
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39909
    - mm/damon/lru_sort: avoid divide-by-zero in
      damon_lru_sort_apply_parameters()
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39916
    - mm/damon/reclaim: avoid divide-by-zero in
      damon_reclaim_apply_parameters()
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39877
    - mm/damon/sysfs: fix use-after-free in state_show()
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39880
    - libceph: fix invalid accesses to ceph_connection_v1_info
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39883
    - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison
      memory
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39907
    - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39885
    - ocfs2: fix recursive semaphore deadlock in fiemap call
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39913
    - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to
      allocate psock->cork.
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39886
    - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-39914
    - tracing: Silence warning when chunk allocation fails in trace_pid_write
  * Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
    CVE-2025-23143
    - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502)
    - bpf: Add cookie object to bpf maps
    - bpf: Move cgroup iterator helpers to bpf.h
    - btrfs: fix race between logging inode and checking if it was logged
      before
    - btrfs: fix race between setting last_dir_index_offset and inode logging
    - btrfs: avoid load/store tearing races when checking if an inode was
      logged
    - LoongArch: Save LBT before FPU in setup_sigcontext()
    - cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
    - drm/amd/display: Don't warn when missing DCE encoder caps
    - cpupower: Fix a bug where the -t option of the set subcommand was not
      working.
    - Bluetooth: hci_sync: Avoid adding default advertising on startup
    - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
    - tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
    - arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics
      i.MX8M Plus DHCOM
    - arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M
      Plus eDM SBC
    - netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
    - xirc2ps_cs: fix register access when enabling FullDuplex
    - mISDN: Fix memory leak in dsp_hwec_enable()
    - icmp: fix icmp_ndo_send address translation for reply direction
    - net: macb: Fix tx_ptr_lock locking
    - macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
    - wifi: ath11k: rename ath11k_start_vdev_delay()
    - wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
    - wifi: ath11k: fix group data packet drops during rekey
    - net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
    - wifi: cw1200: cap SSID length in cw1200_do_join()
    - wifi: libertas: cap SSID len in lbs_associate()
    - net: thunder_bgx: add a missing of_node_put
    - net: thunder_bgx: decrement cleanup index before use
    - ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
    - net/smc: Remove validation of reserved bits in CLC Decline message
    - mctp: return -ENOPROTOOPT for unknown getsockopt options
    - net: atm: fix memory leak in atm_register_sysfs when device_register
      fail
    - selftest: net: Fix weird setsockopt() in bind_bhash.c.
    - phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
    - ALSA: usb-audio: Add mute TLV for playback volumes on some devices
    - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
    - arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with
      CONFIG_DYNAMIC_FTRACE
    - proc: fix missing pde_set_flags() for net proc files
    - soc: qcom: mdt_loader: Deal with zero e_shentsize
    - wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
    - drm/amdgpu: drop hw access in non-DC audio fini
    - platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042
      quirks list
    - e1000e: fix heap overflow in e1000_set_eeprom
    - net: pcs: rzn1-miic: Correct MODCTRL register offset
    - cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
    - cpufreq: intel_pstate: Do not update global.turbo_disabled after
      initialization
    - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
    - thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum
      threshold
    - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
    - dmaengine: mediatek: Fix a possible deadlock error in
      mtk_cqdma_tx_status()
    - ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
    - ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
    - pcmcia: omap: Add missing check for platform_get_resource
    - hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
    - spi: spi-fsl-lpspi: Fix transmissions when using CONT
    - spi: spi-fsl-lpspi: Set correct chip-select polarity bit
    - spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
    - spi: spi-fsl-lpspi: Clear status register after disabling the module
    - drm/bridge: ti-sn65dsi86: fix REFCLK setting
    - perf bpf-event: Fix use-after-free in synthesis
    - drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
    - drm/amd/amdgpu: Fix missing error return on kzalloc failure
    - tools: gpio: rm .*.cmd on make clean
    - tools: gpio: remove the include directory on make clean
    - riscv: use lw when reading int cpu in asm_per_cpu
    - cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
    - cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
    - cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
    - dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
    - bpf: Move bpf map owner out of common struct
    - btrfs: zoned: skip ZONE FINISH of conventional zones
    - arm64: dts: imx8mp-tqma8mpql: fix LDO5 power off
    - HID: simplify snto32()
    - HID: stop exporting hid_snto32()
    - net: usb: qmi_wwan: fix Telit Cinterion FN990A name
    - net: usb: qmi_wwan: fix Telit Cinterion FE990A name
    - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition
    - LoongArch: vDSO: Remove --hash-style=sysv
    - LoongArch: vDSO: Remove -nostdlib complier flag
    - mmc: sdhci-of-arasan: Support for emmc hardware reset
    - mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up
    - bnxt_en: fix incorrect page count in RX aggr ring log
    - net: mctp: mctp_fraq_queue should take ownership of passed skb
    - idpf: set mac type when adding and removing MAC filters
    - net: skb: add pskb_network_may_pull_reason() helper
    - net: tunnel: add pskb_inet_may_pull_reason() helper
    - net: vxlan: add skb drop reasons to vxlan_rcv()
    - net: vxlan: make vxlan_snoop() return drop reasons
    - net: vxlan: make vxlan_set_mac() return drop reasons
    - net: vxlan: use kfree_skb_reason() in vxlan_xmit()
    - net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit()
    - net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE
    - vxlan: Refresh FDB 'updated' time upon 'NTF_USE'
    - vxlan: Avoid unnecessary updates to FDB 'used' time
    - vxlan: Add RCU read-side critical sections in the Tx path
    - vxlan: Rename FDB Tx lookup function
    - mm: fix possible deadlock in kmemleak
    - drm/amd/display: Clear the CUR_ENABLE register on DCN314 w/out DPP PG
    - net: dsa: add hook to determine whether EEE is supported
    - net: dsa: provide implementation of .support_eee()
    - md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT
    - md/raid1,raid10: strip REQ_NOWAIT from member bios
    - ext4: define ext4_journal_destroy wrapper
    - wifi: ath11k: update channel list in worker when wait flag is set
    - nouveau: fix disabling the nonstall irq due to storm code
    - kunit: kasan_test: disable fortify string checker on kasan_strings()
      test
    - platform/x86: asus-wmi: Remove extra keys from ignore_key_wlan quirk
    - perf bpf-utils: Constify bpil_array_desc
    - perf bpf-utils: Harden get_bpf_prog_info_linear
    - md/raid1: fix data lost for writemostly rdev
    - Upstream stable to v6.6.105, v6.6.106, v6.12.46, v6.12.47
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-22124
    - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-22103
    - net: fix NULL pointer dereference in l3mdev_l3_rcv
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-23133
    - wifi: ath11k: update channel list in reg notifier instead reg worker
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-22113
    - ext4: avoid journaling sb update on error if journal is destroying
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-22125
    - md/raid1,raid10: don't ignore IO flags
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39899
    - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39897
    - net: xilinx: axienet: Add error handling for RX metadata pointer
      retrieval
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39850
    - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39851
    - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39852
    - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39901
    - i40e: remove read access to debugfs files
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39854
    - ice: fix NULL access of tx->in_use in ice_ll_ts_intr
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-38556
    - HID: core: Harden s32ton() against conversion to 0 bits
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-38502
    - bpf: Fix oob access in cgroup local storage
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39843
    - mm: slub: avoid wake up kswapd in set_track_prepare
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39920
    - pcmcia: Add error handling for add_interval() in do_validate_mem()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39902
    - mm/slub: avoid accessing metadata when pointer is invalid in
      object_err()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39838
    - cifs: prevent NULL pointer dereference in UTF16 conversion
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39839
    - batman-adv: fix OOB read/write in network-coding decode
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39841
    - scsi: lpfc: Fix buffer free/clear order in deferred receive path
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39891
    - wifi: mwifiex: Initialize the chan_stats array to zero
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39842
    - ocfs2: prevent release journal inode after journal shutdown
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39895
    - sched: Fix sched_numa_find_nth_cpu() if mask offline
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39844
    - mm: move page table sync declarations to linux/pgtable.h
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39845
    - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and
      arch_sync_kernel_mappings()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39846
    - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39847
    - ppp: fix memory leak in pad_compress_skb
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39848
    - ax25: properly unshare skbs in ax25_kiss_rcv()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39849
    - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39853
    - i40e: Fix potential invalid access when MAC list is empty
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39857
    - net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39860
    - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39861
    - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39894
    - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in()
      after confirm
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39863
    - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info
      work
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39864
    - wifi: cfg80211: fix use-after-free in cmp_bss()
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39865
    - tee: fix NULL pointer dereference in tee_shm_put
  * Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
    CVE-2025-39866
    - fs: writeback: fix use-after-free in __mark_inode_dirty()
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664)
    - of: dynamic: Fix memleak when of_pci_add_properties() failed
    - pinctrl: STMFX: add missing HAS_IOMEM dependency
    - mips: dts: lantiq: danube: add missing burst length property
    - mips: lantiq: xway: sysctrl: rename the etop node
    - of: Add a helper to free property struct
    - of: dynamic: Fix use after free in of_changeset_add_prop_helper()
    - scsi: core: sysfs: Correct sysfs attributes access rights
    - smb: client: fix race with concurrent opens in unlink(2)
    - ASoC: codecs: tx-macro: correct tx_macro_component_drv name
    - erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
    - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
    - nfs: fold nfs_page_group_lock_subrequests into
      nfs_lock_and_join_requests
    - vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
    - net: ipv4: fix regression in local-broadcast routes
    - drm/msm: Defer fd_install in SUBMIT ioctl
    - powerpc/kvm: Fix ifdef to remove build warning
    - HID: input: rename hidinput_set_battery_charge_status()
    - HID: input: report battery status changes immediately
    - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
    - Bluetooth: hci_event: Mark connection as closed during suspend
      disconnect
    - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
    - Bluetooth: hci_sync: fix set_local_name race condition
    - drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
    - drm/nouveau: remove unused memory target test
    - ice: fix incorrect counter for buffer allocation failures
    - dt-bindings: display/msm: qcom,mdp5: drop lut clock
    - net: dlink: fix multicast stats being counted incorrectly
    - phy: mscc: Fix when PTP clock is register and unregister
    - net/mlx5: Reload auxiliary drivers on fw_activate
    - net/mlx5: Add device cap for supporting hot reset in sync reset flow
    - net/mlx5: Add support for sync reset using hot reset
    - net/mlx5: Nack sync reset when SFs are present
    - net/mlx5e: Set local Xoff after FW update
    - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
    - net: stmmac: Rename phylink_get_caps() callback to update_caps()
    - net: stmmac: xgmac: Correct supported speed modes
    - net: stmmac: Set CIC bit only for TX queues with COE
    - net: rose: split remove and free operations in rose_remove_neigh()
    - x86/microcode/AMD: Handle the case of no BIOS microcode
    - HID: quirks: add support for Legion Go dual dinput modes
    - HID: logitech: Add ids for G PRO 2 LIGHTSPEED
    - HID: wacom: Add a new Art Pen 2
    - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
    - net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
    - smb3 client: fix return code mapping of remap_file_range
    - drm/nouveau/disp: Always accept linear modifier
    - net: rose: fix a typo in rose_clear_routes()
    - perf symbol-minimal: Fix ehdr reading in filename__read_build_id
    - vhost: Fix ioctl # for VHOST_[GS]ET_FORK_FROM_OWNER
    - drm/msm/kms: move snapshot init earlier in KMS init
    - drm/mediatek: Add error handling for old state CRTC in atomic_disable
    - drm/xe/xe_sync: avoid race during ufence signaling
    - drm/xe: Don't trigger rebind on initial dma-buf validation
    - bnxt_en: Adjust TX rings if reservation is less than requested
    - hv_netvsc: Link queues to NAPIs
    - net: hv_netvsc: fix loss of early receive events from host during
      channel open.
    - net: macb: Disable clocks once
    - drm/nouveau: fix error path in nvkm_gsp_fwsec_v2
    - drm/mediatek: Fix device/node reference count leaks in
      mtk_drm_get_all_drm_priv
    - drm/amd/amdgpu: disable hwmon power1_cap* for gfx 11.0.3 on vf mode
    - PCI: Add PCIE_RESET_CONFIG_DEVICE_WAIT_MS waiting time value
    - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to
      PCIE_RESET_CONFIG_WAIT_MS
    - PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed'
    - PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up
    - thermal/drivers/mediatek/lvts_thermal: Change lvts commands array to
      static const
    - thermal/drivers/mediatek/lvts_thermal: Add lvts commands and their sizes
      to driver data
    - thermal/drivers/mediatek/lvts_thermal: Add mt7988 lvts commands
    - Upstream stable to v6.6.104, v6.12.45
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39811
    - drm/xe/vm: Clear the scratch_pt pointer on error
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39815
    - RISC-V: KVM: fix stack overrun when loading vlenb
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39810
    - bnxt_en: Fix memory corruption when FW resources change during ifdown
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39836
    - efi: stmm: Fix incorrect buffer allocation method
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39805
    - net: macb: fix unregister_netdev call order in macb_remove()
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39829
    - trace/fgraph: Fix the warning caused by missing unregister notifier
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39835
    - xfs: do not propagate ENODATA disk errors into xattr code
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39819
    - fs/smb: Fix inconsistent refcnt update
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39808
    - HID: hid-ntrig: fix unable to handle page fault in
      ntrig_report_version()
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39806
    - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39824
    - HID: asus: fix UAF via HID_CLAIMED_INPUT validation
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39823
    - KVM: x86: use array_index_nospec with indices that come from guest
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39817
    - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39812
    - sctp: initialize more fields in sctp_v6_from_sk()
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39827
    - net: rose: include node references in rose_neigh refcount
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39826
    - net: rose: convert 'use' field to refcount_t
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39832
    - net/mlx5: Fix lockdep assertion on sync reset unload event
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39828
    - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39697
    - NFS: Fix a race when updating an existing write
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39825
    - smb: client: fix race with concurrent opens in rename(2)
  * Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
    CVE-2025-39813
    - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
  * CVE-2025-37899
    - ksmbd: fix use-after-free in session logoff
  * CVE-2025-22037
    - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous
      session
    - ksmbd: fix race condition between destroy_previous_session() and smb2
      operations()
    - ksmbd: fix null pointer dereference in alloc_preauth_hash()

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 02 Mar 2026 11:14:43 -0600

linux-nvidia (6.8.0-1047.50) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1047.50 -proposed tracker (LP: #2140945)

  [ Ubuntu: 6.8.0-101.101 ]

  * noble/linux: 6.8.0-101.101 -proposed tracker (LP: #2140964)
  * CVE-2025-37899
    - ksmbd: fix use-after-free in session logoff
  * CVE-2025-22037
    - ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous
      session
    - ksmbd: fix race condition between destroy_previous_session() and smb2
      operations()
    - ksmbd: fix null pointer dereference in alloc_preauth_hash()

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 13 Feb 2026 10:52:53 -0600

linux-nvidia (6.8.0-1046.49) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1046.49 -proposed tracker (LP: #2137883)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2026.01.12)

  [ Ubuntu: 6.8.0-100.100 ]

  * noble/linux: 6.8.0-100.100 -proposed tracker (LP: #2138307)
  * Turbo boost stuck disabled on Clevo PD5x_7xSNC_SND_SNE (LP: #2122531)
    - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes
  * [noble] write-sealed memfd mappings fail to map read-only (LP: #2138244)
    - SAUCE: Fix read-only mapping of write-sealed pages

  [ Ubuntu: 6.8.0-98.98 ]

  * noble/linux: 6.8.0-98.98 -proposed tracker (LP: #2137901)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2026.01.12)
  * ubuntu_kselftests:_net/net:gre_gso.sh failing (LP: #2136820)
    - SAUCE increase socat timeout in gre_gso.sh
  * TPM timeouts occur on some Infineon TPMs (LP: #2137528)
    - tpm: Make chip->{status,cancel,req_canceled} opt
    - tpm: Check for completion after timeout
  * power: intel_pstate: Fix unchecked MSR (LP: #2130244)
    - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722)
    - selftests/futex: futex_waitv wouldblock test should fail
    - drm/i915/dg2: wait for HuC load completion before running selftests
    - drm/i915: Disable RPG during live selftest
    - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
    - octeontx2-pf: qos: fix VF root node parent queue index
    - tc: Ensure we have enough buffer space when sending filter netlink
      notifications
    - net: ethtool: Don't call .cleanup_data when prepare_data fails
    - drm/tests: modeset: Fix drm_display_mode memory leak
    - drm/tests: helpers: Add atomic helpers
    - drm/tests: Add helper to create mock plane
    - drm/tests: Add helper to create mock crtc
    - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
    - drm/tests: helpers: Fix compiler warning
    - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
    - drm/tests: cmdline: Fix drm_display_mode memory leak
    - drm/tests: modes: Fix drm_display_mode memory leak
    - drm/tests: probe-helper: Fix drm_display_mode memory leak
    - ata: sata_sx4: Add error handling in pdc20621_i2c_read()
    - nvmet-fcloop: swap list_add_tail arguments
    - net_sched: sch_sfq: use a temporary work area for validating
      configuration
    - Revert "net_sched: sch_sfq: move the limit validation"
    - net_sched: sch_sfq: move the limit validation
    - ipv6: Align behavior across nexthops during path selection
    - nft_set_pipapo: fix incorrect avx2 match of 5th field octet
    - fs: consistently deref the files table with rcu_dereference_raw()
    - umount: Allow superblock owners to force umount
    - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
    - x86/ia32: Leave NULL selector values 0~3 unchanged
    - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD
      when running in a virtual machine
    - perf: arm_pmu: Don't disable counter in armpmu_add()
    - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
    - xen/mcelog: Add __nonstring annotations for unterminated strings
    - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work
      around compiler segfault
    - ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
    - HID: pidff: Convert infinite length from Linux API to PID standard
    - HID: pidff: Do not send effect envelope if it's empty
    - HID: pidff: Add MISSING_DELAY quirk and its detection
    - HID: pidff: Add MISSING_PBO quirk and its detection
    - HID: pidff: Add PERMISSIVE_CONTROL quirk
    - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
    - HID: pidff: Add FIX_WHEEL_DIRECTION quirk
    - HID: Add hid-universal-pidff driver and supported device ids
    - [Config] enable hid-universal-pidff driver
    - HID: pidff: Add PERIODIC_SINE_ONLY quirk
    - ALSA: hda: intel: Fix Optimus when GPU has no sound
    - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
    - ASoC: fsl_audmix: register card device depends on 'dais' property
    - media: uvcvideo: Add quirk for Actions UVC05
    - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
    - ALSA: usb-audio: Fix CME quirk for UF series keyboards
    - ASoC: amd: Add DMI quirk for ACP6X mic support
    - ASoC: amd: yc: update quirk data for new Lenovo model
    - f2fs: don't retry IO for corrupted data scenario
    - scsi: target: spc: Fix RSOC parameter data header size
    - net: usb: asix_devices: add FiberGecko DeviceID
    - fs/jfs: cast inactags to s64 to prevent potential overflow
    - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
    - net: sfp: add quirk for 2.5G OEM BX SFP
    - ahci: add PCI ID for Marvell 88SE9215 SATA Controller
    - ext4: protect ext4_release_dquot against freezing
    - Revert "f2fs: rebuild nat_bits during umount"
    - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
    - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
    - tracing: fix return value in __ftrace_event_enable_disable for
      TRACE_REG_UNREGISTER
    - Bluetooth: hci_uart: fix race during initialization
    - Bluetooth: qca: simplify WCN399x NVM loading
    - drm: allow encoder mode_set even when connectors change for crtc
    - drm/amd/display: Update Cursor request mode to the beginning prefetch
      always
    - drm/amd/display: add workaround flag to link to force FFE preset
    - drm: panel-orientation-quirks: Add support for AYANEO 2S
    - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
    - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
    - drm: panel-orientation-quirks: Add new quirk for GPD Win 2
    - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
    - drm/bridge: panel: forbid initializing a panel with unknown connector
      type
    - drivers: base: devres: Allow to release group on device release
    - drm/amdkfd: clamp queue size to minimum
    - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
    - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
    - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
    - drm/amdgpu: grab an additional reference on the gang fence v2
    - tracing: probe-events: Add comments about entry data storing code
    - ktest: Fix Test Failures Due to Missing LOG_FILE Directories
    - tpm, tpm_tis: Workaround failed command reception on Infineon devices
    - pwm: rcar: Improve register calculation
    - pwm: fsl-ftm: Handle clk_get_rate() returning 0
    - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
    - ext4: don't treat fhandle lookup of ea_inode as FS corruption
    - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
    - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
    - media: i2c: adv748x: Fix test pattern selection mask
    - media: vim2m: print device name after registering device
    - media: siano: Fix error handling in smsdvb_module_init()
    - xenfs/xensyms: respect hypervisor's "next" indication
    - arm64: cputype: Add MIDR_CORTEX_A76AE
    - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
    - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
    - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe
      list
    - spi: cadence-qspi: Fix probe on AM62A LP SK
    - tpm, tpm_tis: Fix timeout handling when waiting for TPM status
    - media: streamzap: prevent processing IR data on URB failure
    - media: visl: Fix ERANGE error when setting enum controls
    - media: platform: stm32: Add check for clk_enable()
    - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
    - media: i2c: ccs: Set the device's runtime PM status correctly in remove
    - media: i2c: ccs: Set the device's runtime PM status correctly in probe
    - media: i2c: ov7251: Set enable GPIO low in probe
    - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
    - media: i2c: imx219: Rectify runtime PM handling in probe and remove
    - mptcp: sockopt: fix getting IPV6_V6ONLY
    - mtd: Add check for devm_kcalloc()
    - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320
      family
    - mtd: Replace kcalloc() with devm_kcalloc()
    - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init
      wakeup
    - wifi: mt76: Add check for devm_kstrdup()
    - wifi: mac80211: fix integer overflow in hwmp_route_info_get()
    - io_uring/kbuf: reject zero sized provided buffers
    - ASoC: q6apm: add q6apm_get_hw_pointer helper
    - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
    - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
    - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
    - f2fs: fix to avoid atomicity corruption of atomic file
    - vdpa/mlx5: Fix oversized null mkey longer than 32bit
    - udf: Fix inode_getblk() return value
    - smb311 client: fix missing tcon check when mounting with linux/posix
      extensions
    - i3c: master: svc: Use readsb helper for reading MDB
    - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
    - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
    - mailbox: tegra-hsp: Define dimensioning masks in SoC data
    - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
    - lib: scatterlist: fix sg_split_phys to preserve original scatterlist
      offsets
    - mptcp: only inc MPJoinAckHMacFailure for HMAC failures
    - mtd: rawnand: Add status chack in r852_ready()
    - arm64: mm: Correct the update of max_pfn
    - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
    - btrfs: fix non-empty delayed iputs list on unmount due to compressed
      write workers
    - btrfs: zoned: fix zone activation with missing devices
    - btrfs: zoned: fix zone finishing with missing devices
    - iommufd: Fix uninitialized rc in iommufd_access_rw()
    - sparc/mm: disable preemption in lazy mmu mode
    - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
    - mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
    - mm: make page_mapped_in_vma() hugetlb walk aware
    - mm: fix lazy mmu docs and usage
    - mm/mremap: correctly handle partial mremap() of VMA starting at 0
    - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
    - mm/userfaultfd: fix release hang over concurrent GUP
    - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
    - mm/hugetlb: move hugetlb_sysctl_init() to the __init section
    - x86/xen: fix balloon target initialization for PVH dom0
    - tracing: Do not add length to print format in synthetic events
    - thermal/drivers/rockchip: Add missing rk3328 mapping entry
    - cifs: fix integer overflow in match_server()
    - clk: qcom: clk-branch: Fix invert halt status bit check for votable
      clocks
    - clk: qcom: gdsc: Release pm subdomains in reverse add order
    - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
    - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
    - crypto: ccp - Fix check for the primary ASP device
    - dm-ebs: fix prefetch-vs-suspend race
    - dm-integrity: set ti->error on memory allocation failure
    - dm-verity: fix prefetch-vs-suspend race
    - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
    - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
    - gpio: tegra186: fix resource handling in ACPI probe path
    - gpio: zynq: Fix wakeup source leaks on device unbind
    - gve: handle overflow when reporting TX consumed descriptors
    - KVM: x86: Explicitly zero-initialize on-stack CPUID unions
    - ntb: use 64-bit arithmetic for the MSI doorbell mask
    - of/irq: Fix device node refcount leakage in API of_irq_parse_one()
    - of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
    - of/irq: Fix device node refcount leakages in of_irq_count()
    - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
    - of/irq: Fix device node refcount leakages in of_irq_init()
    - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
    - PCI: Fix reference leak in pci_alloc_child_bus()
    - phy: freescale: imx8m-pcie: assert phy reset and perst in power off
    - pinctrl: qcom: Clear latched interrupt status when changing IRQ type
    - selftests: mptcp: close fd_in before returning in main_loop
    - selftests: mptcp: fix incorrect fd checks in main_loop
    - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected()
      lists
    - ACPI: platform-profile: Fix CFI violation when accessing sysfs files
    - iommufd: Fail replace if device has not been attached
    - x86/e820: Fix handling of subpage regions when calculating nosave ranges
      in e820__register_nosave_regions()
    - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef
      noinline
    - Bluetooth: hci_uart: Fix another race during initialization
    - scsi: hisi_sas: Enable force phy when SATA disk directly connected
    - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
    - scsi: iscsi: Fix missing scsi_host_put() in error path
    - md/raid10: fix missing discard IO accounting
    - md/md-bitmap: fix stats collection for external bitmaps
    - ASoC: dwc: always enable/disable i2s irqs
    - ovl: remove unused forward declaration
    - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
    - RDMA/hns: Fix wrong maximum DMA segment size
    - ASoC: cs42l43: Reset clamp override on jack removal
    - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid
      address
    - Bluetooth: l2cap: Check encryption key size on incoming connection
    - Revert "wifi: mac80211: Update skb's control block key in
      ieee80211_tx_dequeue()"
    - igc: increase wait time before retrying PTM
    - igc: move ktime snapshot into PTM retry loop
    - igc: handle the IGC_PTP_ENABLED flag correctly
    - igc: cleanup PTP module if probe fails
    - igc: add lock preventing multiple simultaneous PTM transactions
    - test suite: use %zu to print size_t
    - pds_core: fix memory leak in pdsc_debugfs_add_qcq()
    - net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
    - net: ethernet: ti: am65-cpsw: fix port_np reference counting
    - ata: libata-sata: Save all fields from sense data descriptor
    - netlink: specs: rt-link: add an attr layer around alt-ifname
    - netlink: specs: rt-link: adjust mctp attribute naming
    - net: b53: enable BPDU reception for management port
    - net: bridge: switchdev: do not notify new brentries as changed
    - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del()
      fails
    - ptp: ocp: fix start time alignment in ptp_ocp_signal_set
    - net: ti: icss-iep: Add pwidth configuration for perout signal
    - net: ti: icss-iep: Add phase offset configuration for perout signal
    - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit
      for 100Mbps
    - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
    - riscv: Properly export reserved regions in /proc/iomem
    - kunit: qemu_configs: SH: Respect kunit cmdline
    - riscv: KGDB: Do not inline arch_kgdb_breakpoint()
    - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
    - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
    - writeback: fix false warning in inode_to_wb()
    - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
    - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
    - asus-laptop: Fix an uninitialized variable
    - nfs: add missing selections of CONFIG_CRC32
    - nfsd: decrease sc_count directly if fail to queue dl_recall
    - i2c: atr: Fix wrong include
    - ftrace: fix incorrect hash size in register_ftrace_direct()
    - Bluetooth: l2cap: Process valid commands in too long frame
    - Bluetooth: vhci: Avoid needless snprintf() calls
    - btrfs: correctly escape subvol in btrfs_show_options()
    - crypto: caam/qi - Fix drv_ctx refcount bug
    - Revert "UBUNTU: SAUCE: fs: hfs/hfsplus: add key_len boundary check to
      hfs_bnode_read_key"
    - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
    - loop: properly send KOBJ_CHANGED uevent for disk device
    - loop: LOOP_SET_FD: send uevents for partitions
    - mm/gup: fix wrongly calculated returned value in
      fault_in_safe_writeable()
    - mm: fix filemap_get_folios_contig returning batches of identical folios
    - mm: fix apply_to_existing_page_range()
    - ksmbd: Prevent integer overflow in calculation of deadtime
    - Revert "smb: client: fix TCP timers deadlock after rmmod"
    - riscv: Avoid fortify warning in syscall_get_arguments()
    - selftests/mm: generate a temporary mountpoint for cgroup filesystem
    - smb3 client: fix open hardlink on deferred close file error
    - string: Add load_unaligned_zeropad() code path to sized_strscpy()
    - tracing: Fix filter string testing
    - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any
      unreleased standalone Zen5 microcode patches
    - x86/cpu/amd: Fix workaround for erratum 1054
    - x86/boot/sev: Avoid shared GHCB page for early memory acceptance
    - scsi: megaraid_sas: Block zero-length ATA VPD inquiry
    - scsi: ufs: exynos: Ensure consistent phy reference counts
    - perf/x86/intel: Allow to update user space GPRs from PEBS records
    - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
    - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
    - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
    - drm/repaper: fix integer overflows in repeat functions
    - drm/msm/a6xx: Fix stale rpmh votes from GPU
    - drm/amd: Handle being compiled without SI or CIK support better
    - drm/amdgpu/dma_buf: fix page_link check
    - drm/sti: remove duplicate object names
    - drm/i915/gvt: fix unterminated-string-initialization warning
    - io_uring/net: fix accept multishot handling
    - cpufreq: Reference count policy in cpufreq_update_limits()
    - kbuild: Add '-fno-builtin-wcslen'
    - mptcp: sockopt: fix getting freebind & transparent
    - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
    - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
    - x86/xen: move xen_reserve_extra_memory()
    - x86/xen: fix memblock_reserve() usage on PVH
    - x86/split_lock: Fix the delayed detection logic
    - LoongArch: Eliminate superfluous get_numa_distances_cnt()
    - Revert "usb: typec: fix potential array underflow in
      ucsi_ccg_sync_control()"
    - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
    - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
    - landlock: Add the errata interface
    - nvmet-fc: Remove unused functions
    - xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
    - sign-file,extract-cert: move common SSL helper functions to a header
    - sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
    - sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
    - MIPS: dec: Declare which_prom() as static
    - MIPS: cevt-ds1287: Add missing ds1287.h include
    - MIPS: ds1287: Match ds1287_set_base_clock() function types
    - drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
    - ASoC: Intel: adl: add 2xrt1316 audio configuration
    - cgroup/cpuset: Fix incorrect isolated_cpus update in
      update_parent_effective_cpumask()
    - cgroup/cpuset: Correct invalid remote parition prs
    - cgroup/cpuset: Fix error handling in remote_partition_disable()
    - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in
      update_cpumasks_hier()"
    - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call
      per operation
    - cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set
    - cgroup/cpuset: Fix race between newly created partition and dying one
    - gpiolib: of: Fix the choice for Ingenic NAND quirk
    - ublk: refactor recovery configuration flag helpers
    - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
    - iommu/exynos: Fix suspend/resume with IDENTITY domain
    - perf/dwc_pcie: fix some unreleased resources
    - Flush console log from kernel_power_off()
    - ASoC: amd: ps: use macro for ACP6.3 pci revision id
    - media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
    - wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
    - wifi: ath11k: fix memory leak in ath11k_xxx_remove()
    - wifi: mac80211: ensure sdata->work is canceled before initialized.
    - can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
    - can: flexcan: add NXP S32G2/S32G3 SoC support
    - Bluetooth: btusb: Add 2 HWIDs for MT7922
    - Bluetooth: Add quirk for broken READ_VOICE_SETTING
    - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
    - drm/debugfs: fix printk format for bridge index
    - drm/amd/display: stop DML2 from removing pipes based on planes
    - drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
    - PCI: Add Rockchip Vendor ID
    - HID: pidff: Clamp PERIODIC effect period to device's logical range
    - HID: pidff: Stop all effects before enabling actuators
    - HID: pidff: Completely rework and fix pidff_reset function
    - HID: pidff: Simplify pidff_upload_effect function
    - HID: pidff: Define values used in pidff_find_special_fields
    - HID: pidff: Rescale time values to match field units
    - HID: pidff: Factor out code for setting gain
    - HID: pidff: Move all hid-pidff definitions to a dedicated header
    - HID: pidff: Simplify pidff_rescale_signed
    - HID: pidff: Use macros instead of hardcoded min/max values for shorts
    - HID: pidff: Factor out pool report fetch and remove excess declaration
    - HID: hid-universal-pidff: Add Asetek wheelbases support
    - HID: pidff: Comment and code style update
    - HID: pidff: Support device error response from PID_BLOCK_LOAD
    - HID: pidff: Remove redundant call to pidff_find_special_keys
    - HID: pidff: Rename two functions to align them with naming convention
    - HID: pidff: Clamp effect playback LOOP_COUNT value
    - HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
    - HID: pidff: Fix 90 degrees direction name North -> East
    - HID: pidff: Fix set_device_control()
    - media: mgb4: Fix CMT registers update logic
    - media: mgb4: Fix switched CMT frequency range "magic values" sets
    - media: rockchip: rga: fix rga offset lookup
    - media: v4l: Add a helper for setting up link-frequencies control
    - media: v4l2-common.h: kerneldoc: correctly format return values
    - media: imx219: Adjust PLL settings based on the number of MIPI lanes
    - media: nuvoton: Fix reference handling of ece_node
    - media: nuvoton: Fix reference handling of ece_pdev
    - media: i2c: imx319: Rectify runtime PM handling probe and remove
    - media: i2c: imx214: Rectify probe error handling related to runtime PM
    - media: chips-media: wave5: Fix gray color on screen
    - media: chips-media: wave5: Fix a hang after seeking
    - wifi: mt76: mt7925: ensure wow pattern command align fw format
    - wifi: mt76: mt7925: fix country count limitation for CLC
    - ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
    - accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
    - ima: limit the number of open-writers integrity violations
    - arm64: dts: exynos: gs101: disable pinctrl_gsacore node
    - btrfs: tests: fix chunk map leak after failure to add it to the tree
    - mm/damon/ops: have damon_get_folio return folio even for tail pages
    - CIFS: Propagate min offload along with other parameters from primary to
      secondary channels.
    - dm-integrity: fix non-constant-time tag verification
    - landlock: Move code to ease future backports
    - landlock: Add erratum for TCP fix
    - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq'
      error
    - net: mana: Switch to page pool for jumbo frames
    - PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
    - pinctrl: samsung: add support for eint_fltcon_offset
    - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
    - thermal/drivers/mediatek/lvts_thermal: Allow early empty sensor slots
    - thermal/drivers/mediatek/lvts_thermal: Fix wrong lvts_ctrl index
    - thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
    - thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
    - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr
    - libbpf: Prevent compiler warnings/errors
    - Upstream stable to v6.6.88, v6.12.24
    - SAUCE: Enable upstream config option "CONFIG_CPUSETS_V1"
  * [SRU] ixgbe: Add support for E610 in Noble (LP: #2131265)
    - ixgbe: Add support for E610 FW Admin Command Interface
    - ixgbe: Add support for E610 device capabilities detection
    - ixgbe: Add link management support for E610 device
    - ixgbe: Add support for NVM handling in E610 device
    - ixgbe: Add support for EEPROM dump in E610 device
    - ixgbe: Add ixgbe_x540 multiple header inclusion protection
    - ixgbe: Clean up the E610 link management related code
    - ixgbe: Enable link management in E610 device
    - ixgbe: fix media type detection for E610 device
    - ixgbe: fix media cage present detection for E610 device
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586)
    - io_uring: don't use int for ABI
    - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
    - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
    - smb: client: remove redundant lstrp update in negotiate protocol
    - gpio: virtio: Fix config space reading.
    - gpio: mlxbf2: use platform_get_irq_optional()
    - gpio: mlxbf3: use platform_get_irq_optional()
    - netlink: avoid infinite retry looping in netlink_unicast()
    - net: phy: micrel: fix KSZ8081/KSZ8091 cable test
    - net: gianfar: fix device leak when querying time stamp info
    - net: enetc: fix device and OF node leak at probe
    - net: mtk_eth_soc: fix device leak at probe
    - net: ti: icss-iep: fix device and OF node leaks at probe
    - net: dpaa: fix device leak when querying time stamp info
    - NFSD: detect mismatch of file handle and delegation stateid in OPEN op
    - PCI: Extend isolated function probing to LoongArch
    - LoongArch: BPF: Fix jump offset calculation in tailcall
    - sunvdc: Balance device refcount in vdc_port_mpgroup_check
    - Documentation: ACPI: Fix parent device references
    - ACPI: processor: perflib: Fix initial _PPC limit application
    - ACPI: processor: perflib: Move problematic pr->performance check
    - smb: client: let send_done() cleanup before calling
      smbd_disconnect_rdma_connection()
    - smb: client: don't wait for info->send_pending == 0 on error
    - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
    - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer
      exits
    - KVM: VMX: Handle forced exit due to preemption timer in fastpath
    - KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
    - KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
    - KVM: x86: Fully defer to vendor code to decide how to force immediate
      exit
    - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic
      bitmap
    - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
    - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
    - KVM: VMX: Extract checking of guest's DEBUGCTL into helper
    - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
    - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
    - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the
      guest
    - udp: also consider secpath when evaluating ipsec use for checksumming
    - net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
    - intel_idle: Allow loading ACPI tables for any family
    - ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
    - arm64: Handle KCOV __init vs inline mismatches
    - nvme-pci: try function level reset on init failure
    - udf: Verify partition map count
    - hfs: fix not erasing deleted b-tree node issue
    - better lockdep annotations for simple_recursive_removal()
    - ata: libata-sata: Disallow changing LPM state if not supported
    - fs/ntfs3: correctly create symlink for relative path
    - ext2: Handle fiemap on empty files to prevent EINVAL
    - fix locking in efi_secret_unlink()
    - securityfs: don't pin dentries twice, once is enough...
    - tracefs: Add d_delete to remove negative dentries
    - usb: xhci: print xhci->xhc_state when queue_command failed
    - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
    - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
    - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit
      time_t
    - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
    - usb: xhci: Avoid showing warnings for dying controller
    - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
    - usb: xhci: Avoid showing errors during surprise removal
    - soc: qcom: rpmh-rsc: Add RSC version 4 support
    - remoteproc: imx_rproc: skip clock enable when M-core is managed by the
      SCU
    - gpio: wcd934x: check the return value of regmap_update_bits()
    - cpufreq: Exit governor when failed to start old governor
    - PM / devfreq: governor: Replace sscanf() with kstrtoul() in
      set_freq_store()
    - EDAC/synopsys: Clear the ECC counters on init
    - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was
      successed
    - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when
      required
    - tools/nolibc: define time_t in terms of __kernel_old_time_t
    - iio: adc: ad_sigma_delta: don't overallocate scan buffer
    - gpio: tps65912: check the return value of regmap_update_bits()
    - tools/build: Fix s390(x) cross-compilation with clang
    - selftests: tracing: Use mutex_unlock for testing glob filter
    - ACPI: PRM: Reduce unnecessary printing to avoid user confusion
    - firmware: tegra: Fix IVC dependency problems
    - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
    - thermal: sysfs: Return ENODATA instead of EAGAIN for reads
    - PM: sleep: console: Fix the black screen issue
    - ACPI: processor: fix acpi_object initialization
    - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
    - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
    - pps: clients: gpio: fix interrupt handling order in remove path
    - reset: brcmstb: Enable reset drivers for ARCH_BCM2835
    - char: misc: Fix improper and inaccurate error code returned by
      misc_init()
    - mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
    - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
    - ALSA: hda: Handle the jack polling always via a work
    - ALSA: hda: Disable jack polling at shutdown
    - x86/bugs: Avoid warning when overriding return thunk
    - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
    - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
    - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
    - usb: core: usb_submit_urb: downgrade type check
    - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
    - imx8m-blk-ctrl: set ISI panic write hurry level
    - soc: qcom: mdt_loader: Actually use the e_phoff
    - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
    - platform/chrome: cros_ec_typec: Defer probe on missing EC parent
    - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
    - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
    - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
    - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
    - ASoC: codecs: rt5640: Retry DEVICE_ID verification
    - ASoC: qcom: use drvdata instead of component to keep id
    - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
    - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
    - xen/netfront: Fix TX response spurious interrupts
    - net: usb: cdc-ncm: check for filtering capability
    - ktest.pl: Prevent recursion of default variable options
    - wifi: cfg80211: reject HTC bit for management frames
    - s390/time: Use monotonic clock in get_cycles()
    - be2net: Use correct byte order and format string for TCP seq and ack_seq
    - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
    - et131x: Add missing check after DMA map
    - net: ag71xx: Add missing check after DMA map
    - net/mlx5e: Properly access RCU protected qdisc_sleeping variable
    - arm64: Mark kernel as tainted on SAE and SError panic
    - net: mctp: Prevent duplicate binds
    - wifi: cfg80211: Fix interface type validation
    - net: ipv4: fix incorrect MTU in broadcast routes
    - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
    - net: phy: micrel: Add ksz9131_resume()
    - perf/cxlpmu: Remove unintended newline from IRQ name format string
    - wifi: iwlwifi: mvm: set gtk id also in older FWs
    - um: Re-evaluate thread flags repeatedly
    - wifi: iwlwifi: mvm: fix scan request validation
    - s390/stp: Remove udelay from stp_sync_clock()
    - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
    - wifi: mac80211: don't complete management TX on SAE commit
    - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
    - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in
      __ipv6_dev_mc_inc().
    - wifi: mac80211: fix rx link assignment for non-MLO stations
    - drm/msm: use trylock for debugfs
    - wifi: rtw89: Fix rtw89_mac_power_switch() for USB
    - wifi: rtw89: Disable deep power saving for USB/SDIO
    - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
    - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
    - net: thunderbolt: Enable end-to-end flow control also in transmit
    - net: thunderbolt: Fix the parameter passing of
      tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
    - net: atlantic: add set_power to fw_ops for atl2 to fix wol
    - net: fec: allow disable coalescing
    - drm/amd/display: Separate set_gsl from set_gsl_source_select
    - wifi: ath12k: Add memset and update default rate value in wmi tx
      completion
    - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
    - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
    - drm/amd/display: Fix 'failed to blank crtc!'
    - wifi: mac80211: update radar_required in channel context after channel
      switch
    - wifi: rtlwifi: fix possible skb memory leak in
      `_rtl_pci_rx_interrupt()`.
    - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
    - powerpc: floppy: Add missing checks after DMA map
    - netmem: fix skb_frag_address_safe with unreadable skbs
    - wifi: iwlegacy: Check rate_idx range after addition
    - neighbour: add support for NUD_PERMANENT proxy entries
    - dpaa_eth: don't use fixed_phy_change_carrier
    - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to
      manual
    - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
    - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
    - gve: Return error for unknown admin queue command
    - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
    - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
    - net: dsa: b53: prevent DIS_LEARNING access on BCM5325
    - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
    - bpftool: Fix JSON writer resource leak in version command
    - ptp: Use ratelimite for freerun error message
    - wifi: rtlwifi: fix possible skb memory leak in
      _rtl_pci_init_one_rxdesc()
    - ionic: clean dbpage in de-init
    - net: ncsi: Fix buffer overflow in fetching version id
    - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
    - drm/ttm: Should to return the evict error
    - uapi: in6: restore visibility of most IPv6 socket options
    - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
    - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
    - drm/amd/display: Avoid trying AUX transactions on disconnected ports
    - drm/ttm: Respect the shrinker core free target
    - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
    - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
    - vhost: fail early when __vhost_add_used() fails
    - drm/amd/display: Only finalize atomic_obj if it was initialized
    - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not
      supported
    - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race
      condition
    - cifs: Fix calling CIFSFindFirst() for root path without msearch
    - crypto: hisilicon/hpre - fix dma unmap sequence
    - clk: tegra: periph: Fix error handling and resolve unsigned compare
      warning
    - mfd: axp20x: Set explicit ID for AXP313 regulator
    - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
    - fs/orangefs: use snprintf() instead of sprintf()
    - watchdog: dw_wdt: Fix default timeout
    - hwmon: (emc2305) Set initial PWM minimum value during probe based on
      thermal state
    - clk: qcom: ipq5018: keep XO clock always on
    - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
    - watchdog: iTCO_wdt: Report error if timeout configuration fails
    - crypto: jitter - fix intermediary handling
    - MIPS: lantiq: falcon: sysctrl: fix request memory check logic
    - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ
      control
    - leds: leds-lp50xx: Handle reg to get correct multi_index
    - dmaengine: stm32-dma: configure next sg only if there are more than 2
      sgs
    - RDMA/core: reduce stack using in nldev_stat_get_doit()
    - power: supply: qcom_battmgr: Add lithium-polymer entry
    - scsi: mpt3sas: Correctly handle ATA device errors
    - scsi: mpi3mr: Correctly handle ATA device errors
    - pinctrl: stm32: Manage irq affinity settings
    - media: tc358743: Check I2C succeeded during probe
    - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    - media: tc358743: Increase FIFO trigger level to 374
    - media: usb: hdpvr: disable zero-length read messages
    - media: uvcvideo: Fix bandwidth issue for Alcor camera
    - crypto: octeontx2 - add timeout for load_fvc completion poll
    - soundwire: amd: serialize amd manager resume sequence during pm_prepare
    - soundwire: Move handle_nested_irq outside of sdw_dev_lock
    - md: dm-zoned-target: Initialize return variable r to avoid uninitialized
      use
    - module: Prevent silent truncation of module name in delete_module(2)
    - i3c: add missing include to internal header
    - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
    - i3c: don't fail if GETHDRCAP is unsupported
    - i3c: master: Initialize ret in i3c_i2c_notifier_call()
    - dm-mpath: don't print the "loaded" message if registering fails
    - dm-table: fix checking for rq stackable devices
    - apparmor: use the condition in AA_BUG_FMT even with debug disabled
    - i2c: Force DLL0945 touchpad i2c freq to 100khz
    - f2fs: check the generic conditions first
    - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
    - vfio/type1: conditional rescheduling while pinning
    - kconfig: nconf: Ensure null termination where strncpy is used
    - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
    - scsi: target: core: Generate correct identifiers for PR OUT transport
      IDs
    - scsi: aacraid: Stop using PCI_IRQ_AFFINITY
    - vfio/mlx5: fix possible overflow in tracking max message size
    - ipmi: Use dev_warn_ratelimited() for incorrect message warnings
    - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
    - kconfig: gconf: fix potential memory leak in renderer_edited()
    - kconfig: lxdialog: fix 'space' to (de)select options
    - ipmi: Fix strcpy source and destination the same
    - net: phy: smsc: add proper reset flags for LAN8710A
    - ASoC: Intel: avs: Fix uninitialized pointer error in probe()
    - pNFS: Fix stripe mapping in block/scsi layout
    - pNFS: Fix disk addr range check in block/scsi layout
    - pNFS: Handle RPC size limit for layoutcommits
    - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
    - scsi: lpfc: Remove redundant assignment to avoid memory leak
    - ASoC: fsl_sai: replace regmap_write with regmap_update_bits
    - cifs: reset iface weights when we cannot find a candidate
    - iommufd: Report unmapped bytes in the error path of
      iopt_unmap_iova_range
    - ext4: fix zombie groups in average fragment size lists
    - ext4: fix largest free orders lists corruption on mb_optimize_scan
      switch
    - misc: rtsx: usb: Ensure mmc child device is active when card is present
    - usb: typec: ucsi: Update power_supply on power role change
    - thunderbolt: Fix copy+paste error in match_service_id()
    - cdc-acm: fix race between initial clearing halt and open
    - btrfs: zoned: use filesystem size not disk size for reclaim decision
    - btrfs: abort transaction during log replay if walk_log_tree() failed
    - btrfs: zoned: do not remove unwritten non-data block group
    - btrfs: clear dirty status from extent buffer on error at
      insert_new_root()
    - btrfs: fix log tree replay failure due to file with 0 links and extents
    - btrfs: zoned: do not select metadata BG as finish target
    - parisc: Makefile: fix a typo in palo.conf
    - media: uvcvideo: Do not mark valid metadata as invalid
    - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
    - HID: magicmouse: avoid setting up battery timer when not needed
    - HID: apple: avoid setting up battery timer for devices without battery
    - rcu: Fix racy re-initialization of irq_work causing hangs
    - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
    - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
    - m68k: Fix lost column on framebuffer debug console
    - usb: atm: cxacru: Merge cxacru_upload_firmware() into
      cxacru_heavy_init()
    - usb: gadget: udc: renesas_usb3: fix device leak at unbind
    - usb: musb: omap2430: fix device leak at unbind
    - usb: dwc3: meson-g12a: fix device leaks at unbind
    - bus: mhi: host: Fix endianness of BHI vector table
    - vt: keyboard: Don't process Unicode characters in K_OFF mode
    - vt: defkeymap: Map keycodes above 127 to K_HOLE
    - lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
    - crypto: qat - lower priority for skcipher and aead algorithms
    - ksmbd: extend the connection limiting mechanism to support IPv6
    - tracing: fprobe-event: Sanitize wildcard for fprobe event name
    - ext4: check fast symlink for ea_inode correctly
    - ext4: fix fsmap end of range reporting with bigalloc
    - ext4: fix reserved gdt blocks handling in fsmap
    - ext4: don't try to clear the orphan_present feature block device is r/o
    - ext4: use kmalloc_array() for array space allocation
    - ext4: fix hole length calculation overflow in non-extent inodes
    - btrfs: zoned: fix write time activation failure for metadata block group
    - arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
    - arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
    - arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
    - dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
    - dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks
      constraints
    - scsi: mpi3mr: Fix race between config read submit and interrupt
      completion
    - ata: libata-scsi: Fix ata_to_sense_error() status handling
    - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like
      host controllers
    - scsi: ufs: ufs-pci: Fix default runtime and system PM levels
    - ata: libata-scsi: Fix CDL control
    - zynq_fpga: use sgtable-based scatterlist wrappers
    - iio: adc: ad_sigma_delta: change to buffer predisable
    - wifi: brcmsmac: Remove const from tbl_ptr parameter in
      wlc_lcnphy_common_read_table()
    - wifi: ath12k: fix dest ring-buffer corruption
    - wifi: ath12k: fix source ring-buffer corruption
    - wifi: ath12k: fix dest ring-buffer corruption when ring is full
    - wifi: ath11k: fix dest ring-buffer corruption
    - wifi: ath11k: fix source ring-buffer corruption
    - wifi: ath11k: fix dest ring-buffer corruption when ring is full
    - pwm: imx-tpm: Reset counter if CMOD is 0
    - pwm: mediatek: Handle hardware enable and clock enable separately
    - pwm: mediatek: Fix duty and period setting
    - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
    - mtd: spi-nor: Fix spi_nor_try_unlock_all()
    - mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
    - mtd: rawnand: fsmc: Add missing check after DMA map
    - mtd: rawnand: renesas: Add missing check after DMA map
    - PCI: endpoint: Fix configfs group removal on driver teardown
    - vhost/vsock: Avoid allocating arbitrarily-sized SKBs
    - phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization
      sequence
    - soc/tegra: pmc: Ensure power-domains are in a known state
    - parisc: Check region is readable by user in raw_copy_from_user()
    - parisc: Define and use set_pte_at()
    - parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit
      compilers
    - parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
    - parisc: Try to fixup kernel exception in bad_area_nosemaphore path of
      do_page_fault()
    - parisc: Update comments in make_insert_tlb
    - media: gspca: Add bounds checking to firmware parser
    - media: hi556: correct the test pattern configuration
    - media: imx: fix a potential memory leak in
      imx_media_csc_scaler_device_init()
    - media: vivid: fix wrong pixel_array control size
    - media: verisilicon: Fix AV1 decoder clock frequency
    - media: v4l2-ctrls: Don't reset handler's error in
      v4l2_ctrl_handler_free()
    - media: ov2659: Fix memory leaks in ov2659_probe()
    - media: qcom: camss: cleanup media device allocated resource on error
      path
    - media: venus: hfi: explicitly release IRQ during teardown
    - media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
    - media: venus: venc: Clamp param smaller than 1fps and bigger than 240
    - drm/amd: Restore cached power limit during resume
    - drm/amdgpu: update mmhub 3.0.1 client id mappings
    - drm/amd/display: Add primary plane to commits for correct VRR handling
    - drm/amd/display: Don't overwrite dce60_clk_mgr
    - mptcp: drop skb if MPTCP skb extension allocation fails
    - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
    - selftests/memfd: add test for mapping write-sealed memfd read-only
    - net: Add net_passive_inc() and net_passive_dec().
    - smb: client: fix netns refcount leak after net_passive changes
    - net_sched: sch_ets: implement lockless ets_dump()
    - leds: flash: leds-qcom-flash: Limit LED current based on thermal
      condition
    - leds: flash: leds-qcom-flash: Fix registry access after re-bind
    - fscrypt: Don't use problematic non-inline crypto engines
    - block: Make REQ_OP_ZONE_FINISH a write operation
    - usb: typec: fusb302: cache PD RX state
    - btrfs: don't ignore inode missing when replaying log tree
    - btrfs: move transaction aborts to the error site in
      add_block_group_free_space()
    - btrfs: always abort transaction on failure to add block group to free
      space tree
    - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
    - btrfs: fix ssd_spread overallocation
    - btrfs: constify more pointer parameters
    - btrfs: populate otime when logging an inode item
    - btrfs: send: factor out common logic when sending xattrs
    - btrfs: send: only use boolean variables at process_recorded_refs()
    - btrfs: send: add and use helper to rename current inode when processing
      refs
    - btrfs: send: keep the current inode's path cached
    - btrfs: send: avoid path allocation for the current inode when issuing
      commands
    - btrfs: send: use fallocate for hole punching with send stream v2
    - btrfs: send: make fs_path_len() inline and constify its argument
    - wifi: mac80211: check basic rates validity in sta_link_apply_parameters
    - usb: dwc3: imx8mp: fix device leak at unbind
    - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
    - PM: runtime: Take active children into account in
      pm_runtime_get_if_in_use()
    - ata: libata-scsi: Return aborted command when missing sense and result
      TF
    - kbuild: userprogs: use correct linker when mixing clang and GNU ld
    - memstick: Fix deadlock by moving removing flag earlier
    - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for
      consistency
    - squashfs: fix memory leak in squashfs_fill_super
    - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
    - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and
      EliteBook 830 G6
    - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
    - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
    - drm/amd/display: Find first CRTC and its line time in
      dce110_fill_display_configs
    - drm/amd/display: Fill display clock and vblank time in
      dce110_fill_display_configs
    - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
    - PCI: rockchip: Use standard PCIe definitions
    - PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
    - PCI: imx6: Delay link start until configfs 'start' written
    - PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in
      epc_features
    - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
    - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
    - ext4: preserve SB_I_VERSION on remount
    - arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
    - mptcp: remove duplicate sk_reset_timer call
    - mptcp: disable add_addr retransmission when timeout is 0
    - selftests: mptcp: pm: check flush doesn't reset limits
    - mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
    - mmc: sdhci-pci-gli: Add a new function to simplify the code
    - cpuidle: menu: Remove iowait influence
    - cpuidle: governors: menu: Avoid selecting states with too much latency
    - fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
    - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
    - iio: proximity: isl29501: fix buffered read on big-endian systems
    - most: core: Drop device reference after usage in get_channel()
    - cdx: Fix off-by-one error in cdx_rpmsg_probe()
    - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash
      Drive
    - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE
      test
    - usb: renesas-xhci: Fix External ROM access timeouts
    - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
    - usb: storage: realtek_cr: Use correct byte order for bcs->Residue
    - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
    - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
    - usb: dwc3: pci: add support for the Intel Wildcat Lake
    - drm/amd/display: Don't overclock DCE 6 by 15%
    - compiler: remove __ADDRESSABLE_ASM{_STR,}() again
    - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
    - powerpc/boot: Fix build with gcc 15
    - tracing: Remove unneeded goto out logic
    - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
    - iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8)
      to aligned_s64
    - iio: imu: inv_icm42600: use = { } instead of memset()
    - iio: imu: inv_icm42600: Convert to uXX and sXX integer types
    - iio: imu: inv_icm42600: change invalid data error to -EBUSY
    - usb: xhci: Fix slot_id resource race conflict
    - usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and
      port is clean
    - usb: typec: maxim_contaminant: disable low power mode when reading
      comparator values
    - spi: spi-fsl-lpspi: Clamp too high speed_hz
    - cgroup/cpuset: Use static_branch_enable_cpuslocked() on
      cpusets_insane_config_key
    - iosys-map: Fix undefined behavior in iosys_map_clear()
    - RDMA/erdma: Fix ignored return value of init_kernel_qp
    - RDMA/bnxt_re: Fix to do SRQ armena by default
    - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
    - RDMA/bnxt_re: Fix to initialize the PBL array
    - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
    - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
    - mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
    - ALSA: usb-audio: Fix size validation in convert_chmap_v3()
    - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
    - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
    - phy: mscc: Fix timestamping for vsc8584
    - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    - LoongArch: Optimize module load time by optimizing PLT/GOT counting
    - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
    - igc: fix disabling L1.2 PCI-E link substate on I226 on init
    - net/sched: Remove unnecessary WARNING condition for empty child qdisc in
      htb_activate
    - bonding: update LACP activity flag after setting lacp_active
    - bonding: Add independent control state machine
    - bonding: send LACPDUs periodically in passive mode after receiving
      partner's LACPDU
    - Octeontx2-af: Skip overlap check for SPI field
    - net/mlx5: Base ECVF devlink port attrs from 0
    - net/mlx5e: Preserve shared buffer capacity during headroom updates
    - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
    - s390/hypfs: Avoid unnecessary ioctl registration in debugfs
    - s390/hypfs: Enable limited access during lockdown
    - alloc_fdtable(): change calling conventions.
    - LoongArch: Avoid in-place string operation on FDT content
    - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD
    - mm/memory-tier: fix abstract distance calculation overflow
    - nvme-tcp: log TLS handshake failures at error level
    - ata: ahci: Disallow LPM policy control if not supported
    - ata: ahci: Disable DIPM if host lacks support
    - usb: typec: tcpm/tcpci_maxim: fix irq wake usage
    - pmdomain: ti: Select PM_GENERIC_DOMAINS
    - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
    - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready
    - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless
      mode
    - tty: serial: fix print format specifiers
    - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps
    - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn
    - idpf: preserve coalescing settings across resets
    - wifi: mac80211: don't unreserve never reserved chanctx
    - sched/deadline: Fix accounting after global limits change
    - wifi: mac80211: avoid weird state in error path
    - perf/arm: Add missing .suppress_bind_attrs
    - drm/imagination: Clear runtime PM errors while resetting the GPU
    - drm/xe/xe_query: Use separate iterator while filling GT list
    - wifi: ath12k: Fix station association with MBSSID Non-TX BSS
    - lib: packing: Include necessary headers
    - arm64: stacktrace: Check kretprobe_find_ret_addr() return value
    - net: dsa: b53: ensure BCM5325 PHYs are enabled
    - drm/amd/display: Update DMCUB loading sequence for DCN3.5
    - drm/amd/display: Disable dsc_power_gate for dcn314 by default
    - RDMA/bnxt_re: Fix size of uverbs_copy_to() in
      BNXT_RE_METHOD_GET_TOGGLE_MEM
    - media: ipu-bridge: Add _HID for OV5670
    - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in
      dev_loss_tmo_callbk
    - media: uvcvideo: Add quirk for HP Webcam HD 2300
    - crypto: ccp - Add missing bootloader info reg for pspv6
    - soundwire: amd: cancel pending slave status handling workqueue during
      remove sequence
    - tools/power turbostat: Fix build with musl
    - tools/power turbostat: Handle cap_get_proc() ENOSYS
    - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in
      _smbd_get_connection
    - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap
    - drm/amdgpu: fix vram reservation issue
    - btrfs: qgroup: set quota enabled bit if quota disable fails flushing
      reservations
    - btrfs: qgroup: fix qgroup create ioctl returning success after quotas
      disabled
    - btrfs: don't skip remaining extrefs if dir not found during log replay
    - btrfs: error on missing block group when unaccounting log tree extent
      buffers
    - btrfs: fix iteration bug in __qgroup_excl_accounting()
    - xfs: fix scrub trace with null pointer in quotacheck
    - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info()
    - PCI: Store all PCIe Supported Link Speeds
    - PCI: Allow PCI bridges to go to D3Hot on all non-x86
    - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
    - ata: libata-sata: Add link_power_management_supported sysfs attribute
    - io_uring/rw: cast rw->flags assignment to rwf_t
    - PCI: Honor Max Link Speed when determining supported speeds
    - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is
      disabled
    - crypto: octeontx2 - Fix address alignment issue on ucode loading
    - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2
    - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0
    - btrfs: fix incorrect log message for nobarrier mount option
    - btrfs: restore mount option info messages during mount
    - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM
    - apparmor: Fix 8-byte alignment for initial dfa blob streams
    - PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
    - PCI: imx6: Remove apps_reset toggling from
      imx_pcie_{assert/deassert}_core_reset
    - amdgpu/amdgpu_discovery: increase timeout limit for IFWI init
    - ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume
      context
    - drm/amdgpu/discovery: fix fw based ip discovery
    - lib/string_choices: Add str_true_false()/str_false_true() helper
    - USB: typec: Use str_enable_disable-like helpers
    - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb()
    - btrfs: explicitly ref count block_group on new_bgs list
    - btrfs: codify pattern for adding block_group to bg_list
    - btrfs: zoned: requeue to unused block group list if zone finish failed
    - drm/vblank: Introduce drm_crtc_vblank_crtc()
    - drm/vblank: add dynamic per-crtc vblank configuration support
    - drm/amd/display: Fix Xorg desktop unresponsive on Replay panel
    - arch: consolidate existing CONFIG_PAGE_SIZE_*KB definitions
    - arch: simplify architecture specific page size configuration
    - [Config] update page size configuration
    - arch: define CONFIG_PAGE_SIZE_*KB on all architectures
    - [Config] update page size on all architectures
    - Mark xe driver as BROKEN if kernel page size is not 4kB
    - [Config] disable xe driver where page size is not 4kB
    - arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot
    - arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC
    - arm64: dts: ti: k3-am6*: Add bootph-all property in MMC node
    - arm64: dts: ti: k3-am6*: Remove DLL properties for soft PHYs
    - arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC
    - arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file
    - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq()
    - drm/i915/icl+/tc: Convert AUX powered WARN to a debug message
    - drm/i915/display: add intel_encoder_is_*() and _to_*() functions
    - drm/i915/icl+/tc: Cache the max lane count value
    - ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
    - cgroup/cpuset: Fix a partition error with CPU hotplug
    - drm/tests: Fix endian warning
    - RDMA/bnxt_re: Fix a possible memory leak in the driver
    - RDMA/hns: Fix dip entries leak on devices newer than hip09
    - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode
    - drm/hisilicon/hibmc: refactored struct hibmc_drm_private
    - drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init
      failed
    - drm/amd/display: Don't print errors for nonexistent connectors
    - net: dsa: microchip: Fix KSZ9477 HSR port setup issue
    - net/mlx5: Relocate function declarations from port.h to mlx5_core.h
    - net/mlx5e: Extract checking of FEC support for a link mode
    - net/mlx5e: Support FEC settings for 100G/lane modes
    - net/mlx5: Add IFC bits and enums for buf_ownership
    - net/mlx5e: Query FW for buffer ownership
    - Upstream stable to v6.6.103, v6.12.43, v6.12.44
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39779
    - btrfs: subpage: keep TOWRITE tag until folio is cleaned
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39759
    - btrfs: qgroup: fix race between quota disable and quota rescan ioctl
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39705
    - drm/amd/display: fix a Null pointer dereference vulnerability
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39707
    - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39712
    - media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38686
    - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38703
    - drm/xe: Make dma-fences compliant with the safe access rules
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39746
    - wifi: ath10k: shutdown driver when hardware is unreliable
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39747
    - drm/msm: Add error handling for krealloc in metadata setup
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38704
    - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39748
    - bpf: Forget ranges when refining tnum after JSET
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38705
    - drm/amd/pm: fix null pointer access
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38710
    - gfs2: Validate i_depth for exhash directories
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38722
    - habanalabs: fix UAF in export_dmabuf()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38732
    - netfilter: nf_reject: don't leak dst refcount for loopback packets
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39766
    - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38734
    - net/smc: fix UAF on smcsk after smc_listen_out()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38735
    - gve: prevent ethtool ops after shutdown
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39673
    - ppp: fix race conditions in ppp_fill_forward_path
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39770
    - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39675
    - drm/amd/display: Add null pointer check in
      mod_hdcp_hdcp1_create_session()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39772
    - drm/hisilicon/hibmc: fix the hibmc loaded failed bug
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38676
    - iommu/amd: Avoid stack buffer overflow from kernel cmdline
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39676
    - scsi: qla4xxx: Prevent a potential error pointer dereference
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39773
    - net: bridge: fix soft lockup in br_multicast_query_expired()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39679
    - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39681
    - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39687
    - iio: light: as73211: Ensure buffer holes are zeroed
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39683
    - tracing: Limit access to parser->buffer when trace_get_user failed
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39801
    - usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39684
    - comedi: Fix use of uninitialized memory in do_insn_ioctl() and
      do_insnlist_ioctl()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39685
    - comedi: pcl726: Prevent invalid irq number
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39686
    - comedi: Make insn_rw_emulate_bits() do insn->n samples
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39689
    - ftrace: Also allocate and copy hash for reading of filter files
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39691
    - fs/buffer: fix use-after-free when call bh_read() helper
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39692
    - smb: server: split ksmbd_rdma_stop_listening() out of
      ksmbd_rdma_destroy()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39788
    - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39693
    - drm/amd/display: Avoid a NULL pointer dereference
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39694
    - s390/sclp: Fix SCCB present check
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39776
    - mm/debug_vm_pgtable: clear page table entries at destroy_args()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38681
    - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39800
    - btrfs: abort transaction on unexpected eb generation at
      btrfs_copy_root()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38684
    - net/sched: ets: use old 'nbands' while purging unused classes
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-21884
    - net: better track kernel sockets lifetime
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39701
    - ACPI: pfr_update: Fix the driver update version check
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39702
    - ipv6: sr: Fix MAC comparison to be constant-time
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39703
    - net, hsr: reject HSR frame if skb can't hold tag
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39706
    - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39709
    - media: venus: protect against spurious interrupts during probe
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39710
    - media: venus: Add a check for packet size after reading from shared
      memory
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39711
    - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable()
      calls
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39713
    - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39714
    - media: usbtv: Lock resolution while streaming
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39715
    - parisc: Revise gateway LWS calls to probe user read access
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39716
    - parisc: Revise __get_user() to probe user read access
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39781
    - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39782
    - jbd2: prevent softlockup in jbd2_log_do_checkpoint()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38677
    - f2fs: fix to avoid out-of-boundary access in dnode page
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39718
    - vsock/virtio: Validate length in packet header before skb_put()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39783
    - PCI: endpoint: Fix configfs group list head handling
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39719
    - iio: imu: bno055: fix OOB access of hw_xlate array
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39787
    - soc: qcom: mdt_loader: Ensure we don't read past the ELF header
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39720
    - ksmbd: fix refcount leak causing resource not released
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39721
    - crypto: qat - flush misc workqueue during device shutdown
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39790
    - bus: mhi: host: Detect events pointing to unexpected TREs
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39724
    - serial: 8250: fix panic due to PSLVERR
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39758
    - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38679
    - media: venus: Fix OOB read due to missing payload bound check
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38680
    - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39736
    - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39737
    - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38683
    - hv_netvsc: Fix panic during namespace deletion with VF
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38685
    - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39738
    - btrfs: do not allow relocation of partially dropped subvolumes
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38687
    - comedi: fix race between polling and detaching
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39760
    - usb: core: config: Prevent OOB read in SS endpoint companion parsing
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38688
    - iommufd: Prevent ALIGN() overflow
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39739
    - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38691
    - pNFS: Fix uninited ptr deref in block/scsi layout
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39795
    - block: avoid possible overflow for chunk_sectors check in
      blk_stack_limits()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38692
    - exfat: add cluster chain loop check for dir
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38693
    - media: dvb-frontends: w7090p: fix null-ptr-deref in
      w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38694
    - media: dvb-frontends: dib7090p: fix null-ptr-deref in
      dib7090p_rw_on_apb()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38695
    - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport
      structure
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39742
    - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38696
    - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38697
    - jfs: upper bound check of tree index in dbAllocAG
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38698
    - jfs: Regular file corruption check
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39743
    - jfs: truncate good inode pages when hard link is 0
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38699
    - scsi: bfa: Double-free fix
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38700
    - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is
      allocated
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38701
    - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38702
    - fbdev: fix potential buffer overflow in do_register_framebuffer()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39744
    - rcu: Fix rcu_read_unlock() deadloop due to IRQ work
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39761
    - wifi: ath12k: Decrement TID on RX peer frag setup error handling
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39797
    - xfrm: Duplicate SPI Handling
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39749
    - rcu: Protect ->defer_qs_iw_pending from data race
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39750
    - wifi: ath12k: Correct tid cleanup when tid setup fails
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38706
    - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39794
    - ARM: tegra: Use I/O memcpy to write to IRAM
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39752
    - ARM: rockchip: fix kernel hang during smp initialization
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39763
    - ACPI: APEI: send SIGBUS to current task if synchronous memory error not
      recovered
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38707
    - fs/ntfs3: Add sanity check for file name
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38708
    - drbd: add missing kref_get in handle_write_conflicts
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39753
    - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38711
    - smb/server: avoid deadlock when linking with ReplaceIfExists
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38712
    - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38713
    - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38714
    - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38715
    - hfs: fix slab-out-of-bounds in hfs_bnode_read()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38716
    - hfs: fix general protection fault in hfs_find_init()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38718
    - sctp: linearize cloned gso packets in sctp_rcv
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38721
    - netfilter: ctnetlink: fix refcount leak on table dump
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38614
    - eventpoll: Fix semi-unbounded recursion
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39756
    - fs: Prevent file descriptor table allocations exceeding INT_MAX
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39798
    - NFS: Fix the setting of capabilities when automounting a new filesystem
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38724
    - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38730
    - io_uring/net: commit partial buffers on retry
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38725
    - net: usb: asix_devices: add phy_mask for ax88772 mdio bus
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38728
    - smb3: fix for slab out of bounds on mount to ksmbd
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-39757
    - ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  * Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
    CVE-2025-38729
    - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  * CVE-2025-40297
    - net: bridge: fix use-after-free due to MST port state bypass
  * CVE-2025-40256
    - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that
      were never added
  * CVE-2025-40215
    - xfrm: delete x->tunnel as we delete x
  * CVE-2025-40214
    - af_unix: Initialise scc_index in unix_add_edge().
  * CVE-2025-38248
    - bridge: mcast: Fix use-after-free during router port configuration
  * Enabling crypto selftests causes boot stall on 6.8 (LP: #2135716)
    - SAUCE: Revert "crypto: api - Fix boot-up self-test race"
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261)
    - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
    - perf/core: Fix the WARN_ON_ONCE is out of lock protected region
    - ASoC: cs35l56: probe() should fail if the device ID is not recognized
    - Bluetooth: hci_sync: Fix not disabling advertising instance
    - Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
    - pinctrl: amd: Clear GPIO debounce for suspend
    - fix proc_sys_compare() handling of in-lookup dentries
    - vsock: fix `vsock_proto` declaration
    - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also
      `transport_local`
    - net: stmmac: Fix interrupt handling for level-triggered mode in
      DWC_XGMAC2
    - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
    - net: phy: smsc: Force predictable MDI-X state on LAN87xx
    - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
    - perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
    - x86/mce/amd: Add default names for MCA banks and blocks
    - x86/mce/amd: Fix threshold limit reset
    - x86/mce: Don't remove sysfs if thresholding sysfs init fails
    - x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
    - KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing
      table.
    - gre: Fix IPv6 multicast route creation.
    - md/md-bitmap: fix GPF in bitmap_get_stats()
    - drm/ttm: fix error handling in ttm_buffer_object_transfer
    - drm/gem: Fix race in drm_gem_handle_create_tail()
    - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
    - drm/framebuffer: Acquire internal references on GEM handles
    - kallsyms: fix build without execinfo
    - maple_tree: fix mt_destroy_walk() on root leaf node
    - mm: fix the inaccurate memory statistics issue for users
    - scripts/gdb: fix interrupts display after MCP on x86
    - scripts/gdb: de-reference per-CPU MCE interrupts
    - scripts/gdb: fix interrupts.py after maple tree conversion
    - mm/vmalloc: leave lazy MMU mode on PTE mapping error
    - pwm: mediatek: Ensure to disable clocks in error path
    - x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
    - x86/mm: Disable hugetlb page table sharing on 32-bit
    - smb: server: make use of rdma_destroy_qp()
    - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
    - erofs: fix to add missing tracepoint in erofs_read_folio()
    - netlink: Fix rmem check in netlink_broadcast_deliver().
    - netlink: make sure we allow at least one dump skb
    - smb: client: avoid unnecessary reconnects when refreshing referrals
    - smb: client: fix DFS interlink failover
    - cifs: all initializations for tcon should happen in tcon_info_alloc
    - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
    - net: phy: microchip: limit 100M workaround to link-down events on
      LAN88xx
    - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to
      debug level
    - net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
    - bnxt_en: Fix DCB ETS validation
    - ublk: sanity check add_dev input for underflow
    - atm: idt77252: Add missing `dma_map_error()`
    - um: vector: Reduce stack usage in vector_eth_configure()
    - io_uring: make fallocate be hashed work
    - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
    - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
    - net: usb: qmi_wwan: add SIMCom 8230C composition
    - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
    - net: mana: Record doorbell physical address in PF mode
    - vt: add missing notification when switching back to text mode
    - bpf: Adjust free target to avoid global starvation of LRU map
    - HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
    - selftests/bpf: adapt one more case in test_lru_map to the new
      target_free
    - smb: client: fix potential race in cifs_put_tcon()
    - drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
    - drm/amdgpu/ip_discovery: add missing ip_discovery fw
    - x86/mce: Ensure user polling settings are honored when restarting timer
    - ASoC: fsl_sai: Force a software reset when starting in consumer mode
    - wifi: mt76: mt7921: prevent decap offload config before STA
      initialization
    - wifi: mt76: mt7925: fix the wrong config for tx interrupt
    - wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw
      scan
    - drm/xe: Allocate PF queue size on pow2 boundary
    - clk: scmi: Handle case where child clocks are initialized before their
      parents
    - erofs: address D-cache aliasing
    - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
    - wifi: cfg80211: fix S1G beacon head validation in nl80211
    - wifi: mac80211: correctly identify S1G short beacon
    - wifi: mac80211: fix non-transmitted BSSID profile search
    - drm/nouveau/gsp: fix potential leak of memory used during acpi init
    - erofs: free pclusters if no cached folio is attached
    - erofs: get rid of `z_erofs_next_pcluster_t`
    - erofs: tidy up zdata.c
    - erofs: refine readahead tracepoint
    - erofs: fix to add missing tracepoint in erofs_readahead()
    - net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
    - selftests: net: lib: Move logging from forwarding/lib.sh here
    - selftests: net: lib: fix shift count out of range
    - net/mlx5e: Add new prio for promiscuous mode
    - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
    - ALSA: hda/realtek: Add quirks for some Clevo laptops
    - riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
    - erofs: fix rare pcluster memory leak after unmounting
    - net: libwx: fix alloc msix vectors failed
    - net: wangxun: revert the adjustment of the IRQ vector sequence
    - arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
    - KVM: SVM: Set synthesized TSA CPUID flags
    - Upstream stable to v6.6.98, v6.6.99, v6.12.38, v6.12.39
    - SAUCE: selftests: net: altnames.sh fix following upstream updates
  * vrf_route_leaking.sh in net from ubuntu_kernel_selftests linux ADT test
    failure with linux/5.11.0-18.19 (Ping received ICMP Packet too big)
    (LP: #1928890)
    - selftests: net: use slowwait to stabilize vrf_route_leaking test
  * ubuntu_bpf failed to build on Noble ( error: ‘struct prog_test_def’ has no
    member named ‘should_tmon’) (LP: #2112357)
    - selftests/bpf: Factor out get_xlated_program() helper
    - selftests/bpf: extract utility function for BPF disassembly
    - selftests/bpf: Add traffic monitor functions.
    - selftests/bpf: Add the traffic monitor option to test_progs.
  * ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J
    (LP: #2096976)
    - netdevsim: fix rtnetlink.sh selftest
    - [SAUCE] Fix selftest/net/rtnetlink.sh for Big Endian
  * fib_tests.sh in ubuntu_kernel_selftests failed with IPv4 mangling tests
    Connection check - server side (LP: #2012859)
    - selftests: rtnetlink: correct error message in rtnetlink.sh fou test
  * net:rtnetlink.sh in ubuntu_kernel_selftests failed with FAIL: address
    proto IPv4 / IPv6 (LP: #2031531)
    - selftests: rtnetlink: skip tests if tools or feats are missing
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740)
    - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
    - ethernet: intel: fix building with large NR_CPUS
    - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
    - ASoC: Intel: fix SND_SOC_SOF dependencies
    - ASoC: amd: yc: add DMI quirk for ASUS M6501RM
    - audit,module: restore audit logging in load failure case
    - fs_context: fix parameter name in infofc() macro
    - ublk: use vmalloc for ublk_device's __queues
    - hfsplus: make splice write available again
    - hfs: make splice write available again
    - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    - ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    - ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    - selftests: Fix errno checking in syscall_user_dispatch test
    - soc: qcom: QMI encoding/decoding for big endian
    - arm64: dts: qcom: sdm845: Expand IMEM region
    - arm64: dts: qcom: sc7180: Expand IMEM region
    - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    - ARM: dts: vfxxx: Correctly use two tuples for timer address
    - usb: host: xhci-plat: fix incorrect type for of_match variable in
      xhci_plat_probe()
    - usb: misc: apple-mfi-fastcharge: Make power supply names unique
    - vmci: Prevent the dispatching of uninitialized payloads
    - pps: fix poll support
    - Revert "vmci: Prevent the dispatching of uninitialized payloads"
    - usb: early: xhci-dbc: Fix early_ioremap leak
    - arm: dts: ti: omap: Fixup pinheader typo
    - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    - cpufreq: Initialize cpufreq-based frequency-invariance later
    - cpufreq: Init policy->rwsem before it may be possibly used
    - samples: mei: Fix building on musl libc
    - soc: qcom: pmic_glink: fix OF node leak
    - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    - interconnect: qcom: sc8180x: specify num_nodes
    - staging: nvec: Fix incorrect null termination of battery manufacturer
    - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    - bpf, sockmap: Fix psock incorrectly pointing to sk
    - selftests/bpf: fix signedness bug in redir_partial()
    - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    - caif: reduce stack size, again
    - wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    - net: dst: annotate data-races around dst->input
    - net: dst: annotate data-races around dst->output
    - kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    - drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    - m68k: Don't unregister boot console needlessly
    - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    - sched/psi: Optimize psi_group_change() cpu_clock() usage
    - fbcon: Fix outdated registered_fb reference in comment
    - netfilter: nf_tables: Drop dead code from fill_*_info routines
    - netfilter: nf_tables: adjust lockdep assertions handling
    - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    - um: rtc: Avoid shadowing err in uml_rtc_start()
    - net_sched: act_ctinfo: use atomic64_t for three counters
    - xen/gntdev: remove struct gntdev_copy_batch from stack
    - tcp: call tcp_measure_rcv_mss() for ooo packets
    - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    - mwl8k: Add missing check after DMA map
    - iommu/amd: Fix geometry.aperture_end for V2 tables
    - wifi: plfxlc: Fix error handling in usb driver probe
    - wifi: mac80211: Do not schedule stopped TXQs
    - wifi: mac80211: Don't call fq_flow_idx() for management frames
    - wifi: mac80211: Check 802.11 encaps offloading in
      ieee80211_tx_h_select_key()
    - Reapply "wifi: mac80211: Update skb's control block key in
      ieee80211_tx_dequeue()"
    - wifi: ath12k: fix endianness handling while accessing wmi service bit
    - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P
      IE
    - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    - kcsan: test: Initialize dummy variable
    - Bluetooth: hci_event: Mask data status from LE ext adv reports
    - tools/rv: Do not skip idle in trace
    - can: peak_usb: fix USB FD devices potential malfunction
    - can: kvaser_pciefd: Store device channel index
    - can: kvaser_usb: Assign netdev.dev_port based on device channel index
    - net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    - selftests: rtnetlink.sh: remove esp4_offload after test
    - vrf: Drop existing dst reference in vrf_ip6_input_dst
    - ipv6: annotate data-races around rt->fib6_nsiblings
    - bpf/preload: Don't select USERMODE_DRIVER
    - PCI: rockchip-host: Fix "Unexpected Completion" log message
    - crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    - crypto: qat - use unmanaged allocation for dc_data
    - crypto: marvell/cesa - Fix engine load inaccuracy
    - mtd: fix possible integer overflow in erase_xfer()
    - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    - crypto: arm/aes-neonbs - work around gcc-15 warning
    - PCI: endpoint: pci-epf-vntb: Return -ENOENT if
      pci_epc_get_next_free_bar() fails
    - pinctrl: sunxi: Fix memory leak on krealloc failure
    - fanotify: sanitize handle_type values when reporting fid
    - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    - Fix dma_unmap_sg() nents value
    - perf tools: Fix use-after-free in help_unknown_cmd()
    - perf sched: Free thread->priv using priv_destructor
    - perf sched: Fix memory leaks for evsel->priv in timehist
    - perf sched: Fix memory leaks in 'perf sched latency'
    - crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    - RDMA/hns: Fix -Wframe-larger-than issue
    - kernel: trace: preemptirq_delay_test: use offstack cpu mask
    - perf tests bp_account: Fix leaked file descriptor
    - clk: sunxi-ng: v3s: Fix de clock definition
    - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    - scsi: elx: efct: Fix dma_unmap_sg() nents value
    - scsi: mvsas: Fix dma_unmap_sg() nents value
    - scsi: isci: Fix dma_unmap_sg() nents value
    - watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    - hwrng: mtk - handle devm_pm_runtime_enable errors
    - crypto: keembay - Fix dma_unmap_sg() nents value
    - crypto: img-hash - Fix dma_unmap_sg() nents value
    - soundwire: stream: restore params when prepare ports fail
    - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem
      attribute
    - fs/orangefs: Allow 2 more characters in do_c_string()
    - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    - dmaengine: nbpfaxi: Add missing check after DMA map
    - ASoC: fsl_xcvr: get channel status data when PHY is not exists
    - sh: Do not use hyphen in exported variable name
    - perf tools: Remove libtraceevent in .gitignore
    - crypto: qat - fix DMA direction for compression on GEN2 devices
    - crypto: qat - fix seq_file position update in adf_ring_next()
    - jfs: fix metapage reference count leak in dbAllocCtl
    - mtd: rawnand: atmel: Fix dma_mapping_error() address
    - mtd: rawnand: rockchip: Add missing check after DMA map
    - mtd: rawnand: atmel: set pmecc data setup time
    - vhost-scsi: Fix log flooding with target does not exist errors
    - bpf: Check flow_dissector ctx accesses are aligned
    - bpf: Check netfilter ctx accesses are aligned
    - apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    - apparmor: fix loop detection used in conflicting attachment resolution
    - module: Restore the moduleparam prefix length check
    - ucount: fix atomic_long_inc_below() argument type
    - rtc: ds1307: fix incorrect maximum clock rate handling
    - rtc: hym8563: fix incorrect maximum clock rate handling
    - rtc: nct3018y: fix incorrect maximum clock rate handling
    - rtc: pcf85063: fix incorrect maximum clock rate handling
    - rtc: pcf8563: fix incorrect maximum clock rate handling
    - rtc: rv3028: fix incorrect maximum clock rate handling
    - f2fs: doc: fix wrong quota mount option description
    - f2fs: fix to update upper_p in __get_secs_required() correctly
    - f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    - vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    - vfio: Prevent open_count decrement to negative
    - vfio/pci: Separate SR-IOV VF dev_set
    - scsi: mpt3sas: Fix a fw_event memory leak
    - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    - scsi: ufs: core: Use link recovery when h8 exit fails during runtime
      resume
    - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    - kconfig: qconf: fix ConfigList::updateListAllforAll()
    - sched/psi: Fix psi_seq initialization
    - PCI: pnv_php: Work around switches with broken presence detection
    - powerpc/eeh: Export eeh_unfreeze_pe()
    - pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
    - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    - NFSv4.2: another fix for listxattr
    - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    - md/md-cluster: handle REMOVE message earlier
    - netpoll: prevent hanging NAPI when netcons gets enabled
    - phy: mscc: Fix parsing of unicast frames
    - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    - netlink: specs: ethtool: fix module EEPROM input/output arguments
    - net/mlx5: Correctly set gso_segs when LRO is used
    - net/sched: taprio: enforce minimum value for picos_per_byte
    - benet: fix BUG when creating VFs
    - irqchip: Build IMX_MU_MSI only on ARM
    - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    - smb: server: remove separate empty_recvmsg_queue
    - smb: server: make sure we call ib_dma_unmap_single() only if we called
      ib_dma_map_single already
    - smb: server: let recv_done() consistently call
      put_recvmsg/smb_direct_disconnect_rdma_connection
    - smb: server: let recv_done() avoid touching data_transfer after
      cleanup/move
    - smb: client: Use min() macro
    - smb: client: Correct typos in multiple comments across various files
    - smb: smbdirect: add smbdirect_socket.h
    - smb: client: make use of common smbdirect_socket
    - smb: client: make sure we call ib_dma_unmap_single() only if we called
      ib_dma_map_single already
    - smb: client: let recv_done() cleanup before notifying the callers.
    - pptp: fix pptp_xmit() error path
    - smb: client: return an error if rdma_connect does not return within 5
      seconds
    - selftests/perf_events: Add a mmap() correctness test
    - ksmbd: fix corrupted mtime and ctime in smb2_open
    - smb: server: Fix extension string in ksmbd_extract_shortname()
    - USB: serial: option: add Foxconn T99W709
    - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    - net: usbnet: Fix the wrong netif_carrier_on() call
    - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    - x86/fpu: Delay instruction pointer fixup until after warning
    - MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX
    - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes
    - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size
    - mei: vsc: Destroy mutex after freeing the IRQ
    - mei: vsc: Event notifier fixes
    - mei: vsc: Unset the event callback on remove and probe errors
    - arm64: dts: st: fix timer used for ticks
    - selftests: breakpoints: use suspend_stats to reliably check suspend
      success
    - PM / devfreq: Fix a index typo in trans_stat
    - drm/panfrost: Fix panfrost device variable name in devfreq
    - selftests/bpf: Fix unintentional switch case fall through
    - drm/amdgpu: Remove nbiov7.9 replay count reporting
    - bpf: Ensure RCU lock is held around bpf_prog_ksym_find
    - refscale: Check that nreaders and loops multiplication doesn't overflow
    - iommu/amd: Enable PASID and ATS capabilities in the correct order
    - file: add take_fd() cleanup helper
    - file: fix typo in take_fd() comment
    - rcu: Fix delayed execution of hurry callbacks
    - ring-buffer: Remove ring_buffer_read_prepare_sync()
    - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863
    - stmmac: xsk: fix negative overflow of budget in zerocopy mode
    - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state()
    - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning
    - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers
    - perf dso: Add missed dso__put to dso__load_kcore
    - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER
    - perf sched: Make sure it frees the usage string
    - perf sched: Fix memory leaks in 'perf sched map'
    - perf sched: Use RC_CHK_EQUAL() to compare pointers
    - RDMA/hns: Fix HW configurations not cleared in error flow
    - RDMA/hns: Get message length of ack_req from FW
    - RDMA/hns: Add mutex_destroy()
    - RDMA/hns: Fix accessing uninitialized resources
    - RDMA/hns: Drop GFP_NOWARN
    - crypto: qat - disable ZUC-256 capability for QAT GEN5
    - remoteproc: xlnx: Disable unsupported features
    - perf record: Cache build-ID of hit DSOs only
    - vdpa: Fix IDR memory leak in VDUSE module exit
    - vhost: Reintroduce kthread API and add mode selection
    - [Config] enable VHOST_ENABLE_FORK_OWNER_CONTROL
    - apparmor: Fix unaligned memory accesses in KUnit test
    - f2fs: turn off one_time when forcibly set to foreground GC
    - exfat: fdatasync flag should be same like generic_write_sync()
    - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs
    - block: Fix default IO priority if there is no IO context
    - ASoC: tas2781: Fix the wrong step for TLV on tas2781
    - s390/mm: Allocate page table with PAGE_SIZE granularity
    - smb: client: remove separate empty_packet_queue
    - smb: client: let recv_done() avoid touching data_transfer after
      cleanup/move
    - drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type
    - drm/i915/hdmi: propagate errors from intel_hdmi_init_connector()
    - drm/i915/hdmi: add error handling in g4x_hdmi_init()
    - drm/i915/ddi: gracefully handle errors from
      intel_ddi_init_hdmi_connector()
    - drm/i915/display: add intel_encoder_is_hdmi()
    - drm/i915/ddi: only call shutdown hooks for valid encoders
    - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state()
    - PCI/ASPM: Fix L1SS saving
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26)
    - s390/mm: Remove possible false-positive warning in pte_free_defer()
    - Upstream stable to v6.6.102, v6.12.42
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38619
    - media: ti: j721e-csi2rx: fix list_del corruption
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38582
    - RDMA/hns: Fix double destruction of rsv_qp
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38585
    - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38593
    - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-39732
    - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38595
    - xen: fix UAF in dmabuf_exp_from_pages()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38660
    - parse_longname(): strrchr() expects NUL-terminated string
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38555
    - usb: gadget : fix use-after-free in composite_dev_cleanup()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2024-36331 // CVE-2025-38560
    - x86/sev: Evict cache lines during SNP memory validation
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38501
    - ksmbd: limit repeated connections from clients with the same IP
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38562
    - ksmbd: fix null pointer dereference error in generate_encryptionkey
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38566
    - sunrpc: fix handling of server side tls alerts
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38568
    - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38571
    - sunrpc: fix client side handling of tls alerts
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38622
    - net: drop UFO packets in udp_rcv_segment()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38572
    - ipv6: reject malicious packets in ipv6_gso_segment()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38574
    - pptp: ensure minimal skb length in pptp_xmit()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-39730
    - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38623
    - PCI: pnv_php: Fix surprise plug detection and recovery
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38576
    - powerpc/eeh: Make EEH driver device hotplug safe
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38624
    - PCI: pnv_php: Clean up allocated IRQs on unplug
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38625
    - vfio/pds: Fix missing detach_ioas op
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38626
    - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-39731
    - f2fs: vm_unmap_ram() may be called from an invalid context
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38652
    - f2fs: fix to avoid out-of-boundary access in devs.path
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38577
    - f2fs: fix to avoid panic in f2fs_evict_inode
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38578
    - f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38579
    - f2fs: fix KMSAN uninit-value in extent_info usage
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38630
    - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38632
    - pinmux: fix race causing mux_owner NULL with active mux_usecount
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38653
    - proc: use the same treatment to check proc_lseek as ones for
      proc_read_iter et.al
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38581
    - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38634
    - power: supply: cpcap-charger: Fix null check for
      power_supply_get_by_name
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38583
    - clk: xilinx: vcu: unregister pll_post only if registered correctly
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38635
    - clk: davinci: Add NULL check in davinci_lpsc_clk_register()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38587
    - ipv6: fix possible infinite loop in fib6_info_uses_dev()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38588
    - ipv6: prevent infinite loop in rt6_nlmsg_size()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38590
    - net/mlx5e: Remove skb secpath if xfrm state is not found
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38639
    - netfilter: xt_nfacct: don't assume acct name is null-terminated
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38640
    - bpf: Disable migration in nf_hook_run_bpf().
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38644
    - wifi: mac80211: reject TDLS operations when station is not associated
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38553
    - net/sched: Restrict conditions for adding duplicating netems to qdisc
      tree
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38645
    - net/mlx5: Check device memory pointer before usage
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38601
    - wifi: ath11k: clear initialized flag for deinit-ed srng lists
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38602
    - iwlwifi: Add missing check for alloc_ordered_workqueue
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38604
    - wifi: rtl818x: Kill URBs before clearing tx status queue
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38646
    - wifi: rtw89: avoid NULL dereference when RX problematic packet on
      unsupported 6 GHz band
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38608
    - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38609
    - PM / devfreq: Check governor before using governor->name
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38610
    - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38612
    - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38648
    - spi: stm32: Check for cfg availability in stm32_spi_probe
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38659
    - gfs2: No more self recovery
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-39734
    - Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38650
    - hfsplus: remove mutex_lock check in hfsplus_free_extents
  * Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
    CVE-2025-38615
    - fs/ntfs3: cancle set bad inode after removing name fails
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361)
    - virtio_ring: Fix error reporting in virtqueue_resize
    - RDMA/core: Rate limit GID cache warning messages
    - interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
    - iio: adc: ad7949: use spi_is_bpw_supported()
    - regmap: fix potential memory leak of regmap_bus
    - x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
    - platform/x86: Fix initialization order for firmware_attributes_class
    - staging: vchiq_arm: Make vchiq_shutdown never fail
    - net/mlx5: Fix memory leak in cmd_exec()
    - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
    - i40e: report VF tx_dropped with tx_errors instead of tx_discards
    - i40e: When removing VF MAC filters, only check PF-set MAC
    - drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
    - net: hns3: fix concurrent setting vlan filter issue
    - net: hns3: disable interrupt when ptp init failed
    - net: hns3: fixed vf get max channels bug
    - net: hns3: default enable tx bounce buffer when smmu enabled
    - platform/x86: ideapad-laptop: Fix kbd backlight not remembered among
      boots
    - i2c: tegra: Fix reset error handling with ACPI
    - i2c: virtio: Avoid hang by using interruptible completion wait
    - bus: fsl-mc: Fix potential double device reference in
      fsl_mc_get_endpoint()
    - sprintf.h requires stdarg.h
    - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
    - dpaa2-eth: Fix device reference count leak in MAC endpoint handling
    - dpaa2-switch: Fix device reference count leak in MAC endpoint handling
    - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
    - e1000e: ignore uninitialized checksum word on tgp
    - gve: Fix stuck TX queue for DQ queue format
    - kasan: use vmalloc_dump_obj() for vmalloc error reports
    - resource: fix false warning in __request_region()
    - selftests: mptcp: connect: also cover alt modes
    - selftests: mptcp: connect: also cover checksum
    - mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
    - usb: typec: tcpm: allow to use sink in accessory mode
    - usb: typec: tcpm: allow switching to mode accessory to mux properly
    - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
    - comedi: comedi_test: Fix possible deletion of uninitialized timers
    - ALSA: hda/tegra: Add Tegra264 support
    - ALSA: hda: Add missing NVIDIA HDA codec IDs
    - drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
    - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
    - crypto: powerpc/poly1305 - add depends on BROKEN for now
    - [Config] disable CRYPTO_POLY1305_P10
    - iio: hid-sensor-prox: Fix incorrect OFFSET calculation
    - iio: hid-sensor-prox: Restore lost scale assignments
    - mtd: rawnand: qcom: Fix last codeword read in
      qcom_param_page_type_exec()
    - ksmbd: add free_transport ops in ksmbd connection
    - arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1
      register
    - ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
    - Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid()
      test"
    - x86/traps: Initialize DR7 by writing its architectural reset value
    - virtio_net: Enforce minimum TX ring size for reliability
    - platform/x86: asus-nb-wmi: add DMI quirk for ASUS Zenbook Duo UX8406CA
    - platform/mellanox: mlxbf-pmc: Remove newline char from event name input
    - platform/mellanox: mlxbf-pmc: Validate event/enable input
    - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input
    - xfrm: state: use a consistent pcpu_id in xfrm_state_find
    - xfrm: Set transport header to fix UDP GRO handling
    - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop
    - drm/sched: Remove optimization that causes hang when killing dependent
      jobs
    - mm/ksm: fix -Wsometimes-uninitialized from clang-21 in
      advisor_mode_show()
    - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa0xxx
    - rust: give Clippy the minimum supported Rust version
    - selftests/bpf: Add tests with stack ptr register in conditional jmp
    - spi: cadence-quadspi: fix cleanup of rx_chan on failure paths
    - ext4: don't explicit update times in ext4_fallocate()
    - ext4: refactor ext4_punch_hole()
    - ext4: refactor ext4_zero_range()
    - ext4: refactor ext4_collapse_range()
    - ext4: refactor ext4_insert_range()
    - ext4: factor out ext4_do_fallocate()
    - ext4: move out inode_lock into ext4_fallocate()
    - fs: sort out the fallocate mode vs flag mess
    - ext4: move out common parts into ext4_fallocate()
    - ext4: fix incorrect punch max_end
    - ext4: correct the error handle in ext4_fallocate()
    - ext4: fix out of bounds punch offset
    - KVM: x86: drop x86.h include from cpuid.h
    - KVM: x86: Route non-canonical checks in emulator through emulate_ops
    - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical
      checks
    - KVM: x86: model canonical checks more precisely
    - x86/hyperv: Fix APIC ID and VP index confusion in hv_snp_boot_ap()
    - arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage
    - Drivers: hv: Make the sysfs node size for the ring buffer dynamic
    - Upstream stable to v6.6.101, v6.12.41
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38351
    - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38675
    - xfrm: state: initialize state_ptrs earlier in xfrm_state_find
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38322
    - perf/x86/intel: Fix crash in icl_update_topdown_event()
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-37777
    - ksmbd: fix use-after-free in __smb2_lease_break_noti()
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-37925
    - jfs: reject on-disk inodes of an unsupported type
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38663
    - nilfs2: reject invalid file types when reading inodes
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38664
    - ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38670
    - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38671
    - i2c: qup: jump out of the loop in case of timeout
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-39726
    - s390/ism: fix concurrency management in ism_cmd()
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38665
    - can: netlink: can_changelink(): fix NULL pointer deref of struct
      can_priv::do_set_mode
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38668
    - regulator: core: fix NULL dereference on unbind due to stale coupling
      data
  * Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
    CVE-2025-38335
    - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221)
    - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
    - phy: tegra: xusb: Disable periodic tracking on Tegra234
    - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
    - USB: serial: option: add Foxconn T99W640
    - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
    - usb: musb: fix gadget state on disconnect
    - i2c: stm32: fix the device used for the DMA map
    - thunderbolt: Fix wake on connect at runtime
    - thunderbolt: Fix bit masking in tb_dp_port_set_hops()
    - nvmem: imx-ocotp: fix MAC address byte length
    - Input: xpad - set correct controller type for Acer NGR200
    - pch_uart: Fix dma_sync_sg_for_device() nents value
    - spi: Add check for 8-bit transfer with 8 IO mode support
    - HID: core: ensure __hid_request reserves the report ID as the first byte
    - tracing/probes: Avoid using params uninitialized in parse_btf_arg()
    - drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
    - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
    - io_uring/poll: fix POLLERR handling
    - phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in
      pep_sock_accept()
    - net/mlx5: Update the list of the PCI supported devices
    - arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
    - arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
    - arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
    - af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
    - af_packet: fix soft lockup issue caused by tpacket_snd()
    - isofs: Verify inode mode when loading from disk
    - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
    - mmc: bcm2835: Fix dma_unmap_sg() nents value
    - mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based
      Positivo models
    - mmc: sdhci_am654: Workaround for Errata i2312
    - pmdomain: governor: Consider CPU latency tolerance from
      pm_domain_cpu_gov
    - soc: aspeed: lpc-snoop: Cleanup resources in stack-order
    - iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
    - iio: adc: max1363: Reorder mode_list[] entries
    - iio: adc: stm32-adc: Fix race in installing chained IRQ handler
    - comedi: Fix some signed shift left operations
    - soundwire: amd: fix for handling slave alerts after link is down
    - soundwire: amd: fix for clearing command status register
    - cachefiles: Fix the incorrect return value in __cachefiles_write()
    - net: emaclite: Fix missing pointer increment in aligned_read()
    - block: fix kobject leak in blk_unregister_queue
    - nvme: fix inconsistent RCU list manipulation in
      nvme_ns_add_to_ctrl_list()
    - nvme: fix misaccounting of nvme-mpath inflight I/O
    - wifi: cfg80211: remove scan request n_channels counted_by
    - selftests: net: increase inter-packet timeout in udpgro.sh
    - Bluetooth: hci_sync: fix connectable extended advertising when using
      static random address
    - Bluetooth: SMP: If an unallowed command is received consider it a
      failure
    - Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
    - Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant
      without board ID
    - net/mlx5: Correctly set gso_size when LRO is used
    - Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
    - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent
      IPv6 addrconf
    - net: bridge: Do not offload IGMP/MLD messages
    - rxrpc: Fix transmission of an abort in response to an abort
    - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
    - sched: Change nr_uninterruptible type to unsigned long
    - ipv6: make addrconf_wq single threaded
    - usb: hub: fix detection of high tier USB3 devices behind suspended hubs
    - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime
      pm
    - usb: hub: Fix flushing of delayed work used for post resume purposes
    - usb: hub: Don't try to recover devices lost during warm reset.
    - usb: dwc3: qcom: Don't leave BCR asserted
    - i2c: omap: Add support for setting mux
    - [Config] make mux support built-in on arm
    - i2c: omap: Fix an error handling path in omap_i2c_probe()
    - i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
    - Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional
      error"
    - Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable
      params"
    - i2c: omap: fix deprecated of_property_read_bool() use
    - nvmem: layouts: u-boot-env: remove crc32 endianness conversion
    - i2c: stm32f7: unmap DMA mapped buffer
    - drm/amdgpu: Increase reset counter only on success
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx
    - mptcp: reset fallback status gracefully at disconnect() time
    - arm64: dts: imx8mp-venice-gw72xx: fix TPM SPI frequency
    - arm64: dts: imx8mp-venice-gw73xx: fix TPM SPI frequency
    - arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi CM5
    - arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi 4B
    - nvme: fix endianness of command word prints in nvme_log_err_passthru()
    - nvmet-tcp: fix callback lock for TLS handshake
    - can: tcan4x5x: add option for selecting nWKRQ voltage
    - can: tcan4x5x: fix reset gpio usage during probe
    - ice: check correct pointer in fwlog debugfs
    - riscv: Enable interrupt during exception handling
    - riscv: traps_misaligned: properly sign extend value in misaligned load
      handler
    - Bluetooth: hci_core: add missing braces when using macro parameters
    - drm/mediatek: Add wait_event_timeout when disabling plane
    - drm/mediatek: only announce AFBC if really supported
    - net: libwx: fix multicast packets received count
    - sched,freezer: Remove unnecessary warning in __thaw_task
    - drm/xe/mocs: Initialize MOCS index early
    - drm/xe: Move page fault init after topology init
    - smb: client: let smbd_post_send_iter() respect the peers max_send_size
      and transmit all data
    - Upstream stable to v6.6.100, v6.12.40
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-22115
    - btrfs: fix block group refcount race in
      btrfs_create_pending_block_groups()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38549
    - efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38551
    - virtio-net: fix recursived rtnl_lock() during probe()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38531
    - iio: common: st_sensors: Fix use of uninitialize device structs
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38552
    - mptcp: plug races between subflow fail and subflow creation
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38491
    - mptcp: make fallback action and fallback decision atomic
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38469
    - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll
      hypercalls
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38499
    - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the
      right userns
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38524
    - rxrpc: Fix recv-recv race of completed call
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38468
    - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38470
    - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during
      runtime
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38471
    - tls: always refresh the queue when reading sock
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38472
    - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38550
    - ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38473
    - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38474
    - usb: net: sierra: check for no status endpoint
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38526
    - ice: add NULL check in eswitch lag check
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38548
    - hwmon: (corsair-cpro) Validate the size of the received input buffer
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38537
    - net: phy: Don't register LEDs for genphy
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38527
    - smb: client: fix use-after-free in cifs_oplock_break
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38476
    - rpl: Fix use-after-free in rpl_do_srh_inline().
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38528
    - bpf: Reject %p% format string in bprintf-like helpers
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38478
    - comedi: Fix initialization of data for instructions that write to
      subdevice
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38480
    - comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38481
    - comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38482
    - comedi: das6402: Fix bit shift out of bounds
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38483
    - comedi: das16m1: Fix bit shift out of bounds
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38529
    - comedi: aio_iiro_16: Fix bit shift out of bounds
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38530
    - comedi: pcl812: Fix bit shift out of bounds
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38485
    - iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38487
    - soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2024-50047 fix. // CVE-2025-38488
    - smb: client: fix use-after-free in crypt_message when using async crypto
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38489
    - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38532
    - net: libwx: properly reset Rx ring descriptor
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38533
    - net: libwx: fix the using of Rx buffer DMA
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38490
    - net: libwx: remove duplicate page_pool_put_full_page()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38538
    - dmaengine: nbpfaxi: Fix memory corruption in probe()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38493
    - tracing/osnoise: Fix crash in timerlat_dump_stack()
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38539
    - tracing: Add down_write(trace_event_sem) when adding trace event
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38494
    - HID: core: do not bypass hid_hw_raw_request
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38495
    - HID: core: ensure the allocated report buffer can contain the reserved
      report ID
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38496
    - dm-bufio: fix sched in atomic context
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38497
    - usb: gadget: configfs: Fix OOB read on empty string write
  * Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
    CVE-2025-38535
    - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382)
    - configfs: Do not override creating attribute file failure in
      populate_attrs()
    - crypto: marvell/cesa - Do not chain submitted requests
    - gfs2: move msleep to sleepable context
    - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
    - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
    - io_uring: account drain memory to cgroup
    - io_uring/kbuf: account ring io_buffer_list memory
    - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power
      states
    - regulator: max20086: Fix MAX200086 chip id
    - regulator: max20086: Change enable gpio to optional
    - net/mlx5_core: Add error handling
      inmlx5_query_nic_vport_qkey_viol_cntr()
    - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
    - wifi: ath11k: fix rx completion meta data corruption
    - wifi: ath11k: fix ring-buffer corruption
    - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
    - wifi: ath12k: fix ring-buffer corruption
    - wifi: rtw88: usb: Reduce control message timeout to 500 ms
    - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
    - media: ov8856: suppress probe deferral errors
    - media: ov5675: suppress probe deferral errors
    - media: nxp: imx8-isi: better handle the m2m usage_count
    - media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
    - media: ccs-pll: Start VT pre-PLL multiplier search from correct value
    - media: ccs-pll: Start OP pre-PLL multiplier search from correct value
    - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
    - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
    - media: davinci: vpif: Fix memory leak in probe error path
    - media: gspca: Add error handling for stv06xx_read_sensor()
    - media: mediatek: vcodec: Correct vsi_core framebuffer size
    - media: omap3isp: use sgtable-based scatterlist wrappers
    - media: v4l2-dev: fix error handling in __video_register_device()
    - media: venus: Fix probe error handling
    - media: videobuf2: use sgtable-based scatterlist wrappers
    - media: imx-jpeg: Drop the first error frames
    - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
    - media: imx-jpeg: Reset slot data pointers when freed
    - media: uvcvideo: Return the number of processed controls
    - media: uvcvideo: Send control events for partial succeeds
    - media: uvcvideo: Fix deferred probing error
    - arm64/mm: Close theoretical race where stale TLB entry remains valid
    - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
    - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
    - bus: mhi: host: Fix conflict between power_up and SYSERR
    - can: tcan4x5x: fix power regulator retrieval during probe
    - ceph: set superblock s_magic for IMA fsmagic matching
    - cgroup,freezer: fix incomplete freezing when attaching tasks
    - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
    - bus: fsl-mc: fix GET/SET_TAILDROP command ids
    - ext4: fix calculation of credits for extent tree modification
    - ext4: factor out ext4_get_maxbytes()
    - ext4: ensure i_size is smaller than maxbytes
    - Input: gpio-keys - fix possible concurrent access in
      gpio_keys_irq_timer()
    - net: ftgmac100: select FIXED_PHY
    - EDAC/altera: Use correct write width with the INTTEST register
    - parisc/unaligned: Fix hex output to show 8 hex chars
    - parisc: fix building with gcc-15
    - clk: meson-g12a: add missing fclk_div2 to spicc
    - watchdog: fix watchdog may detect false positive of softlockup
    - mm: fix ratelimit_pages update error in dirty_ratio_handler()
    - mtd: rawnand: sunxi: Add randomizer configuration in
      sunxi_nfc_hw_ecc_write_chunk
    - mtd: nand: sunxi: Add randomizer configuration before randomizer enable
    - KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
    - KVM: VMX: Flush shadow VMCS on emergency reboot
    - dm-mirror: fix a tiny race condition
    - dm-verity: fix a memory leak if some arguments are specified multiple
      times
    - mtd: rawnand: qcom: Fix read len for onfi param page
    - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
    - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
    - staging: iio: ad5933: Correct settling cycles encoding per datasheet
    - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
    - regulator: max14577: Add error check for max14577_read_reg()
    - cifs: reset connections for all channels when reconnect requested
    - cifs: update dstaddr whenever channel iface is updated
    - cifs: dns resolution is needed only for primary channel
    - Drivers: hv: Allocate interrupt and monitor pages aligned to system page
      boundary
    - uio_hv_generic: Use correct size for interrupt and monitor pages
    - PCI: cadence-ep: Correct PBA offset in .set_msix() callback
    - PCI: Add ACS quirk for Loongson PCIe
    - PCI: Fix lock symmetry in pci_slot_unlock()
    - PCI: dw-rockchip: Fix PHY function call sequence in
      rockchip_pcie_phy_deinit()
    - iio: accel: fxls8962af: Fix temperature scan element sign
    - iio: imu: inv_icm42600: Fix temperature calculation
    - iio: adc: ad7606_spi: fix reg write value mask
    - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
    - clocksource: Fix the CPUs' choice in the watchdog per CPU verification
    - power: supply: collie: Fix wakeup source leaks on device unbind
    - mmc: Add quirk to disable DDR50 tuning
    - ACPICA: Avoid sequence overread in call to strncmp()
    - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
    - ACPI: bus: Bail out if acpi_kobj registration fails
    - ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
    - power: supply: bq27xxx: Retrieve again when busy
    - ACPICA: utilities: Fix overflow check in vsnprintf()
    - ASoC: tegra210_ahub: Add check to of_device_get_match_data()
    - gpiolib: of: Add polarity quirk for s5m8767
    - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
    - net: macb: Check return value of dma_set_mask_and_coherent()
    - tipc: use kfree_sensitive() for aead cleanup
    - f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
    - i2c: designware: Invoke runtime suspend on quick slave re-registration
    - emulex/benet: correct command version selection in be_cmd_get_stats()
    - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
    - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
    - sctp: Do not wake readers in __sctp_write_space()
    - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
    - i2c: npcm: Add clock toggle recovery
    - net: dlink: add synchronization for stats update
    - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
    - wifi: ath12k: fix a possible dead lock caused by ab->base_lock
    - wifi: ath11k: Fix QMI memory reuse logic
    - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
    - tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
    - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
    - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
    - net: atlantic: generate software timestamp just before the doorbell
    - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
    - pinctrl: armada-37xx: propagate error from
      armada_37xx_gpio_get_direction()
    - pinctrl: armada-37xx: propagate error from
      armada_37xx_pmx_gpio_set_direction()
    - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
    - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
    - net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
    - wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
    - wifi: mac80211: do not offer a mesh path if forwarding is disabled
    - clk: rockchip: rk3036: mark ddrphy as critical
    - libbpf: Add identical pointer detection to btf_dedup_is_equiv()
    - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64
      commands
    - iommu/amd: Ensure GA log notifier callbacks finish running before module
      unload
    - wifi: iwlwifi: pcie: make sure to lock rxq->read
    - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
    - wifi: mac80211: VLAN traffic in multicast path
    - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
    - net: bridge: mcast: update multicast contex when vlan state is changed
    - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port
      functions
    - vxlan: Do not treat dst cache initialization errors as fatal
    - net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
    - pinctrl: mcp23s08: Reset all pins to input at probe
    - wifi: ath12k: fix failed to set mhi state error during reboot with
      hardware grouping
    - sock: Correct error checking condition for (assign|release)_proto_idx()
    - ice: fix check for existing switch rule
    - usbnet: asix AX88772: leave the carrier control to phylink
    - f2fs: fix to set atomic write status more clear
    - bpf, sockmap: Fix data lost during EAGAIN retries
    - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
    - wifi: ath11k: determine PM policy based on machine model
    - wifi: ath12k: fix link valid field initialization in the monitor Rx
    - wifi: ath12k: fix incorrect CE addresses
    - wifi: ath12k: Pass correct values of center freq1 and center freq2 for
      160 MHz
    - watchdog: da9052_wdt: respect TWDMIN
    - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
    - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
    - tee: Prevent size calculation wraparound on 32-bit kernels
    - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
      first"
    - fs/xattr.c: fix simple_xattr_list()
    - platform/x86/amd: pmc: Clear metrics table at start of cycle
    - platform/x86: dell_rbu: Stop overwriting data buffer
    - powerpc/vdso: Fix build of VDSO32 with pcrel
    - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH
      recovery
    - io_uring: fix task leak issue in io_wq_create()
    - platform/loongarch: laptop: Get brightness setting from EC on probe
    - platform/loongarch: laptop: Unregister generic_sub_drivers on exit
    - LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
    - cifs: deal with the channel loading lag while picking channels
    - cifs: serialize other channels when query server interfaces is pending
    - cifs: do not disable interface polling on failure
    - smb: improve directory cache reuse for readdir operations
    - scsi: storvsc: Increase the timeouts to storvsc_timeout
    - scsi: s390: zfcp: Ensure synchronous unit_add
    - udmabuf: use sgtable-based scatterlist wrappers
    - selftests/x86: Add a test to detect infinite SIGTRAP handler loop
    - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
    - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
    - Input: sparcspkr - avoid unannotated fall-through
    - wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
    - arm64: Restrict pagetable teardown to avoid false warning
    - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound
      card
    - ALSA: hda/intel: Add Thinkpad E15 to PM deny list
    - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
    - iio: accel: fxls8962af: Fix temperature calculation
    - net: Fix checksum update for ILA adj-transport
    - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
    - erofs: remove unused trace event erofs_destroy_inode
    - smb: fix secondary channel creation issue with kerberos by populating
      hostname when adding channels
    - drm/msm/disp: Correct porch timing for SDM845
    - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
    - ionic: Prevent driver/fw getting out of sync on devcmd(s)
    - drm/nouveau/bl: increase buffer size to avoid truncate warning
    - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
    - hwmon: (occ) Rework attribute registration for stack usage
    - hwmon: (occ) fix unaligned accesses
    - pldmfw: Select CRC32 when PLDMFW is selected
    - net: ice: Perform accurate aRFS flow match
    - ptp: fix breakage after ptp_vclock_in_use() rework
    - ptp: allow reading of currently dialed frequency to succeed on free-
      running clocks
    - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen()
      behavior
    - tcp: fix passive TFO socket having invalid NAPI ID
    - net: microchip: lan743x: Reduce PTP timeout on HW failure
    - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
    - dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
    - net: make for_each_netdev_dump() a little more bug-proof
    - serial: sh-sci: Increment the runtime usage counter for the earlycon
      device
    - ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
    - ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
    - smb: client: fix first command failure during re-negotiation
    - platform/loongarch: laptop: Add backlight power control support
    - s390/pci: Fix __pcilg_mio_inuser() inline assembly
    - perf: Fix cgroup state vs ERROR
    - perf/core: Fix WARN in perf_cgroup_switch()
    - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
    - RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
    - RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
    - perf evsel: Missed close() when probing hybrid core PMUs
    - crypto: qat - add shutdown handler to qat_c3xxx
    - crypto: qat - add shutdown handler to qat_420xx
    - crypto: qat - add shutdown handler to qat_4xxx
    - crypto: qat - add shutdown handler to qat_c62x
    - crypto: qat - add shutdown handler to qat_dh895xcc
    - wifi: mt76: mt7925: fix host interrupt register initialization
    - wifi: rtw88: usb: Upload the firmware in bigger chunks
    - NFSD: unregister filesystem in case genl_register_family() fails
    - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute
    - media: ov2740: Move pm-runtime cleanup on probe-errors to proper place
    - media: i2c: imx335: Fix frame size enumeration
    - soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events
    - sysfb: Fix screen_info type check for VGA
    - ovl: Fix nested backing file paths
    - Drivers: hv: vmbus: Add utility function for querying ring size
    - uio_hv_generic: Query the ringbuffer size for device
    - uio_hv_generic: Align ring size to system page
    - PCI: dwc: ep: Correct PBA offset in .set_msix() callback
    - PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from
      rockchip_pcie_link_up()
    - accel/ivpu: Improve buffer object logging
    - accel/ivpu: Fix warning in ivpu_gem_bo_free()
    - tty: vt: make init parameter of consw::con_init() a bool
    - tty: vt: sanitize arguments of consw::con_clear()
    - tty: vt: make consw::con_switch() return a bool
    - dummycon: Trigger redraw when switching consoles with deferred takeover
    - ACPICA: Apply pack(1) to union aml_resource
    - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios
      laptops
    - pmdomain: core: Reset genpd->states to avoid freeing invalid data
    - power: supply: max17040: adjust thermal channel scaling
    - Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922
    - Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925
    - wifi: mt76: mt7925: introduce thermal protection
    - libbpf/btf: Fix string handling to support multi-split BTF
    - clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks
    - iommu/amd: Allow matching ACPI HID devices without matching UIDs
    - tcp: remove zero TCP TS samples for autotuning
    - tcp: add receive queue awareness in tcp_rcv_space_adjust()
    - bpf: Pass the same orig_call value to trampoline functions
    - net: stmmac: generate software timestamp just before the doorbell
    - hid-asus: check ROG Ally MCU version and warn
    - wifi: iwlwifi: mvm: fix beacon CCK flag
    - scsi: smartpqi: Add new PCI IDs
    - Revert "mac80211: Dynamically set CoDel parameters per station"
    - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp
    - wifi: ath12k: using msdu end descriptor to check for rx multicast
      packets
    - isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry
    - ixgbe: Fix unreachable retry logic in combined and byte I2C write
      functions
    - RDMA/hns: initialize db in update_srq_db()
    - platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice
    - LoongArch: vDSO: Correctly use asm parameters in syscall wrappers
    - nvme: always punt polled uring_cmd end_io work to task_work
    - mm: close theoretical race where stale TLB entries could linger
    - x86/virt/tdx: Avoid indirect calls to TDX assembly functions
    - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power
    - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP
      Victus 15-fa1xxx
    - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA
    - drm/amdgpu: read back register after written for VCN v4.0.5
    - Kunit to check the longest symbol length
    - x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
    - ipv6: remove leftover ip6 cookie initializer
    - ipv6: replace ipcm6_init calls with ipcm6_init_sk
    - drm/ssd130x: fix ssd132x_clear_screen() columns
    - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early()
    - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available
    - gpio: pca953x: fix wrong error probe return value
    - bpftool: Fix cgroup command to only show cgroup bpf programs
    - Upstream stable to v6.6.95, v6.12.35
    - bpftool: Query only cgroup-related attach types
    - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38507
    - HID: nintendo: avoid bluetooth suspend/resume stalls
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38511
    - drm/xe/pf: Clear all LMTT pages on alloc
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38520
    - drm/amdkfd: Don't call mmput from MMU notifier callback
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38521
    - drm/imagination: Fix kernel crash when hard resetting the GPU
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38506
    - KVM: Allow CPU to reschedule while setting per-page memory attributes
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38104
    - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to
      avoid Priority Inversion in SRIOV
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38067
    - rseq: Fix segfault on registration when rseq_cs is non-zero
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-37984
    - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38437
    - ksmbd: fix potential use-after-free in oplock/lease break ack
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38510
    - kasan: remove kasan_find_vm_area() to prevent possible deadlock
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38503
    - btrfs: fix assertion when building free space tree
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38439
    - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38542
    - net: appletalk: Fix device refcount leak in atrtr_create()
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38441
    - netfilter: flowtable: account for Ethernet header in
      nf_flow_pppoe_proto()
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38443
    - nbd: fix uaf in nbd_genl_connect() error path
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38444
    - raid10: cleanup memleak at raid10_make_request
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38445
    - md/raid1: Fix stack memory use after return in raid1_reshape
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38543
    - drm/tegra: nvdec: Fix dma_alloc_coherent error check
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38513
    - wifi: zd1211rw: Fix potential NULL pointer dereference in
      zd_mac_tx_to_dev()
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38448
    - usb: gadget: u_serial: Fix race condition in TTY wakeup
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38515
    - drm/sched: Increment job count before swapping tail spsc queue
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38449
    - drm/gem: Acquire references on GEM handles for framebuffers
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38512
    - wifi: prevent A-MSDU attacks in mesh networks
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38516
    - pinctrl: qcom: msm: mark certain pins as invalid for interrupts
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38455
    - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-
      flight
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38456
    - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38514
    - rxrpc: Fix oops due to non-existence of prealloc backlog struct
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38544
    - rxrpc: Fix bug due to prealloc collision
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38457
    - net/sched: Abort __tc_modify_qdisc if parent class does not exist
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38458
    - atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38459
    - atm: clip: Fix infinite recursive call of clip_push().
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38546
    - atm: clip: Fix memory leak of struct clip_vcc.
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38460
    - atm: clip: Fix potential null-ptr-deref in to_atmarpd().
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38461
    - vsock: Fix transport_* TOCTOU
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38462
    - vsock: Fix transport_{g2h,h2g} TOCTOU
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38463
    - tcp: Correct signedness in skb remaining space calculation
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38464
    - tipc: Fix use-after-free in tipc_conn_close().
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38465
    - netlink: Fix wraparounds of sk->sk_rmem_alloc.
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38466
    - perf: Revert to requiring CAP_SYS_ADMIN for uprobes
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38467
    - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
  * Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
    CVE-2025-38349
    - eventpoll: don't decrement ep refcount while still holding the ep mutex
  * [UBUNTU 24.04] KVM: s390: improve interrupt cpu for wakeup (LP: #2132317)
    - KVM: s390: improve interrupt cpu for wakeup
  * veth.sh from ubuntu_kselftests_net failed on J-5.15 / N-6.8 (with xdp
    attached - gro flag) (LP: #2065369)
    - selftests: net: veth: test the ability to independently manipulate GRO
      and XDP
  * ftrace:test.d--event--subsystem-enable.tc fails on some instances
    (LP: #2071861)
    - selftests/tracing: Fix false failure of subsystem event test
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640)
    - rtc: pcf2127: add missing semicolon after statement
    - rtc: pcf2127: fix SPI command byte for PCF2131
    - rtc: cmos: use spin_lock_irqsave in cmos_interrupt
    - mmc: sdhci: Add a helper function for dump register in dynamic debug
      mode
    - mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
    - Bluetooth: hci_sync: revert some mesh modifications
    - Bluetooth: MGMT: set_mesh: update LE scan interval and window
    - Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
    - mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
    - mtk-sd: reset host->mrq on prepare_data() error
    - arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
    - platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
    - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
    - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
    - scsi: ufs: core: Fix spelling of a sysfs attribute name
    - RDMA/mlx5: Fix HW counters query for non-representor devices
    - RDMA/mlx5: Fix CC counters query for MPV
    - RDMA/mlx5: Fix vport loopback for MPV device
    - platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
    - Bluetooth: Prevent unintended pause by checking if advertising is active
    - btrfs: fix missing error handling when searching for inode refs during
      log replay
    - btrfs: rename err to ret in btrfs_rmdir()
    - btrfs: propagate last_unlink_trans earlier when doing a rmdir
    - btrfs: use btrfs_record_snapshot_destroy() during rmdir
    - ethernet: atl1: Add missing DMA mapping error checks and count errors
    - dpaa2-eth: fix xdp_rxq_info leak
    - drm/exynos: fimd: Guard display clock control with runtime PM calls
    - spi: spi-fsl-dspi: Clear completion counter before initiating transfer
    - drm/i915/selftests: Change mock_request() to return error pointers
    - platform/x86: make fw_attr_class constant
    - platform/x86: firmware_attributes_class: Move include
      linux/device/class.h
    - platform/x86: firmware_attributes_class: Simplify API
    - platform/x86: think-lmi: Directly use firmware_attributes_class
    - platform/x86: think-lmi: Fix class device unregistration
    - platform/x86: dell-sysman: Directly use firmware_attributes_class
    - platform/x86: dell-wmi-sysman: Fix class device unregistration
    - platform/mellanox: mlxreg-lc: Fix logic error in power state check
    - smb: client: fix warning when reconnecting channel
    - drm/i915/gsc: mei interrupt top half should be in irq disabled context
    - igc: disable L1.2 PCI-E link substate to avoid performance issue
    - lib: test_objagg: Set error message in check_expect_hints_stats()
    - amd-xgbe: align CL37 AN sequence as per databook
    - enic: fix incorrect MTU comparison in enic_change_mtu()
    - nui: Fix dma_mapping_error() check
    - amd-xgbe: do not double read link status
    - smb: client: fix race condition in negotiate timeout by using more
      precise timing
    - wifi: mac80211: chan: chandef is non-NULL for reserved
    - f2fs: prevent writing without fallocate() for pinned files
    - f2fs: convert f2fs_vm_page_mkwrite() to use folio
    - f2fs: fix to zero post-eof page
    - drm/simpledrm: Do not upcast in release helpers
    - ALSA: sb: Don't allow changing the DMA mode during operations
    - ALSA: sb: Force to disable DMAs once when DMA mode is changed
    - ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
    - ata: pata_cs5536: fix build on 32-bit UML
    - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
    - platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks
      list
    - powerpc: Fix struct termio related ioctl macros
    - ASoC: amd: yc: update quirk data for HP Victus
    - regulator: fan53555: add enable_time support and soft-start times
    - aoe: defer rexmit timer downdev work to workqueue
    - wifi: mac80211: drop invalid source address OCB frames
    - rcu: Return early if callback is not specified
    - platform/x86: hp-bioscfg: Directly use firmware_attributes_class
    - platform/x86: hp-bioscfg: Fix class device unregistration
    - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
    - NFSv4/flexfiles: Fix handling of NFS level errors in I/O
    - usb: xhci: quirk for data loss in ISOC transfers
    - xhci: dbctty: disable ECHO flag by default
    - xhci: dbc: Flush queued requests before stopping dbc
    - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
    - Input: xpad - support Acer NGR 200 Controller
    - Input: iqs7222 - explicitly define number of external channels
    - usb: cdnsp: do not disable slot for disabled slot
    - dma-buf: fix timeout handling in dma_resv_wait_timeout v2
    - i2c/designware: Fix an initialization issue
    - Logitech C-270 even more broken
    - iommu/rockchip: prevent iommus dead loop when two masters share one
      IOMMU
    - powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be
      changed
    - platform/x86: think-lmi: Create ksets consecutively
    - platform/x86: think-lmi: Fix kobject cleanup
    - platform/x86: think-lmi: Fix sysfs group cleanup
    - usb: typec: displayport: Fix potential deadlock
    - powerpc/kernel: Fix ppc_save_regs inclusion in build
    - [Config] enable Transient Scheduler Attacks mitigation
    - x86/CPU/AMD: Properly check the TSA microcode
    - x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
    - net: txgbe: request MISC IRQ in ndo_open
    - Bluetooth: HCI: Set extended advertising data synchronously
    - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
    - firmware: arm_ffa: Move memory allocation outside the mutex locking
    - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
    - btrfs: return a btrfs_inode from btrfs_iget_logging()
    - btrfs: return a btrfs_inode from read_one_inode()
    - btrfs: fix invalid inode pointer dereferences during log replay
    - btrfs: fix inode lookup error handling during log replay
    - nvme: Fix incorrect cdw15 value in passthru error logging
    - drm/bridge: aux-hpd-bridge: fix assignment of the of_node
    - netfs: Fix i_size updating
    - arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma
    - crypto: iaa - Remove dst_null support
    - crypto: iaa - Do not clobber req->base.data
    - spinlock: extend guard with spinlock_bh variants
    - crypto: zynqmp-sha - Add locking
    - kunit: qemu_configs: sparc: use Zilog console
    - kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y
    - kunit: qemu_configs: Disable faulting tests on 32-bit SPARC
    - gfs2: Initialize gl_no_formal_ino earlier
    - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE
    - gfs2: Rename dinode_demise to evict_behavior
    - gfs2: Prevent inode creation race
    - gfs2: Rename GLF_FREEING to GLF_UNLOCKED
    - gfs2: Decode missing glock flags in tracepoints
    - gfs2: Add GLF_PENDING_REPLY flag
    - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE
    - gfs2: Move gfs2_dinode_dealloc
    - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc
    - gfs2: deallocate inodes in gfs2_create_inode
    - btrfs: fix wrong start offset for delalloc space release during mmap
      write
    - ASoC: tas2764: Extend driver to SN012776
    - ASoC: tas2764: Reinit cache on part reset
    - ACPI: thermal: Fix stale comment regarding trip points
    - ACPI: thermal: Execute _SCP before reading trip points
    - bonding: Mark active offloaded xfrm_states
    - wifi: ath12k: Handle error cases during extended skb allocation
    - wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers
    - RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup"
      bug
    - iommu: ipmmu-vmsa: avoid Wformat-security warning
    - f2fs: decrease spare area for pinned files for zoned devices
    - f2fs: zone: introduce first_zoned_segno in f2fs_sb_info
    - f2fs: introduce SEGS_TO_BLKS/BLKS_TO_SEGS for cleanup
    - f2fs: zone: fix to calculate first_zoned_segno correctly
    - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure
    - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask
    - hisi_acc_vfio_pci: bugfix cache write-back issue
    - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
    - bpf: use common instruction history across all states
    - arm64: dts: qcom: sm8650: change labels to lower-case
    - arm64: dts: qcom: sm8650: Fix domain-idle-state for CPU2
    - arm64: dts: qcom: sm8650: add the missing l2 cache node
    - remoteproc: k3: Call of_node_put(rmem_np) only once in three functions
    - remoteproc: k3-r5: Add devm action to release reserved memory
    - remoteproc: k3-r5: Use devm_kcalloc() helper
    - remoteproc: k3-r5: Use devm_ioremap_wc() helper
    - remoteproc: k3-r5: Use devm_rproc_alloc() helper
    - remoteproc: k3-r5: Use devm_rproc_add() helper
    - remoteproc: k3-r5: Refactor sequential core power up/down operations
    - mfd: exynos-lpass: Fix another error handling path in
      exynos_lpass_probe()
    - selinux: change security_compute_sid to return the ssid or tsid on match
    - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause
    - drm/xe/bmg: Add BMG platform definition
    - drm/i915/bmg: Define IS_BATTLEMAGE macro
    - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after
      SINK_COUNT_ESI read
    - arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on
    - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
    - RDMA/mlx5: Fix cache entry update on dereg error
    - drm/xe: Allow dropping kunit dependency as built-in
    - usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
    - Revert "usb: xhci: Implement xhci_handshake_check_state() helper"
    - usb: cdnsp: Fix issue with CV Bad Descriptor test
    - usb: dwc3: Abort suspend on soft disconnect failure
    - Upstream stable to v6.6.97, v6.12.37
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38407
    - riscv: cpu_ops_sbi: Use static array for boot_data
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38374
    - optee: ffa: fix sleep in atomic context
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38373
    - IB/mlx5: Fix potential deadlock in MR deregistration
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38408
    - genirq/irq_sim: Initialize work context pointers properly
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38279
    - bpf: Do not include stack ptr register in precision backtracking
      bookkeeping
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38289
    - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38392
    - idpf: convert control queue mutex to a spinlock
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38402
    - idpf: return 0 size for RSS key if not supported
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38405
    - nvmet: fix memory leak of bio integrity
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38388
    - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic
      context
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38390
    - firmware: arm_ffa: Fix memory leak by freeing notifier callback node
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2024-36350 // CVE-2024-36357
    - x86/bugs: Rename MDS machinery to something more generic
    - x86/bugs: Add a Transient Scheduler Attacks mitigation
    - KVM: SVM: Advertise TSA CPUID bits to guests
    - x86/microcode/AMD: Add TSA microcode SHAs
    - x86/process: Move the buffer clearing before MONITOR
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38376
    - usb: chipidea: udc: disconnect/reconnect from host when do
      suspend/resume
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38396
    - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38371
    - drm/v3d: Disable interrupts before resetting the GPU
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38384
    - mtd: spinand: fix memory leak of ECC engine conf
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38386
    - ACPICA: Refuse to evaluate a method if arguments are missing
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38406
    - wifi: ath6kl: remove WARN on bad firmware input
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38399
    - scsi: target: Fix NULL pointer dereference in
      core_scsi3_decode_spec_i_port()
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38409
    - drm/msm: Fix another leak in the submit error path
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38410
    - drm/msm: Fix a fence leak in submit error path
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38377
    - rose: fix dangling neighbour pointers in rose_rt_device_down()
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38389
    - drm/i915/gt: Fix timeline left held on VMA alloc error
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38385
    - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38412
    - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs
      callbacks
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38382
    - btrfs: fix iteration of extrefs during log replay
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38393
    - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38400
    - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38387
    - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38401
    - mtk-sd: Prevent memory corruption from DMA map failure
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38391
    - usb: typec: altmodes/displayport: do not index invalid pin_assignments
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38395
    - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38403
    - vsock/vmci: Clear the vmci transport packet properly when initializing
      it
  * Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
    CVE-2025-38375
    - virtio-net: ensure the received length does not exceed allocated size
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499)
    - cifs: Correctly set SMB1 SessionKey field in Session Setup Request
    - cifs: Fix cifs_query_path_info() for Windows NT servers
    - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE
      mode
    - NFSv4: Always set NLINK even if the server doesn't support it
    - NFSv4.2: fix listxattr to return selinux security label
    - mailbox: Not protect module_put with spin_lock_irqsave
    - mfd: max14577: Fix wakeup source leaks on device unbind
    - sunrpc: don't immediately retransmit on seqno miss
    - leds: multicolor: Fix intensity setting while SW blinking
    - fuse: fix race between concurrent setattrs from multiple nodes
    - cxl/region: Add a dev_err() on missing target list entries
    - NFSv4: xattr handlers should check for absent nfs filehandles
    - hwmon: (pmbus/max34440) Fix support for max34451
    - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix
      extension
    - ksmbd: provide zero as a unique ID to the Mac client
    - rust: module: place cleanup_module() in .exit.text section
    - dmaengine: xilinx_dma: Set dma_device directions
    - PCI: dwc: Make link training more robust by setting
      PORT_LOGIC_LINK_WIDTH to one lane
    - PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
    - md/md-bitmap: fix dm-raid max_write_behind setting
    - amd/amdkfd: fix a kfd_process ref leak
    - iio: pressure: zpa2326: Use aligned_s64 for the timestamp
    - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
    - um: use proper care when taking mmap lock during segfault
    - coresight: Only check bottom two claim bits
    - usb: dwc2: also exit clock_gating when stopping udc while suspended
    - iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
    - usb: potential integer overflow in usbg_make_tpg()
    - usb: common: usb-conn-gpio: use a unique name for usb connector device
    - usb: Add checks for snprintf() calls in usb_alloc_dev()
    - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
    - usb: typec: displayport: Receive DP Status Update NAK request exit dp
      altmode
    - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
    - ALSA: hda: Ignore unsol events for cards being shut down
    - ALSA: hda: Add new pci id for AMD GPU display HD audio controller
    - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
    - ceph: fix possible integer overflow in ceph_zero_objects()
    - scsi: ufs: core: Don't perform UFS clkscaling during host async scan
    - ovl: Check for NULL d_inode() in ovl_dentry_upper()
    - fs/jfs: consolidate sanity checking in dbMount
    - ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with
      dev_err_probe()
    - ASoC: codec: wcd9335: Convert to GPIO descriptors
    - f2fs: don't over-report free space or inodes in statvfs
    - PCI: apple: Use helper function for_each_child_of_node_scoped()
    - PCI: apple: Set only available ports up
    - platform/x86: ideapad-laptop: move ACPI helpers from header to source
      file
    - platform/x86: ideapad-laptop: use usleep_range() for EC polling
    - i2c: tiny-usb: disable zero-length read messages
    - i2c: robotfuzz-osif: disable zero-length read messages
    - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
    - attach_recursive_mnt(): do not lock the covering tree when sliding
      something under it
    - libbpf: Fix null pointer dereference in btf_dump__free on allocation
      failure
    - wifi: mac80211: fix beacon interval calculation overflow
    - af_unix: Don't set -ECONNRESET for consumed OOB skb.
    - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
    - um: ubd: Add missing error check in start_io_thread()
    - libbpf: Fix possible use-after-free for externs
    - net: enetc: Correct endianness handling in _enetc_rd_reg64
    - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
    - net: selftests: fix TCP packet checksum
    - drm/i915: fix build error some more
    - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
    - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
    - EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
    - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
    - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
    - serial: imx: Restore original RXTL for console to fix data loss
    - Bluetooth: L2CAP: Fix L2CAP MTU negotiation
    - dm-raid: fix variable in journal device check
    - btrfs: update superblock's device bytes_used when dropping chunk
    - net: libwx: fix the creation of page_pool
    - HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
    - HID: wacom: fix memory leak on kobject creation failure
    - HID: wacom: fix memory leak on sysfs attribute creation failure
    - HID: wacom: fix kobject reference count leak
    - drm/ast: Fix comment on modeset lock
    - drm/cirrus-qemu: Fix pitch programming
    - drm/etnaviv: Protect the scheduler's pending list with its lock
    - drm/tegra: Assign plane type before registration
    - drm/udl: Unregister device before cleaning up on disconnect
    - drm/amdkfd: Fix race in GWS queue scheduling
    - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
    - drm/bridge: cdns-dsi: Fix phy de-init and flag it so
    - drm/bridge: cdns-dsi: Fix connecting to next bridge
    - drm/bridge: cdns-dsi: Check return value when getting default PHY config
    - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
    - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
    - drm/amdgpu: Add kicker device detection
    - drm/amdgpu: switch job hw_fence to amdgpu_fence
    - ksmbd: Use unsafe_memcpy() for ntlm_negotiate
    - ksmbd: remove unsafe_memcpy use in session setup
    - media: uvcvideo: Rollback non processed entities on error
    - firmware: arm_scmi: Add a common helper to check if a message is
      supported
    - firmware: arm_scmi: Ensure that the message-id supports fastchannel
    - ARM: 9354/1: ptrace: Use bitfield helpers
    - nvme-tcp: fix I/O stalls on congested sockets
    - drm/amdgpu: seq64 memory unmap uses uninterruptible lock
    - 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0
      and later devices
    - usb: gadget: f_hid: wake up readers on disable/unbind
    - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
    - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
    - btrfs: fix qgroup reservation leak on failure to allocate ordered extent
    - smb: client: remove \t from TP_printk statements
    - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio
    - drm/xe/display: Add check for alloc_ordered_workqueue()
    - ethernet: ionic: Fix DMA mapping tests
    - wifi: mac80211: Add link iteration macro for link data
    - wifi: mac80211: Create separate links for VLAN interfaces
    - wifi: mac80211: finish link init before RCU publish
    - netlink: specs: tc: replace underscores with dashes in names
    - drm/amdgpu/discovery: optionally use fw based ip discovery
    - drm/amd: Adjust output for discovery error handling
    - x86/traps: Initialize DR6 by writing its architectural reset value
    - serial: core: restore of_node information in sysfs
    - spi: spi-cadence-quadspi: Fix pm runtime unbalance
    - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
    - scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
    - drm/amd/display: Correct non-OLED pre_T11_delay.
    - drm/xe/vm: move rebind_work init earlier
    - drm/xe/sched: stop re-submitting signalled jobs
    - drm/xe: Fix memset on iomem
    - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL
    - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences
    - drm/amd/display: Fix mpv playback corruption on weston
    - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE
    - io_uring: fix potential page leak in io_sqe_buffer_register()
    - iio: dac: ad3552r: changes to use FIELD_PREP
    - drm/xe: Carve out wopcm portion from the stolen memory
    - usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters
      ERROR_RECOVERY
    - drm/msm/dp: account for widebus and yuv420 during mode validation
    - arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi
    - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA
    - spi: fsl-qspi: Fix double cleanup in probe error path
    - Upstream stable to v6.6.96, v6.12.36
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-37842
    - spi: fsl-qspi: use devm function instead of driver remove
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-23155
    - net: stmmac: Fix accessing freed irq affinity_hint
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-22101
    - net: libwx: fix Tx L4 checksum
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38361
    - drm/amd/display: Check dce_hwseq before dereferencing it
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38364
    - maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38246
    - bnxt: properly flush XDP redirect lists
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38250
    - Bluetooth: hci_core: Fix use-after-free in vhci_flush()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38253
    - HID: wacom: fix crash in wacom_aes_battery_handler()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38264
    - nvme-tcp: sanitize request list handling
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38362
    - drm/amd/display: Add null pointer check for get_first_active_display()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38354
    - drm/msm/gpu: Fix crash when throttling GPU immediately during boot
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38363
    - drm/tegra: Fix a possible null pointer dereference
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38239
    - scsi: megaraid_sas: Fix invalid node index
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38365
    - btrfs: fix a race between renames and directory logging
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38244
    - smb: client: fix potential deadlock when reconnecting channels
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38245
    - atm: Release atm_dev_mutex after removing procfs in
      atm_dev_deregister().
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38249
    - ALSA: usb-audio: Fix out-of-bounds read in
      snd_usb_get_audioformat_uac3()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38251
    - atm: clip: prevent NULL deref in clip_push()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38255
    - lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38257
    - s390/pkey: Prevent overflow in size calculation for memdup_user()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38258
    - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path
      on write
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38259
    - ASoC: codecs: wcd9335: Fix missing free of regulator supplies
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38230
    - jfs: validate AG parameters in dbMount() to prevent crashes
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38260
    - btrfs: handle csum tree error with rescue=ibadroots correctly
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38262
    - tty: serial: uartlite: register uart driver in init
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38368
    - misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38436
    - drm/scheduler: signal scheduled fence when kill job
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38263
    - bcache: fix NULL pointer in cache_set_flush()
  * Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
    CVE-2025-38369
    - dmaengine: idxd: Check availability of workqueue allocated by idxd wq
      driver before using
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-22128
    - wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq()
      in error path
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38333
    - f2fs: fix to bail out in get_new_segment()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38210
    - configfs-tsm-report: Fix NULL dereference of tsm_ops
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38232
    - NFSD: fix race between nfsd registration and exports_proc
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38320
    - arm64/ptrace: Fix stack-out-of-bounds read in
      regs_get_kernel_stack_nth()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38424
    - perf: Fix sample vs do_exit()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38321
    - smb: Log an error when close_all_cached_dirs fails
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38180
    - net: atm: fix /proc/net/atm/lec handling
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38323
    - net: atm: add lec_mutex
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38181
    - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38182
    - ublk: santizize the arguments from userspace when adding a device
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38183
    - net: lan743x: fix potential out-of-bounds write in
      lan743x_ptp_io_event_clock_get()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38184
    - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38185
    - atm: atmtcp: Free invalid length skb in atmtcp_c_send().
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38324
    - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38420
    - wifi: carl9170: do not ping device which has failed to load firmware
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38326
    - aoe: clean device rq_list in aoedev_downdev()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38089
    - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38084
    - mm/hugetlb: unshare page tables during VMA split, not before
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38190
    - atm: Revert atm_account_tx() if copy_from_iter_full() fails.
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38191
    - ksmbd: fix null pointer dereference in destroy_previous_session
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38192
    - net: clear the dst when changing skb protocol
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38193
    - net_sched: sch_sfq: reject invalid perturb period
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38328
    - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38194
    - jffs2: check that raw node were preallocated before writing summary
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38090
    - drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38197
    - platform/x86: dell_rbu: Fix list usage
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38198
    - fbcon: Make sure modelist not set on unregistered console
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38331
    - net: ethernet: cortina: Use TOE/TSO on all TCP
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38200
    - i40e: fix MMIO write access to an invalid page in i40e_clear_hw
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38332
    - scsi: lpfc: Use memcpy() for BIOS version
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38342
    - software node: Correct a OOB check in software_node_get_reference_args()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38334
    - x86/sgx: Prevent attempts to reclaim poisoned pages
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38425
    - i2c: tegra: check msg length in SMBUS block read
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38343
    - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38202
    - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38422
    - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38344
    - ACPICA: fix acpi parse and parseext cache leaks
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38345
    - ACPICA: fix acpi operand cache leak in dswstate.c
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38085
    - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38208
    - smb: client: add NULL check in automount_fullpath
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38418
    - remoteproc: core: Release rproc->clean_table after rproc_attach() fails
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38419
    - remoteproc: core: Cleanup acquired resources when
      rproc_handle_resources() fails in rproc_attach()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38427
    - video: screen_info: Relocate framebuffers behind PCI bridges
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38086
    - net: ch9200: fix uninitialised access during mii_nway_restart
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38346
    - ftrace: Fix UAF when lookup kallsym after ftrace disabled
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38211
    - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38212
    - ipc: fix to protect IPCS lookups using RCU
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38214
    - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38215
    - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in
      fb_videomode_to_var
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38087
    - net/sched: fix use-after-free in taprio_dev_notifier
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38416
    - NFC: nci: uart: Set tty->disc_data only in success path
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38217
    - hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38218
    - f2fs: fix to do sanity check on sit_bitmap_size
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38219
    - f2fs: prevent kernel warning due to negative i_nlink from corrupted
      image
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38347
    - f2fs: fix to do sanity check on ino and xnid
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38428
    - Input: ims-pcu - check record size in ims_pcu_flash_firmware()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38220
    - ext4: only dirty folios when data journaling regular files
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38222
    - ext4: inline: fix len overflow in ext4_prepare_inline_data
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38336
    - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38429
    - bus: mhi: ep: Update read pointer only after buffer is written
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38225
    - media: imx-jpeg: Cleanup after an allocation error
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38226
    - media: vivid: Change the siize of the composing
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38229
    - media: cxusb: no longer judge rbuf when the write fails
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38337
    - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38338
    - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38231
    - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38430
    - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
  * Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
    CVE-2025-38348
    - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786)
    - tracing: Fix compilation warning on arm32
    - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
    - pinctrl: armada-37xx: set GPIO output value before setting direction
    - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
    - rtc: Make rtc_time64_to_tm() support dates before 1970
    - rtc: Fix offset calculation for .start_secs < 0
    - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
    - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
    - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
    - usb: typec: ucsi: fix Clang -Wsign-conversion warning
    - Bluetooth: hci_qca: move the SoC type check to the right place
    - usb: usbtmc: Fix timeout value in get_stb
    - dt-bindings: usb: cypress,hx3: Add support for all variants
    - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt
      property
    - tools/x86/kcpuid: Fix error handling
    - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
      mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
    - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
    - gfs2: gfs2_create_inode error handling fix
    - perf/core: Fix broken throttling when max_samples_per_tick=1
    - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
    - powerpc: do not build ppc_save_regs.o always
    - powerpc/crash: Fix non-smp kexec preparation
    - x86/microcode/AMD: Do not return error when microcode update is not
      necessary
    - x86/cpu: Sanitize CPUID(0x80000000) output
    - crypto: marvell/cesa - Avoid empty transfer descriptor
    - btrfs: scrub: update device stats when an error is detected
    - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
    - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
    - crypto: lrw - Only add ecb if it is not already there
    - crypto: xts - Only add ecb if it is not already there
    - crypto: sun8i-ce - move fallback ahash_request to the end of the struct
    - kunit: Fix wrong parameter to kunit_deactivate_static_stub()
    - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
    - ASoC: tas2764: Enable main IRQs
    - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
      channel 0
    - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
    - spi: tegra210-quad: remove redundant error handling code
    - spi: tegra210-quad: modify chip select (CS) deactivation
    - power: reset: at91-reset: Optimize at91_reset()
    - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
    - PM: wakeup: Delete space in the end of string shown by
      pm_show_wakelocks()
    - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
    - PM: sleep: Print PM debug messages during hibernation
    - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
    - spi: sh-msiof: Fix maximum DMA transfer size
    - ASoC: apple: mca: Constrain channels according to TDM mask
    - drm/vmwgfx: Add seqno waiter for sync_files
    - drm/vc4: tests: Use return instead of assert
    - media: rkvdec: Fix frame size enumeration
    - arm64/fpsimd: Avoid RES0 bits in the SME trap handler
    - arm64/fpsimd: Fix merging of FPSIMD state during signal return
    - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
    - watchdog: exar: Shorten identity name to fit correctly
    - m68k: mac: Fix macintosh_config for Mac II
    - firmware: psci: Fix refcount leak in psci_dt_init
    - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
    - selftests/seccomp: fix syscall_restart test for arm compat
    - drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
    - drm/vkms: Adjust vkms_state->active_planes allocation type
    - drm/tegra: rgb: Fix the unbound reference count
    - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
    - arm64/fpsimd: Do not discard modified SVE state
    - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
    - drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
    - drm/mediatek: Fix kobject put for component sub-drivers
    - drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
    - xen/x86: fix initial memory balloon target
    - IB/cm: use rwlock for MAD agent lock
    - selftests/bpf: Fix bpf_nf selftest failure
    - bpf, sockmap: fix duplicated data transmission
    - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
    - net: ncsi: Fix GCPS 64-bit member variables
    - libbpf: Fix buffer overflow in bpf_object__init_prog
    - xfrm: Use xdo.dev instead of xdo.real_dev
    - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
    - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
    - wifi: rtw88: do not ignore hardware read error during DPK
    - wifi: ath12k: Add MSDU length validation for TKIP MIC error
    - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
    - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
    - libbpf: Remove sample_period init in perf_buffer
    - Use thread-safe function pointer in libbpf_print
    - iommu: Protect against overflow in iommu_pgsize()
    - bonding: assign random address if device address is same as bond
    - f2fs: clean up w/ fscrypt_is_bounce_page()
    - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
    - libbpf: Use proper errno value in linker
    - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
    - netfilter: bridge: Move specific fragmented packet to slow_path instead
      of dropping it
    - netfilter: nft_quota: match correctly when the quota just depleted
    - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
    - tracing: Move histogram trigger variables from stack to per CPU
      structure
    - clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
    - clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
    - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
    - clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
    - efi/libstub: Describe missing 'out' parameter in efi_load_initrd
    - tracing: Rename event_trigger_alloc() to trigger_data_alloc()
    - tracing: Fix error handling in event_trigger_parse()
    - ktls, sockmap: Fix missing uncharge operation
    - libbpf: Use proper errno value in nlattr
    - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
    - s390/bpf: Store backchain even for leaf progs
    - iommu: remove duplicate selection of DMAR_TABLE
    - hisi_acc_vfio_pci: add eq and aeq interruption restore
    - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
    - wifi: mt76: mt7996: set EHT max ampdu length capability
    - wifi: mt76: mt7996: fix RX buffer size of MCU event
    - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
    - vfio/type1: Fix error unwind in migration dirty bitmap allocation
    - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
    - netfilter: nft_tunnel: fix geneve_opt dump
    - RISC-V: KVM: lock the correct mp_state during reset
    - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
    - net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
    - net: phy: fix up const issues in to_mdio_device() and to_phy_device()
    - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
    - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
    - f2fs: use d_inode(dentry) cleanup dentry->d_inode
    - f2fs: fix to correct check conditions in f2fs_cross_rename
    - arm64: dts: qcom: sdm845-starqltechn: remove wifi
    - arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
    - arm64: dts: qcom: sdm845-starqltechn: refactor node order
    - arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
    - arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
    - arm64: dts: qcom: sm8250: Fix CPU7 opp table
    - arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
    - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
    - ARM: dts: at91: at91sam9263: fix NAND chip selects
    - arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
    - arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect
      GPIO
    - arm64: dts: imx8mm-beacon: Fix RTC capacitive load
    - arm64: dts: imx8mn-beacon: Fix RTC capacitive load
    - arm64: dts: imx8mp-beacon: Fix RTC capacitive load
    - arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI
      audio
    - arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI
      audio
    - arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
    - arm64: dts: mt6359: Add missing 'compatible' property to regulators node
    - arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
    - arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
    - arm64: dts: rockchip: Update eMMC for NanoPi R5 series
    - arm64: tegra: Drop remaining serial clock-names and reset-names
    - arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
    - ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
    - nilfs2: add pointer check for nilfs_direct_propagate()
    - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
    - dt-bindings: vendor-prefixes: Add Liontron name
    - ARM: dts: qcom: apq8064: add missing clocks to the timer node
    - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon
      device
    - arm64: defconfig: mediatek: enable PHY drivers
    - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
      Puma with Haikou
    - arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
    - arm64: dts: mt6359: Rename RTC node to match binding expectations
    - ARM: aspeed: Don't select SRAM
    - soc: aspeed: lpc: Fix impossible judgment condition
    - randstruct: gcc-plugin: Remove bogus void member
    - randstruct: gcc-plugin: Fix attribute addition
    - perf build: Warn when libdebuginfod devel files are not available
    - perf ui browser hists: Set actions->thread before calling
      do_zoom_thread()
    - dm: don't change md if dm_table_set_restrictions() fails
    - dm: free table mempools if not used in __bind
    - dm-flakey: error all IOs when num_features is absent
    - dm-flakey: make corrupting read bios work
    - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
    - perf intel-pt: Fix PEBS-via-PT data_src
    - perf scripts python: exported-sql-viewer.py: Fix pattern matching with
      Python 3
    - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
    - remoteproc: k3-r5: Drop check performed in
      k3_r5_rproc_{mbox_callback/kick}
    - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
    - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in
      exynos_lpass_remove()
    - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
    - perf tests switch-tracking: Fix timestamp comparison
    - perf record: Fix incorrect --user-regs comments
    - perf trace: Always print return value for syscalls returning a pid
    - nfs: clear SB_RDONLY before getting superblock
    - nfs: ignore SB_RDONLY when remounting nfs
    - cifs: Fix validation of SMB1 query reparse point response
    - rtc: sh: assign correct interrupts with DT
    - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
    - PCI: cadence: Fix runtime atomic count underflow
    - PCI: apple: Use gpiod_set_value_cansleep in probe flow
    - PCI/DPC: Initialize aer_err_info before using it
    - rtc: loongson: Add missing alarm notifications for ACPI RTC events
    - thunderbolt: Fix a logic error in wake on connect
    - iio: filter: admv8818: fix band 4, state 15
    - iio: filter: admv8818: fix integer overflow
    - iio: filter: admv8818: fix range calculation
    - iio: filter: admv8818: Support frequencies >= 2^32
    - iio: adc: ad7124: Fix 3dB filter frequency reading
    - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
    - counter: interrupt-cnt: Protect enable/disable OPs with mutex
    - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
    - net: stmmac: platform: guarantee uniqueness of bus_id
    - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
    - net: tipc: fix refcount warning in tipc_aead_encrypt
    - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
    - net/mlx4_en: Prevent potential integer overflow calculating Hz
    - net: lan966x: Make sure to insert the vlan tags also in host mode
    - spi: bcm63xx-spi: fix shared reset
    - spi: bcm63xx-hsspi: fix shared reset
    - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
    - ice: create new Tx scheduler nodes for new queues only
    - ice: fix rebuilding the Tx scheduler tree for large queue counts
    - net: dsa: tag_brcm: legacy: fix pskb_may_pull length
    - vmxnet3: correctly report gso type for UDP tunnels
    - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
    - netfilter: nf_nat: also check reverse tuple to obtain clashing entry
    - net: dsa: b53: do not enable RGMII delay on bcm63xx
    - net: dsa: b53: allow RGMII for bcm63xx RGMII ports
    - wireguard: device: enable threaded NAPI
    - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
    - ASoC: codecs: hda: Fix RPM usage count underflow
    - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
    - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
    - path_overmount(): avoid false negatives
    - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
    - Input: synaptics-rmi - fix crash with unsupported versions of F34
    - arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
    - serial: sh-sci: Move runtime PM enable to sci_probe_single()
    - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    - Bluetooth: hci_core: fix list_for_each_entry_rcu usage
    - Bluetooth: MGMT: Remove unused mgmt_pending_find_data
    - ath10k: snoc: fix unbalanced IRQ enable in crash recovery
    - wifi: ath11k: fix soc_dp_stats debugfs file permission
    - wifi: ath11k: convert timeouts to secs_to_jiffies()
    - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
    - wifi: ath11k: don't use static variables in
      ath11k_debugfs_fw_stats_process()
    - wifi: ath11k: don't wait when there is no vdev started
    - wifi: ath11k: validate ath11k_crypto_mode on top of
      ath11k_core_qmi_firmware_ready
    - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
    - pinctrl: qcom: pinctrl-qcm2290: Add missing pins
    - scsi: iscsi: Fix incorrect error path labels for flashnode operations
    - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
    - drm/meson: use unsigned long long / Hz for frequency types
    - drm/meson: fix debug log statement when setting the HDMI clocks
    - drm/meson: use vclk_freq instead of pixel_freq in debug print
    - drm/meson: fix more rounding issues with 59.94Hz modes
    - i40e: return false from i40e_reset_vf if reset is in progress
    - i40e: retry VFLR handling if there is ongoing VF reset
    - macsec: MACsec SCI assignment for ES = 0
    - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
    - net/mlx5: Ensure fw pages are always allocated on same NUMA
    - net/mlx5: Fix return value when searching for existing flow group
    - net/mlx5e: Fix leak of Geneve TLV option object
    - net_sched: tbf: fix a race in tbf_change()
    - fs/filesystems: Fix potential unsigned integer underflow in fs_name()
    - nvmet-fcloop: access fcpreq only when holding reqlock
    - perf: Ensure bpf_perf_link path is properly serialized
    - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
    - block: Fix bvec_set_folio() for very large folios
    - tools/resolve_btfids: Fix build when cross compiling kernel with clang.
    - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
    - io_uring: expand main struct io_kiocb flags to 64-bits
    - io_uring: add io_file_can_poll() helper
    - io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
    - io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
    - usb: usbtmc: Fix read_stb function and get_stb ioctl
    - usb: cdnsp: Fix issue with detecting command completion event
    - usb: cdnsp: Fix issue with detecting USB 3.2 speed
    - usb: Flush altsetting 0 endpoints before reinitializating them after
      reset.
    - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
    - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
    - calipso: unlock rcu before returning -EAFNOSUPPORT
    - regulator: dt-bindings: mt6357: Drop fixed compatible requirement
    - net: usb: aqc111: debug info before sanitation
    - drm/meson: Use 1000ULL when operating with mode->clock
    - Documentation: ACPI: Use all-string data node references
    - PCI/ASPM: Consolidate link state defines
    - PCI/ASPM: Disable L1 before disabling L1 PM Substates
    - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member
    - perf/x86/amd/uncore: Prevent UMC counters from saturating
    - crypto: sun8i-ce - undo runtime PM changes during driver removal
    - erofs: fix file handle encoding for 64-bit NIDs
    - btrfs: fix invalid data space release when truncating block in NOCOW
      mode
    - ACPI: resource: fix a typo for MECHREVO in
      irq1_edge_low_force_override[]
    - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure
    - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource
    - drm/vmwgfx: Fix dumb buffer leak
    - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3
    - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support
    - kunit/usercopy: Disable u64 test on 32-bit SPARC
    - drm/msm/dpu: enable SmartDMA on SM8150
    - drm/msm/dpu: enable SmartDMA on SC8180X
    - overflow: Fix direct struct member initialization in _DEFINE_FLEX()
    - drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3
    - media: verisilicon: Free post processor buffers on error
    - wifi: ath12k: Fix memory leak during vdev_id mismatch
    - wifi: ath12k: Fix invalid memory access while forming 802.11 header
    - bpf: Check link_create.flags parameter for multi_kprobe
    - wifi: ath12k: fix cleanup path after mhi init
    - f2fs: clean up unnecessary indentation
    - f2fs: prevent the current section from being selected as a victim during
      GC
    - net/mlx5: Avoid using xso.real_dev unnecessarily
    - wifi: ath12k: Fix the QoS control field offset to build QoS header
    - libbpf: Fix event name too long error
    - wifi: iwlfiwi: mvm: Fix the rate reporting
    - selftests/bpf: Fix caps for __xlated/jited_unpriv
    - wifi: rtw89: pci: enlarge retry times of RX tag to 1000
    - wifi: mt76: mt7925: prevent multiple scan commands
    - wifi: mt76: mt7925: refine the sniffer commnad
    - wifi: mt76: mt7925: ensure all MCU commands wait for response
    - netfilter: nf_tables: nft_fib: consistent l3mdev handling
    - vsock/virtio: fix `rx_bytes` accounting for stream sockets
    - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in
      dmaengine xmit
    - net: lan743x: Fix PHY reset handling during initialization and WOL
    - octeontx2-af: Sync NIX and NPA contexts from NDC to LLC/DRAM
    - octeontx2-pf: QOS: Perform cache sync on send queue teardown
    - arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the
      mdss node
    - arm64: dts: qcom: ipq9574: Fix USB vdd info
    - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Simplify DSI endpoint
      replacement
    - arm64: dts: mt8183: Add port node to mt8183.dtsi
    - soc: qcom: smp2p: Fix fallback to qcom,ipc parse
    - ARM: dts: qcom: apq8064: move replicator out of soc node
    - arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects
    - perf symbol-minimal: Fix double free in filename__read_build_id
    - mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe()
    - mailbox: imx: Fix TXDB_V2 sending
    - mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting
    - perf symbol: Fix use-after-free in filename__read_build_id
    - PCI/DPC: Log Error Source ID only when valid
    - coresight: catu: Introduce refcount and spinlock for enabling/disabling
    - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array()
    - iio: adc: mcp3911: fix device dependent mappings for conversion result
      registers
    - drm/xe: Make xe_gt_freq part of the Documentation
    - Fix sock_exceed_buf_limit not being triggered in
      __sk_mem_raise_allocated
    - idpf: fix netdev Tx queue stop/wake
    - idpf: fix a race in txq wakeup
    - nvme: fix command limits status code
    - drm/panel-simple: fix the warnings for the Evervision VGG644804
    - net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces.
    - net: dsa: b53: Introduce b53_adjust_531x5_rgmii()
    - net: dsa: b53: do not touch DLL_IQQD on bcm53115
    - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
    - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
    - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA
    - ALSA: hda/realtek - Support mute led function for HP platform
    - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
    - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
    - dt-bindings: pinctrl: samsung: google,gs101-pinctrl needs a clock
    - pinctrl: samsung: support a bus clock
    - pinctrl: samsung: refactor drvdata suspend & resume callbacks
    - pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks
    - pinctrl: samsung: add gs101 specific eint suspend/resume callbacks
    - net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0
    - wifi: ath11k: move some firmware stats related functions outside of
      debugfs
    - wifi: ath12k: refactor ath12k_hw_regs structure
    - gfs2: pass through holder from the VFS for freeze/thaw
    - btrfs: exit after state split error at set_extent_bit()
    - block: use q->elevator with ->elevator_lock held in elv_iosched_show()
    - 9p: Add a migrate_folio method
    - overflow: Introduce __DEFINE_FLEX for having no initializer
    - thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit
    - Upstream stable to v6.6.94, v6.12.33, v6.12.34
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38101
    - ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38269
    - btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38303
    - Bluetooth: eir: Fix possible crashes on eir_create_adv_data
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38414
    - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38125
    - net: stmmac: make sure that ptp_rate is not 0 before configuring EST
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38129
    - page_pool: Fix use-after-free in page_pool_recycle_in_ring
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38156
    - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38162
    - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38292
    - wifi: ath12k: fix invalid access to memory
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38164
    - f2fs: zone: fix to avoid inconsistence in between SIT and SSA
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38169
    - arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38299
    - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38100
    - x86/iopl: Cure TIF_IO_BITMAP inconsistencies
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38102
    - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38103
    - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38107
    - net_sched: ets: fix a race in ets_qdisc_change()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38108
    - net_sched: red: fix a race in __red_change()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38109
    - net/mlx5: Fix ECVF vports unload on shutdown flow
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38304
    - Bluetooth: Fix NULL pointer deference on eir_get_service_data
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38110
    - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38111
    - net/mdiobus: Fix potential out-of-bounds read/write access
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38112
    - net: Fix TOCTOU issue in sk_is_readable()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38113
    - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38088
    - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38115
    - net_sched: sch_sfq: fix a potential crash on gso_skb handling
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38305
    - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38117
    - Bluetooth: MGMT: Protect mgmt_pending list with its own lock
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38119
    - scsi: core: ufs: Fix a hang in the error handler
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38307
    - ASoC: Intel: avs: Verify content returned by parse_int_array()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38310
    - seg6: Fix validation of nexthop addresses
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38120
    - netfilter: nf_set_pipapo_avx2: fix initial map fill
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38122
    - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38123
    - net: wwan: t7xx: Fix napi rx poll issue
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38124
    - net: fix udp gso skb_segment after pull from frag_list
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38126
    - net: stmmac: make sure that ptp_rate is not 0 before configuring
      timestamping
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38127
    - ice: fix Tx scheduler error handling in XDP callback
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38131
    - coresight: prevent deactivate active config while enabling the config
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38274
    - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38135
    - serial: Fix potential null-ptr-deref in mlb_usio_probe()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38136
    - usb: renesas_usbhs: Reorder clock handling and power management in probe
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38138
    - dmaengine: ti: Add NULL check in udma_probe()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38275
    - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38142
    - hwmon: (asus-ec-sensors) check sensor index in read_string()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38277
    - mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38143
    - backlight: pm8941: Add NULL check in wled_configure()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38312
    - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38145
    - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38313
    - bus: fsl-mc: fix double-free on mc_dev
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38415
    - Squashfs: check return result of sb_min_blocksize
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38146
    - net: openvswitch: Fix the dead loop of MPLS parse
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38147
    - calipso: Don't call calipso functions for AF_INET sk.
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38278
    - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38148
    - net: phy: mscc: Fix memory leak when using one step timestamping
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38149
    - net: phy: clear phydev->devlink when the link is deleted
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38280
    - bpf: Avoid __bpf_prog_ret0_warn when jit fails
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38153
    - net: usb: aqc111: fix error handling of usbnet read calls
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38154
    - bpf, sockmap: Avoid using sk_socket after free when sending
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38155
    - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38282
    - kernfs: Relax constraint in draining guard
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38157
    - wifi: ath9k_htc: Abort software beacon handling if disabled
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38283
    - hisi_acc_vfio_pci: bugfix live migration function without VF device
      driver
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38158
    - hisi_acc_vfio_pci: fix XQE dma address error
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-39890
    - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38159
    - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38285
    - bpf: Fix WARN() in get_bpf_raw_tp_regs
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38286
    - pinctrl: at91: Fix possible out-of-boundary access
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38160
    - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38161
    - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38290
    - wifi: ath12k: fix node corruption in ar->arvifs list
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38163
    - f2fs: fix to do sanity check on sbi->total_valid_block_count
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38165
    - bpf, sockmap: Fix panic when calling skb_linearize
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38166
    - bpf: fix ktls panic with sockmap
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38293
    - wifi: ath11k: fix node corruption in ar->arvifs list
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38295
    - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in
      meson_ddr_pmu_create()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38167
    - fs/ntfs3: handle hdr_first_de() return value
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38170
    - arm64/fpsimd: Discard stale CPU state when handling SME traps
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38319
    - drm/amd/pp: Fix potential NULL pointer dereference in
      atomctrl_initialize_mc_reg_table
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38298
    - EDAC/skx_common: Fix general protection fault
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38173
    - crypto: marvell/cesa - Handle zero-length skcipher requests
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38300
    - crypto: sun8i-ce-cipher - fix error handling in
      sun8i_ce_cipher_prepare()
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38174
    - thunderbolt: Do not double dequeue a configuration request
  * Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
    CVE-2025-38265
    - serial: jsm: fix NPE during jsm_uart_port_init
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301)
    - i2c: designware: Uniform initialization flow for polling mode
    - i2c: designware: Remove ->disable() callback
    - i2c: designware: Use temporary variable for struct device
    - i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
    - phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
    - phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
    - phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver
      data
    - phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
    - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
    - nvmem: rockchip-otp: Move read-offset into variant-data
    - nvmem: rockchip-otp: add rk3576 variant data
    - nvmem: core: verify cell's raw_len
    - nvmem: core: update raw_len if the bit reading is required
    - nvmem: qfprom: switch to 4-byte aligned reads
    - scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
    - intel_th: avoid using deprecated page->mapping, index fields
    - dma-mapping: avoid potential unused data compilation warning
    - cgroup: Fix compilation issue due to cgroup_mutex not being exported
    - scsi: mpi3mr: Add level check to control event logging
    - net: enetc: refactor bulk flipping of RX buffers to separate function
    - ima: process_measurement() needlessly takes inode_lock() on MAY_READ
    - drm/amdgpu: Allow P2P access through XGMI
    - selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
    - bpf: fix possible endless loop in BPF map iteration
    - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
    - kconfig: merge_config: use an empty file as initfile
    - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel
      log
    - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
    - cifs: Fix querying and creating MF symlinks over SMB1
    - cifs: Fix negotiate retry functionality
    - smb: client: Store original IO parameters and prevent zero IO sizes
    - fuse: Return EPERM rather than ENOSYS from link()
    - NFSv4: Check for delegation validity in
      nfs_start_delegation_return_locked()
    - NFS: Don't allow waiting for exiting tasks
    - arm64: Add support for HIP09 Spectre-BHB mitigation
    - tracing: Mark binary printing functions with __printf() attribute
    - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
    - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
    - mailbox: use error ret code of of_parse_phandle_with_args()
    - riscv: Allow NOMMU kernels to access all of RAM
    - fbdev: fsl-diu-fb: add missing device_remove_file()
    - fbcon: Use correct erase colour for clearing in fbcon
    - fbdev: core: tileblit: Implement missing margin clearing for tileblit
    - cifs: add validation check for the fields in smb_aces
    - cifs: Fix establishing NetBIOS session for SMB2+ connection
    - NFSv4: Treat ENETUNREACH errors as fatal for state recovery
    - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
    - SUNRPC: rpcbind should never reset the port to the value '0'
    - thermal/drivers/qoriq: Power down TMU on system suspend
    - dql: Fix dql->limit value when reset.
    - lockdep: Fix wait context check on softirq for PREEMPT_RT
    - objtool: Properly disable uaccess validation
    - PCI: dwc: ep: Ensure proper iteration over outbound map windows
    - tools/build: Don't pass test log files to linker
    - pNFS/flexfiles: Report ENETDOWN as a connection error
    - PCI: vmd: Disable MSI remapping bypass under Xen
    - ext4: on a remount, only log the ro or r/w state when it has changed
    - mmc: host: Wait for Vdd to settle on card power off
    - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
    - wifi: mt76: mt7996: revise TXS size
    - x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
    - i2c: qup: Vote for interconnect bandwidth to DRAM
    - i2c: pxa: fix call balance of i2c->clk handling routines
    - btrfs: make btrfs_discard_workfn() block_group ref explicit
    - btrfs: avoid linker error in btrfs_find_create_tree_block()
    - btrfs: run btrfs_error_commit_super() early
    - btrfs: fix non-empty delayed iputs list on unmount due to async workers
    - btrfs: get zone unusable bytes while holding lock at
      btrfs_reclaim_bgs_work()
    - btrfs: send: return -ENAMETOOLONG when attempting a path that is too
      long
    - drm/amd/display: Guard against setting dispclk low for dcn31x
    - i3c: master: svc: Fix missing STOP for master request
    - dlm: make tcp still work in multi-link env
    - um: Store full CSGSFS and SS register from mcontext
    - um: Update min_low_pfn to match changes in uml_reserved
    - ext4: reorder capability check last
    - hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
    - scsi: st: Tighten the page format heuristics with MODE SELECT
    - scsi: st: ERASE does not change tape location
    - vfio/pci: Handle INTx IRQ_NOTCONNECTED
    - bpf: Return prog btf_id without capable check
    - jbd2: do not try to recover wiped journal
    - tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
    - rtc: rv3032: fix EERD location
    - thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for
      retimer
    - ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
    - bpf: Allow pre-ordering for bpf cgroup progs
    - kbuild: fix argument parsing in scripts/config
    - crypto: octeontx2 - suppress auth failure screaming due to negative
      tests
    - dm: restrict dm device size to 2^63-512 bytes
    - net/smc: use the correct ndev to find pnetid by pnetid table
    - xen: Add support for XenServer 6.1 platform device
    - pinctrl-tegra: Restore SFSEL bit when freeing pins
    - mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
    - drm/amdgpu: Update SRIOV video codec caps
    - ASoC: sun4i-codec: support hp-det-gpios property
    - ext4: reject the 'data_err=abort' option in nojournal mode
    - ext4: do not convert the unwritten extents if data writeback fails
    - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
    - posix-timers: Add cond_resched() to posix_timer_add() search loop
    - timer_list: Don't use %pK through printk()
    - netfilter: conntrack: Bound nf_conntrack sysctl writes
    - arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
    - mmc: dw_mmc: add exynos7870 DW MMC support
    - usb: xhci: Don't change the status of stalled TDs on failed Stop EP
    - hwmon: (dell-smm) Increment the number of fans
    - printk: Check CON_SUSPEND when unblanking a console
    - drm/amd/display: remove minimum Dispclk and apply oem panel timing.
    - drm/amd/display: calculate the remain segments for all pipes
    - drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
    - gfs2: Check for empty queue in run_queue
    - auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct
      hd44780_common"
    - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
    - iommu/amd/pgtbl_v2: Improve error handling
    - watchdog: aspeed: Update bootstatus handling
    - drm/amdkfd: Set per-process flags only once cik/vi
    - arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
    - arm64: tegra: Resize aperture for the IGX PCIe C5 slot
    - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
    - ALSA: seq: Improve data consistency at polling
    - tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
    - rtc: ds1307: stop disabling alarms on probe
    - ieee802154: ca8210: Use proper setters and getters for bitwise types
    - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
    - media: c8sectpfe: Call of_node_put(i2c_bus) only once in
      c8sectpfe_probe()
    - drm/gem: Test for imported GEM buffers with helper
    - net: phylink: use pl->link_interface in phylink_expects_phy()
    - remoteproc: qcom_wcnss: Handle platforms with only single power domain
    - drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
    - drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
    - pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
    - net: ethernet: ti: cpsw_new: populate netdev of_node
    - net: pktgen: fix mpls maximum labels list parsing
    - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
    - ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
    - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
    - drm/rockchip: vop2: Add uv swap for cluster window
    - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
    - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
    - clk: imx8mp: inform CCF of maximum frequency of clocks
    - hwmon: (gpio-fan) Add missing mutex locks
    - ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
    - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
    - fpga: altera-cvp: Increase credit timeout
    - perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
    - soc: apple: rtkit: Use high prio work queue
    - soc: apple: rtkit: Implement OSLog buffers properly
    - wifi: ath12k: Report proper tx completion status to mac80211
    - PCI: brcmstb: Expand inbound window size up to 64GB
    - PCI: brcmstb: Add a softdep to MIP MSI-X driver
    - net/mlx5: Avoid report two health errors on same syndrome
    - selftests/net: have `gro.sh -t` return a correct exit code
    - drm/amdkfd: KFD release_work possible circular locking
    - leds: pwm-multicolor: Add check for fwnode_property_read_u32
    - net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
    - net: xgene-v2: remove incorrect ACPI_PTR annotation
    - bonding: report duplicate MAC address in all situations
    - wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
    - soc: ti: k3-socinfo: Do not use syscon helper to build regmap
    - Octeontx2-af: RPM: Register driver with PCI subsys IDs
    - x86/build: Fix broken copy command in genimage.sh when making isoimage
    - drm/amd/display: handle max_downscale_src_width fail check
    - ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
    - ASoC: mediatek: mt8188: Add reference for dmic clocks
    - x86/nmi: Add an emergency handler in nmi_desc & use it in
      nmi_shootdown_cpus()
    - vhost-scsi: Return queue full for page alloc failures during copy
    - vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
    - media: adv7180: Disable test-pattern control on adv7180
    - media: tc358746: improve calculation of the D-PHY timing registers
    - libbpf: Fix out-of-bound read
    - net/mlx5: Change POOL_NEXT_SIZE define value and make it global
    - crypto: ahash - Set default reqsize from ahash_alg
    - crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
    - MIPS: Use arch specific syscall name match function
    - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
    - clocksource: mips-gic-timer: Enable counter when CPUs start
    - scsi: mpt3sas: Send a diag reset if target reset fails
    - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
    - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
    - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
    - wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
    - EDAC/ie31200: work around false positive build warning
    - i3c: master: svc: Flush FIFO before sending Dynamic Address
      Assignment(DAA)
    - drm/amd/display: Add support for disconnected eDP streams
    - RDMA/core: Fix best page size finding when it can cross SG entries
    - pmdomain: imx: gpcv2: use proper helper for property detection
    - can: c_can: Use of_property_present() to test existence of DT property
    - bpf: don't do clean_live_states when state->loop_entry->branches > 0
    - eth: mlx4: don't try to complete XDP frames in netpoll
    - PCI: Fix old_size lower bound in calculate_iosize() too
    - ACPI: HED: Always initialize before evged
    - vxlan: Join / leave MC group after remote changes
    - media: test-drivers: vivid: don't call schedule in loop
    - net/mlx5: Modify LSB bitmask in temperature event to include only the
      first bit
    - net/mlx5: Apply rate-limiting to high temperature warning
    - firmware: arm_ffa: Reject higher major version as incompatible
    - ASoC: ops: Enforce platform maximum on initial value
    - ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
    - ASoC: tas2764: Mark SW_RESET as volatile
    - ASoC: tas2764: Power up/down amp on mute ops
    - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
    - pinctrl: devicetree: do not goto err when probing hogs in
      pinctrl_dt_to_map
    - smack: recognize ipv4 CIPSO w/o categories
    - smack: Revert "smackfs: Added check catlen"
    - kunit: tool: Use qboot on QEMU x86_64
    - media: i2c: imx219: Correct the minimum vblanking value
    - media: v4l: Memset argument to 0 before calling get_mbus_config pad op
    - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
    - clk: qcom: ipq5018: allow it to be bulid on arm32
    - [Config] clk: qcom: ipq5018: enable module on armhf
    - clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
    - x86/traps: Cleanup and robustify decode_bug()
    - sched: Reduce the default slice to avoid tasks getting an extra tick
    - serial: sh-sci: Update the suspend/resume support
    - phy: core: don't require set_mode() callback for phy_get_mode() to work
    - soundwire: amd: change the soundwire wake enable/disable sequence
    - drm/amdgpu: Set snoop bit for SDMA for MI series
    - drm/amd/display: Don't try AUX transactions on disconnected link
    - drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
    - drm/amd/display: Update CR AUX RD interval interpretation
    - drm/amd/display: Initial psr_version with correct setting
    - drm/amdgpu: enlarge the VBIOS binary size limit
    - drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
    - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
    - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
    - net/mlx5e: set the tx_queue_len for pfifo_fast
    - net/mlx5e: reduce rep rxq depth to 256 for ECPF
    - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
    - drm/v3d: Add clock handling
    - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
    - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
    - net: fec: Refactor MAC reset to function
    - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
    - arch/powerpc/perf: Check the instruction type before creating sample
      with perf_mem_data_src
    - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
    - r8152: add vendor/device ID pair for Dell Alienware AW1022z
    - pstore: Change kmsg_bytes storage size to u32
    - ext4: don't write back data before punch hole in nojournal mode
    - ext4: remove writable userspace mappings before truncating page cache
    - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
    - wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
    - clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
    - hwmon: (xgene-hwmon) use appropriate type for the latency value
    - f2fs: introduce f2fs_base_attr for global sysfs entries
    - media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is
      available
    - ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
    - r8169: don't scan PHY addresses > 0
    - bridge: mdb: Allow replace of a host-joined group
    - ice: treat dyn_allowed only as suggestion
    - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
    - rcu: handle unstable rdp in rcu_read_unlock_strict()
    - rcu: fix header guard for rcu_all_qs()
    - perf: Avoid the read if the count is already updated
    - ice: count combined queues using Rx/Tx count
    - net/mana: fix warning in the writer of client oob
    - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
    - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when
      pci_irq_vector() fails
    - scsi: st: Restore some drive settings after reset
    - wifi: ath12k: Avoid napi_sync() before napi_enable()
    - HID: usbkbd: Fix the bit shift number for LED_KANA
    - arm64: zynqmp: add clock-output-names property in clock nodes
    - ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
    - ASoC: rt722-sdca: Add some missing readable registers
    - drm/ast: Find VBIOS mode from regular display size
    - bpftool: Fix readlink usage in get_fd_type
    - firmware: arm_scmi: Relax duplicate name constraint across protocol ids
    - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
    - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
    - wifi: rtl8xxxu: retry firmware download on error
    - wifi: rtw88: Don't use static local variable in
      rtw8822b_set_tx_power_index_by_rate
    - wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
    - spi: zynqmp-gqspi: Always acknowledge interrupts
    - regulator: ad5398: Add device tree support
    - wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
    - accel/qaic: Mask out SR-IOV PCI resources
    - wifi: ath9k: return by of_get_mac_address
    - wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
    - drm: bridge: adv7511: fill stream capabilities
    - drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
    - drm/panel-edp: Add Starry 116KHD024006
    - drm: Add valid clones check
    - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
    - book3s64/radix: Fix compile errors when
      CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
    - pinctrl: meson: define the pull up/down resistor value as 60 kOhm
    - ASoC: cs42l43: Disable headphone clamps during type detection
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
    - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
    - nvme-pci: add quirks for device 126f:1001
    - nvme-pci: add quirks for WDC Blue SN550 15b7:5009
    - io_uring/fdinfo: annotate racy sq/cq head/tail reads
    - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
    - cifs: Fix changing times and read-only attr over SMB1
      smb_set_file_info() function
    - tools: ynl-gen: validate 0 len strings from kernel
    - wifi: iwlwifi: add support for Killer on MTL
    - xenbus: Allow PVH dom0 a non-local xenstore
    - soundwire: bus: Fix race on the creation of the IRQ domain
    - dmaengine: idxd: Fix allowing write() from different address spaces
    - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
    - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
    - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
    - xfrm: Sanitize marks before insert
    - dmaengine: idxd: Fix ->poll() return value
    - dmaengine: fsl-edma: Fix return code for unhandled interrupts
    - Bluetooth: L2CAP: Fix not checking l2cap_chan security level
    - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump
      handling
    - bridge: netfilter: Fix forwarding of fragmented packets
    - ice: fix vf->num_mac count with port representors
    - ice: Fix LACP bonds without SRIOV environment
    - pinctrl: qcom: switch to devm_register_sys_off_handler()
    - net: dwmac-sun8i: Use parsed internal PHY address instead of 1
    - net: lan743x: Restore SGMII CTRL register on resume
    - io_uring: fix overflow resched cqe reordering
    - octeontx2-pf: Add AF_XDP non-zero copy support
    - octeontx2-af: Set LMT_ENA bit for APR table entries
    - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
    - clk: s2mps11: initialise clk_hw_onecell_data::num before accessing
      ::hws[] in probe()
    - can: slcan: allow reception of short error messages
    - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
    - ASoc: SOF: topology: connect DAI to a single DAI link
    - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback
      direction
    - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
    - llc: fix data loss when reading from a socket in llc_ui_recvmsg()
    - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
    - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
    - drm/edid: fixed the bug that hdr metadata was not reset
    - arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
    - smb: client: Reset all search buffer pointers when releasing buffer
    - Input: xpad - add more controllers
    - memcg: always call cond_resched() after fn()
    - mm/page_alloc.c: avoid infinite retries caused by cpuset race
    - Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
    - ksmbd: fix stream write failure
    - spi: spi-fsl-dspi: restrict register range for regmap access
    - spi: spi-fsl-dspi: Halt the module after a new message transfer
    - spi: spi-fsl-dspi: Reset SR flags before sending a new message
    - serial: sh-sci: Save and restore more registers
    - watchdog: aspeed: fix 64-bit division
    - pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
    - i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
    - drm/gem: Internally test import_attach for imported objects
    - can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
    - af_unix: Return struct unix_sock from unix_get_socket().
    - af_unix: Run GC on only one CPU.
    - af_unix: Try to run GC async.
    - af_unix: Replace BUG_ON() with WARN_ON_ONCE().
    - af_unix: Remove io_uring code for GC.
    - af_unix: Remove CONFIG_UNIX_SCM.
    - [Config] af_unix: remove UNIX_SCM config option
    - af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
    - af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
    - af_unix: Link struct unix_edge when queuing skb.
    - af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
    - af_unix: Iterate all vertices by DFS.
    - af_unix: Detect Strongly Connected Components.
    - af_unix: Save listener for embryo socket.
    - af_unix: Fix up unix_edge.successor for embryo socket.
    - af_unix: Save O(n) setup of Tarjan's algo.
    - af_unix: Skip GC if no cycle exists.
    - af_unix: Avoid Tarjan's algorithm if unnecessary.
    - af_unix: Assign a unique index to SCC.
    - af_unix: Detect dead SCC.
    - Revert "UBUNTU: SAUCE: af_unix: Fix GC compatibility with upstream OOB
      refcount changes"
    - af_unix: Replace garbage collection algorithm.
    - af_unix: Remove lock dance in unix_peek_fds().
    - af_unix: Try not to hold unix_gc_lock during accept().
    - af_unix: Don't access successor in unix_del_edges() during GC.
    - af_unix: Add dead flag to struct scm_fp_list.
    - af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
    - af_unix: Fix uninit-value in __unix_walk_scc()
    - SAUCE: Revert "af_unix: Don't return OOB skb in manage_oob()."
    - SAUCE: Revert "af_unix: Move spin_lock() in manage_oob()."
    - SAUCE: Revert "af_unix: Rename unlinked_skb in manage_oob()."
    - SAUCE: Revert "af_unix: Remove single nest in manage_oob()."
    - SAUCE: Revert "af_unix: Don't call skb_get() for OOB skb."
    - af_unix: Define locking order for unix_table_double_lock().
    - af_unix: Define locking order for U_LOCK_SECOND in
      unix_state_double_lock().
    - af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in
      unix_collect_skb().
    - af_unix: Don't call skb_get() for OOB skb.
    - af_unix: Don't leave consecutive consumed OOB skbs.
    - af_unix: Remove single nest in manage_oob().
    - af_unix: Rename unlinked_skb in manage_oob().
    - af_unix: Move spin_lock() in manage_oob().
    - af_unix: Don't return OOB skb in manage_oob().
    - arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
    - arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
    - arm64: dts: qcom: sm8450: Add missing properties for cryptobam
    - arm64: dts: qcom: sm8550: Add missing properties for cryptobam
    - arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
    - perf/arm-cmn: Fix REQ2/SNP2 mixup
    - perf/arm-cmn: Initialise cmn->cpu earlier
    - coredump: fix error handling for replace_fd()
    - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
    - HID: quirks: Add ADATA XPG alpha wireless mouse support
    - nfs: don't share pNFS DS connections between net namespaces
    - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
    - um: let 'make clean' properly clean underlying SUBARCH as well
    - drm/amd/display: fix link_set_dpms_off multi-display MST corner case
    - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
    - spi: spi-sun4i: fix early activation
    - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
    - NFS: Avoid flushing data while holding directory locks in nfs_rename()
    - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
    - platform/x86: thinkpad_acpi: Ignore battery threshold change event
      notification
    - net: ethernet: ti: am65-cpsw: Lower random mac address error print to
      info
    - dma/mapping.c: dev_dbg support for dma_addressing_limited
    - mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type
    - vhost_task: fix vhost_task_create() documentation
    - dma-mapping: Fix warning reported for missing prototype
    - fs/buffer: split locking for pagecache lookups
    - fs/buffer: introduce sleeping flavors for pagecache lookups
    - fs/buffer: use sleeping version of __find_get_block()
    - fs/ocfs2: use sleeping version of __find_get_block()
    - fs/jbd2: use sleeping version of __find_get_block()
    - fs/ext4: use sleeping version of sb_find_get_block()
    - drm/amd/display: Enable urgent latency adjustment on DCN35
    - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability
    - cifs: Set default Netbios RFC1001 server name to hostname in UNC
    - ASoC: codecs: wsa884x: Correct VI sense channel mask
    - ASoC: codecs: wsa883x: Correct VI sense channel mask
    - thermal/drivers/mediatek/lvts: Start sensor interrupts disabled
    - Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler
      removal
    - drm/amdgpu/discovery: check ip_discovery fw file available
    - drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12
    - xen/pci: Do not register devices with segments >= 0x10000
    - drm/amdgpu: Skip pcie_replay_count sysfs creation for VF
    - cgroup/rstat: avoid disabling irqs for O(num_cpu)
    - wifi: mt76: mt7996: fix SER reset trigger on WED reset
    - wifi: mt76: mt7925: load the appropriate CLC data based on hardware type
    - wifi: mt76: mt7925: fix fails to enter low power mode in suspend state
    - x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers
    - x86/cpu/intel: Replace PAT erratum model/family magic numbers with
      symbolic IFM references
    - x86/smpboot: Fix INIT delay assignment for extended Intel Families
    - x86/microcode/intel: Switch to new Intel CPU model defines
    - x86/microcode: Update the Intel processor flag scan check
    - blk-cgroup: improve policy registration error handling
    - drm/amdgpu: release xcp_mgr on exit
    - drm/amdgpu: adjust drm_firmware_drivers_only() handling
    - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste()
    - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug
    - erofs: initialize decompression early
    - clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490
    - posix-timers: Ensure that timer initialization is fully visible
    - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe
    - net: hsr: Fix PRP duplicate detection
    - PNP: Expand length of fixup id string
    - arm64/mm: Check pmd_table() in pmd_trans_huge()
    - wifi: iwlwifi: mark Br device not integrated
    - wifi: mac80211: fix warning on disconnect during failed ML reconf
    - wifi: mac80211_hwsim: Fix MLD address translation
    - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable
      < 0
    - coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t
    - misc: pci_endpoint_test: Give disabled BARs a distinct error code
    - drm/amdkfd: Set per-process flags only once for gfx9/10/11/12
    - drm/xe: Retry BO allocation
    - soc: samsung: include linux/array_size.h where needed
    - usb: xhci: set page size to the xHCI-supported size
    - soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables
    - drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35
    - drm/amd/display: Fix p-state type when p-state is unsupported
    - perf/core: Clean up perf_try_init_event()
    - net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104
    - dpll: Add an assertion to check freq_supported_num
    - ublk: enforce ublks_max only for unprivileged devices
    - scsi: logging: Fix scsi_logging_level bounds
    - ublk: complete command synchronously on error
    - drm/xe: xe_gen_wa_oob: replace program_invocation_short_name
    - bpf: Search and add kfuncs in struct_ops prologue and epilogue
    - drm/amd/display: fix dcn4x init failed
    - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode
    - scsi: mpi3mr: Update timestamp only for supervisor IOCs
    - scsi: scsi_debug: First fixes for tapes
    - net: ipv6: Init tunnel link-netns before registering dev
    - drm/amdgpu: remove all KFD fences from the BO on release
    - eeprom: ee1004: Check chip before probing
    - drm/amd/pm: Fetch current power limit from PMFW
    - drm/amd/display: DCN35 set min dispclk to 50Mhz
    - drm/amd/display: Fix DCN35 set min dispclk logic
    - drm/amd/display: Guard against setting dispclk low when active
    - drm/amd/display: Fix BT2020 YCbCr limited/full range input
    - drm/amd/display: Read LTTPR ALPM caps during link cap retrieval
    - hrtimers: Replace hrtimer_clock_to_base_table with switch-case
    - firmware: arm_ffa: Handle the presence of host partition in the
      partition info
    - firmware: xilinx: Dont send linux address to get fpga config get status
    - drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init()
    - x86/ibt: Handle FineIBT in handle_cfi_failure()
    - soundwire: cadence_master: set frame shape and divider based on actual
      clk freq
    - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
    - drm/amdkfd: fix missing L2 cache info in topology
    - drm/amd/display: pass calculated dram_speed_mts to dml2
    - drm/amd/pm: Skip P2S load for SMU v13.0.12
    - drm/amd/display: Support multiple options during psr entry.
    - drm/amdgpu: Use active umc info from discovery
    - net/mlx5: XDP, Enable TX side XDP multi-buffer support
    - wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV
    - wifi: iwlwifi: use correct IMR dump variable
    - wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx
    - powerpc/pseries/iommu: create DDW for devices with DMA mask less than
      64-bits
    - wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang
    - wifi: rtw89: fw: validate multi-firmware header before getting its size
    - wifi: rtw89: fw: validate multi-firmware header before accessing
    - wifi: rtw89: call power_on ahead before selecting firmware
    - net: page_pool: avoid false positive warning if NAPI was never added
    - media: qcom: camss: Add default case in vfe_src_pad_code
    - drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0
    - tools: ynl-gen: don't output external constants
    - ice: init flow director before RDMA
    - wifi: ath12k: Fetch regdb.bin file from board-2.bin
    - drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE
    - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
    - wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan
      event
    - drm/xe/sa: Always call drm_suballoc_manager_fini()
    - drm/xe: Reject BO eviction if BO is bound to current VM
    - smb: server: smb2pdu: check return value of xa_store()
    - ACPI: platform-profile: add platform_profile_cycle()
    - platform/x86: ideapad-laptop: add support for some new buttons
    - ALSA: usb-audio: Fix duplicated name in MIDI substream names
    - btrfs: handle empty eb->folios in num_extent_folios()
    - xfrm: Fix UDP GRO handling for some corner cases
    - idpf: fix idpf_vport_splitq_napi_poll()
    - net: dsa: microchip: update tag_ksz masks for KSZ9477 family
    - net: dsa: microchip: linearize skb for tail-tagging switches
    - vmxnet3: update MTU after device quiesce
    - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
    - highmem: add folio_test_partial_kmap()
    - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled
    - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
    - Bluetooth: btmtksdio: Check function enabled before doing close
    - Bluetooth: btmtksdio: Do close if SDIO card removed without close
    - platform/x86: think-lmi: Fix attribute name usage for non-compliant
      items
    - err.h: move IOMEM_ERR_PTR() to err.h
    - gcc-15: make 'unterminated string initialization' just a warning
    - gcc-15: disable '-Wunterminated-string-initialization' entirely for now
    - Fix mis-uses of 'cc-option' for warning disablement
    - bpf: abort verification if env->cur_state->loop_entry != NULL
    - drm/amdkfd: Correct F8_MODE for gfx950
    - arm64: dts: qcom: sm8650: Add missing properties for cryptobam
    - arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage
    - arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on
    - arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default
    - arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to
      default
    - arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219
      overlay
    - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay
    - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay
    - arm64: dts: ti: k3-am65-main: Fix sdhci node properties
    - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
    - arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
    - arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
    - arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
    - drm/xe: Save the gt pointer in lrc and drop the tile
    - Upstream stable to v6.6.93, v6.12.31, v6.12.32
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38053
    - idpf: fix null-ptr-deref in idpf_features_check
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38055
    - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38057
    - espintcp: fix skb leaks
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38060
    - bpf: copy_verifier_state() should copy 'loop_entry' field
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38098
    - drm/amd/display: Don't treat wb connector as physical in
      create_validate_stream_for_sink
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38099
    - Bluetooth: Disable SCO support if READ_VOICE_SETTING is
      unsupported/broken
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38073
    - block: fix race between set_blocksize and read paths
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38051
    - smb: client: Fix use-after-free in cifs_fill_dirent
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38077
    - platform/x86: dell-wmi-sysman: Avoid buffer overflow in
      current_password_store()
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38078
    - ALSA: pcm: Fix race of buffer access at PCM OSS layer
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38003
    - can: bcm: add missing rcu read protection for procfs content
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38004
    - can: bcm: add locking for bcm_op runtime updates
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38031
    - padata: do not leak refcount in reorder_work
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38079
    - crypto: algif_hash - fix double free in hash_accept
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38052
    - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38097
    - espintcp: remove encap socket caching to avoid reference leak
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38058
    - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38059
    - btrfs: avoid NULL pointer dereference if no valid csum tree
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38034
    - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38035
    - nvmet-tcp: don't restore null sk_state_change
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38037
    - vxlan: Annotate FDB data races
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38039
    - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload
      enabled
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38080
    - drm/amd/display: Increase block_sequence array size
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38040
    - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38061
    - net: pktgen: fix access outside of user given buffer in
      pktgen_thread_write()
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38062
    - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of
      iommu_cookie
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38063
    - dm: fix unconditional IO throttle caused by REQ_PREFLUSH
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38043
    - firmware: arm_ffa: Set dma_mask for ffa devices
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38044
    - media: cx231xx: set device_caps for 417
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38065
    - orangefs: Do not truncate file size
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38066
    - dm cache: prevent BUG_ON by blocking retries on failed device resumes
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38068
    - crypto: lzo - Fix compression buffer overrun
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38045
    - wifi: iwlwifi: fix debug actions order
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38071
    - x86/mm: Check return value from memblock_phys_alloc_range()
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38072
    - libnvdimm/labels: Fix divide error in nd_label_data_init()
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38081
    - spi-rockchip: Fix register out of bounds access
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38074
    - vhost-scsi: protect vq->log_used with vq->mutex
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38048
    - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
  * Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
    CVE-2025-38075
    - scsi: target: iscsi: Fix timeout on deleted connection
  * CAP_PERFMON insufficient to get perf data (LP: #2131046)
    - SAUCE: perf/core: Allow CAP_PERFMON for paranoid level 4
  * Dell AIO backlight is not working, dell_uart_backlight module is missing
    (LP: #2083800)
    - SAUCE: Removed sauce dell-uart-backlight driver
    - Revert "UBUNTU: SAUCE: ACPI: video: Dell AIO UART backlight detection"
    - platform/x86: Add new Dell UART backlight driver
    - ACPI: video: Add Dell UART backlight controller detection
    - SAUCE: dell_uart_backlight: size_t -> ssize_t
    - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO
    - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
    - [Config] enable CONFIG_DELL_UART_BACKLIGHT
  * Ubuntu x86_64 6.8 kernels won't build if CONFIG_FB_HYPERV config option is
    enabled  (LP: #2127971)
    - fbdev: Introduce devm_register_framebuffer()
  * Run iio_info will be stucked forever (HID-
    SENSOR-200011.5.auto/iio:device1) (LP: #2102077)
    - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
  * kernel: sysfs: cannot create duplicate filename
    '/bus/platform/devices/iTCO_wdt' (LP: #2121997)
    - i2c: i801: Hide Intel Birch Stream SoC TCO WDT
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344)
    - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
    - selftests/exec: load_address: conform test to TAP format output
    - binfmt_elf: Leave a gap between .bss and brk
    - selftests/exec: Build both static and non-static load_address tests
    - binfmt_elf: Calculate total_size earlier
    - binfmt_elf: Honor PT_LOAD alignment for static PIE
    - binfmt_elf: Move brk for static PIE even if ASLR disabled
    - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie
      14XA (GX4HRXL)
    - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
    - cgroup/cpuset: Extend kthread_is_per_cpu() check to all
      PF_NO_SETAFFINITY tasks
    - tracing: probes: Fix a possible race in trace_probe_log APIs
    - tpm: tis: Double the timeout B to 4s
    - firmware: arm_scmi: Add helper to trace bad messages
    - firmware: arm_scmi: Add message dump traces for bad and unexpected
      replies
    - firmware: arm_scmi: Add support for debug metrics at the interface
    - [Config] do not enable new support for SCMI debug metrics
    - firmware: arm_scmi: Track basic SCMI communication debug metrics
    - iio: adc: ad7266: Fix potential timestamp alignment issue.
    - iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
    - iio: chemical: sps30: use aligned_s64 for timestamp
    - HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
    - spi: loopback-test: Do not split 1024-byte hexdumps
    - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
    - tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get
      operation
    - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
    - mctp: no longer rely on net->dev_index_head[]
    - net: mctp: Ensure keys maintain only one ref to corresponding dev
    - ALSA: seq: Fix delivery of UMP events to group ports
    - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
    - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
    - nvme-pci: make nvme_pci_npages_prp() __always_inline
    - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
    - ALSA: sh: SND_AICA should depend on SH_DMA_API
    - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
    - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
    - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW
      capability
    - octeontx2-af: Fix CGX Receive counters
    - tsnep: fix timestamping with a stacked DSA driver
    - NFSv4/pnfs: Reset the layout state after a layoutreturn
    - udf: Make sure i_lenExtents is uptodate on inode eviction
    - LoongArch: Prevent cond_resched() occurring within kernel-fpu
    - LoongArch: Save and restore CSR.CNTC for hibernation
    - LoongArch: Fix MAX_REG_OFFSET calculation
    - LoongArch: uprobes: Remove user_{en,dis}able_single_step()
    - LoongArch: uprobes: Remove redundant code about resume_era
    - drm/amd/display: Correct the reply value when AUX write incomplete
    - drm/amd/display: Avoid flooding unnecessary info messages
    - ACPI: PPTT: Fix processor subtable walk
    - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
    - ALSA: usb-audio: Add sample rate quirk for Audioengine D1
    - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
    - hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
    - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
    - hv_netvsc: Remove rmsg_pgcnt
    - Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
    - Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
    - ftrace: Fix preemption accounting for stacktrace trigger command
    - ftrace: Fix preemption accounting for stacktrace filter command
    - tracing: samples: Initialize trace_array_printk() with the correct
      function
    - phy: Fix error handling in tegra_xusb_port_init
    - phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
    - phy: renesas: rcar-gen3-usb2: Set timing registers only once
    - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
    - smb: client: fix memory leak during error handling for POSIX mkdir
    - spi: tegra114: Use value to check for invalid delays
    - net: qede: Initialize qede_ll_ops with designated initializer
    - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure
      instead of a local copy
    - dmaengine: idxd: fix memory leak in error handling path of
      idxd_setup_wqs
    - dmaengine: idxd: fix memory leak in error handling path of
      idxd_setup_engines
    - dmaengine: idxd: fix memory leak in error handling path of
      idxd_setup_groups
    - dmaengine: idxd: Add missing cleanup for early error out in
      idxd_setup_internals
    - dmaengine: idxd: Add missing cleanups in cleanup internals
    - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove
      call
    - dmaengine: idxd: fix memory leak in error handling path of
      idxd_pci_probe
    - LoongArch: Explicitly specify code model in Makefile
    - SAUCE: Revert "memblock: Accept allocated memory before use in
      memblock_double_array()"
    - phy: tegra: xusb: remove a stray unlock
    - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC
      Policies
    - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies
    - uio_hv_generic: Fix sysfs creation path for ring buffer
    - KVM: Add member to struct kvm_gfn_range to indicate private/shared
    - KVM: x86/mmu: Prevent installing hugepages when mem attributes are
      changing
    - iio: chemical: pms7003: use aligned_s64 for timestamp
    - iio: pressure: mprls0025pa: use aligned_s64 for timestamp
    - net: dsa: b53: prevent standalone from trying to forward to other ports
    - netlink: specs: tc: fix a couple of attribute names
    - LoongArch: Move __arch_cpu_idle() to .cpuidle.text section
    - btrfs: fix discard worker infinite loop after disabling discard
    - btrfs: fix folio leak in submit_one_async_extent()
    - btrfs: add back warning for mount option commit values exceeding 300
    - drm/amdgpu: fix incorrect MALL size for GFX1151
    - gpio: pca953x: fix IRQ storm on system wake up
    - kbuild: Disable -Wdefault-const-init-unsafe
    - mm: userfaultfd: correct dirty flags set for both present and swap pte
    - accel/ivpu: Rename ivpu_log_level to fw_log_level
    - accel/ivpu: Reset fw log on cold boot
    - accel/ivpu: Refactor functions in ivpu_fw_log.c
    - drm/fbdev-dma: Support struct drm_driver.fbdev_probe
    - Upstream stable to v6.6.92, v6.12.30
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-37968
    - iio: light: opt3001: fix deadlock due to concurrent flag access
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38011
    - drm/amdgpu: csa unmap use uninterruptible lock
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-21931
    - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-37960
    - memblock: Accept allocated memory before use in memblock_double_array()
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-37967
    - usb: typec: ucsi: displayport: Fix deadlock
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-22102
    - Bluetooth: btnxpuart: Fix kernel panic during FW release
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38008
    - mm/page_alloc: fix race condition in unaccepted memory handling
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38014
    - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38015
    - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38005
    - dmaengine: ti: k3-udma: Add missing locking
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38009
    - wifi: mt76: disable napi on driver removal
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38010
    - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38095
    - dma-buf: insert memory barrier before updating num_fences
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38018
    - net/tls: fix kernel panic when alloc_page failed
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38019
    - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38013
    - wifi: mac80211: Set n_channels after allocating struct
      cfg80211_scan_request
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38027
    - regulator: max20086: fix invalid memory access
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38020
    - net/mlx5e: Disable MACsec offload for uplink representor profile
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38094
    - net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38006
    - net: mctp: Don't access ifa_index when missing
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-37992
    - net_sched: Flush gso_skb list too during ->change()
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38023
    - nfs: handle failure of nfs_get_lock_context in unlock path
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38007
    - HID: uclogic: Add NULL check in uclogic_input_configured()
  * Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
    CVE-2025-38024
    - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277)
    - dm: add missing unlock on in dm_keyslot_evict()
    - arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
    - can: mcan: m_can_class_unregister(): fix order of unregistration calls
    - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
    - ksmbd: fix memory leak in parse_lease_state()
    - SAUCE: Revert "sch_htb: make htb_deactivate() idempotent"
    - sch_htb: make htb_deactivate() idempotent
    - gre: Fix again IPv6 link-local address generation.
    - netdevice: add netdev_tx_reset_subqueue() shorthand
    - net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
    - can: mcp251xfd: fix TDC setting for low data bit rates
    - can: gw: fix RCU/BH usage in cgw_create_job()
    - net: dsa: b53: allow leaky reserved multicast
    - net: dsa: b53: fix clearing PVID of a port
    - net: dsa: b53: fix flushing old pvid VLAN on pvid change
    - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
    - net: dsa: b53: always rejoin default untagged VLAN on bridge leave
    - net: dsa: b53: fix learning on VLAN unaware bridges
    - Input: cyttsp5 - ensure minimum reset pulse width
    - Input: cyttsp5 - fix power control issue on wakeup
    - Input: xpad - fix Share button on Xbox One controllers
    - Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
    - Input: synaptics - enable InterTouch on Dynabook Portege X30-D
    - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
    - Input: synaptics - enable InterTouch on Dell Precision M3800
    - Input: synaptics - enable SMBus for HP Elitebook 850 G1
    - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
    - staging: iio: adc: ad7816: Correct conditional logic for store mode
    - staging: axis-fifo: Remove hardware resets for user errors
    - staging: axis-fifo: Correct handling of tx_fifo_depth for size
      validation
    - drm/amd/display: Shift DMUB AUX reply command if necessary
    - iio: adc: ad7606: fix serial register access
    - iio: adc: rockchip: Fix clock initialization sequence
    - iio: adis16201: Correct inclinometer channel resolution
    - drm/amd/display: Fix the checking condition in dmub aux handling
    - drm/amd/display: Remove incorrect checking in dmub aux handler
    - drm/amd/display: Fix wrong handling for AUX_DEFER case
    - drm/amd/display: Copy AUX read reply data whenever length > 0
    - usb: uhci-platform: Make the clock really optional
    - xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
    - clocksource/i8253: Use raw_spinlock_irqsave() in
      clockevent_i8253_disable()
    - x86/microcode: Consolidate the loader enablement checking
    - ocfs2: switch osb->disable_recovery to enum
    - ocfs2: implement handshaking with ocfs2 recovery thread
    - ocfs2: stop quota recovery before disabling quotas
    - usb: cdnsp: Fix issue with resuming from L1
    - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
    - usb: gadget: f_ecm: Add get_status callback
    - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
    - usb: gadget: Use get_status callback to set remote wakeup capability
    - usb: host: tegra: Prevent host controller crash when OTG port is used
    - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
    - USB: usbtmc: use interruptible sleep in usbtmc_read
    - usb: usbtmc: Fix erroneous get_stb ioctl error returns
    - usb: usbtmc: Fix erroneous wait_srq ioctl return
    - usb: usbtmc: Fix erroneous generic_read ioctl return
    - iio: accel: adxl367: fix setting odr for activity time update
    - iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
    - types: Complement the aligned types with signed 64-bit one
    - iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
    - iio: adc: dln2: Use aligned_s64 for timestamp
    - MIPS: Fix MAX_REG_OFFSET
    - drm/panel: simple: Update timings for AUO G101EVN010
    - do_umount(): add missing barrier before refcount checks in sync case
    - io_uring: always arm linked timeouts prior to issue
    - arm64: insn: Add support for encoding DSB
    - arm64: proton-pack: Expose whether the platform is mitigated by firmware
    - arm64: proton-pack: Expose whether the branchy loop k value
    - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
    - x86/bpf: Call branch history clearing sequence on exit
    - x86/bpf: Add IBHF call at end of classic BPF
    - x86/bhi: Do not set BHI_DIS_S in 32-bit mode
    - x86/speculation: Simplify and make CALL_NOSPEC consistent
    - x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
    - x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
    - Documentation: x86/bugs/its: Add ITS documentation
    - x86/its: Enumerate Indirect Target Selection (ITS) bug
    - x86/its: Add support for ITS-safe indirect thunk
    - [Config] enable Indirect Target Selection mitigation
    - x86/its: Add support for ITS-safe return thunk
    - x86/its: Enable Indirect Target Selection mitigation
    - x86/its: Add "vmexit" option to skip mitigation on some CPUs
    - x86/its: Add support for RSB stuffing mitigation
    - x86/its: Align RETs in BHB clear sequence to avoid thunking
    - x86/ibt: Keep IBT disabled during alternative patching
    - x86/its: Use dynamic thunks for indirect branches
    - x86/its: Fix build errors when CONFIG_MODULES=n
    - x86/its: FineIBT-paranoid vs ITS
    - x86/its: Fix build error for its_static_thunk()
    - firmware: arm_scmi: Fix timeout checks on polling path
    - s390/entry: Fix last breaking event handling in case of stack corruption
    - erofs: ensure the extra temporary copy is valid for shortened bvecs
    - net: dsa: b53: keep CPU port always tagged again
    - net: dsa: b53: do not allow to configure VLAN 0
    - net: dsa: b53: do not program vlans when vlan filtering is off
    - net: dsa: b53: fix toggling vlan_filtering
    - net: dsa: b53: do not set learning and unicast/multicast on up
    - rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros`
      configuration
    - mm/userfaultfd: fix uninitialized output field for -EAGAIN race
    - selftests/mm: compaction_test: support platform with huge mount of
      memory
    - selftests/mm: fix a build failure on powerpc
    - io_uring: ensure deferred completions are flushed for multishot
    - iio: imu: inv_mpu6050: align buffer for timestamp
    - drm/xe: Add page queue multiplier
    - usb: dwc3: gadget: Make gadget_wakeup asynchronous
    - riscv: misaligned: Add handling for ZCB instructions
    - riscv: misaligned: factorize trap handling
    - riscv: misaligned: enable IRQs while handling misaligned accesses
    - selftest/x86/bugs: Add selftests for ITS
    - Upstream stable to v6.6.91, v6.12.29
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37960
    - memblock: Accept allocated memory before use in memblock_double_array()
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37957
    - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37963
    - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37948
    - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37994
    - usb: typec: ucsi: displayport: Fix NULL pointer access
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37995
    - module: ensure that kobject_put() is safe for module type kobjects
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37949
    - xenbus: Use kref to track req lifetime
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37954
    - smb: client: Avoid race in open_cached_dir with lease breaks
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37951
    - drm/v3d: Add job to pending list if the reset was skipped
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37969
    - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37970
    - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37972
    - Input: mtk-pmic-keys - fix possible null pointer dereference
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37959
    - bpf: Scrub packet on bpf_redirect_peer
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37961
    - ipvs: fix uninit-value for saddr in do_output_route4
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37998
    - openvswitch: Fix unsafe attribute parsing in output_userspace()
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37952
    - ksmbd: Fix UAF in __close_file_table_ids
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37947
    - ksmbd: prevent out-of-bounds stream writes by validating *pos
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37956
    - ksmbd: prevent rename with empty string
  * Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
    CVE-2025-37973
    - wifi: cfg80211: fix out-of-bounds access during multi-link element
      defragmentation
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559)
    - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
    - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
    - btrfs: fix COW handling in run_delalloc_nocow()
    - drm/fdinfo: Protect against driver unbind
    - EDAC/altera: Test the correct error reg offset
    - EDAC/altera: Set DDR and SDMMC interrupt mask before registration
    - i2c: imx-lpi2c: Fix clock count when probe defers
    - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
    - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum
      offload
    - mm/memblock: pass size instead of end to memblock_set_node()
    - mm/memblock: repeat setting reserved region nid if array is doubled
    - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
    - spi: tegra114: Don't fail set_cs_timing when delays are zero
    - tracing: Do not take trace_event_sem in print_event_fields()
    - dm-integrity: fix a warning on invalid table line
    - dm: always update the array size in realloc_argv on success
    - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
    - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep
      cycles
    - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU
      hotplug
    - smb: client: fix zero length for mkdir POSIX create context
    - cpufreq: Avoid using inconsistent policy->min and policy->max
    - cpufreq: Fix setting policy limits when frequency tables are used
    - PCI: imx6: Skip controller_id generation logic for i.MX7D
    - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
    - powerpc/boot: Check for ld-option support
    - drm/i915/pxp: fix undefined reference to
      `intel_pxp_gsccs_is_ready_for_sessions'
    - powerpc/boot: Fix dash warning
    - net/mlx5: E-Switch, Initialize MAC Address for Default GID
    - net/mlx5: E-switch, Fix error handling for enabling roce
    - net: Rename mono_delivery_time to tstamp_type for scalabilty
    - Bluetooth: L2CAP: copy RX timestamp to new fragments
    - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
    - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
    - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when
      advised
    - pds_core: delete VF dev on reset
    - pds_core: make pdsc_auxbus_dev_del() void
    - pds_core: specify auxiliary_device to be created
    - nvme-pci: fix queue unquiesce check on slot_reset
    - net: dlink: Correct endianness handling of led_mode
    - net: mdio: mux-meson-gxl: set reversed bit when using internal phy
    - igc: fix lock order in igc_ptp_reset
    - net: dsa: felix: fix broken taprio gate states after clock jump
    - net: ipv6: fix UDPv6 GSO segmentation with NAT
    - bnxt_en: Fix coredump logic to free allocated buffer
    - bnxt_en: Fix ethtool -d byte order for 32-bit values
    - nvme-tcp: fix premature queue removal and I/O failover
    - net: fec: ERR007885 Workaround for conventional TX
    - net: hns3: store rx VLAN tag offload state for VF
    - net: hns3: fix an interrupt residual problem
    - net: hns3: fixed debugfs tm_qset size
    - net: hns3: defer calling ptp_clock_register()
    - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
    - net: vertexcom: mse102x: Fix LEN_MASK
    - net: vertexcom: mse102x: Add range check for CMD_RTS
    - net: vertexcom: mse102x: Fix RX error handling
    - ASoC: Use of_property_read_bool()
    - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean
      properties
    - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
    - ARM: dts: opos6ul: add ksz8081 phy properties
    - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
    - arm64: dts: st: Use 128kB size for aliased GIC400 register access on
      stm32mp25 SoCs
    - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
    - xhci: Add helper to set an interrupters interrupt moderation interval
    - xhci: support setting interrupt moderation IMOD for secondary
      interrupters
    - xhci: Limit time spent with xHC interrupts disabled during bus resume
    - kernel: param: rename locate_module_kobject
    - kernel: globalize lookup_or_create_module_kobject()
    - drivers: base: handle module_kobject creation
    - iommu/arm-smmu-v3: Use the new rb tree helpers
    - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream
      ids
    - drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
    - dm: fix copying after src array boundaries
    - bpf: Fix BPF_INTERNAL namespace import
    - binder: fix offset calculation in debug log
    - perf/x86/intel: Only check the group flag for X86 leader
    - drm: Select DRM_KMS_HELPER from DRM_DEBUG_DP_MST_TOPOLOGY_REFS
    - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
    - pinctrl: imx: Return NULL if no group is matched and found
    - Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync
    - idpf: fix offloads support for encapsulated packets
    - drm/tests: shmem: Fix memleak
    - idpf: fix potential memory leak on kcalloc() failure
    - idpf: protect shutdown from reset
    - ALSA: hda/realtek: Fix built-mic regression on other ASUS models
    - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan()
    - nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS
    - nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS
    - accel/ivpu: Fix a typo
    - drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
    - Upstream stable to v6.6.90, v6.12.27, v6.12.28
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37920
    - xsk: Fix race condition in AF_XDP generic RX path
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37900
    - iommu: Fix two issues in iommu_copy_struct_from_user()
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37931
    - btrfs: adjust subpage bit start based on sectorsize
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37903
    - drm/amd/display: Fix slab-use-after-free in hdcp
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37905
    - firmware: arm_scmi: Balance device refcount when destroying devices
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37933
    - octeon_ep: Fix host hang issue during device reboot
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37909
    - net: lan743x: Fix memleak issue when GSO enabled
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37911
    - bnxt_en: Fix out-of-bound memcpy() during ethtool -w
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37935
    - net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37891
    - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37912
    - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37913
    - net_sched: qfq: Fix double list add in class with netem as child qdisc
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37914
    - net_sched: ets: Fix double list add in class with netem as child qdisc
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37915
    - net_sched: drr: Fix double list add in class with netem as child qdisc
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37916
    - pds_core: remove write-after-free of client_id
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37917
    - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx
      poll
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37918
    - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37921
    - vxlan: vnifilter: Fix unlocked deletion of default FDB entry
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37897
    - wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37922
    - book3s64/radix : Align section vmemmap start address to PAGE_SIZE
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37923
    - tracing: Fix oob write in trace_seq_to_buffer()
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37924
    - ksmbd: fix use-after-free in kerberos authentication
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37927
    - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37928
    - dm-bufio: don't schedule in atomic context
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37990
    - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37901
    - irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37936
    - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's
      value.
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37991
    - parisc: Fix double SIGFPE crash
  * Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
    CVE-2025-37930
    - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307)
    - module: sign with sha512 instead of sha1 by default
    - x86/extable: Remove unused fixup type EX_TYPE_COPY
    - tracing: Add __string_len() example
    - tracing: Add __print_dynamic_array() helper
    - soc: qcom: ice: introduce devm_of_qcom_ice_get
    - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
    - auxdisplay: hd44780: Convert to platform remove callback returning void
    - auxdisplay: hd44780: Fix an API misuse in hd44780.c
    - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
    - net: dsa: mv88e6xxx: fix VTU methods for 6320 family
    - ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
    - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
    - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
    - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary
      return value check
    - iio: adc: ad7768-1: Fix conversion result sign
    - arm64: tegra: Remove the Orin NX/Nano suspend key
    - clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
    - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
    - of: resolver: Simplify of_resolve_phandles() using __free()
    - of: resolver: Fix device node refcount leakage in of_resolve_phandles()
    - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
    - cpufreq/sched: Explicitly synchronize limits_changed flag handling
    - ceph: Fix incorrect flush end position calculation
    - dma/contiguous: avoid warning about unused size_bytes
    - cpufreq: cppc: Fix invalid return value in .get() callback
    - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
    - scsi: core: Clear flags for scsi_cmnd that did not complete
    - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
    - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
    - pds_core: Remove unnecessary check in pds_client_adminq_cmd()
    - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
    - splice: remove duplicate noinline from pipe_clear_nowait
    - perf/x86: Fix non-sampling (counting) events on certain x86 platforms
    - LoongArch: Select ARCH_USE_MEMTEST
    - LoongArch: Make regs_irqs_disabled() more clear
    - LoongArch: Make do_xyz() exception handlers more robust
    - virtio_console: fix missing byte order handling for cols and rows
    - crypto: atmel-sha204a - Set hwrng quality to lowest possible
    - net: selftests: initialize TCP header and skb payload with zero
    - net: phy: microchip: force IRQ polling mode for lan88xx
    - drm/amd/display: Fix gpu reset in multidisplay config
    - LoongArch: Return NULL from huge_pte_offset() for invalid PMD
    - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
    - LoongArch: Remove a bogus reference to ZONE_DMA
    - io_uring: fix 'sync' handling of io_fallback_tw()
    - KVM: SVM: Allocate IR data using atomic allocation
    - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
    - ata: libata-scsi: Improve CDL control
    - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
    - ata: libata-scsi: Fix ata_msense_control_ata_feature()
    - USB: storage: quirk for ADATA Portable HDD CH94
    - scsi: Improve CDL control
    - mei: me: add panther lake H DID
    - KVM: x86: Explicitly treat routing entry type changes as changes
    - char: misc: register chrdev region with all possible minors
    - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
    - serial: msm: Configure correct working mode before starting earlycon
    - serial: sifive: lock port in startup()/shutdown() callbacks
    - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
    - USB: serial: option: add Sierra Wireless EM9291
    - USB: serial: simple: add OWON HDS200 series oscilloscope support
    - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
    - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
    - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
    - usb: dwc3: xilinx: Prevent spike in reset signal
    - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
    - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
    - USB: VLI disk crashes if LPM is used
    - USB: wdm: handle IO errors in wdm_wwan_port_start
    - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
    - USB: wdm: add annotation
    - pinctrl: renesas: rza2: Fix potential NULL pointer dereference
    - MIPS: cm: Detect CM quirks from device tree
    - crypto: ccp - Add support for PCI device 0x1134
    - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
    - parisc: PDT: Fix missing prototype warning
    - s390/tty: Fix a potential memory leak bug
    - bpf: bpftool: Setting error code in do_loader()
    - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it
      creates storage
    - bpf: Reject attaching fexit/fmod_ret to __noreturn functions
    - mailbox: pcc: Fix the possible race in updation of chan_in_use flag
    - mailbox: pcc: Always clear the platform ack interrupt first
    - usb: host: max3421-hcd: Add missing spi_device_id table
    - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
    - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
    - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
    - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
    - thunderbolt: Scan retimers after device router has been enumerated
    - objtool: Silence more KCOV warnings
    - objtool, panic: Disable SMAP in __stack_chk_fail()
    - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in
      wcd934x_slim_irq_handler()
    - objtool, regulator: rk808: Remove potential undefined behavior in
      rk806_set_mode_dcdc()
    - objtool, lkdtm: Obfuscate the do_nothing() pointer
    - ntb: reduce stack usage in idt_scan_mws
    - ntb_hw_amd: Add NTB PCI ID for new gen CPU
    - rtc: pcf85063: do a SW reset if POR failed
    - io_uring: always do atomic put from iowq
    - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
    - KVM: s390: Don't use %pK through tracepoints
    - KVM: s390: Don't use %pK through debug printing
    - selftests: ublk: fix test_stripe_04
    - xen: Change xen-acpi-processor dom0 dependency
    - ACPI: EC: Set ec_no_wakeup for Lenovo Go S
    - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
    - nvme: multipath: fix return value of nvme_available_path
    - objtool: Stop UNRET validation on UD2
    - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
    - selftests/mincore: Allow read-ahead pages to reach the end of the file
    - x86/bugs: Use SBPB in write_ibpb() if applicable
    - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
    - x86/bugs: Don't fill RSB on context switch with eIBRS
    - nvmet-fc: take tgtport reference only once
    - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE
      mode
    - timekeeping: Add a lockdep override in tick_freeze()
    - ext4: make block validity check resistent to sb bh corruption
    - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
    - scsi: ufs: exynos: Ensure pre_link() executes before
      exynos_ufs_phy_init()
    - scsi: pm80xx: Set phy_attached to zero when device is gone
    - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
    - iomap: skip unnecessary ifs_block_is_uptodate check
    - riscv: Provide all alternative macros all the time
    - loop: aio inherit the ioprio of original request
    - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
    - spi: tegra210-quad: add rate limiting and simplify timeout error message
    - ubsan: Fix panic from test_ubsan_out_of_bounds
    - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove
      cores
    - x86/pvh: Call C code via the kernel virtual mapping
    - Revert "drivers: core: synchronize really_probe() and dev_uevent()"
    - driver core: introduce device_set_driver() helper
    - comedi: jr3_pci: Fix synchronous deletion of timer
    - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
    - net: dsa: mv88e6xxx: enable PVT for 6321 switch
    - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
    - net: dsa: mv88e6xxx: enable STU methods for 6320 family
    - MIPS: cm: Fix warning if MIPS_CM is disabled
    - objtool: Ignore end-of-section jumps for KCOV/GCOV
    - objtool: Silence more KCOV warnings, part 2
    - ALSA: hda/cirrus_scodec_test: Don't select dependencies
    - ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
    - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
    - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
    - net: ethernet: mtk_eth_soc: reapply mdc divider on reset
    - riscv: Use kvmalloc_array on relocation_hashtable
    - riscv: module: Allocate PLT entries for R_RISCV_PLT32
    - ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START
      event
    - dma-buf/sw_sync: Decrement refcount on error in
      sw_sync_ioctl_get_deadline()
    - mm/compaction: fix bug in hugetlb handling pathway
    - platform/x86: amd: pmf: Fix STT limits
    - drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
    - drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on
      DP1
    - drm/xe/dma_buf: stop relying on placement in unmap
    - drm/amdgpu: fix warning of drm_mm_clean
    - arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
    - arm64/sysreg: Add register fields for HDFGRTR2_EL2
    - arm64/sysreg: Add register fields for HDFGWTR2_EL2
    - arm64/sysreg: Add register fields for HFGITR2_EL2
    - arm64/sysreg: Add register fields for HFGRTR2_EL2
    - arm64/sysreg: Add register fields for HFGWTR2_EL2
    - kbuild: Add '-fno-builtin-wcslen'
    - drm/amd/display: Temporarily disable hostvm on DCN31
    - block: remove rq_list_move
    - bpf: add find_containing_subprog() utility function
    - selftests/bpf: test for changing packet data from global functions
    - selftests/bpf: freplace tests for tracking of changes_packet_data
    - selftests/bpf: validate that tail call invalidates packet pointers
    - selftests/bpf: extend changes_pkt_data with cases w/o subprograms
    - media: i2c: imx214: Use subdev active state
    - media: i2c: imx214: Simplify with dev_err_probe()
    - media: i2c: imx214: Convert to CCI register access helpers
    - media: i2c: imx214: Replace register addresses with macros
    - media: i2c: imx214: Check number of lanes from device tree
    - media: i2c: imx214: Fix link frequency validation
    - scsi: ufs: exynos: Move UFS shareability value to drvdata
    - cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only
    - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
    - vhost-scsi: Add better resource allocation failure handling
    - vhost-scsi: Fix vhost_scsi_send_bad_target()
    - vhost-scsi: Fix vhost_scsi_send_status()
    - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq
    - riscv: Replace function-like macro by static inline function
    - bpf: Add namespace to BPF internal symbols
    - netfilter: fib: avoid lookup if socket is available
    - drm: panel: jd9365da: fix reset signal polarity in unprepare
    - drm/amd/display: Force full update in gpu reset
    - KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
    - firmware: stratix10-svc: Add of_platform_default_populate()
    - i3c: master: svc: Add support for Nuvoton npcm845 i3c
    - 9p/trans_fd: mark concurrent read and writes to p9_conn->err
    - x86/xen: disable CPU idle and frequency drivers for PVH dom0
    - nvmet-fc: put ref when assoc->del_work is already scheduled
    - scsi: ufs: exynos: Move phy calls to .exit() callback
    - ASoC: fsl_asrc_dma: get codec or cpu dai from backend
    - xfs: do not check NEEDSREPAIR if ro,norecovery mount.
    - xfs: Do not allow norecovery mount with quotacheck
    - xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
    - xfs: flush inodegc before swapon
    - selftests/bpf: fix bpf_map_redirect call for cpu map test
    - selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
    - selftests/bpf: check program redirect in xdp_cpumap_attach
    - selftests/bpf: Adjust data size to have ETH_HLEN
    - Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
    - iommu: Handle race with default domain setup
    - media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
    - usb: typec: class: Unlocked on error in typec_register_partner()
    - Upstream stable to v6.6.89, v6.12.25, v6.12.26
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37986
    - usb: typec: class: Invalidate USB device pointers on partner
      unregistration
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37809
    - usb: typec: class: Fix NULL pointer access
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37816
    - mei: vsc: Fix fortify-panic caused by invalid counted_by() use
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37822
    - riscv: uprobes: Add missing fence.i after building the XOL buffer
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37987
    - pds_core: Prevent possible adminq overflow/stuck condition
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37826
    - scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37827
    - btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37977
    - scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37944
    - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37761
    - drm/xe: Fix an out-of-bounds shift when invalidating TLB
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37763
    - drm/imagination: take paired job reference
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37764
    - drm/imagination: fix firmware memory leaks
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37869
    - drm/xe: Use local fence in error path of xe_migrate_clear
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37978
    - block: integrity: Do not call set_page_dirty_lock()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37975
    - riscv: module: Fix out-of-bounds relocation access
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37872
    - net: txgbe: fix memory leak in txgbe_probe() error path
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37873
    - eth: bnxt: fix missing ring index trim on error path
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-22120
    - ext4: goto right label 'out_mmap_sem' in ext4_setattr()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37799
    - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37800
    - driver core: fix potential NULL pointer dereference in dev_uevent()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37878
    - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37803
    - udmabuf: fix a buf size overflow issue during udmabuf creation
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37879
    - 9p/net: fix improper handling of bogus negative read/write replies
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37983
    - qibfs: fix _another_ leak
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37881
    - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37805
    - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37883
    - s390/sclp: Add check for get_zeroed_page()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37884
    - bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37808
    - crypto: null - Use spin lock instead of mutex
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37985
    - USB: wdm: close race between wdm_open and wdm_wwan_port_stop
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37810
    - usb: dwc3: gadget: check that event count does not exceed event buffer
      length
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37811
    - usb: chipidea: ci_hdrc_imx: fix usbmisc handling
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37812
    - usb: cdns3: Fix deadlock when using NCM gadget
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37813
    - usb: xhci: Fix invalid pointer dereference in Etron workaround
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37815
    - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler
      registration
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37885
    - KVM: x86: Reset IRTE to host control if *new* route isn't postable
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37817
    - mcb: fix a double free bug in chameleon_parse_gdd()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37819
    - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37820
    - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37886
    - pds_core: make wait_context part of q_info
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37887
    - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37823
    - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37988
    - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37824
    - tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37989
    - net: phy: leds: fix memory leak
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37828
    - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37829
    - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37830
    - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37831
    - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-37938
    - tracing: Verify event formats that have "%*p.."
  * Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
    CVE-2025-39989
    - x86/mce: use is_copy_from_user() to determine copy-from-user context
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-22026
    - nfsd: don't ignore the return code of svc_proc_register()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37836
    - PCI: Fix reference leak in pci_register_host_bridge()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37846
    - arm64: mops: Do not dereference src reg for a set operation
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37942
    - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37856
    - btrfs: harden block_group::bg_list against list_del() races
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37861
    - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37744
    - wifi: ath12k: fix memory leak in ath12k_pci_remove()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37745
    - PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37945
    - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-
      controlled PHY
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37759
    - ublk: fix handling recovery & reissue in ublk_abort_queue()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23140
    - misc: pci_endpoint_test: Avoid issue of interrupts remaining after
      request_irq error
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-22126
    - md: fix mddev uaf while iterating all_mddevs list
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37765
    - drm/nouveau: prime: fix ttm_bo_delayed_delete oops
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37766
    - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37767
    - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37768
    - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37769
    - drm/amd/pm/smu11: Prevent division by zero
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37770
    - drm/amd/pm/powerplay: Prevent division by zero
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37768 // CVE-2025-37771
    - drm/amd/pm: Prevent division by zero
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37772
    - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37773
    - virtiofs: add filesystem context source name check
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37775
    - ksmbd: fix the warning from __kernel_write_iter
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37778
    - ksmbd: Fix dangling pointer in krb_authenticate
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37863
    - ovl: don't allow datadir only
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37780
    - isofs: Prevent the use of too small fid
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37781
    - i2c: cros-ec-tunnel: defer probe if parent EC is not present
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37979
    - ASoC: qcom: Fix sc7280 lpass potential buffer overflow
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37784
    - net: ti: icss-iep: Fix possible NULL pointer dereference for perout
      request
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37786
    - net: dsa: free routing table on probe failure
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37864
    - net: dsa: clean up FDB, MDB, VLAN entries on unbind
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37865
    - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is
      unsupported
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37787
    - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were
      never registered
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37788
    - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37874
    - net: ngbe: fix memory leak in ngbe_probe() error path
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37789
    - net: openvswitch: fix nested key length validation in the set() action
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37980
    - block: fix resource leak in blk_register_queue() error path
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37790
    - net: mctp: Set SOCK_RCU_FREE
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37875
    - igc: fix PTM cycle trigger logic
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37792
    - Bluetooth: btrtl: Prevent potential NULL dereference
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37867
    - RDMA/core: Silence oversized kvmalloc() warning
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37793
    - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37982
    - wifi: wl1251: fix memory leak in wl1251_tx_work
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37794
    - wifi: mac80211: Purge vif txq in ieee80211_do_stop()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37796
    - wifi: at76c50x: fix use after free access in at76_disconnect
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23141
    - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory
      accesses
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37940
    - ftrace: Add cond_resched() to ftrace_graph_set_hash()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37844
    - cifs: avoid NULL pointer dereference in dbg call
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23142
    - sctp: detect and prevent references to a freed transport in sendmsg
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23144
    - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37892
    - mtd: inftlcore: Add error check for inftl_read_oob()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23145
    - mptcp: fix NULL pointer in can_accept_new_subflow
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23146
    - mfd: ene-kb3930: Fix a potential NULL pointer dereference
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37839
    - jbd2: remove wrong sb->s_sequence check
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23147
    - i3c: Add NULL pointer check in i3c_master_queue_ibi()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23148
    - soc: samsung: exynos-chipid: Add NULL pointer check in
      exynos_chipid_probe()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23149
    - tpm: do not start chip while suspended
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23150
    - ext4: fix off-by-one error in do_split
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23151
    - bus: mhi: host: Fix race between unprepare and queue_buf
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23156
    - media: venus: hfi_parser: refactor hfi packet parsing logic
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23157
    - media: venus: hfi_parser: add check to avoid out of bound access
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37840
    - mtd: rawnand: brcmnand: fix PM resume warning
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37849
    - KVM: arm64: Tear down vGIC on failed vCPU creation
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23158
    - media: venus: hfi: add check to handle incorrect queue size
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23159
    - media: venus: hfi: add a check to handle OOB in sfr region
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23160
    - media: mediatek: vcodec: Fix a resource leak related to the scp device
      in FW initialization
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37850
    - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37851
    - fbdev: omapfb: Add 'plane' value check
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23161
    - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37852
    - drm/amdgpu: handle amdgpu_cgs_create_device() errors in
      amd_powerplay_create()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37853
    - drm/amdkfd: debugfs hang_hws skip GPU with MES
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37854
    - drm/amdkfd: Fix mode1 reset crash issue
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-23163
    - net: vlan: don't propagate flags on open
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37857
    - scsi: st: Fix array overflow in st_setup()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37738
    - ext4: ignore xattrs past end
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37739
    - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37943
    - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37740
    - jfs: add sanity check for agwidth in dbMount
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37741
    - jfs: Prevent copying of nlink with value 0 from disk inode
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37858
    - fs/jfs: Prevent integer overflow in AG size calculation
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37742
    - jfs: Fix uninit-value access of imap allocated in the diMount() function
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37859
    - page_pool: avoid infinite loop to schedule delayed worker
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37862
    - HID: pidff: Fix null pointer dereference in pidff_find_fields
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37841
    - pm: cpupower: bench: Prevent NULL dereference on malloc failure
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37748
    - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37749
    - net: ppp: Add bound checking for skb data on ppp_sync_txmung
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37754
    - drm/i915/huc: Fix fence not released on early probe errors
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37755
    - net: libwx: handle page_pool_dev_alloc_pages error
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37757
    - tipc: fix memory leak in tipc_link_xmit
  * Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
    CVE-2025-37758
    - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  * CVE-2025-37801
    - spi: spi-imx: Add check for spi_imx_setupxfer()
  * CVE-2025-39946
    - tls: make sure to abort the stream if headers are bogus
  * CVE-2025-38584
    - padata: Fix pd UAF once and for all
    - padata: Remove comment for reorder_work
  * CVE-2025-40019
    - crypto: essiv - Check ssize for decryption and in-place encryption
  * CVE-2025-38561
    - ksmbd: fix Preauh_HashValue race condition
  * CVE-2025-39698
    - io_uring/futex: ensure io_futex_wait() cleans up properly on failure

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 28 Jan 2026 10:07:23 -0600

linux-nvidia (6.8.0-1045.48) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1045.48 -proposed tracker (LP: #2138075)

  * QSPI Transfer failed with timeout: 0 (LP: #2126589)
    - Revert "NVIDIA: SAUCE: spi: tegra210-quad: Check hardware status on
      timeout"
    - Revert "NVIDIA: SAUCE: spi: tegra210-quad: Fix timeout handling"
    - spi: tegra210-quad: Fix timeout handling
    - spi: tegra210-quad: Refactor error handling into helper functions
    - spi: tegra210-quad: Check hardware status on timeout

  * backport: "drm/ast: Use msleep instead of mdelay for edid read"
    (LP: #2125667)
    - drm/ast: Use msleep instead of mdelay for edid read

  [ Ubuntu: 6.8.0-94.96 ]

  * noble/linux: 6.8.0-94.96 -proposed tracker (LP: #2138092)
  * CVE-2025-40019
    - crypto: essiv - Check ssize for decryption and in-place encryption
  * CVE-2025-38561
    - ksmbd: fix Preauh_HashValue race condition
  * CVE-2025-39698
    - io_uring/futex: ensure io_futex_wait() cleans up properly on failure

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 20 Jan 2026 16:04:06 -0600

linux-nvidia (6.8.0-1044.47) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1044.47 -proposed tracker (LP: #2131767)

  [ Ubuntu: 6.8.0-90.91 ]

  * noble/linux: 6.8.0-90.91 -proposed tracker (LP: #2131785)
  * cifs: Fix memory leak of a folio every call to cifs_writepages_begin()
    (LP: #2131213)
    - cifs: fix pagecache leak when do writepages

  [ Ubuntu: 6.8.0-89.90 ]

  * noble/linux: 6.8.0-89.90 -proposed tracker (LP: #2131481)
  * CVE-2025-39993
    - media: rc: fix races with imon_disconnect()
  * Audio output fails on internal speakers when using kernel 6.8.0-84 and
    newer. (LP: #2130212)
    - Revert "ASoC: cs35l56: Prevent races when soft-resetting using SPI
      control"
  * i40e driver is triggering VF resets on every link state change
    (LP: #2130552)
    - i40e: avoid redundant VF link state updates
  * CVE-2025-40018
    - ipvs: Defer ip_vs_ftp unregister during netns cleanup
  * CVE-2025-39964
    - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
    - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
  * CVE-2025-37958
    - mm/huge_memory: fix dereferencing invalid pmd migration entry
  * CVE-2025-38666
    - net: appletalk: Fix use-after-free in AARP proxy probe

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 24 Nov 2025 10:22:54 -0600

linux-nvidia (6.8.0-1043.46) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1043.46 -proposed tracker (LP: #2127602)

  * QSPI Transfer failed with timeout: 0 (LP: #2126589)
    - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
    - spi: tegra210-quad: add rate limiting and simplify timeout error message
    - spi: tegra210-quad: modify chip select (CS) deactivation
    - NVIDIA: SAUCE: spi: tegra210-quad: Fix timeout handling
    - NVIDIA: SAUCE: spi: tegra210-quad: Check hardware status on timeout

  [ Ubuntu: 6.8.0-88.89 ]

  * noble/linux: 6.8.0-88.89 -proposed tracker (LP: #2127619)
  *  Enable Xilinx PS UART configs (LP: #2121337)
    - [Config] Enable Xilinx PS UART configs
  * Fix ARL-U/H suspend issues (LP: #2112469)
    - platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core
      driver
    - platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID
  * r8169 can not wake on LAN via SFP moudule (LP: #2123901)
    - r8169: set EEE speed down ratio to 1
  * Add pvpanic kernel modules to linux-modules (LP: #2126659)
    - [Packaging] Add pvpanic kernel modules to linux-modules
  * CVE-2025-21729
    - wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
  * Fix failure to build TDX module (LP: #2126698)
    - x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
  * Ubuntu 24.04.2: error in audit_log_object_context keep printing in the
    kernel and console (LP: #2123815)
    - SAUCE: fix: apparmor4.0.0 [26/90]: LSM stacking v39: Audit: Add record
      for multiple object contexts
  * ensure mptcp keepalives are honored when set (LP: #2125444)
    - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
  * System hangs when running the memory stress test (LP: #2103680)
    - mm: page_alloc: avoid kswapd thrashing due to NUMA restrictions
  * UBUNTU: fan: fail to check kmalloc() return could cause a NULL pointer
    dereference (LP: #2125053)
    - SAUCE: fan: vxlan: check memory allocation for map
  * jammy:linux-riscv-6.8 is FTBFS because of wrong include (LP: #2122592)
    - SAUCE: riscv: KVM: Remove broken include
  * Performance degrades rapidly when spawning more processes to run benchmark
    (LP: #2122006)
    - cpuidle: menu: Avoid discarding useful information
    - cpuidle: governors: menu: Avoid using invalid recent intervals data
  * CVE-2025-38227
    - media: vidtv: Terminating the subsequent process of initialization
      failure
  * CVE-2025-38678
    - netfilter: nf_tables: reject duplicate device on updates
  * CVE-2025-38616
    - tls: handle data disappearing from under the TLS ULP
  * CVE-2025-37838
    - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol
      Driver Due to Race Condition
  * VMSCAPE CVE-2025-40300 (LP: #2124105) // CVE-2025-40300
    - Documentation/hw-vuln: Add VMSCAPE documentation
    - x86/vmscape: Enumerate VMSCAPE bug
    - x86/vmscape: Add conditional IBPB mitigation
    - x86/vmscape: Enable the mitigation
    - x86/bugs: Move cpu_bugs_smt_update() down
    - x86/vmscape: Warn when STIBP is disabled with SMT
    - x86/vmscape: Add old Intel CPUs to affected list
  * VMSCAPE CVE-2025-40300 (LP: #2124105)
    - [Config] Enable MITIGATION_VMSCAPE config
  * CVE-2025-38352
    - posix-cpu-timers: fix race between handle_posix_cpu_timers() and
      posix_cpu_timer_del()
  * CVE-2025-38118
    - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    - Bluetooth: MGMT: Fix sparse errors

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 23 Oct 2025 14:14:22 -0500

linux-nvidia (6.8.0-1042.45) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1042.45 -proposed tracker (LP: #2127419)

  * Packaging resync (LP: #1786013)
    - [Packaging] nvidia: Remove dwarfdump from Build-Depends

  * linux-nvidia: Do not produce linux-modules-extra package (LP: #2121416)
    - NVIDIA: [Packaging] Do not produce modules-extra packages

  [ Ubuntu: 6.8.0-87.88 ]

  * noble/linux: 6.8.0-87.88 -proposed tracker (LP: #2127436)
  * CVE-2025-37838
    - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol
      Driver Due to Race Condition
  * VMSCAPE CVE-2025-40300 (LP: #2124105) // CVE-2025-40300
    - Documentation/hw-vuln: Add VMSCAPE documentation
    - x86/vmscape: Enumerate VMSCAPE bug
    - x86/vmscape: Add conditional IBPB mitigation
    - x86/vmscape: Enable the mitigation
    - x86/bugs: Move cpu_bugs_smt_update() down
    - x86/vmscape: Warn when STIBP is disabled with SMT
    - x86/vmscape: Add old Intel CPUs to affected list
  * VMSCAPE CVE-2025-40300 (LP: #2124105)
    - [Config] Enable MITIGATION_VMSCAPE config
  * CVE-2025-38352
    - posix-cpu-timers: fix race between handle_posix_cpu_timers() and
      posix_cpu_timer_del()
  * CVE-2025-38118
    - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
    - Bluetooth: MGMT: Fix sparse errors

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 14 Oct 2025 15:53:25 -0500

linux-nvidia (6.8.0-1041.44) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1041.44 -proposed tracker (LP: #2125374)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2025.09.15)

  * tegra-i2c: fix reset  (LP: #2122067)
    - i2c: tegra: Fix reset error handling with ACPI
    - i2c: tegra: Use internal reset when reset property is not available

  [ Ubuntu: 6.8.0-86.87 ]

  * noble/linux: 6.8.0-86.87 -proposed tracker (LP: #2125391)
    - Fix FTBS caused by incorrect pick/backport of
      "perf dso: fix dso__is_kallsyms() check"
  * noble ubuntu_ftrace_smoke_test:mmiotrace timeout on aws:r5.metal
    (LP: #2121673)
    - mm: memcg: add NULL check to obj_cgroup_put()
    - memcg: drain obj stock on cpu hotplug teardown
  * [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z
    hardware - perf part (LP: #2103415)
    - perf list: Add IBM z17 event descriptions
  * memory leaks when configuring a small rate limit in audit (LP: #2122554)
    - audit: fix skb leak when audit rate limit is exceeded
  * [UBUNTU 24.04] PAI/NNPA support for new IBM z17 (LP: #2121956)
    - s390/pai: export number of sysfs attribute files
    - s390/pai_crypto: Add support for MSA 10 and 11 pai counters
    - s390/pai_ext: Update PAI extension 1 counters
  * [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
    (LP: #2121150)
    - s390/pci: Allow automatic recovery with minimal driver support
  * [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
    (LP: #2121149)
    - s390/pci: Fix stale function handles in error handling
    - s390/pci: Do not try re-enabling load/store if device is disabled
  * [UBUNTU 24.04] vfio/pci: fix 8-byte PCI loads and stores (LP: #2121146)
    - vfio/pci: Extract duplicated code into macro
    - vfio/pci: Support 8-byte PCI loads and stores
    - vfio/pci: Fix typo in macro to declare accessors
  * x86 systems with PCIe BAR addresses located outside a certain range see
    P2PDMA allocation failures and CUDA initialization errors (LP: #2120209)
    - x86/kaslr: Reduce KASLR entropy on most x86 systems
    - x86/mm/init: Handle the special case of device private pages in
      add_pages(), to not increase max_pfn and trigger
      dma_addressing_limited() bounce buffers
  * sources list generation using dwarfdump takes up to 0.5hr in build process
    (LP: #2104911)
    - [Packaging] Don't generate list of source files
  * [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user
    namespaces (LP: #2121257)
    - apparmor: shift ouid when mediating hard links in userns
    - apparmor: shift uid when mediating af_unix in userns
  * UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16
    (LP: #2119713)
    - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
  * [IdeaPad Slim 5 13ARP10 , 83J2] Microphone on AMD Ryzen 7 7735HS does not
    work (LP: #2102749)
    - ASoC: amd: yc: update quirk data for new Lenovo model
  * Fix compilation failure because of incomplete backport (LP: #2120561)
    - SAUCE: netfilter: ctnetlink: Fix -Wuninitialized in
      ctnetlink_secctx_size()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716)
    - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
    - cpufreq: scpi: compare kHz instead of Hz
    - smack: dont compile ipv6 code unless ipv6 is configured
    - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
    - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald
      Rapids
    - x86/fpu: Fix guest FPU state buffer allocation size
    - x86/fpu: Avoid copying dynamic FP state from init_task in
      arch_dup_task_struct()
    - x86/platform: Only allow CONFIG_EISA for 32-bit
    - [Config] updateconfigs after disabling CONFIG_EISA for amd64
    - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
    - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
    - PM: sleep: Adjust check before setting power.must_resume
    - RISC-V: KVM: Disable the kernel perf counter during configure
    - selinux: Chain up tool resolving errors in install_policy.sh
    - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
    - EDAC/ie31200: Fix the DIMM size mask for several SoCs
    - EDAC/ie31200: Fix the error path order of ie31200_init()
    - PM: sleep: Fix handling devices with direct_complete set on errors
    - lockdep: Don't disable interrupts on RT in
      disable_irq_nosync_lockdep.*()
    - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
    - x86/traps: Make exc_double_fault() consistently noreturn
    - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
    - media: verisilicon: HEVC: Initialize start_bit field
    - media: platform: allgro-dvt: unregister v4l2_device on the error path
    - platform/x86: dell-ddv: Fix temperature calculation
    - ASoC: cs35l41: check the return value from spi_setup()
    - HID: remove superfluous (and wrong) Makefile entry for
      CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
    - dt-bindings: vendor-prefixes: add GOcontroll
    - ALSA: hda/realtek: Always honor no_shutup_pins
    - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio
      compatible
    - drm/bridge: ti-sn65dsi86: Fix multiple instances
    - drm/dp_mst: Fix drm RAD print
    - drm: xlnx: zynqmp: Fix max dma segment size
    - PCI: Use downstream bridges for distributing resources
    - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
    - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
    - drm/msm/dpu: don't use active in atomic_check()
    - drm/msm/dsi: Use existing per-interface slice count in DSC timing
    - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
    - drm/amdkfd: Fix Circular Locking Dependency in
      'svm_range_cpu_invalidate_pagetables'
    - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data
      payload
    - PCI: brcmstb: Use internal register to change link capability
    - PCI: brcmstb: Fix potential premature regulator disabling
    - PCI/portdrv: Only disable pciehp interrupts early when needed
    - drm/amd/display: fix type mismatch in
      CalculateDynamicMetadataParameters()
    - PCI: Remove stray put_device() in pci_register_host_bridge()
    - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
    - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
    - drm/amd/display: avoid NPD when ASIC does not support DMUB
    - PCI: histb: Fix an error handling path in histb_pcie_probe()
    - PCI: pciehp: Don't enable HPIE when resuming in poll mode
    - fbdev: au1100fb: Move a variable assignment behind a null pointer check
    - mdacon: rework dependency list
    - fbdev: sm501fb: Add some geometry checks.
    - clk: amlogic: gxbb: drop incorrect flag on 32k clock
    - crypto: hisilicon/sec2 - fix for aead authsize alignment
    - crypto: hisilicon/sec2 - fix for sec spec check
    - of: property: Increase NR_FWNODE_REFERENCE_ARGS
    - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
    - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
    - selftests/bpf: Fix string read in strncmp benchmark
    - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
    - RDMA/mana_ib: Ensure variable err is initialized
    - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
    - bpf: Use preempt_count() directly in bpf_send_signal_common()
    - lib: 842: Improve error handling in sw842_compress()
    - pinctrl: renesas: rza2: Fix missing of_node_put() call
    - pinctrl: renesas: rzg2l: Fix missing of_node_put() call
    - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
    - RDMA/mlx5: Fix calculation of total invalidated pages
    - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
    - IB/mad: Check available slots before posting receive WRs
    - pinctrl: tegra: Set SFIO mode to Mux Register
    - clk: amlogic: g12b: fix cluster A parent data
    - clk: amlogic: gxbb: drop non existing 32k clock parent
    - selftests/bpf: Select NUMA_NO_NODE to create map
    - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
    - clk: amlogic: g12a: fix mmc A peripheral clock
    - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
    - power: supply: max77693: Fix wrong conversion of charge input threshold
      value
    - crypto: nx - Fix uninitialised hv_nxc on error
    - pinctrl: renesas: rzv2m: Fix missing of_node_put() call
    - mfd: sm501: Switch to BIT() to mitigate integer overflows
    - leds: Fix LED_OFF brightness race
    - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to
      misplaced assignment
    - crypto: hisilicon/sec2 - fix for aead auth key length
    - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
    - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
    - perf stat: Fix find_stat for mixed legacy/non-legacy events
    - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
    - soundwire: slave: fix an OF node reference leak in soundwire slave
      device
    - coresight: catu: Fix number of pages while using 64k pages
    - coresight-etm4x: add isb() before reading the TRCSTATR
    - perf pmu: Don't double count common sysfs and json events
    - ucsi_ccg: Don't show failed to get FW build information error
    - iio: accel: mma8452: Ensure error return on failure to matching
      oversampling ratio
    - iio: accel: msa311: Fix failure to release runtime pm if direct mode
      claim fails.
    - perf arm-spe: Fix load-store operation checking
    - perf bench: Fix perf bench syscall loop count
    - usb: xhci: correct debug message page size calculation
    - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
    - iio: adc: ad4130: Fix comparison of channel setups
    - iio: adc: ad7124: Fix comparison of channel configs
    - perf evlist: Add success path to evlist__create_syswide_maps
    - perf units: Fix insufficient array space
    - kernel/events/uprobes: handle device-exclusive entries correctly in
      __replace_page()
    - kexec: initialize ELF lowest address to ULONG_MAX
    - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
    - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
    - fuse: fix dax truncate/punch_hole fault path
    - selftests/mm/cow: fix the incorrect error handling
    - um: remove copy_from_kernel_nofault_allowed
    - um: hostfs: avoid issues on inode number reuse by host
    - i3c: master: svc: Fix missing the IBI rules
    - perf python: Fixup description of sample.id event member
    - perf python: Decrement the refcount of just created event on failure
    - perf python: Don't keep a raw_data pointer to consumed ring buffer space
    - perf python: Check if there is space to copy all the event
    - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
    - tty: n_tty: use uint for space returned by tty_write_room()
    - fs/procfs: fix the comment above proc_pid_wchan()
    - perf tools: annotate asm_pure_loop.S
    - NFS: Shut down the nfs_client only after all the superblocks
    - exfat: fix the infinite loop in exfat_find_last_cluster()
    - ksmbd: fix multichannel connection failure
    - net/mlx5e: SHAMPO, Make reserved size independent of page size
    - ring-buffer: Fix bytes_dropped calculation issue
    - objtool: Fix segfault in ignore_unreachable_insn()
    - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
    - LoongArch: Rework the arch_kgdb_breakpoint() implementation
    - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states
      are invalid
    - octeontx2-af: Fix mbox INTR handler when num VFs > 64
    - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
    - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
    - sched/smt: Always inline sched_smt_active()
    - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
    - rcu-tasks: Always inline rcu_irq_work_resched()
    - wifi: iwlwifi: fw: allocate chained SG tables for dump
    - wifi: iwlwifi: mvm: use the right version of the rate API
    - nvme-tcp: fix possible UAF in nvme_tcp_poll
    - nvme-pci: clean up CMBMSC when registering CMB fails
    - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
    - wifi: brcmfmac: keep power during suspend if board requires it
    - affs: generate OFS sequence numbers starting at 1
    - affs: don't write overlarge OFS data block size fields
    - ALSA: hda/realtek: Fix Asus Z13 2025 audio
    - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
    - perf/core: Fix perf_pmu_register() vs. perf_init_event()
    - cifs: fix incorrect validation for num_aces field of smb_acl
    - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4
      tablet
    - platform/x86/intel/vsec: Add Diamond Rapids support
    - HID: i2c-hid: improve i2c_hid_get_report error message
    - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using
      CS35L41 HDA
    - sched/deadline: Use online cpus for validating runtime
    - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
    - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED
      state
    - locking/semaphore: Use wake_q to wake up processes outside lock critical
      section
    - x86/hyperv: Fix output argument to hypercall that changes page
      visibility
    - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
    - nvme-pci: fix stuck reset on concurrent DPC and HP
    - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
    - can: statistics: use atomic access in hot path
    - memory: omap-gpmc: drop no compatible check
    - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
    - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
      make_call_ra
    - ntb: intel: Fix using link status DB's
    - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
    - RISC-V: errata: Use medany for relocatable builds
    - x86/uaccess: Improve performance by aligning writes to 8 bytes in
      copy_user_generic(), on non-FSRM/ERMS CPUs
    - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
    - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
    - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic
      sets only
    - vsock: avoid timeout during connect() if the socket is closing
    - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
    - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
    - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
    - ipv6: Start path selection from the first nexthop
    - ipv6: Do not consider link down nexthops in path selection
    - drm/amdgpu/gfx11: fix num_mec
    - perf/core: Fix child_total_time_enabled accounting bug at task exit
    - tracing: Switch trace_events_hist.c code over to use guard()
    - tracing/hist: Add poll(POLLIN) support on hist file
    - tracing/hist: Support POLLPRI event for poll on histogram
    - tracing: Correct the refcount if the hist/hist_debug file fails to open
    - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
    - LoongArch: BPF: Fix off-by-one error in build_prologue()
    - LoongArch: BPF: Don't override subprog's return value
    - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
    - x86/hyperv: Fix check of return value from snp_set_vmsa()
    - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
    - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
    - platform/x86: ISST: Correct command storage data length
    - ntb_perf: Delete duplicate dmaengine_unmap_put() call in
      perf_copy_chunk()
    - perf/x86/intel: Apply static call for drain_pebs
    - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
    - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
    - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
    - mmc: omap: Fix memory leak in mmc_omap_new_slot
    - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
    - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
    - tracing: Ensure module defining synth event cannot be unloaded while
      tracing
    - tracing: Fix synth event printk format for str fields
    - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
    - ext4: don't over-report free space or inodes in statvfs
    - jfs: add index corruption check to DT_GETPAGE()
    - exec: fix the racy usage of fs_struct->in_exec
    - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
    - tracing: Do not use PERF enums when perf is not defined
    - smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label
    - sched: Cancel the slice protection of the idle entity
    - cpufreq: tegra194: Allow building for Tegra234
    - kunit/stackinit: Use fill byte different from Clang i386 pattern
    - watchdog/hardlockup/perf: Fix perf_event memory leak
    - x86/entry: Add __init to ia32_emulation_override_cmdline()
    - regulator: pca9450: Fix enable register for LDO5
    - auxdisplay: panel: Fix an API misuse in panel.c
    - ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry
    - drm/ssd130x: Set SPI .id_table to prevent an SPI core warning
    - drm/ssd130x: fix ssd132x encoding
    - drm/ssd130x: ensure ssd132x pitch is correct
    - gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines
    - drm/panel: ilitek-ili9882t: fix GPIO name in error message
    - drm/msm/dsi/phy: Program clock inverters in correct register
    - PCI: brcmstb: Set generation limit before PCIe link up
    - drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump
    - powerpc/kexec: fix physical address calculation in clear_utlb_entry()
    - drm/mediatek: Fix config_updating flag never false when no mbox channel
    - PCI: dwc: ep: Return -ENOMEM for allocation failures
    - PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functions
    - PCI: Fix BAR resizing when VF BARs are assigned
    - dummycon: fix default rows/cols
    - crypto: iaa - Test the correct request flag
    - crypto: qat - set parity error mask for qat_420xx
    - pinctrl: renesas: rzg2l: Suppress binding attributes
    - clk: renesas: r8a08g045: Check the source of the CPU PLL settings
    - remoteproc: qcom: pas: add minidump_id to SC7280 WPSS
    - pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw()
    - s390: Remove ioremap_wt() and pgprot_writethrough()
    - clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK
    - RDMA/mlx5: Fix MR cache initialization error flow
    - power: supply: bq27xxx_battery: do not update cached flags prematurely
    - pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment
    - crypto: qat - remove access to parity register for QAT GEN4
    - clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable()
    - perf report: Switch data file correctly in TUI
    - perf debug: Avoid stack overflow in recursive error message
    - NFSv4: Avoid unnecessary scans of filesystems for returning delegations
    - NFSv4: Avoid unnecessary scans of filesystems for expired delegations
    - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations
    - um: Pass the correct Rust target and options with gcc
    - perf dso: fix dso__is_kallsyms() check
    - staging: vchiq_arm: Register debugfs after cdev
    - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation
    - LoongArch: Fix device node refcount leak in fdt_cpu_clk_init()
    - net: phy: broadcom: Correct BCM5221 PHY model detection
    - wifi: mac80211: Cleanup sta TXQs on flush
    - wifi: mac80211: remove debugfs dir for virtual monitor
    - smb: common: change the data type of num_aces to le16
    - platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-
      TA
    - exfat: add a check for invalid data size
    - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41
      HDA
    - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using
      CS35L41 HDA
    - wifi: mac80211: fix SA Query processing in MLO
    - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator
    - riscv/purgatory: 4B align purgatory_start
    - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
    - spi: bcm2835: Do not call gpiod_put() on invalid descriptor
    - spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent
    - kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally
    - tty: serial: fsl_lpuart: Use u32 and u8 for register variables
    - tty: serial: fsl_lpuart: use port struct directly to simply code
    - tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning
    - tty: serial: lpuart: only disable CTS instead of overwriting the whole
      UARTMODIR register
    - wifi: mac80211: Fix sparse warning for monitor_sdata
    - LoongArch: Increase MAX_IO_PICS up to 8
    - x86/tdx: Fix arch_safe_halt() execution for TDX VMs
    - x86/Kconfig: Add cmpxchg8b support back to Geode CPUs
    - wifi: mt76: mt7925: remove unused acpi function for clc
    - media: omap3isp: Handle ARM dma_iommu_mapping
    - Remove unnecessary firmware version check for gc v9_4_2
    - exfat: fix potential wrong error return from get_block
    - media: subdev: Fix use of sd->enabled_streams in call_s_stream()
    - media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
    - media: subdev: Add v4l2_subdev_is_streaming()
    - NFSD: nfsd_unlink() clobbers non-zero status returned from
      fh_fill_pre_attrs()
    - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory
    - platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc()
    - Upstream stable to v6.6.87, v6.12.23
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22028
    - media: vimc: skip .s_stream() for stopped entities
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22036
    - exfat: fix random stack corruption after get_block
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22039
    - ksmbd: fix overflow in dacloffset bounds check
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22062
    - sctp: add mutual exclusion in proc_sctp_do_udp_port()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22065
    - idpf: fix adapter NULL pointer dereference on reboot
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22068
    - ublk: make sure ubq->canceling is set when queue is frozen
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22070
    - fs/9p: fix NULL pointer dereference on mkdir
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-40114
    - iio: light: Add check for array bounds in veml6075_read_int_time_ms
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22025
    - nfsd: put dl_stid if fail to queue dl_recall
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22027
    - media: streamzap: fix race between device disconnection and urb callback
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-39735
    - jfs: fix slab-out-of-bounds read in ea_get()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22033
    - arm64: Don't call NULL in do_compat_alignment_fixup()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22035
    - tracing: Fix use-after-free in print_graph_function_flags during tracer
      switching
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22038
    - ksmbd: validate zero num_subauth before sub_auth is accessed
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22040
    - ksmbd: fix session use-after-free in multichannel connection
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22041
    - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22042
    - ksmbd: add bounds check for create lease context
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22044
    - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22045
    - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22050
    - usbnet:fix NPE during rx_complete
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22053
    - net: ibmveth: make veth_pool_store stop hanging
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22054
    - arcnet: Add NULL check in com20020pci_probe()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22055
    - net: fix geneve_opt length integer overflow
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22056
    - netfilter: nft_tunnel: fix geneve_opt type confusion addition
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22057
    - net: decrease cached dst counters in dst_release
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22058
    - udp: Fix memory accounting leak.
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22060
    - net: mvpp2: Prevent parser TCAM memory corruption
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-38637
    - net_sched: skbprio: Remove overly strict queue assertions
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22063
    - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22064
    - netfilter: nf_tables: don't unregister hook when table is dormant
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22066
    - ASoC: imx-card: Add NULL check in imx_card_probe()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2023-53034
    - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22071
    - spufs: fix a leak in spufs_create_context()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22072
    - spufs: fix gang directory lifetimes
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22073
    - spufs: fix a leak on spufs_new_file() failure
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-38575
    - ksmbd: use aead_request_free to match aead_request_alloc
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22075
    - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-37937
    - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22079
    - ocfs2: validate l_tree_depth to avoid out-of-bounds access
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22080
    - fs/ntfs3: Prevent integer overflow in hdr_first_de()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22081
    - fs/ntfs3: Fix a couple integer overflows on 32bit systems
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22083
    - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22086
    - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22089
    - RDMA/core: Don't expose hw_counters outside of init net namespace
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-39728
    - clk: samsung: Fix UBSAN panic in samsung_clk_init()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22090
    - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-38152
    - remoteproc: core: Clear table_sz when rproc_shutdown
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-38240
    - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22095
    - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-22097
    - drm/vkms: Fix use after free and double free on init error
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-23136
    - thermal: int340x: Add NULL check for adev
  * Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
    CVE-2025-23138
    - watch_queue: fix pipe accounting mismatch
  * Noble update: upstream stable patchset 2025-08-18 (LP: #2120877)
    - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
    - HID: hid-plantronics: Add mic mute mapping and generalize quirks
    - atm: Fix NULL pointer dereference
    - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
    - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
    - ARM: Remove address checking for MMUless devices
    - drm/dp_mst: Factor out function to queue a topology probe work
    - drm/dp_mst: Add a helper to queue a topology probe
    - drm/amd/display: Don't write DP_MSTM_CTRL after LT
    - mm/page_alloc: fix memory accept before watermarks gets initialized
    - netfilter: socket: Lookup orig tuple for IPv6 SNAT
    - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
    - counter: stm32-lptimer-cnt: fix error handling when enabling
    - counter: microchip-tcb-capture: Fix undefined counter channel state on
      probe
    - tty: serial: 8250: Add some more device IDs
    - tty: serial: 8250: Add Brainboxes XC devices
    - tty: serial: fsl_lpuart: disable transmitter before changing RS485
      related registers
    - net: usb: qmi_wwan: add Telit Cinterion FN990B composition
    - net: usb: qmi_wwan: add Telit Cinterion FE990B composition
    - net: usb: usbnet: restore usb%d name exception for local mac addresses
    - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
    - nfsd: fix legacy client tracking initialization
    - tty: serial: 8250: Add some more device IDs
    - tty: serial: 8250: Add Brainboxes XC devices
    - perf tools: Fix up some comments and code to properly use the
      event_source bus
    - bcachefs: bch2_ioctl_subvolume_destroy() fixes
    - Upstream stable to v6.6.86, v6.12.22
  * CVE-2025-39682
    - tls: fix handling of zero-length records on the rx_list
  * CVE-2025-38500
    - xfrm: interface: fix use-after-free after changing collect_md xfrm
      interface
  * TLS socket disconnection causes various issues (LP: #2120516) //
    CVE-2025-37756
    - net: tls: explicitly disallow disconnect
  * CVE-2025-38477
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate
    - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
      qfq_delete_class
  * CVE-2025-38618
    - vsock: Do not allow binding to VMADDR_PORT_ANY
  * CVE-2025-38617
    - net/packet: fix a race in packet_set_ring() and packet_notifier()
  * CVE-2025-37785
    - ext4: fix OOB read when checking dotdot dir
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 29 Sep 2025 18:22:05 -0500

linux-nvidia (6.8.0-1040.43) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1040.43 -proposed tracker (LP: #2125093)

  [ Ubuntu: 6.8.0-85.85 ]

  * noble/linux: 6.8.0-85.85 -proposed tracker (LP: #2125109)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
  * CVE-2025-38500
    - xfrm: interface: fix use-after-free after changing collect_md xfrm
      interface
  * TLS socket disconnection causes various issues (LP: #2120516) //
    CVE-2025-37756
    - net: tls: explicitly disallow disconnect
  * CVE-2025-38477
    - net/sched: sch_qfq: Fix race condition on qfq_aggregate
    - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
      qfq_delete_class
  * CVE-2025-38618
    - vsock: Do not allow binding to VMADDR_PORT_ANY
  * CVE-2025-38617
    - net/packet: fix a race in packet_set_ring() and packet_notifier()
  * CVE-2025-37785
    - ext4: fix OOB read when checking dotdot dir

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 19 Sep 2025 16:06:38 -0500

linux-nvidia (6.8.0-1039.42) noble; urgency=medium

  [ Ubuntu: 6.8.0-84.84 ]

  * Linux refcount imbalance in af_unix subsystem (LP: #2121515)
    - SAUCE: af_unix: Fix GC compatibility with upstream OOB refcount changes

 -- Stefan Bader <stefan.bader@canonical.com>  Tue, 09 Sep 2025 09:07:34 +0200

linux-nvidia (6.8.0-1037.40) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1037.40 -proposed tracker (LP: #2120024)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2025.08.11)

  * Pull-request for setting CPU frequency gov to performance (LP: #2028576)
    - [Config] nvidia: Use performance CPU frequency governor on amd64

  * Set CONFIG_IOMMU_DEFAULT_DMA_LAZY as default for Nvidia CPUs
    (LP: #2119661)
    - [Config] nvidia: Update annotations to set CONFIG_IOMMU_DEFAULT_DMA_LAZY

  [ Ubuntu: 6.8.0-81.81 ]

  * noble/linux: 6.8.0-81.81 -proposed tracker (LP: #2121671)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.08.11)
  * nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
    - SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme
  * No IP Address assigned after hot-plugging Ethernet cable on HP Platform
    (LP: #2115393)
    - Revert "e1000e: change k1 configuration on MTP and later platforms"
  * minimal kernel lacks modules for blk disk in arm64 openstack environments
    where config_drive is required (LP: #2118499)
    - [Config] Enable SYM53C8XX_2 on arm64
  * rcu: Eliminate deadlocks involving do_exit() and RCU tasks (LP: #2117123)
    - rcu-tasks: Initialize callback lists at rcu_init() time
    - rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
    - rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
    - rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
  * BPF header file in wrong location (LP: #2118965)
    - [Packaging] Install bpf header to correct location
  * i915: support ARL-H gpu (LP: #2117716)
    - drm/i915: Add additional ARL PCI IDs
    - drm/i915/mtl: Add fake PCH for Meteor Lake
    - drm/i915/mtl: Wake GT before sending H2G message
    - drm/i915/xelpg: Add workaround 14019877138
    - drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
    - drm/i915/display: correct dual pps handling for MTL_PCH+
  * Ubuntu 24.04.2: NULL pointer dereference with Ceph and selinux
    (LP: #2115447)
    - SAUCE: fs/ceph, selinux: fix NULL pointer dereference on CephFS write
      with SELinux in permissive mode
  * Noble update: upstream stable patchset 2025-08-04 (LP: #2119458)
    - clockevents/drivers/i8253: Fix stop sequence for timer 0
    - sched/isolation: Prevent boot crash when the boot CPU is nohz_full
    - hrtimer: Use and report correct timerslack values for realtime tasks
    - mm: add nommu variant of vm_insert_pages()
    - io_uring: get rid of remap_pfn_range() for mapping rings/sqes
    - io_uring: don't attempt to mmap larger than what the user asks for
    - io_uring: fix corner case forgetting to vunmap
    - io_uring: use vmap() for ring mapping
    - io_uring: unify io_pin_pages()
    - io_uring/kbuf: vmap pinned buffer ring
    - io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
    - io_uring: use unpin_user_pages() where appropriate
    - io_uring: fix error pbuf checking
    - rust: Disallow BTF generation with Rust + LTO
    - rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
      `Option<KBox<T>>`
    - lib/buildid: Handle memfd_secret() files in build_id_parse()
    - mm: split critical region in remap_file_pages() and invoke LSMs in
      between
    - stmmac: loongson: Pass correct arg to PCI function
    - rust: lockdep: Remove support for dynamically allocated LockClassKeys
    - netfilter: nf_tables: allow clone callbacks to sleep
    - drm/amd/display: should support dmub hw lock on Replay
    - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
    - KVM: arm64: Calculate cptr_el2 traps on activating traps
    - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
    - KVM: arm64: Remove host FPSIMD saving for non-protected KVM
    - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
    - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
    - KVM: arm64: Refactor exit handlers
    - KVM: arm64: Eagerly switch ZCR_EL{1,2}
    - Revert "sched/core: Reduce cost of sched_move_task when config
      autogroup"
    - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version
      8
    - netfilter: nft_counter: Use u64_stats_t for statistic.
    - firmware: imx-scu: fix OF node leak in .probe()
    - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
    - arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
    - xfrm: fix tunnel mode TX datapath in packet offload mode
    - xfrm_output: Force software GSO only in tunnel mode
    - soc: imx8m: Remove global soc_uid
    - soc: imx8m: Use devm_* to simplify probe failure handling
    - soc: imx8m: Unregister cpufreq and soc dev in cleanup path
    - ARM: dts: bcm2711: Fix xHCI power-domain
    - ARM: dts: bcm2711: PL011 UARTs are actually r1p5
    - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
    - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
    - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
    - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
    - ARM: dts: bcm2711: Don't mark timer regs unconfigured
    - dma-mapping: fix missing clear bdr in check_ram_in_range_map()
    - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
    - RDMA/hns: Fix soft lockup during bt pages loop
    - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
    - RDMA/hns: Fix a missing rollback in error path of
      hns_roce_create_qp_common()
    - RDMA/hns: Fix missing xa_destroy()
    - RDMA/hns: Fix wrong value of max_sge_rd
    - Bluetooth: Fix error code in chan_alloc_skb_cb()
    - Bluetooth: hci_event: Fix connection regression between LE and non-LE
      adapters
    - accel/qaic: Fix possible data corruption in BOs > 2G
    - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
    - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
    - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
    - devlink: fix xa_alloc_cyclic() error handling
    - dpll: fix xa_alloc_cyclic() error handling
    - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
    - net: atm: fix use after free in lec_send()
    - net: lwtunnel: fix recursion loops
    - net: ipv6: ioam6: fix lwtunnel_output() loop
    - libfs: Fix duplicate directory entry in offset_dir_lookup
    - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
    - i2c: omap: fix IRQ storms
    - net: mana: Support holes in device list reply msg
    - can: rcar_canfd: Fix page entries in the AFL list
    - can: ucan: fix out of bound read in strscpy() source
    - can: flexcan: only change CAN state when link up in system PM
    - can: flexcan: disable transceiver during system PM
    - drm/xe: Fix exporting xe buffers multiple times
    - drm/v3d: Don't run jobs that have errors flagged in its fence
    - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function
      definitions
    - regulator: dummy: force synchronous probing
    - regulator: check that dummy regulator has been probed before using it
    - accel/qaic: Fix integer overflow in qaic_validate_req()
    - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to
      sound card
    - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to
      sound card
    - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
    - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
    - mmc: atmel-mci: Add missing clk_disable_unprepare()
    - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
    - mm/migrate: fix shmem xarray update during migration
    - proc: fix UAF in proc_get_inode()
    - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
    - ARM: shmobile: smp: Enforce shmobile_smp_* alignment
    - efi/libstub: Avoid physical address 0x0 when doing random allocation
    - xsk: fix an integer overflow in xp_create_and_assign_umem()
    - batman-adv: Ignore own maximum aggregation size during RX
    - soc: qcom: pdr: Fix the potential deadlock
    - pmdomain: amlogic: fix T7 ISP secpower
    - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
    - drm/sched: Fix fence reference count leak
    - drm/amd/display: Fix message for support_edp0_on_dp1
    - drm/amd/pm: add unique_id for gfx12
    - drm/amdgpu: Remove JPEG from vega and carrizo video caps
    - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
    - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
    - ksmbd: fix incorrect validation for num_aces field of smb_acl
    - KVM: arm64: Mark some header functions as inline
    - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
    - mptcp: Fix data stream corruption in the address announcement
    - net: lwtunnel: disable BHs when required
    - Upstream stable to v6.6.84, v6.6.85, v6.12.21
  * Noble update: upstream stable patchset 2025-07-28 (LP: #2118927)
    - drm/i915/xe2lpd: Move D2D enable/disable
    - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
    - ibmvnic: Perform tx CSO during send scrq direct
    - ibmvnic: Inspect header requirements before using scrq direct
    - drm/amdgpu: Check extended configuration space register when system uses
      large bar
    - drm/amdgpu: disable BAR resize on Dell G5 SE
    - net: enetc: Remove setting of RX software timestamp
    - net: enetc: Replace ifdef with IS_ENABLED
    - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
    - NFS: O_DIRECT writes must check and adjust the file length
    - riscv: cacheinfo: remove the useless input parameter (node) of
      ci_leaf_init()
    - riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
    - riscv: Prevent a bad reference count on CPU nodes
    - riscv: cacheinfo: Use of_property_present() for non-boolean properties
    - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
    - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
    - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
    - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
    - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
    - x86/boot: Sanitize boot params before parsing command line
    - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
    - pinctrl: bcm281xx: Fix incorrect regmap max_registers value
    - pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
    - netfilter: nft_ct: Use __refcount_inc() for per-CPU
      nft_ct_pcpu_template.
    - ice: fix memory leak in aRFS after reset
    - netfilter: nf_conncount: garbage collection is not skipped when jiffies
      wrap around
    - netfilter: nf_tables: make destruction work queue pernet
    - sched: address a potential NULL pointer dereference in the GRED
      scheduler.
    - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
    - wifi: mac80211: don't queue sdata::work for a non-running sdata
    - wifi: cfg80211: cancel wiphy_work before freeing wiphy
    - Bluetooth: hci_event: Fix enabling passive scanning
    - net/mlx5: Fill out devlink dev info only for PFs
    - net: dsa: mv88e6xxx: Verify after ATU Load ops
    - net: mctp i3c: Copy headers if cloned
    - net: mctp i2c: Copy headers if cloned
    - netpoll: hold rcu read lock in __netpoll_send_skb()
    - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
    - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
    - fbdev: hyperv_fb: Simplify hvfb_putmem
    - fbdev: hyperv_fb: Allow graceful removal of framebuffer
    - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
    - net/mlx5: handle errors in mlx5_chains_create_table()
    - eth: bnxt: fix truesize for mb-xdp-pass case
    - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
    - net: switchdev: Convert blocking notification chain to a raw one
    - net: mctp: unshare packets when reassembling
    - bonding: fix incorrect MAC address setting to receive NS messages
    - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
      insert_tree()
    - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
    - netfilter: nft_exthdr: fix offset with ipv4_find_option()
    - net: openvswitch: remove misbehaving actions length check
    - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
    - net/mlx5: Bridge, fix the crash caused by LAG state check
    - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed
      devices
    - nvme-fc: go straight to connecting state when initializing
    - nvme-fc: do not ignore connectivity loss during connecting
    - hrtimers: Mark is_migration_base() with __always_inline
    - powercap: call put_device() on an error path in
      powercap_register_control_type()
    - futex: Pass in task to futex_queue()
    - sched/debug: Provide slice length for fair tasks
    - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
    - scsi: core: Use GFP_NOIO to avoid circular locking dependency
    - scsi: ufs: core: Fix error return with query response
    - scsi: qla1280: Fix kernel oops when debug level > 2
    - ACPI: resource: IRQ override for Eluktronics MECH-17
    - smb: client: fix noisy when tree connecting to DFS interlink targets
    - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
    - vboxsf: fix building with GCC 15
    - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
    - HID: intel-ish-hid: Send clock sync message immediately after reset
    - HID: ignore non-functional sensor in HP 5MP Camera
    - HID: hid-steam: Fix issues with disabling both gamepad mode and lizard
      mode
    - usb: phy: generic: Use proper helper for property detection
    - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
    - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
    - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
    - objtool: Ignore dangling jump table entries
    - sched: Clarify wake_up_q()'s write to task->wake_q.next
    - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
    - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
    - platform/x86: int3472: Use str_high_low()
    - platform/x86: int3472: Use GPIO_LOOKUP() macro
    - platform/x86: int3472: Use correct type for "polarity", call it
      gpio_flags
    - platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
    - s390/cio: Fix CHPID "configure" attribute caching
    - thermal/cpufreq_cooling: Remove structure member documentation
    - LoongArch: KVM: Set host with kernel mode when switch to VM mode
    - arm64: amu: Delay allocating cpumask for AMU FIE support
    - Xen/swiotlb: mark xen_swiotlb_fixup() __init
    - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
    - selftests/bpf: Fix invalid flag of recv()
    - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
    - ASoC: simple-card-utils.c: add missing dlc->of_node
    - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
    - ASoC: rsnd: indicate unsupported clock rate
    - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
    - ASoC: rsnd: adjust convert rate limitation
    - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
    - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
    - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
    - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
    - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
    - io-wq: backoff when retrying worker creation
    - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
    - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
    - apple-nvme: Release power domains when probe fails
    - cifs: Treat unhandled directory name surrogate reparse points as mount
      directory nodes
    - sctp: Fix undefined behavior in left shift operation
    - nvme: only allow entering LIVE from CONNECTING state
    - phy: ti: gmii-sel: Simplify with dev_err_probe()
    - phy: ti: gmii-sel: Do not use syscon helper to build regmap
    - ASoC: tas2770: Fix volume scale
    - ASoC: tas2764: Fix power control mask
    - ASoC: tas2764: Set the SDOUT polarity correctly
    - fuse: don't truncate cached, mutated symlink
    - drm/vkms: Round fixp2int conversion in lerp_u16
    - perf/x86/intel: Use better start period for frequency mode
    - x86/irq: Define trace events conditionally
    - mptcp: safety check before fallback
    - drm/nouveau: Do not override forced connector status
    - net: Handle napi_schedule() calls from non-interrupt
    - block: fix 'kmem_cache of name 'bio-108' already exists'
    - cifs: Validate content of WSL reparse point buffers
    - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
      parse_reparse_point()
    - Input: ads7846 - fix gpiod allocation
    - Input: iqs7222 - preserve system status register
    - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE
      controllers
    - Input: xpad - add multiple supported devices
    - Input: xpad - add support for ZOTAC Gaming Zone
    - Input: xpad - add support for TECNO Pocket Go
    - Input: xpad - rename QH controller to Legion Go S
    - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
    - Input: i8042 - add required quirks for missing old boardnames
    - Input: i8042 - swap old quirk combination with new quirk for several
      devices
    - Input: i8042 - swap old quirk combination with new quirk for more
      devices
    - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
    - USB: serial: option: add Telit Cinterion FE990B compositions
    - USB: serial: option: fix Telit Cinterion FE990A name
    - USB: serial: option: match on interface class for Telit FN990B
    - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
    - drm/i915/cdclk: Do cdclk post plane programming later
    - drm/atomic: Filter out redundant DPMS calls
    - drm/dp_mst: Fix locking when skipping CSN before topology probing
    - drm/amd/amdkfd: Evict all queues even HWS remove queue failed
    - drm/amd/display: Disable unneeded hpd interrupts during dm_init
    - drm/amd/display: Restore correct backlight brightness after a GPU reset
    - drm/amd/display: Assign normalized_pix_clk when color depth = 14
    - drm/amd/display: Fix slab-use-after-free on hdcp_work
    - ksmbd: fix use-after-free in ksmbd_free_work_struct
    - ksmbd: prevent connection release during oplock break notification
    - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
    - clk: samsung: gs101: fix synchronous external abort in
      samsung_clk_save()
    - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
    - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
    - arm64: mm: Populate vmemmap at the page level if not section aligned
    - Fix mmu notifiers for range-based invalidates
    - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
    - smb: client: fix regression with guest option
    - net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
    - net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
    - ASoC: ops: Consistently treat platform_max as control value
    - rust: error: add missing newline to pr_warn! calls
    - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
    - ASoC: cs42l43: Fix maximum ADC Volume
    - rust: init: add missing newline to pr_info! calls
    - ASoC: rt722-sdca: add missing readable registers
    - drm/xe: cancel pending job timer before freeing scheduler
    - drm/xe: Release guc ids before cancelling work
    - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
    - scripts: generate_rust_analyzer: add missing macros deps
    - scripts: generate_rust_analyzer: add missing include_dirs
    - scripts: generate_rust_analyzer: add uapi crate
    - cifs: Fix integer overflow while processing acregmax mount option
    - cifs: Fix integer overflow while processing acdirmax mount option
    - cifs: Fix integer overflow while processing actimeo mount option
    - cifs: Fix integer overflow while processing closetimeo mount option
    - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
      hypervisors
    - i2c: ali1535: Fix an error handling path in ali1535_probe()
    - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
    - i2c: sis630: Fix an error handling path in sis630_probe()
    - mm/hugetlb: wait for hugetlb folios to be freed
    - smb3: add support for IAKerb
    - smb: client: Fix match_session bug preventing session reuse
    - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
    - nvme-fc: rely on state transitions to handle connectivity loss
    - HID: apple: disable Fn key handling on the Omoton KB066
    - Input: xpad - fix two controller table values
    - cifs: Ensure that all non-client-specific reparse points are processed
      by the server
    - wifi: cfg80211: init wiphy_work before allocating rfkill fails
    - ksmbd: fix r_count dec/increment mismatch
    - nvme: unblock ctrl state transition for firmware update
    - Upstream stable to v6.6.83, v6.12.20
  * Noble update: upstream stable patchset 2025-07-22 (LP: #2117533)
    - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
    - gpio: vf610: use generic device_get_match_data()
    - gpio: vf610: add locking to gpio direction functions
    - cifs: Remove symlink member from cifs_open_info_data union
    - smb311: failure to open files of length 1040 when mounting with SMB3.1.1
      POSIX extensions
    - btrfs: fix data overwriting bug during buffered write when block size <
      page size
    - x86/microcode/AMD: Add some forgotten models to the SHA check
    - rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
    - rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
    - rust: introduce `.clippy.toml`
    - rust: replace `clippy::dbg_macro` with `disallowed_macros`
    - rust: provide proper code documentation titles
    - rust: enable Clippy's `check-private-items`
    - Documentation: rust: add coding guidelines on lints
    - Documentation: rust: discuss `#[expect(...)]` in the guidelines
    - rust: error: make conversion functions public
    - rust: error: optimize error type to use nonzero
    - rust: error: check for config `test` in `Error::name`
    - rust: fix size_t in bindgen prototypes of C builtins
    - rust: map `__kernel_size_t` and friends also to usize/isize
    - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
    - LoongArch: Convert unreachable() to BUG()
    - LoongArch: Use polling play_dead() when resuming from hibernation
    - LoongArch: Set max_pfn with the PFN of the last page
    - LoongArch: KVM: Add interrupt checking for AVEC
    - LoongArch: KVM: Reload guest CSR registers after sleep
    - LoongArch: KVM: Fix GPA size issue about VM
    - HID: appleir: Fix potential NULL dereference at raw event handle
    - ksmbd: fix type confusion via race condition when using
      ipc_msg_send_request
    - ksmbd: fix out-of-bounds in parse_sec_desc()
    - ksmbd: fix use-after-free in smb2_lock
    - ksmbd: fix bug on trap in smb2_lock
    - gpio: rcar: Use raw_spinlock to protect register access
    - ALSA: seq: Avoid module auto-load handling at event delivery
    - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
    - ALSA: hda/realtek: update ALC222 depop optimize
    - btrfs: fix a leaked chunk map issue in read_one_chunk()
    - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in
      resource_build_scaling_params
    - drm/imagination: avoid deadlock on fence release
    - drm/imagination: Hold drm_gem_gpuva lock for unmap
    - drm/imagination: only init job done fences once
    - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
    - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
    - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
    - x86/cpu: Validate CPUID leaf 0x2 EDX output
    - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
    - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
    - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
    - wifi: cfg80211: regulatory: improve invalid hints checking
    - wifi: nl80211: reject cooked mode if it is set along with other flags
    - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
    - rapidio: fix an API misues when rio_add_net() fails
    - dma: kmsan: export kmsan_handle_dma() for modules
    - s390/traps: Fix test_monitor_call() inline assembly
    - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
    - userfaultfd: do not block on locking a large folio with raised refcount
    - block: fix conversion of GPT partition name to 7-bit
    - mm/page_alloc: fix uninitialized variable
    - mm: don't skip arch_sync_kernel_mappings() in error paths
    - wifi: iwlwifi: mvm: don't try to talk to a dead firmware
    - wifi: iwlwifi: limit printed string from FW file
    - HID: google: fix unused variable warning under !CONFIG_ACPI
    - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
    - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
    - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
    - nvme-tcp: add basic support for the C2HTermReq PDU
    - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
    - net: gso: fix ownership in __udp_gso_segment
    - caif_virtio: fix wrong pointer check in cfv_probe()
    - perf/core: Fix pmus_lock vs. pmus_srcu ordering
    - hwmon: (pmbus) Initialise page count in pmbus_identify()
    - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
    - hwmon: (ad7314) Validate leading zero bits and return error
    - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
    - drm/imagination: Fix timestamps in firmware traces
    - ALSA: usx2y: validate nrpacks module parameter on probe
    - llc: do not use skb_get() before dev_queue_xmit()
    - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
    - drm/sched: Fix preprocessor guard
    - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
    - net: hns3: make sure ptp clock is unregister and freed if
      hclge_ptp_get_cycle returns an error
    - net: ipa: Fix v4.7 resource group names
    - net: ipa: Fix QSB data for v4.7
    - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
    - ppp: Fix KMSAN uninit-value warning with bpf
    - vlan: enforce underlying device type
    - x86/sgx: Fix size overflows in sgx_encl_create()
    - exfat: fix soft lockup in exfat_clear_bitmap
    - exfat: short-circuit zero-byte writes in exfat_file_write_iter
    - net-timestamp: support TCP GSO case for a few missing flags
    - ublk: set_params: properly check if parameters can be applied
    - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
    - nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
    - net: dsa: mt7530: Fix traffic flooding for MMIO devices
    - mctp i3c: handle NULL header address
    - net: ipv6: fix dst ref loop in ila lwtunnel
    - net: ipv6: fix missing dst ref drop in ila lwtunnel
    - gpio: rcar: Fix missing of_node_put() call
    - usb: renesas_usbhs: Call clk_put()
    - usb: renesas_usbhs: Use devm_usb_get_phy()
    - usb: hub: lack of clearing xHC resources
    - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card
      Reader
    - usb: typec: ucsi: Fix NULL pointer access
    - usb: renesas_usbhs: Flush the notify_hotplug_work
    - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
    - usb: atm: cxacru: fix a flaw in existing endpoint checks
    - usb: dwc3: Set SUSPENDENABLE soon after phy init
    - usb: dwc3: gadget: Prevent irq storm when TH re-executes
    - usb: typec: ucsi: increase timeout for PPM reset operations
    - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
    - usb: gadget: Set self-powered based on MaxPower and bmAttributes
    - usb: gadget: Fix setting self-powered state on suspend
    - usb: gadget: Check bmAttributes only if configuration is valid
    - kbuild: userprogs: use correct lld when linking through clang
    - xhci: pci: Fix indentation in the PCI device ID definitions
    - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
    - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
    - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
    - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
    - KVM: x86: Snapshot the host's DEBUGCTL in common x86
    - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is
      disabled
    - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
    - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by
      KVM
    - cdx: Fix possible UAF error in driver_override_show()
    - mei: me: add panther lake P DID
    - mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
    - intel_th: pci: Add Arrow Lake support
    - intel_th: pci: Add Panther Lake-H support
    - intel_th: pci: Add Panther Lake-P/U support
    - slimbus: messaging: Free transaction ID in delayed interrupt scenario
    - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid
      deadlock
    - eeprom: digsy_mtc: Make GPIO lookup table match the device
    - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
    - iio: filter: admv8818: Force initialization of SDO
    - iio: dac: ad3552r: clear reset status flag
    - iio: adc: ad7192: fix channel select
    - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
    - kbuild: hdrcheck: fix cross build with clang
    - nvme-tcp: Fix a C2HTermReq error message
    - docs: rust: remove spurious item in `expect` list
    - Upstream stable to v6.6.82, v6.12.19
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878)
    - IB/mlx5: Set and get correct qp_num for a DCT QP
    - RDMA/mana_ib: Allocate PAGE aligned doorbell index
    - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
    - SUNRPC: convert RPC_TASK_* constants to enum
    - SUNRPC: Prevent looping due to rpc_signal_task() races
    - SUNRPC: Handle -ETIMEDOUT return from tlshd
    - RDMA/mlx5: Fix AH static rate parsing
    - scsi: core: Clear driver private data when retrying request
    - RDMA/mlx5: Fix bind QP error cleanup flow
    - sunrpc: suppress warnings for unused procfs functions
    - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
    - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
    - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
    - afs: Fix the server_list to unuse a displaced server rather than putting
      it
    - net: loopback: Avoid sending IP packets without an Ethernet header
    - net: set the minimum for net_hotdata.netdev_budget_usecs
    - net/ipv4: add tracepoint for icmp_send
    - ipv4: icmp: Pass full DS field to ip_route_input()
    - ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
    - ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
    - ipv4: Convert icmp_route_lookup() to dscp_t.
    - ipv4: Convert ip_route_input() to dscp_t.
    - ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos
      conversion.
    - net: cadence: macb: Synchronize stats calculations
    - ASoC: es8328: fix route from DAC to output
    - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
    - firmware: cs_dsp: Remove async regmap writes
    - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
    - ice: add E830 HW VF mailbox message limit support
    - tcp: Defer ts_recent changes until req is owned
    - net: Clear old fragment checksum value in napi_reuse_skb
    - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
    - net/mlx5: IRQ, Fix null string in debug print
    - net: ipv6: fix dst ref loop on input in seg6 lwt
    - net: ipv6: fix dst ref loop on input in rpl lwt
    - net: ti: icss-iep: Remove spinlock-based synchronization
    - net: ti: icss-iep: Reject perout generation request
    - io_uring/net: save msg_control for compat
    - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
    - phy: rockchip: naneng-combphy: compatible reset with old DT
    - RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
    - riscv: KVM: Fix hart suspend status check
    - riscv: KVM: Fix SBI IPI error generation
    - riscv: KVM: Fix SBI TIME error generation
    - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
    - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
    - perf/x86: Fix low freqency setting issue
    - perf/core: Fix low freq setting via IOC_PERIOD
    - drm/amd/display: Disable PSR-SU on eDP panels
    - drm/amd/display: Fix HPD after gpu reset
    - i2c: ls2x: Fix frequency division register access
    - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
    - net: enetc: keep track of correct Tx BD count in
      enetc_map_tx_tso_buffs()
    - net: enetc: update UDP checksum when updating originTimestamp field
    - net: enetc: correct the xdp_tx statistics
    - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
    - phy: tegra: xusb: reset VBUS & ID OVERRIDE
    - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in
      refclk
    - mptcp: reset when MPTCP opts are dropped after join
    - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
    - rcuref: Plug slowpath race in rcuref_put()
    - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
    - riscv/futex: sign extend compare value in atomic cmpxchg
    - riscv: signal: fix signal frame size
    - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
    - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
    - amdgpu/pm/legacy: fix suspend/resume issues
    - gve: set xdp redirect target only when it is available
    - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
    - x86/microcode/AMD: Pay attention to the stepping dynamically
    - x86/microcode/AMD: Split load_microcode_amd()
    - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
    - x86/microcode/AMD: Flush patch buffer mapping after application
    - x86/microcode/AMD: Return bool from find_blobs_in_containers()
    - x86/microcode/AMD: Make __verify_patch_size() return bool
    - x86/microcode/AMD: Have __apply_microcode_amd() return bool
    - x86/microcode/AMD: Merge early_apply_microcode() into its single
      callsite
    - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward
      declaration
    - x86/microcode/AMD: Add get_patch_level()
    - x86/microcode/AMD: Load only SHA256-checksummed patches
    - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
    - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error
    - RDMA/hns: Fix mbox timing out by adding retry mechanism
    - RDMA/bnxt_re: Allocate dev_attr information dynamically
    - RDMA/bnxt_re: Fix the statistics for Gen P7 VF
    - landlock: Fix non-TCP sockets restriction
    - RDMA/mlx5: Fix implicit ODP hang on parent deregistration
    - scsi: ufs: core: Set default runtime/system PM levels before
      ufshcd_hba_init()
    - afs: Give an afs_server object a ref on the afs_cell object it points to
    - ASoC: cs35l56: Prevent races when soft-resetting using SPI control
    - thermal: gov_power_allocator: Fix incorrect calculation in
      divvy_up_power()
    - unreachable: Unify
    - objtool: Remove annotate_{,un}reachable()
    - objtool: Fix C jump table annotations for Clang
    - riscv: KVM: Fix hart suspend_type use
    - KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2
    - drm/xe/regs: remove a duplicate definition for RING_CTL_SIZE(size)
    - drm/xe/userptr: restore invalidation list on error
    - drm/amdkfd: Preserve cp_hqd_pq_control on update_mqd
    - drm/amd/display: Add option to configure mapping policy for edp0 on dp1
    - drm/amd/display: add a quirk to enable eDP0 on DP1
    - intel_idle: Handle older CPUs, which stop the TSC in deeper C states,
      correctly
    - selftests/landlock: Test that MPTCP actions are not restricted
    - selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
    - riscv: signal: fix signal_minsigstksz
    - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section()
      signature
    - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd()
      declarations
    - Upstream stable to v6.6.81, v6.12.18
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21872
    - efi: Don't map the entire mokvar table to determine its size
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21880
    - drm/xe/userptr: fix EFAULT handling
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21890
    - idpf: fix checksums set in idpf_rx_rsc()
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21885
    - RDMA/bnxt_re: Fix the page details for the srq created by kernel
      consumers
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21888
    - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21892
    - RDMA/mlx5: Fix the recovery flow of the UMR QP
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21873
    - scsi: ufs: core: bsg: Fix crash when arpmb command fails
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2024-58090
    - sched/core: Prevent rescheduling when interrupts are disabled
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21875
    - mptcp: always handle address removal under msk socket lock
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21877
    - usbnet: gl620a: fix endpoint checking in genelink_bind()
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21878
    - i2c: npcm: disable interrupt enable bit before devm_request_irq
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21889
    - perf/core: Add RCU read lock protection to perf_iterate_ctx()
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21898
    - ftrace: Avoid potential division by zero in function_stat_show()
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21899
    - tracing: Fix bad hist from corrupting named_triggers list
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21881
    - uprobes: Reject the shared zeropage in uprobe_write_opcode()
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21895
    - perf/core: Order the PMU list to fix warning about unordered
      pmu_ctx_list
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21883
    - ice: Fix deinitializing VF in error path
  * Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
    CVE-2025-21891
    - ipvlan: ensure network headers are in skb linear part
  * CVE-2024-57996 // CVE-2025-37752
    - net_sched: sch_sfq: move the limit validation
  * CVE-2025-38350
    - net/sched: Always pass notifications when child class becomes empty
  * CVE-2025-21887
    - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 02 Sep 2025 14:23:37 -0500

linux-nvidia (6.8.0-1036.39) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1036.39 -proposed tracker (LP: #2119906)

  [ Ubuntu: 6.8.0-79.79 ]

  * noble/linux: 6.8.0-79.79 -proposed tracker (LP: #2120415)
  * CVE-2024-57996 // CVE-2025-37752
    - net_sched: sch_sfq: move the limit validation
  * CVE-2025-38350
    - net/sched: Always pass notifications when child class becomes empty
  * CVE-2025-21887
    - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 18 Aug 2025 10:46:58 -0500

linux-nvidia (6.8.0-1035.38) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1035.38 -proposed tracker (LP: #2120392)

  [ Ubuntu: 6.8.0-78.78 ]

  * noble/linux: 6.8.0-78.78 -proposed tracker (LP: #2120405)
  * Incorrect backport for CVE-2025-21861 causes kernel hangs
    (LP: #2120330) // CVE-2025-21861
    - mm/migrate_device: don't add folio to be freed to LRU in
      migrate_device_finalize()
  * Incorrect backport for CVE-2025-21861 causes kernel hangs (LP: #2120330)
    - SAUCE: Revert "mm/migrate_device: don't add folio to be freed to LRU in
      migrate_device_finalize()"
    - mm: migrate_device: use more folio in migrate_device_finalize()

 -- Stefan Bader <stefan.bader@canonical.com>  Wed, 13 Aug 2025 17:18:04 +0200

linux-nvidia (6.8.0-1034.37) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1034.37 -proposed tracker (LP: #2117677)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2025.07.14)

  [ Ubuntu: 6.8.0-72.72 ]

  * noble/linux: 6.8.0-72.72 -proposed tracker (LP: #2117691)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.07.14)
  * NVMe namespace ID mismatch on repeated map/unmap (LP: #2115209)
    - nvme: requeue namespace scan on missed AENs
    - nvme: re-read ANA log page after ns scan completes
    - nvme: fixup scan failure for non-ANA multipath controllers
  * integrated I219-LM network adapter appears to be running too fast, causing
    synchronization issues when using the I219-LM PTP feature (LP: #2116072)
    - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
  * intel_rapl: support ARL-H hardware (LP: #2115652)
    - powercap: intel_rapl_msr: Add PL4 support for ArrowLake-H
  * Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
    update (LP: #2115068)
    - [Config] Replace FB_HYPERV with DRM_HYPERV
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212)
    - arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
    - xfs: assert a valid limit in xfs_rtfind_forw
    - xfs: validate inumber in xfs_iget
    - xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
    - xfs: fix a typo
    - xfs: skip background cowblock trims on inodes open for write
    - xfs: don't free cowblocks from under dirty pagecache on unshare
    - xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
    - xfs: return bool from xfs_attr3_leaf_add
    - xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
    - xfs: distinguish extra split from real ENOSPC from
      xfs_attr_node_try_addname
    - xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
    - xfs: don't ifdef around the exact minlen allocations
    - xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
    - xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
    - xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
    - xfs: Remove empty declartion in header file
    - xfs: pass the exact range to initialize to xfs_initialize_perag
    - xfs: update the file system geometry after recoverying superblock
      buffers
    - xfs: error out when a superblock buffer update reduces the agcount
    - xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
    - xfs: update the pag for the last AG at recovery time
    - xfs: Reduce unnecessary searches when searching for the best extents
    - xfs: streamline xfs_filestream_pick_ag
    - xfs: Check for delayed allocations before setting extsize
    - md/md-bitmap: replace md_bitmap_status() with a new helper
      md_bitmap_get_stats()
    - md/md-cluster: fix spares warnings for __le64
    - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
    - mm: update mark_victim tracepoints fields
    - cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
    - cpufreq: fix using cpufreq-dt as module
    - Bluetooth: qca: Support downloading board id specific NVM for WCN7850
    - Bluetooth: qca: Update firmware-name to support board specific nvm
    - Bluetooth: qca: Fix poor RF performance for WCN6855
    - Input: serio - define serio_pause_rx guard to pause and resume serio
      ports
    - ASoC: renesas: rz-ssi: Add a check for negative sample_space
    - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
    - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
    - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
    - ALSA: seq: Drop UMP events when no UMP-conversion is set
    - ibmvnic: Return error code on TX scrq flush fail
    - ibmvnic: Introduce send sub-crq direct
    - ibmvnic: Add stat for tx direct vs tx batched
    - vsock/bpf: Warn on socket without transport
    - tcp: adjust rcvq_space after updating scaling ratio
    - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
    - flow_dissector: Fix handling of mixed port and port-range keys
    - flow_dissector: Fix port range key handling in BPF conversion
    - net: Add non-RCU dev_getbyhwaddr() helper
    - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
    - net: axienet: Set mac_managed_pm
    - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
    - strparser: Add read_sock callback
    - bpf: Fix wrong copied_seq calculation
    - bpf: Disable non stream socket for strparser
    - power: supply: da9150-fg: fix potential overflow
    - nouveau/svm: fix missing folio unlock + put after
      make_device_exclusive_range()
    - drm/msm: Avoid rounding up to one jiffy
    - nvme/ioctl: add missing space in err message
    - bpf: skip non exist keys in generic_map_lookup_batch
    - drm/nouveau/pmu: Fix gp10b firmware guard
    - drm/msm/dpu: Disable dither in phys encoder cleanup
    - drm/i915: Make sure all planes in use by the joiner have their crtc
      included
    - drm/i915/dp: Fix error handling during 128b/132b link training
    - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
    - lib/iov_iter: fix import_iovec_ubuf iovec management
    - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
    - ALSA: hda: Add error check for snd_ctl_rename_id() in
      snd_hda_create_dig_out_ctls()
    - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
    - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
    - acct: block access to kernel internal filesystems
    - mm,madvise,hugetlb: check for 0-length range after end address
      adjustment
    - mtd: rawnand: cadence: fix error code in cadence_nand_init()
    - mtd: rawnand: cadence: use dma_map_resource for sdma address
    - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
    - EDAC/qcom: Correct interrupt enable register configuration
    - ftrace: Correct preemption accounting for function tracing.
    - ftrace: Do not add duplicate entries in subops manager ops
    - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1
      plus lts
    - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
    - KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base()
    - KVM: x86: Inline kvm_get_apic_mode() in lapic.h
    - KVM: Introduce vcpu->wants_to_run
    - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
    - drm/amd/display: Refactoring if and endif statements to enable DC_LOGGER
    - arm64: dts: mt8183: add dpi node to mt8183
    - arm64: dts: mt8183: Add port node to dpi node
    - arm64: dts: mediatek: mt8183-kukui: Disable DPI display interface
    - arm64: dts: mediatek: mt8183: Disable DPI display output by default
    - arm64: dts: mediatek: mt8183-pumpkin: add HDMI support
    - arm64: dts: mediatek: mt8183: Disable DSI display output by default
    - accel/ivpu: Limit FW version string length
    - accel/ivpu: Add coredump support
    - accel/ivpu: Add FW state dump on TDR
    - accel/ivpu: Fix error handling in recovery/reset
    - ASoC: SOF: topology: dynamically allocate and store DAI widget->private
    - ASoC: SOF: topology: Parse DAI type token for dspless mode
    - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device
    - vsock/virtio: fix variables initialization during resuming
    - drm/msm/dpu: skip watchdog timer programming through TOP on >= SM8450
    - drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields
    - drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG0 updated from driver side
    - drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG1 against clock driver
    - drm/msm/dsi/phy: Do not overwite PHY_CMN_CLK_CFG1 when choosing bitclk
      source
    - nvme: tcp: Fix compilation warning with W=1
    - nvme-tcp: fix connect failure on receiving partial ICResp PDU
    - drm: panel: jd9365da-h3: fix reset signal polarity
    - io_uring/rw: forbid multishot async reads
    - arm64: dts: rockchip: Fix broken tsadc pinctrl names for rk3588
    - arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
    - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
    - s390/boot: Fix ESSA detection
    - xfs: fix online repair probing when CONFIG_XFS_ONLINE_REPAIR=n
    - smb: client: fix chmod(2) regression with ATTR_READONLY
    - tracing: Fix using ret variable in tracing_set_tracer()
    - selftests/mm: build with -O2
    - Upstream stable to v6.6.80, v6.12.17
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21861
    - mm/migrate_device: don't add folio to be freed to LRU in
      migrate_device_finalize()
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21868
    - net: allow small head cache usage with large MAX_SKB_FRAGS values
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21869
    - powerpc/code-patching: Disable KASAN report during patching via
      temporary mm
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21870
    - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21844
    - smb: client: Add check for next_buffer in receive_encrypted_standard()
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21846
    - acct: perform last write from workqueue
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21847
    - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21848
    - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21862
    - drop_monitor: fix incorrect initialization order
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21871
    - tee: optee: Fix supplicant wait loop
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21863
    - io_uring: prevent opcode speculation
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2024-58088
    - bpf: Fix deadlock when freeing cgroup storage
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21853
    - bpf: avoid holding freeze_mutex during mmap operation
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21867
    - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21864
    - tcp: drop secpath at the same time as we currently drop dst
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21854
    - sockmap, vsock: For connectible sockets allow only connected
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21855
    - ibmvnic: Don't reference skb after sending to VIOS
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21856
    - s390/ism: add release function for struct device
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21857
    - net/sched: cls_api: fix error handling causing NULL dereference
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21858
    - geneve: Fix use-after-free in geneve_find_dev().
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21866
    - powerpc/code-patching: Fix KASAN hit by not flagging text patching area
      as VM_ALLOC
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21859
    - USB: gadget: f_midi: f_midi_complete to call queue_work
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21746
    - Input: synaptics - fix crash when enabling pass-through port
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2024-57977
    - memcg: fix soft lockup in the OOM process
  * Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
    CVE-2025-21712
    - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
  * CVE-2024-58093
    - PCI/ASPM: Fix link state exit during switch upstream function removal
  * [SRU]Request E825-C driver into latest LTS of Ubuntu OS 24.04
    (LP: #2114785)
    - ice: add support for 3k signing DDP sections for E825C
    - ice: Add helper function ice_is_generic_mac
    - ice: introduce new E825C devices family
  * [UBUNTU 22.04] kernel: Fix z17 elf platform recognition (LP: #2114450)
    - s390: Add z17 elf platform
  * [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
    (LP: #2114258)
    - s390/cpumf: Update CPU Measurement facility extended counter set support
  * Noble update: upstream stable patchset 2025-06-29 (LP: #2115616)
    - nfsd: clear acl_access/acl_default after releasing them
    - NFSD: fix hang in nfsd4_shutdown_callback
    - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
    - HID: multitouch: Add NULL check in mt_input_configured
    - HID: hid-thrustmaster: fix stack-out-of-bounds read in
      usb_check_int_endpoints()
    - spi: sn-f-ospi: Fix division by zero
    - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
    - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
    - vrf: use RCU protection in l3mdev_l3_out()
    - vxlan: check vxlan_vnigroup_init() return value
    - LoongArch: Fix idle VS timer enqueue
    - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
    - team: better TEAM_OPTION_TYPE_STRING validation
    - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
    - cgroup: Remove steal time from usage_usec
    - drm/i915/selftests: avoid using uninitialized context
    - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
    - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
    - gpio: bcm-kona: Add missing newline to dev_err format string
    - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
    - xen/swiotlb: relax alignment requirements
    - x86/xen: allow larger contiguous memory regions in PV guests
    - block: cleanup and fix batch completion adding conditions
    - gpiolib: Fix crash on error in gpiochip_get_ngpios()
    - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
    - RDMA/efa: Reset device on probe failure
    - fbdev: omap: use threaded IRQ for LCD DMA
    - soc/tegra: fuse: Update Tegra234 nvmem keepout list
    - media: cxd2841er: fix 64-bit division on gcc-9
    - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
    - media: i2c: ds90ub953: Add error handling for i2c reads/writes
    - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
    - media: uvcvideo: Add new quirk definition for the Sonix Technology Co.
      292a camera
    - media: uvcvideo: Add Kurokesu C1 PRO camera
    - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
    - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
    - PCI: switchtec: Add Microchip PCI100X device IDs
    - scsi: ufs: bsg: Set bsg_queue to NULL after removal
    - rtla/timerlat_hist: Abort event processing on second signal
    - rtla/timerlat_top: Abort event processing on second signal
    - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
    - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
    - Grab mm lock before grabbing pt lock
    - selftests: gpio: gpio-sim: Fix missing chip disablements
    - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
    - x86/mm/tlb: Only trim the mm_cpumask once a second
    - orangefs: fix a oob in orangefs_debug_write
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
    - batman-adv: fix panic during interface removal
    - batman-adv: Ignore neighbor throughput metrics in error case
    - batman-adv: Drop unmanaged ELP metric worker
    - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
    - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-
      kernel
    - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
    - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
    - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI
      bind retries
    - usb: dwc3: Fix timeout issue during controller enter/exit from halt
      state
    - usb: roles: set switch registered flag early on
    - usb: gadget: udc: renesas_usb3: Fix compiler warning
    - usb: dwc2: gadget: remove of_node reference upon udc_stop
    - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
    - usb: core: fix pipe creation for get_bMaxPacketSize0
    - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
    - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
    - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
    - USB: hub: Ignore non-compliant devices with too many configs or
      interfaces
    - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
    - usb: cdc-acm: Check control transfer buffer size before access
    - usb: cdc-acm: Fix handling of oversized fragments
    - USB: serial: option: add MeiG Smart SLM828
    - USB: serial: option: add Telit Cinterion FN990B compositions
    - USB: serial: option: fix Telit Cinterion FN990A name
    - USB: serial: option: drop MeiG Smart defines
    - can: ctucanfd: handle skb allocation failure
    - can: c_can: fix unbalanced runtime PM disable in error path
    - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data
      length zero
    - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
    - alpha: make stack 16-byte aligned (most cases)
    - wifi: ath12k: fix handling of 6 GHz rules
    - kbuild: userprogs: fix bitsize and target detection on clang
    - efi: Avoid cold plugged memory for placing the kernel
    - cgroup: fix race between fork and cgroup.kill
    - serial: port: Assign ->iotype correctly when ->iobase is set
    - serial: port: Always update ->iotype in __uart_read_properties()
    - serial: 8250: Fix fifo underflow on flush
    - alpha: align stack for page fault and user unaligned trap handlers
    - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
    - gpio: stmpe: Check return value of stmpe_reg_read in
      stmpe_gpio_irq_sync_unlock
    - partitions: mac: fix handling of bogus partition table
    - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
    - regmap-irq: Add missing kfree()
    - arm64: Handle .ARM.attributes section in linker scripts
    - mmc: mtk-sd: Fix register settings for hs400(es) mode
    - igc: Set buffer type for empty frames in igc_init_empty_frame
    - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
    - btrfs: fix hole expansion when writing at an offset beyond EOF
    - clocksource: Use pr_info() for "Checking clocksource synchronization"
      message
    - clocksource: Use migrate_disable() to avoid calling get_random_u32() in
      atomic context
    - ipv4: add RCU protection to ip4_dst_hoplimit()
    - net: add dev_net_rcu() helper
    - ipv4: use RCU protection in ipv4_default_advmss()
    - ipv4: use RCU protection in rt_is_expired()
    - ipv4: use RCU protection in inet_select_addr()
    - net: ipv4: Cache pmtu for all packet paths if multipath enabled
    - ipv4: use RCU protection in __ip_rt_update_pmtu()
    - ipv4: icmp: convert to dev_net_rcu()
    - flow_dissector: use RCU protection to fetch dev_net()
    - ipv6: use RCU protection in ip6_default_advmss()
    - ipv6: icmp: convert to dev_net_rcu()
    - HID: hid-steam: Add Deck IMU support
    - HID: hid-steam: Make sure rumble work is canceled on removal
    - HID: hid-steam: Move hidraw input (un)registering to work
    - ndisc: use RCU protection in ndisc_alloc_skb()
    - neighbour: delete redundant judgment statements
    - neighbour: use RCU protection in __neigh_notify()
    - arp: use RCU protection in arp_xmit()
    - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
    - ndisc: extend RCU protection in ndisc_send_skb()
    - ipv6: mcast: extend RCU protection in igmp6_send()
    - ipv6: mcast: add RCU protection to mld_newpack()
    - drm/tidss: Fix issue in irq handling causing irq-flood issue
    - drm/tidss: Clear the interrupt status for interrupts being disabled
    - drm/rcar-du: dsi: Fix PHY lock bit check
    - drm/v3d: Stop active perfmon if it is being destroyed
    - netdevsim: print human readable IP address
    - selftests: rtnetlink: update netdevsim ipsec output format
    - md/md-bitmap: factor behind write counters out from
      bitmap_{start/end}write()
    - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
    - md/md-bitmap: move bitmap_{start, end}write to md upper layer
    - mm: gup: fix infinite loop within __get_longterm_locked
    - alpha: replace hardcoded stack offsets with autogenerated ones
    - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
    - io_uring/kbuf: reallocate buf lists on upgrade
    - x86/i8253: Disable PIT timer 0 when not in use
    - pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
    - pinctrl: pinconf-generic: print hex value
    - pinctrl: pinconf-generic: Print unsigned value if a format is registered
    - idpf: fix handling rsc packet with a single segment
    - idpf: call set_real_num_queues in idpf_open
    - igc: Fix HW RX timestamp when passed by ZC XDP
    - LoongArch: KVM: Fix typo issue about GCFG feature detection
    - workqueue: Put the pwq after detaching the rescuer from the pool
    - perf/x86/intel: Clean up PEBS-via-PT on hybrid
    - drm/xe/client: bo->client does not need bos_lock
    - io_uring/waitid: don't abuse io_tw_state
    - drm: Fix DSC BPP increment decoding
    - i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
    - i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
    - [Config] updateconfigs for MIPI_I3C_HCI_PCI
    - serial: 8250_pci: Resolve WCH vendor ID ambiguity
    - serial: 8250_pci: Share WCH IDs with parport_serial driver
    - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
    - kbuild: suppress stdout from merge_config for silent builds
    - KVM: x86: Load DR6 with guest value only before entering .vcpu_run()
      loop
    - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
    - USB: gadget: core: create sysfs link between udc and gadget
    - usb: gadget: core: flush gadget workqueue after device removal
    - include: net: add static inline dst_dev_overhead() to dst.h
    - net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
    - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
    - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
    - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
    - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
    - scsi: ufs: core: Prepare to introduce a new clock_gating lock
    - scsi: ufs: core: Introduce a new clock_gating lock
    - scsi: ufs: Fix toggling of clk_gating.state when clock gating is not
      allowed
    - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
    - drm/tidss: Fix race condition while handling interrupt registers
    - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
    - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
    - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
    - scsi: ufs: core: Ensure clk_gating.lock is used only after
      initialization
    - serial: 8250_dma: terminate correct DMA in tx_dma_flush()
    - x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
    - HID: hid-steam: Fix use-after-free when detaching device
    - block: change blk_mq_add_to_batch() third argument type to bool
    - nvme: move error logging from nvme_end_req() to __nvme_end_req()
    - Upstream stable to v6.6.79, v6.12.16
  * Noble update: upstream stable patchset 2025-06-17 (LP: #2114849)
    - ice: Add check for devm_kzalloc()
    - io_uring/rw: commit provided buffer state on async
    - mptcp: pm: only set fullmesh for subflow endp
    - selftests: mptcp: join: fix AF_INET6 variable
    - xfs: don't lose solo dquot update transactions
    - Upstream stable to v6.6.78, v6.12.15
  * [Regression Updates] "PCI: Explicitly put devices into D0 when
    initializing" breaks pci-pass-through in QEMU/KVM (LP: #2117494)
    - PCI/PM: Set up runtime PM even for devices without PCI PM
  * CVE-2025-38083
    - net_sched: prio: fix a race in prio_tune()
  * CVE-2025-37797
    - net_sched: hfsc: Fix a UAF vulnerability in class handling

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 25 Jul 2025 11:05:00 -0500

linux-nvidia (6.8.0-1032.35) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1032.35 -proposed tracker (LP: #2116385)

  [ Ubuntu: 6.8.0-65.68 ]

  * noble/linux: 6.8.0-65.68 -proposed tracker (LP: #2116399)
  * CVE-2025-38083
    - net_sched: prio: fix a race in prio_tune()
  * CVE-2025-37797
    - net_sched: hfsc: Fix a UAF vulnerability in class handling

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 15 Jul 2025 11:04:07 -0500

linux-nvidia (6.8.0-1031.34) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1031.34 -proposed tracker (LP: #2114652)

  * Pull request: KVM: selftests: Always unlink memory regions when deleting
    (LP: #2112594)
    - KVM: selftests: Always unlink memory regions when deleting (VM free)
    - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs

  * Backport pci=config_acs parameter with fix commit (LP: #2100340)
    - iommu: Skip PASID validation for devices without PASID capability

  [ Ubuntu: 6.8.0-64.67 ]

  * noble/linux: 6.8.0-64.67 -proposed tracker (LP: #2114668)
  * Unexpected system reboot at loading GUI session on some AMD platforms
    (LP: #2112462)
    - drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
    - drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
    - drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
    - drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
  * [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
    (LP: #2114174)
    - s390/pci: rename lock member in struct zpci_dev
    - s390/pci: introduce lock to synchronize state of zpci_dev's
    - s390/pci: remove hotplug slot when releasing the device
    - s390/pci: Remove redundant bus removal and disable from
      zpci_release_device()
    - s390/pci: Prevent self deletion in disable_slot()
    - s390/pci: Allow re-add of a reserved but not yet removed device
    - s390/pci: Serialize device addition and removal
  * [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
    (LP: #2114174) // CVE-2025-37946
    - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has
      child VFs
  * [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
    (LP: #2114174) // CVE-2025-37974
    - s390/pci: Fix missing check for zpci_create_device() error return
  * [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
    (LP: #2114174) // CVE-2024-56699
    - s390/pci: Fix potential double remove of hotplug slot
  * System will restart while resuming with SATA HDD or nvme installed with
    password set (LP: #2110090)
    - PCI: Explicitly put devices into D0 when initializing
  * Noble update: upstream stable patchset 2025-06-12 (LP: #2114239)
    - btrfs: fix assertion failure when splitting ordered extent after
      transaction abort
    - btrfs: fix use-after-free when attempting to join an aborted transaction
    - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
    - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case
    - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
    - btrfs: fix data race when accessing the inode's disk_i_size at
      btrfs_drop_extents()
    - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error
      handling
    - sched: Don't try to catch up excess steal time.
    - locking/ww_mutex/test: Use swap() macro
    - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
    - x86/amd_nb: Restrict init function to AMD-based systems
    - drm/virtio: New fence for every plane update
    - drm: Add panel backlight quirks
    - drm: panel-backlight-quirks: Add Framework 13 matte panel
    - drm: panel-backlight-quirks: Add Framework 13 glossy and 2.8k panels
    - nvkm/gsp: correctly advance the read pointer of GSP message queue
    - nvkm: correctly calculate the available space of the GSP cmdq buffer
    - drm/amd/display: Populate chroma prefetch parameters, DET buffer fix
    - drm/amd/display: Overwriting dualDPP UBF values before usage
    - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
    - drm/connector: add mutex to protect ELD from concurrent access
    - drm/bridge: anx7625: use eld_mutex to protect access to connector->eld
    - drm/bridge: ite-it66121: use eld_mutex to protect access to
      connector->eld
    - drm/amd/display: use eld_mutex to protect access to connector->eld
    - drm/exynos: hdmi: use eld_mutex to protect access to connector->eld
    - drm/radeon: use eld_mutex to protect access to connector->eld
    - drm/sti: hdmi: use eld_mutex to protect access to connector->eld
    - drm/vc4: hdmi: use eld_mutex to protect access to connector->eld
    - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
    - drm/amdgpu: Don't enable sdma 4.4.5 CTXEMPTY interrupt
    - drm/amdkfd: Queue interrupt work to different CPU
    - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
    - drm/bridge: it6505: fix HDCP Bstatus check
    - drm/bridge: it6505: fix HDCP encryption when R0 ready
    - drm/bridge: it6505: fix HDCP CTS compare V matching
    - drm/bridge: it6505: fix HDCP V match check is not performed correctly
    - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
    - safesetid: check size of policy writes
    - drm/amd/display: Increase sanitizer frame larger than limit when compile
      testing with clang
    - drm/amd/display: Limit Scaling Ratio on DCN3.01
    - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
    - tun: fix group permission check
    - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
    - mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G
    - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
    - tomoyo: don't emit warning in tomoyo_write_control()
    - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
    - wifi: rtw88: add __packed attribute to efuse layout struct
    - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
    - HID: multitouch: Add quirk for Hantick 5288 touchpad
    - HID: Wacom: Add PCI Wacom device support
    - net/mlx5: use do_aux_work for PHC overflow checks
    - wifi: brcmfmac: Check the return value of
      of_property_read_string_index()
    - wifi: iwlwifi: pcie: Add support for new device ids
    - wifi: iwlwifi: avoid memory leak
    - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
    - APEI: GHES: Have GHES honor the panic= setting
    - Bluetooth: btusb: Add new VID/PID 13d3/3610 for MT7922
    - Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925
    - Bluetooth: MGMT: Fix slab-use-after-free Read in
      mgmt_remove_adv_monitor_sync
    - net: wwan: iosm: Fix hibernation by re-binding the driver around it
    - mmc: sdhci-msm: Correctly set the load for the regulator
    - octeon_ep: update tx/rx stats locally for persistence
    - tipc: re-order conditions in tipc_crypto_key_rcv()
    - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
    - x86/kexec: Allocate PGD for x86_64 transition page tables separately
    - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
    - iommu/arm-smmu-v3: Clean up more on probe failure
    - platform/x86: int3472: Check for adev == NULL
    - platform/x86: acer-wmi: Add support for Acer PH14-51
    - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
    - platform/x86: acer-wmi: Add support for Acer Predator PH16-72
    - ASoC: amd: Add ACPI dependency to fix build error
    - Input: allocate keycode for phone linking
    - platform/x86: acer-wmi: add support for Acer Nitro AN515-58
    - platform/x86: acer-wmi: Ignore AC events
    - xfs: report realtime block quota limits on realtime directories
    - xfs: don't over-report free space or inodes in statvfs
    - tty: xilinx_uartps: split sysrq handling
    - tty: vt: pass proper pointers from tioclinux()
    - tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN
    - tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
    - platform/x86: serdev_helpers: Check for serial_ctrl_uid == NULL
    - nvme: handle connectivity loss in nvme_set_queue_count
    - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
    - gpu: drm_dp_cec: fix broken CEC adapter properties check
    - ice: put Rx buffers after being done with current frame
    - ice: gather page_count()'s of each frag right before XDP prog call
    - ice: stop storing XDP verdict within ice_rx_buf
    - nvme-fc: use ctrl state getter
    - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
    - vmxnet3: Fix tx queue race condition with XDP
    - tg3: Disable tg3 PCIe AER on system reboot
    - udp: gso: do not drop small packets when PMTU reduces
    - rxrpc: Fix the rxrpc_connection attend queue handling
    - gpio: pca953x: Improve interrupt support
    - net: atlantic: fix warning during hot unplug
    - net: rose: lock the socket in rose_bind()
    - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
    - tun: revert fix group permission check
    - net: sched: Fix truncation of offloaded action statistics
    - rxrpc: Fix call state set to not include the SERVER_SECURING state
    - cpufreq: s3c64xx: Fix compilation warning
    - leds: lp8860: Write full EEPROM, not only half of it
    - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
    - drm/modeset: Handle tiled displays in pan_display_atomic.
    - drm/client: Handle tiled displays better
    - smb: client: fix order of arguments of tracepoints
    - smb: client: change lease epoch type from unsigned int to __u16
    - s390/futex: Fix FUTEX_OP_ANDN implementation
    - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
    - m68k: vga: Fix I/O defines
    - fs/proc: do_task_stat: Fix ESP not readable during coredump
    - binfmt_flat: Fix integer overflow bug on 32 bit systems
    - accel/ivpu: Fix Qemu crash when running in passthrough
    - arm64/kvm: Configure HYP TCR.PS/DS based on host stage1
    - arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu()
    - KVM: arm64: timer: Always evaluate the need for a soft timer
    - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
    - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
    - remoteproc: omap: Handle ARM dma_iommu_mapping
    - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
    - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
    - ksmbd: fix integer overflows on 32 bit systems
    - drm/amd/display: Optimize cursor position updates
    - drm/amd/pm: Mark MM activity as unsupported
    - drm/amdkfd: only flush the validate MES contex
    - drm/i915/guc: Debug print LRC state entries only if the context is
      pinned
    - drm/i915: Fix page cleanup on DMA remap failure
    - drm/komeda: Add check for komeda_get_layer_fourcc_list()
    - drm/i915/dp: Iterate DSC BPP from high to low on all platforms
    - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
    - drm/amd/display: Fix seamless boot sequence
    - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
    - clk: sunxi-ng: a100: enable MMC clock reparenting
    - clk: mmp2: call pm_genpd_init() only after genpd.name is set
    - media: i2c: ds90ub960: Fix UB9702 refclk register access
    - clk: qcom: clk-alpha-pll: fix alpha mode configuration
    - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sm8650: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
    - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
    - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
    - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
    - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
    - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
    - clk: mediatek: mt2701-bdp: add missing dummy clk
    - clk: mediatek: mt2701-img: add missing dummy clk
    - clk: mediatek: mt2701-mm: add missing dummy clk
    - blk-cgroup: Fix class @block_class's subsystem refcount leakage
    - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    - perf bench: Fix undefined behavior in cmpworker()
    - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
    - of: Correct child specifier used as input of the 2nd nexus node
    - of: Fix of_find_node_opts_by_path() handling of alias+path+options
    - Input: bbnsm_pwrkey - add remove hook
    - HID: hid-sensor-hub: don't use stale platform-data on remove
    - ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg()
    - atomic64: Use arch_spin_locks instead of raw_spin_locks
    - wifi: rtlwifi: rtl8821ae: Fix media status report
    - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
    - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
    - wifi: rtw88: sdio: Fix disconnection after beacon loss
    - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
    - usb: gadget: f_tcm: Translate error to sense
    - usb: gadget: f_tcm: Decrement command ref count on cleanup
    - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
    - usb: gadget: f_tcm: Don't prepare BOT write request twice
    - usbnet: ipheth: fix possible overflow in DPE length check
    - usbnet: ipheth: use static NDP16 location in URB
    - usbnet: ipheth: check that DPE points past NCM header
    - usbnet: ipheth: refactor NCM datagram loop
    - usbnet: ipheth: break up NCM header size computation
    - usbnet: ipheth: fix DPE OoB read
    - usbnet: ipheth: document scope of NCM implementation
    - ASoC: acp: Support microphone from Lenovo Go S
    - soc: qcom: socinfo: Avoid out of bounds read of serial number
    - serial: sh-sci: Drop __initdata macro for port_cfg
    - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[]
      is in use
    - MIPS: Loongson64: remove ROM Size unit in boardinfo
    - LoongArch: Extend the maximum number of watchpoints
    - powerpc/pseries/eeh: Fix get PE state translation
    - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
    - dm-crypt: track tag_offset in convert_context
    - mips/math-emu: fix emulation of the prefx instruction
    - MIPS: pci-legacy: Override pci_address_to_pio
    - block: don't revert iter for -EIOCBQUEUED
    - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
    - ALSA: hda/realtek: Enable headset mic on Positivo C6400
    - ALSA: hda: Fix headset detection failure due to unstable sort
    - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
    - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
    - arm64: tegra: Fix Tegra234 PCIe interrupt-map
    - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
    - PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar()
    - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
    - scsi: st: Don't set pos_unknown just after device recognition
    - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
    - scsi: ufs: qcom: Fix crypto key eviction
    - scsi: ufs: core: Fix use-after free in init error and remove paths
    - scsi: storvsc: Set correct data length for sending SCSI command without
      payload
    - scsi: core: Do not retry I/Os during depopulation
    - kbuild: Move -Wenum-enum-conversion to W=2
    - rust: init: use explicit ABI to clean warning in future compilers
    - x86/boot: Use '-std=gnu11' to fix build with GCC 15
    - ubi: Add a check for ubi_num
    - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
    - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
    - arm64: dts: qcom: sm6115: Fix MPSS memory length
    - arm64: dts: qcom: sm6115: Fix CDSP memory length
    - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
    - arm64: dts: qcom: sm6350: Fix ADSP memory length
    - arm64: dts: qcom: sm6350: Fix MPSS memory length
    - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
    - arm64: dts: qcom: sm6375: Fix ADSP memory length
    - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
    - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
    - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
    - arm64: dts: qcom: sm8350: Fix MPSS memory length
    - arm64: dts: qcom: sm8450: Fix CDSP memory length
    - arm64: dts: qcom: sm8450: Fix MPSS memory length
    - arm64: dts: qcom: sm8550: Fix CDSP memory length
    - arm64: dts: qcom: sm8550: Fix MPSS memory length
    - arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
    - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
    - arm64: dts: qcom: sm8550: Add dma-coherent property
    - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8650: Fix CDSP memory length
    - arm64: dts: qcom: sm8650: Fix MPSS memory length
    - arm64: dts: qcom: sm8550: correct MDSS interconnects
    - arm64: dts: qcom: sm8650: correct MDSS interconnects
    - crypto: qce - fix priority to be less than ARMv8 CE
    - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
    - arm64: tegra: Disable Tegra234 sce-fabric node
    - parisc: Temporarily disable jump label support
    - pwm: microchip-core: fix incorrect comparison with max period
    - xfs: Propagate errors from xfs_reflink_cancel_cow_range in
      xfs_dax_write_iomap_end
    - xfs: Add error handling for xfs_reflink_cancel_cow_range
    - ACPI: PRM: Remove unnecessary strict handler address checks
    - tpm: Change to kvalloc() in eventlog/acpi.c
    - rv: Reset per-task monitors also for idle tasks
    - hrtimers: Force migrate away hrtimers queued after
      CPUHP_AP_HRTIMERS_DYING
    - kfence: skip __GFP_THISNODE allocations on NUMA systems
    - media: ccs: Clean up parsed CCS static data on parse failure
    - mm/hugetlb: fix avoid_reserve to allow taking folio from subpool
    - iio: light: as73211: fix channel handling in only-color triggered buffer
    - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
    - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
    - soc: qcom: smem_state: fix missing of_node_put in error path
    - media: mmp: Bring back registration of the device
    - media: mc: fix endpoint iteration
    - media: nuvoton: Fix an error check in npcm_video_ece_init()
    - media: imx296: Add standby delay during probe
    - media: ov5640: fix get_light_freq on auto
    - media: stm32: dcmipp: correct dma_set_mask_and_coherent mask value
    - media: ccs: Fix CCS static data parsing for large block sizes
    - media: ccs: Fix cleanup order in ccs_probe()
    - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
    - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
    - media: i2c: ds90ub960: Fix UB9702 VC map
    - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
    - media: uvcvideo: Fix crash during unbind if gpio unit is in use
    - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
    - media: uvcvideo: Support partial control reads
    - media: uvcvideo: Remove redundant NULL assignment
    - media: uvcvideo: Refactor iterators
    - media: uvcvideo: Only save async fh if success
    - media: uvcvideo: Remove dangling pointers
    - mm: kmemleak: fix upper boundary check for physical address objects
    - mm/compaction: fix UBSAN shift-out-of-bounds warning
    - ata: libata-sff: Ensure that we cannot write outside the allocated
      buffer
    - crypto: qce - fix goto jump in error path
    - crypto: qce - unregister previously registered algos in error path
    - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
    - nvmem: core: improve range check for nvmem_cell_write()
    - nvmem: imx-ocotp-ele: simplify read beyond device check
    - nvmem: imx-ocotp-ele: fix MAC address byte order
    - nvmem: imx-ocotp-ele: fix reading from non zero offset
    - nvmem: imx-ocotp-ele: set word length to 1
    - io_uring: fix multishots with selected buffers
    - io_uring/net: don't retry connect operation on EPOLLERR
    - selftests: mptcp: connect: -f: no reconnect
    - pnfs/flexfiles: retry getting layout segment for reads
    - ocfs2: fix incorrect CPU endianness conversion causing mount failure
    - ocfs2: handle a symlink read error correctly
    - nilfs2: fix possible int overflows in nilfs_fiemap()
    - nfs: Make NFS_FSCACHE select NETFS_SUPPORT instead of depending on it
    - NFSD: Encode COMPOUND operation status on page boundaries
    - mailbox: tegra-hsp: Clear mailbox before using message
    - NFC: nci: Add bounds checking in nci_hci_create_pipe()
    - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
    - mtd: onenand: Fix uninitialized retlen in do_otp_read()
    - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
    - char: misc: deallocate static minor in error path
    - misc: fastrpc: Deregister device nodes properly in error scenarios
    - misc: fastrpc: Fix registered buffer page address
    - misc: fastrpc: Fix copy buffer page size
    - net/ncsi: wait for the last response to Deselect Package before
      configuring channel
    - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
    - maple_tree: simplify split calculation
    - scripts/gdb: fix aarch64 userspace detection in get_current_task
    - tracing/osnoise: Fix resetting of tracepoints
    - rtla/osnoise: Distinguish missing workload option
    - rtla: Add trace_instance_stop
    - rtla/timerlat_hist: Stop timerlat tracer on signal
    - rtla/timerlat_top: Stop timerlat tracer on signal
    - pinctrl: samsung: fix fwnode refcount cleanup if
      platform_get_irq_optional() fails
    - ptp: Ensure info->enable callback is always set
    - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
    - rtc: zynqmp: Fix optional clock name property
    - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
    - xfs: avoid nested calls to __xfs_trans_commit
    - xfs: don't lose solo superblock counter update transactions
    - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC
      families
    - spi: atmel-qspi: Memory barriers after memory-mapped I/O
    - btrfs: avoid monopolizing a core when activating a swap file
    - mptcp: prevent excessive coalescing on receive
    - Revert "drm/amd/display: Fix green screen issue after suspend"
    - statmount: let unset strings be empty
    - arm64: dts: rockchip: add reset-names for combphy on rk3568
    - ocfs2: check dir i_size in ocfs2_find_entry
    - Upstream stable to v6.6.77, v6.12.14
  * kvmppc_set_passthru_irq_hv: Could not assign IRQ map traces are seen when
    pci device is attached to kvm guest when "xive=off" is set (LP: #2109951)
    - KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries KVM Guest
  * Latitude 5450 is experiencing packet loss on Ethernet in Ubuntu 22.04
    (LP: #2106558)
    - e1000e: change k1 configuration on MTP and later platforms
  * cpufreq amd-pstate: cpuinfo_max_freq reports incorrect value
    (LP: #2109609)
    - SAUCE: Revert "Revert "cpufreq: amd-pstate: Fix the inconsistency in max
      frequency units""
  * Backport pci=config_acs parameter with fix commit (LP: #2100340)
    - PCI: Extend ACS configurability
    - PCI: Fix pci_enable_acs() support for the ACS quirks
    - PCI/ACS: Fix 'pci=config_acs=' parameter
  * [UBUNTU 24.04] s390/pci: Fix zpci_bus_is_isolated_vf() for non-VF
    (LP: #2111599)
    - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
  * nvme/tcp hangs IO on arm (LP: #2106381)
    - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
  * CVE-2025-37750
    - smb: client: fix UAF in decryption with multichannel
  * CVE-2025-40364
    - io_uring: fix io_req_prep_async with provided buffers
  * CVE-2024-49887
    - f2fs: fix to handle segment allocation failure correctly
    - f2fs: fix to don't panic system for no free segment fault injection
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953)
    - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
    - dlm: fix srcu_read_lock() return type to int
    - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
    - afs: Fix directory format encoding struct
    - afs: Fix cleanup of immediately failed async calls
    - fs: fix proc_handler for sysctl_nr_open
    - block: retry call probe after request_module in blk_request_module
    - pstore/blk: trivial typo fixes
    - nvme: Add error check for xa_store in nvme_get_effects_log
    - selftests/powerpc: Fix argument order to timer_sub()
    - nvme: Add error path for xa_store in nvme_init_effects
    - partitions: ldm: remove the initial kernel-doc notation
    - select: Fix unbalanced user_access_end()
    - nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
    - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
    - perf/core: Save raw sample data conditionally based on sample type
    - sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
    - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
    - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
    - drm/msm/dp: set safe_to_exit_level before printing it
    - drm/etnaviv: Fix page property being used for non writecombine buffers
    - drm/amd/pm: Fix an error handling path in
      vega10_enable_se_edc_force_stall_config()
    - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
    - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
    - drm/rockchip: vop2: Fix the windows switch between different layers
    - drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
    - drm/rockchip: vop2: include rockchip_drm_drv.h
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
    - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
    - drm/msm: Check return value of of_dma_configure()
    - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
    - drm/amdgpu: tear down ttm range manager for doorbell in
      amdgpu_ttm_fini()
    - genirq: Make handle_enforce_irqctx() unconditionally available
    - wifi: ath11k: Fix unexpected return buffer manager error for
      WCN6750/WCN6855
    - wifi: rtlwifi: do not complete firmware loading needlessly
    - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last
      step
    - wifi: rtlwifi: wait for firmware loading before releasing memory
    - wifi: rtlwifi: fix init_sw_vars leak when probe fails
    - wifi: rtlwifi: usb: fix workqueue leak when probe fails
    - net_sched: sch_sfq: annotate data-races around q->perturb_period
    - net_sched: sch_sfq: handle bigger packets
    - spi: zynq-qspi: Add check for clk_enable()
    - dt-bindings: mmc: controller: clarify the address-cells description
    - of: remove internal arguments from of_property_for_each_u32()
    - clk: fix an OF node reference leak in of_clk_get_parent_name()
    - dt-bindings: leds: class-multicolor: Fix path to color definitions
    - wifi: rtlwifi: destroy workqueue at rtl_deinit_core
    - wifi: rtlwifi: pci: wait for firmware loading before releasing memory
    - HID: multitouch: fix support for Goodix PID 0x01e9
    - regulator: dt-bindings: mt6315: Drop regulator-compatible property
    - wifi: brcmfmac: add missing header include for brcmf_dbg
    - ACPI: fan: cleanup resources in the error path of .probe()
    - cpupower: fix TSC MHz calculation
    - dt-bindings: mfd: bd71815: Fix rsense and typos
    - leds: netxbig: Fix an OF node reference leak in
      netxbig_leds_get_of_pdata()
    - inetpeer: remove create argument of inet_getpeer_v[46]()
    - inetpeer: remove create argument of inet_getpeer()
    - inetpeer: update inetpeer timestamp in inet_getpeer()
    - inetpeer: do not get a refcount in inet_getpeer()
    - pwm: stm32-lp: Add check for clk_enable()
    - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
    - gpio: pca953x: log an error when failing to get the reset GPIO
    - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ
      is not available
    - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq*
      clocks
    - clk: imx8mp: Fix clkout1/2 support
    - dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
    - clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
    - clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
    - regulator: of: Implement the unwind path of of_regulator_match()
    - OPP: OF: Fix an OF node leak in _opp_add_static_v2()
    - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
    - wifi: ath12k: fix tx power, max reg power update to firmware
    - clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
    - HID: fix generic desktop D-Pad controls
    - leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
    - mfd: syscon: Remove extern from function prototypes
    - mfd: syscon: Add of_syscon_register_regmap() API
    - mfd: syscon: Use scoped variables with memory allocators to simplify
      error paths
    - mfd: syscon: Fix race in device_node_get_regmap()
    - samples/landlock: Fix possible NULL dereference in parse_path()
    - wifi: wlcore: fix unbalanced pm_runtime calls
    - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
    - wifi: mac80211: fix tid removal during mesh forwarding
    - wifi: mac80211: Fix common size calculation for ML element
    - net/smc: fix data error when recvmsg with MSG_PEEK flag
    - wifi: mt76: mt76u_vendor_request: Do not print error messages when
      -EPROTO
    - wifi: mt76: mt7921: fix using incorrect group cipher after
      disconnection.
    - wifi: mt76: mt7915: fix overflows seen when writing limit attributes
    - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
    - wifi: mt76: mt7915: firmware restart on devices with a second pcie link
    - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
    - wifi: mt76: mt7915: improve hardware restart reliability
    - wifi: mt76: mt7915: fix omac index assignment after hardware reset
    - wifi: mt76: mt7915: fix register mapping
    - wifi: mt76: mt7996: fix register mapping
    - wifi: mt76: mt7996: add max mpdu len capability
    - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
    - wifi: mt76: mt7996: fix HE Phy capability
    - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
    - wifi: mt76: mt7996: fix ldpc setting
    - cpufreq: ACPI: Fix max-frequency computation
    - selftests: timers: clocksource-switch: Adapt progress to kselftest
      framework
    - selftests: harness: fix printing of mismatch values in __EXPECT()
    - wifi: cfg80211: adjust allocation of colocated AP data
    - inet: ipmr: fix data-races
    - clk: analogbits: Fix incorrect calculation of vco rate delta
    - pwm: stm32: Add check for clk_enable()
    - selftests/landlock: Fix error message
    - net/mlxfw: Drop hard coded max FW flash image size
    - octeon_ep: remove firmware stats fetch in ndo_get_stats64
    - netfilter: nf_tables: fix set size with rbtree backend
    - netfilter: nft_flow_offload: update tcp state flags under lock
    - tcp_cubic: fix incorrect HyStart round start detection
    - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is
      missing
    - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
    - libbpf: Fix segfault due to libelf functions not setting errno
    - ASoC: sun4i-spdif: Add clock multiplier settings
    - selftests/bpf: Fix fill_link_info selftest on powerpc
    - crypto: caam - use JobR's space to access page 0 regs
    - perf header: Fix one memory leakage in process_bpf_btf()
    - perf header: Fix one memory leakage in process_bpf_prog_info()
    - perf bpf: Fix two memory leakages when calling
      perf_env__insert_bpf_prog_info()
    - ASoC: renesas: rz-ssi: Use only the proper amount of dividers
    - perf expr: Initialize is_test value in expr__ctx_new()
    - ktest.pl: Remove unused declarations in run_bisect_test function
    - crypto: hisilicon/sec2 - fix for aead icv error
    - crypto: hisilicon/sec2 - fix for aead invalid authsize
    - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
    - ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
    - ALSA: seq: Make dependency on UMP clearer
    - padata: fix sysfs store callback check
    - perf top: Don't complain about lack of vmlinux when not resolving some
      kernel samples
    - perf machine: Don't ignore _etext when not a text symbol
    - perf namespaces: Introduce nsinfo__set_in_pidns()
    - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
    - ASoC: Intel: avs: Prefix SKL/APL-specific members
    - ASoC: Intel: avs: Abstract IPC handling
    - ASoC: Intel: avs: Do not readq() u32 registers
    - ASoC: Intel: avs: Fix theoretical infinite loop
    - perf report: Fix misleading help message about --demangle
    - pinctrl: stm32: Add check for clk_enable()
    - pinctrl: amd: Take suspend type into consideration which pins are non-
      wake
    - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
    - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire
      A115-31 laptop
    - perf lock: Fix parse_lock_type which only retrieve one lock flag
    - padata: add pd get/put refcnt helper
    - cifs: Use cifs_autodisable_serverino() for disabling
      CIFS_MOUNT_SERVER_INUM in readdir.c
    - soc: atmel: fix device_node release in atmel_soc_device_init()
    - ARM: at91: pm: change BU Power Switch to automatic mode
    - arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
    - arm64: dts: mt8183: set DMIC one-wire mode on Damu
    - arm64: dts: mediatek: mt8516: fix GICv2 range
    - arm64: dts: mediatek: mt8516: fix wdt irq type
    - arm64: dts: mediatek: mt8516: add i2c clock-div property
    - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
    - ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
    - RDMA/mlx4: Avoid false error about access to uninitialized gids array
    - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
    - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
    - ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
    - ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan
      boards
    - ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
    - arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
    - RDMA/rxe: Improve newline in printing messages
    - RDMA/rxe: Fix mismatched max_msg_sz
    - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
    - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
    - RDMA/srp: Fix error handling in srp_add_port
    - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
    - ARM: dts: stm32: Deduplicate serial aliases and chosen node for
      STM32MP15xx DHCOM SoM
    - ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage
      settings
    - arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
    - arm64: dts: qcom: move common parts for sa8775p-ride variants into a
      .dtsi
    - arm64: dts: qcom: sa8775p: Update sleep_clk frequency
    - arm64: dts: qcom: msm8996: Fix up USB3 interrupts
    - arm64: dts: qcom: msm8994: Describe USB interrupts
    - arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
    - arm64: dts: qcom: msm8916: correct sleep clock frequency
    - arm64: dts: qcom: msm8939: correct sleep clock frequency
    - arm64: dts: qcom: msm8994: correct sleep clock frequency
    - arm64: dts: qcom: qcs404: correct sleep clock frequency
    - arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
    - arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
    - arm64: dts: qcom: sc7280: correct sleep clock frequency
    - arm64: dts: qcom: sdx75: correct sleep clock frequency
    - arm64: dts: qcom: sm4450: correct sleep clock frequency
    - arm64: dts: qcom: sm6125: correct sleep clock frequency
    - arm64: dts: qcom: sm6375: correct sleep clock frequency
    - arm64: dts: qcom: sm8250: correct sleep clock frequency
    - arm64: dts: qcom: sm8350: correct sleep clock frequency
    - arm64: dts: qcom: sm8450: correct sleep clock frequency
    - ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0
      node
    - arm64: dts: ti: k3-am62: Remove duplicate GICR reg
    - arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
    - arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
    - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
    - ARM: omap1: Fix up the Retu IRQ on Nokia 770
    - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine
      riser to dtso
    - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled
      ov7251 camera
    - arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
    - arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
    - arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
    - arm64: dts: qcom: sc7180: change labels to lower-case
    - arm64: dts: qcom: sc7180: fix psci power domain node names
    - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280
      properties
    - arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
    - dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
    - arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
    - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
    - arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
    - ARM: dts: mediatek: mt7623: fix IR nodename
    - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
    - arm64: tegra: Fix DMA ID for SPI2
    - i3c: dw: Add hot-join support.
    - RDMA/mlx5: Fix indirect mkey ODP page count
    - of: reserved-memory: Do not make kmemleak ignore freed address
    - efi: sysfb_efi: fix W=1 warnings when EFI is not set
    - spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
    - media: rc: iguanair: handle timeouts
    - media: lmedm04: Handle errors for lme2510_int_read
    - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
    - media: marvell: Add check for clk_enable()
    - media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
    - media: i2c: imx412: Add missing newline to prints
    - media: i2c: ov9282: Correct the exposure offset
    - media: mipi-csis: Add check for clk_enable()
    - media: camif-core: Add check for clk_enable()
    - media: uvcvideo: Propagate buf->error to userspace
    - mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
    - mtd: hyperbus: hbmc-am654: fix an OF node reference leak
    - media: nxp: imx8-isi: fix v4l2-compliance test errors
    - watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
    - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
    - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
      af9035_i2c_master_xfer
    - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
    - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
    - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
    - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
    - ocfs2: mark dquot as inactive if failed to start trans while releasing
      dquot
    - module: Extend the preempt disabled section in
      dereference_symbol_descriptor().
    - serial: 8250: Adjust the timeout for FIFO mode
    - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
    - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
    - tools/bootconfig: Fix the wrong format specifier
    - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
    - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
    - rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
    - regulator: core: Add missing newline character
    - gpio: mxc: remove dead code after switch to DT-only
    - net: fec: implement TSO descriptor cleanup
    - PM: hibernate: Add error handling for syscore_suspend()
    - iavf: allow changing VLAN state without calling PF
    - net: netdevsim: try to close UDP port harness races
    - ptp: Properly handle compat ioctls
    - net: stmmac: Limit the number of MTL queues to hardware capability
    - net: stmmac: Limit FIFO size by hardware capability
    - perf trace: Fix runtime error of index out of bounds
    - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
    - vsock: Allow retrying on connect() failure
    - bgmac: reduce max frame size to support just MTU 1500
    - net: sh_eth: Fix missing rtnl lock in suspend/resume path
    - genksyms: fix memory leak when the same symbol is added from source
    - genksyms: fix memory leak when the same symbol is read from *.symref
      file
    - RISC-V: Mark riscv_v_init() as __init
    - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
    - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
    - cifs: Fix getting and setting SACLs over SMB1
    - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
    - kconfig: fix memory leak in sym_warn_unmet_dep()
    - hexagon: fix using plain integer as NULL pointer warning in cmpxchg
    - hexagon: Fix unbalanced spinlock in die()
    - f2fs: Introduce linear search for dentries
    - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC
      messages"
    - kbuild: switch from lz4c to lz4 for compression
    - selftests/rseq: Fix handling of glibc without rseq support
    - ktest.pl: Check kernelrelease return in get_version
    - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
    - usb: gadget: f_tcm: Fix Get/SetInterface return value
    - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
    - usb: dwc3: core: Defer the probe until USB power supply ready
    - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to
      PD_T_SENDER_RESPONSE
    - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR
      PPS
    - btrfs: output the reason for open_ctree() failure
    - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
    - LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
    - block: copy back bounce buffer to user-space correctly in case of split
    - nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
    - sched/fair: Untangle NEXT_BUDDY and pick_next_task()
    - sched: Fix race between yield_to() and try_to_wake_up()
    - drm/v3d: Fix performance counter source settings on V3D 7.x
    - drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
    - drm/rockchip: vop2: Set AXI id for rk3588
    - drm/rockchip: vop2: Setup delay cycle for Esmart2/3
    - drm/rockchip: vop2: Add check for 32 bpp format for rk3588
    - drm/msm/dpu: provide DSPP and correct LM config for SDM670
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
    - drm/msm: don't clean up priv->kms prematurely
    - drm/msm/mdp4: correct LCDC regulator name
    - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
    - selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
    - selftests: ktap_helpers: Fix uninitialized variable
    - inet: constify inet_sk_bound_dev_eq() net parameter
    - inet: constify 'struct net' parameter of various lookup helpers
    - udp: constify 'struct net' parameter of socket lookups
    - inet6: constify 'struct net' parameter of various lookup helpers
    - ipv6: udp: constify 'struct net' parameter of socket lookups
    - dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
    - dt-bindings: clock: Add i.MX91 clock support
    - dt-bindings: clock: imx93: Add SPDIF IPG clk
    - clk: imx93: Move IMX93_CLK_END macro to clk driver
    - clk: imx: add i.MX91 clk
    - clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
    - arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
    - clk: imx: Apply some clks only for i.MX93
    - wifi: rtw89: mcc: consider time limits not divisible by 1024
    - wifi: iwlwifi: cleanup uefi variables loading
    - wifi: iwlwifi: fw: read STEP table from correct UEFI var
    - wifi: mt76: mt7996: fix overflows seen when writing limit attributes
    - wifi: mt76: mt7996: fix definition of tx descriptor
    - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
    - platform/mellanox: mlxbf-pmc: incorrect type in assignment
    - platform/x86: x86-android-tablets: make platform data be static
    - crypto: api - Fix boot-up self-test race
    - pinctrl: nomadik: Add check for clk_enable()
    - rhashtable: Fix potential deadlock by moving schedule_work outside lock
    - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to
      'async'
    - perf maps: Fix display of kernel symbols
    - perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf
      tarball
    - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
    - tools: Sync if_xdp.h uapi tooling header
    - rhashtable: Fix rhashtable_try_insert test
    - ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
    - arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
    - arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible
      property
    - arm64: dts: qcom: sm8550: correct sleep clock frequency
    - arm64: dts: qcom: sm8650: correct sleep clock frequency
    - arm64: dts: qcom: x1e80100: correct sleep clock frequency
    - ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0
      node
    - RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
    - [Config] updateconfigs for INFINIBAND_HNS
    - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
    - iommu: iommufd: fix WARNING in iommufd_device_unbind
    - remoteproc: mtk_scp: Only populate devices for SCP cores
    - PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
    - PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
    - PCI: microchip: Add support for using either Root Port 1 or 2
    - PCI: microchip: Set inbound address translation for coherent or non-
      coherent mode
    - erofs: get rid of erofs_{find,insert}_workgroup
    - erofs: move erofs_workgroup operations into zdata.c
    - erofs: sunset `struct erofs_workgroup`
    - erofs: fix potential return value overflow of z_erofs_shrink_scan()
    - tty: mips_ejtag_fdc: fix one more u8 warning
    - xfrm: Add support for per cpu xfrm state handling.
    - xfrm: Cache used outbound xfrm states at the policy.
    - xfrm: Add an inbound percpu state cache.
    - xfrm: Don't disable preemption while looking up cache state.
    - idpf: add read memory barrier when checking descriptor done bit
    - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
    - tools: ynl: c: correct reverse decode of empty attrs
    - selftests: mptcp: extend CFLAGS to keep options from environment
    - selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from
      environment
    - net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts
      in
    - ethtool: Fix set RXNFC command with symmetric RSS hash
    - tools/power turbostat: Fix forked child affinity regression
    - md: add a new callback pers->bitmap_sector()
    - md/raid5: implement pers->bitmap_sector()
    - xfs: check for dead buffers in xfs_buf_find_insert
    - xfs: don't shut down the filesystem for media failures beyond end of log
    - usb: dwc3: Skip resume if pm_runtime_set_active() fails
    - clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
    - xfrm: Add error handling when nla_put_u32() returns an error
    - xfrm: Fix acquire state insertion.
    - ethtool: Fix access to uninitialized fields in set RXNFC command
    - ASoC: da7213: Initialize the mutex
    - drm/amd/display: Add hubp cache reset when powergating
    - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
    - ethtool: ntuple: fix rss + ring_cookie check
    - Upstream stable to v6.6.76, v6.12.13
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57975
    - btrfs: do proper folio cleanup when run_delalloc_nocow() failed
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21714
    - RDMA/mlx5: Fix implicit ODP use after free
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21801
    - net: ravb: Fix missing rtnl lock in suspend/resume path
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21809
    - rxrpc, afs: Fix peer hash locking vs RCU callback
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58057
    - idpf: convert workqueues to unbound
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57953
    - rtc: tps6594: Fix integer overflow on 32bit systems
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57982
    - xfrm: state: fix out-of-bounds read during lookup
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21721
    - nilfs2: handle errors that nilfs_prepare_chunk() may return
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21722
    - nilfs2: do not force clear folio if buffer is referenced
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21798
    - firewire: test: Fix potential null dereference in firewire kunit test
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21723
    - scsi: mpi3mr: Fix possible crash when setting up bsg fails
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21724
    - iommufd/iova_bitmap: Fix shift-out-of-bounds in
      iova_bitmap_offset_to_index()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21825
    - bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57990
    - wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57974
    - udp: Deal with race between UDP socket address change and rehash
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57994
    - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57999
    - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58054
    - staging: media: max96712: fix kernel oops when removing module
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58055
    - usb: gadget: f_tcm: Don't free command immediately
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57979
    - pps: Fix a use-after-free
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57980
    - media: uvcvideo: Fix double free in error path
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58056
    - remoteproc: core: Fix ida_free call while not allocated
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21705
    - mptcp: handle fastopen disconnect correctly
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21707
    - mptcp: consolidate suboption status
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57981
    - usb: xhci: Fix NULL pointer dereference on certain command aborts
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21708
    - net: usb: rtl8150: enable basic endpoint checking
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21826
    - netfilter: nf_tables: reject mismatching sum of field_len with set key
      length
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21808
    - net: xdp: Disallow attaching device-bound programs in generic mode
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21710
    - tcp: correct handling of extreme memory squeeze
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21715
    - net: davicom: fix UAF in dm9000_drv_remove
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21716
    - vxlan: Fix uninit-value in vxlan_vnifilter_dump()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21718
    - net: rose: fix timer races against user threads
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21719
    - ipmr: do not call mr_mfc_uses_dev() for unres entries
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21802
    - net: hns3: fix oops when unload drivers paralleling
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58058
    - ubifs: skip dumping tnc tree when zroot is null
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58069
    - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21720
    - xfrm: delete intermediate secpath entry in packet offload mode
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21803
    - LoongArch: Fix warnings during S3 suspend
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21810
    - driver core: class: Fix wild pointer dereferences in API
      class_dev_iter_next()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21811
    - nilfs2: protect access to buffers with no active references
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21804
    - PCI: rcar-ep: Fix incorrect variable used when calling
      devm_request_mem_region()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21829
    - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57984
    - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race
      condition
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58034
    - memory: tegra20-emc: fix an OF node reference bug in
      tegra_emc_find_node_by_ram_code()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57973
    - rdma/cxgb4: Prevent potential integer overflow on 32bit
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21725
    - smb: client: fix oops due to unset link speed
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21726
    - padata: avoid UAF for reorder_work
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21727
    - padata: fix UAF in padata_reorder
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21728
    - bpf: Send signals asynchronously if !preemptible
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58070
    - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21711
    - net/rose: prevent integer overflows in rose_setsockopt()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21799
    - net: ethernet: ti: am65-cpsw: fix freeing IRQ in
      am65_cpsw_nuss_remove_tx_chns()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21806
    - net: let net.core.dev_weight always be non-zero
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21830
    - landlock: Handle weird files
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21828
    - wifi: mac80211: don't flush non-uploaded STAs
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58061
    - wifi: mac80211: prohibit deactivating all links
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57993
    - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding
      endpoint check
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21812
    - ax25: rcu protect dev->ax25_ptr
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58071
    - team: prevent adding a device which is already a team device lower
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58063
    - wifi: rtlwifi: fix memory leaks and invalid access at probe error path
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58072
    - wifi: rtlwifi: remove unused check_buddy_priv
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58053
    - rxrpc: Fix handling of received connection abort
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57996
    - net_sched: sch_sfq: don't allow 1 packet limit
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57997
    - wifi: wcn36xx: fix channel survey memory allocation size
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58051
    - ipmi: ipmb: Add check devm_kasprintf() returned value
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58068
    - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57998
    - OPP: add index check to assert to avoid buffer overflow in _read_freq()
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-58052
    - drm/amdgpu: Fix potential NULL pointer dereference in
      atomctrl_get_smc_sclk_range_table
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2024-57986
    - HID: core: Fix assumption that Resolution Multipliers must be in Logical
      Collections
  * Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
    CVE-2025-21731
    - nbd: don't allow reconnect after disconnect
  * CVE-2025-37798
    - sch_htb: make htb_qlen_notify() idempotent
    - sch_htb: make htb_deactivate() idempotent
    - sch_drr: make drr_qlen_notify() idempotent
    - sch_hfsc: make hfsc_qlen_notify() idempotent
    - sch_qfq: make qfq_qlen_notify() idempotent
    - sch_ets: make est_qlen_notify() idempotent
    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  * CVE-2025-37997
    - netfilter: ipset: fix region locking in hash types
  * CVE-2025-22088
    - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
  * CVE-2025-37890
    - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
      qdisc
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  * raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
    - md/raid1: Add check for missing source disk in process_checks()
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update annotations scripts

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 25 Jun 2025 09:24:09 -0500

linux-nvidia (6.8.0-1030.33) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1030.33 -proposed tracker (LP: #2114327)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  [ Ubuntu: 6.8.0-63.66 ]

  * noble/linux: 6.8.0-63.66 -proposed tracker (LP: #2114341)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update annotations scripts
  * CVE-2025-37798
    - sch_htb: make htb_qlen_notify() idempotent
    - sch_htb: make htb_deactivate() idempotent
    - sch_drr: make drr_qlen_notify() idempotent
    - sch_hfsc: make hfsc_qlen_notify() idempotent
    - sch_qfq: make qfq_qlen_notify() idempotent
    - sch_ets: make est_qlen_notify() idempotent
    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  * CVE-2025-37997
    - netfilter: ipset: fix region locking in hash types
  * CVE-2025-22088
    - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
  * CVE-2025-37890
    - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
      qdisc
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  * raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
    - md/raid1: Add check for missing source disk in process_checks()

 -- Abdur Rahman <abdur.rahman@canonical.com>  Wed, 18 Jun 2025 10:40:18 -0400

linux-nvidia (6.8.0-1029.32) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1029.32 -proposed tracker (LP: #2110720)

  * Backport: perf: arm_cspmu: nvidia: update event list and filter
    (LP: #2109872)
    - perf: arm_cspmu: nvidia: remove unsupported SCF events
    - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc
    - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering
    - perf: arm_cspmu: nvidia: monitor all ports by default

  * Seeing warning with i2c_tegra (LP: #2109750)
    - i2c: tegra: check msg length in SMBUS block read

  * nvidia: take out the sbsa_gwdt of the blacklist (LP: #2109635)
    - NVIDIA: [Packaging] Take out the sbsa_gwdt from the blacklist

  [ Ubuntu: 6.8.0-62.65 ]

  * noble/linux: 6.8.0-62.65 -proposed tracker (LP: #2110737)
  * Rotate the Canonical Livepatch key (LP: #2111244)
    - [Config] Prepare for Canonical Livepatch key rotation
  * KVM bug causes Firecracker crash when it runs the vCPU for the first time
    (LP: #2109859)
    - vhost: return task creation error instead of NULL
    - kvm: retry nx_huge_page_recovery_thread creation
  * CVE-2025-2312 cifs.upcall could access incorrect kerberos credentials cache
    (LP: #2099914) // CVE-2025-2312
    - CIFS: New mount option for cifs.upcall namespace resolution
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640)
    - ASoC: wm8994: Add depends on MFD core
    - ASoC: samsung: Add missing selects for MFD_WM8994
    - seccomp: Stub for !CONFIG_SECCOMP
    - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
    - of/unittest: Add test that of_address_to_resource() fails on non-
      translatable address
    - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
    - hwmon: (drivetemp) Set scsi command timeout to 10s
    - ASoC: samsung: Add missing depends on I2C
    - ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
    - Revert "libfs: fix infinite directory reads for offset dir"
    - libfs: Replace simple_offset end-of-directory detection
    - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
    - ALSA: usb-audio: Add delay quirk for USB Audio Device
    - Input: xpad - add support for Nacon Pro Compact
    - Input: atkbd - map F23 key to support default copilot shortcut
    - Input: xpad - add unofficial Xbox 360 wireless receiver clone
    - Input: xpad - add QH Electronics VID/PID
    - Input: xpad - improve name of 8BitDo controller 2dc8:3106
    - Input: xpad - add support for Nacon Evol-X Xbox One Controller
    - Input: xpad - add support for wooting two he (arm)
    - ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK
    - ASoC: cs42l43: Add codec force suspend/resume ops
    - ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5
    - libfs: Return ENOSPC when the directory offset range is exhausted
    - Revert "libfs: Add simple_offset_empty()"
    - libfs: Use d_children list to iterate simple_offset directories
    - wifi: rtl8xxxu: add more missing rtl8192cu USB IDs
    - HID: wacom: Initialize brightness of LED trigger
    - Upstream stable to v6.6.75, v6.12.12
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
    CVE-2025-21689
    - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
    CVE-2025-21690
    - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
    CVE-2025-21691
    - cachestat: fix page cache statistics permission checking
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
    CVE-2025-21692
    - net: sched: fix ets qdisc OOB Indexing
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
    CVE-2025-21699
    - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
  * Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
    CVE-2024-50157
    - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
  * rtw89: Support hardware rfkill (LP: #2077384)
    - wifi: rtw89: add support for hardware rfkill
  * Introduce configfs-based interface for gpio-aggregator (LP: #2103496)
    - gpio: introduce utilities for synchronous fake device creation
    - bitmap: Define a cleanup function for bitmaps
    - gpio: aggregator: simplify aggr_parse() with scoped bitmap
    - gpio: aggregator: protect driver attr handlers against module unload
    - gpio: aggregator: reorder functions to prepare for configfs introduction
    - gpio: aggregator: unify function naming
    - gpio: aggregator: add gpio_aggregator_{alloc, free}()
    - gpio: aggregator: introduce basic configfs interface
    - [Config] Enable DEV_SYNC_PROBE as module
    - SAUCE: gpio: aggregator: Fix error code in gpio_aggregator_activate()
    - gpio: aggregator: rename 'name' to 'key' in gpio_aggregator_parse()
    - gpio: aggregator: expose aggregator created via legacy sysfs to configfs
    - SAUCE: gpio: aggregator: fix "_sysfs" prefix check in
      gpio_aggregator_make_group()
    - SAUCE: gpio: aggregator: Fix gpio_aggregator_line_alloc() checking
    - SAUCE: gpio: aggregator: Return an error if there are no GPIOs in
      gpio_aggregator_parse()
    - SAUCE: gpio: aggregator: Fix leak in gpio_aggregator_parse()
    - gpio: aggregator: cancel deferred probe for devices created via configfs
    - Documentation: gpio: document configfs interface for gpio-aggregator
    - selftests: gpio: add test cases for gpio-aggregator
    - SAUCE: selftests: gpio: gpio-aggregator: add a test case for _sysfs prefix
      reservation
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449)
    - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
    - net: add exit_batch_rtnl() method
    - gtp: use exit_batch_rtnl() method
    - gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
    - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
    - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
    - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
    - net/mlx5: Fix RDMA TX steering prio
    - net/mlx5e: Rely on reqid in IPsec tunnel mode
    - net/mlx5e: Always start IPsec sequence number from 1
    - drm/vmwgfx: Add new keep_resv BO param
    - drm/v3d: Assign job pointer to NULL before signaling the fence
    - soc: ti: pruss: Fix pruss APIs
    - hwmon: (tmp513) Fix division of negative numbers
    - i2c: mux: demux-pinctrl: check initial mux selection, too
    - i2c: rcar: fix NACK handling when being a target
    - hfs: Sanity check the root record
    - fs: fix missing declaration of init_files
    - kheaders: Ignore silly-rename files
    - cachefiles: Parse the "secctx" immediately
    - scsi: ufs: core: Honor runtime/system PM levels if set by host controller
      drivers
    - selftests: tc-testing: reduce rshift value
    - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
    - poll_wait: add mb() to fix theoretical race between waitqueue_active() and
      .poll()
    - RDMA/bnxt_re: Fix to export port num to ib_query_qp
    - nvmet: propagate npwg topology
    - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
    - i2c: atr: Fix client detach
    - mptcp: be sure to send ack when mptcp-level window re-opens
    - mptcp: fix spurious wake-up on under memory pressure
    - selftests: mptcp: avoid spurious errors on disconnect
    - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
    - vsock/virtio: cancel close work in the destructor
    - vsock: reset socket state when de-assigning the transport
    - nouveau/fence: handle cross device fences properly
    - irqchip: Plug a OF node reference leak in platform_irqchip_probe()
    - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
    - drm/i915/fb: Relax clear color alignment to 64 bytes
    - drm/amdgpu: always sync the GFX pipe on ctx switch
    - ocfs2: fix deadlock in ocfs2_get_system_file_inode
    - nfsd: add list_head nf_gc to struct nfsd_file
    - x86/xen: fix SLS mitigation in xen_hypercall_iret()
    - efi/zboot: Limit compression options to GZIP and ZSTD
    - [Config] updateconfigs for HAVE_KERNEL_(LZ4|LZMA|LZO|XZ)
    - net: ravb: Fix max TX frame size for RZ/V2M
    - net/mlx5: SF, Fix add port error handling
    - drm/vmwgfx: Unreserve BO on error
    - i2c: testunit: on errors, repeat NACK until STOP
    - hwmon: (ltc2991) Fix mixed signed/unsigned in DIV_ROUND_CLOSEST
    - fs/qnx6: Fix building with GCC 15
    - gpio: sim: lock up configfs that an instantiated device depends on
    - gpio: sim: lock hog configfs items if present
    - platform/x86: ISST: Add Clearwater Forest to support list
    - drm/nouveau/disp: Fix missing backlight control on Macbook 5,1
    - net/ncsi: fix locking in Get MAC Address handling
    - drm/amd/display: Do not elevate mem_type change to full update
    - drm/xe: Mark ComputeCS read mode as UC on iGPU
    - drm/amdgpu/smu13: update powersave optimizations
    - drm/amdgpu: fix fw attestation for MP0_14_0_{2/3}
    - drm/amdgpu: disable gfxoff with the compute workload on gfx12
    - drm/amd/display: Fix PSR-SU not support but still call the
      amdgpu_dm_psr_enable
    - Upstream stable to v6.6.73, v6.6.74, v6.12.11
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21672
    - afs: Fix merge preference rule failure condition
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21682
    - eth: bnxt: always recalculate features after XDP clearing, fix null-deref
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2024-53124
    - net: fix data-races around sk->sk_forward_alloc
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2024-57924
    - fs: relax assertions on failure to encode file handles
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2024-57951
    - hrtimers: Handle CPU state correctly on hotplug
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2024-57949
    - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21668
    - pmdomain: imx8mp-blk-ctrl: add missing loop break condition
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21684
    - gpio: xilinx: Convert gpio_lock to raw spinlock
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21694
    - fs/proc: fix softlockup in __read_vmcore (part 2)
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21665
    - filemap: avoid truncating 64-bit offset to 32 bits
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21666
    - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21669
    - vsock/virtio: discard packets if the transport changes
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21670
    - vsock/bpf: return early if transport is not assigned
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21667
    - iomap: avoid avoid truncating 64-bit offset to 32 bits
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2024-57948
    - mac802154: check local interfaces before deleting sdata list
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21673
    - smb: client: fix double free of TCP_Server_Info::hostname
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21697
    - drm/v3d: Ensure job pointer is set to NULL after job completion
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21674
    - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21675
    - net/mlx5: Clear port select structure when fail to create
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21676
    - net: fec: handle page_pool_dev_alloc_pages error
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21678
    - gtp: Destroy device along with udp socket's netns dismantle.
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21680
    - pktgen: Avoid out-of-bounds access in get_imix_entries
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21681
    - openvswitch: fix lockup on tx to unregistering netdev with carrier
  * Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
    CVE-2025-21683
    - bpf: Fix bpf_sk_select_reuseport() memory leak
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 23 May 2025 15:46:47 -0500

linux-nvidia (6.8.0-1028.31) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1028.31 -proposed tracker (LP: #2107124)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2025.04.14)

  * warning at iommu_dma_unmap_page when running ibv_rc_pingpong (LP: #2107816)
    - RDMA/mlx5: Fix a WARN during dereg_mr for DM type

  * Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (LP: #2102674)
    - Revert "UBUNTU: SAUCE: efi: efi_get_memory_map -- increase map headroom"
    - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32

  [ Ubuntu: 6.8.0-60.63 ]

  * noble/linux: 6.8.0-60.63 -proposed tracker (LP: #2107138)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.04.14)
  * Missing upstream commits for LP: #2102181 (LP: #2107336)
    - libperf cpumap: Add any, empty and min helpers
    - libperf cpumap: Ensure empty cpumap is NULL from alloc
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770)
    - memblock: use numa_valid_node() helper to check for invalid node ID
    - jbd2: increase IO priority for writing revoke records
    - jbd2: flush filesystem device before updating tail sequence
    - dm array: fix unreleased btree blocks on closing a faulty array cursor
    - dm array: fix cursor index when skipping across block boundaries
    - exfat: fix the infinite loop in __exfat_free_cluster()
    - erofs: fix PSI memstall accounting
    - ASoC: rt722: add delay time to wait for the calibration procedure
    - ASoC: mediatek: disable buffer pre-allocation
    - selftests/alsa: Fix circular dependency involving global-timer
    - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
    - net: 802: LLC+SNAP OID:PID lookup on start of skb data
    - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
    - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
    - net: libwx: fix firmware mailbox abnormal return
    - pds_core: limit loop over fw name list
    - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
    - cxgb4: Avoid removal of uninserted tid
    - ice: fix incorrect PHY settings for 100 GB/s
    - igc: return early when failing to read EECD register
    - tls: Fix tls_sw_sendmsg error handling
    - eth: gve: use appropriate helper to set xdp_features
    - Bluetooth: hci_sync: Fix not setting Random Address when required
    - Bluetooth: MGMT: Fix Add Device to responding before completing
    - Bluetooth: btnxpuart: Fix driver sending truncated data
    - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
    - riscv: Fix early ftrace nop patching
    - memblock tests: fix implicit declaration of function 'numa_valid_node'
    - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
    - netfilter: nf_tables: imbalance in flowtable binding
    - drm/mediatek: stop selecting foreign drivers
    - [Config] updateconfigs for MTK_SMI
    - drm/mediatek: Fix YCbCr422 color format issue for DP
    - drm/mediatek: Fix mode valid issue for dp
    - drm/mediatek: Add return value check when reading DPCD
    - cpuidle: riscv-sbi: fix device node release in early exit of
      for_each_possible_cpu
    - scsi: ufs: qcom: Power off the PHY if it was already powered on in
      ufs_qcom_power_up_sequence()
    - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
    - ksmbd: Implement new SMB3 POSIX type
    - thermal: of: fix OF node leak in of_thermal_zone_find()
    - smb: client: sync the root session and superblock context passwords before
      automounting
    - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
    - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
    - drm/amd/display: increase MAX_SURFACES to the value supported by hw
    - io_uring/timeout: fix multishot updates
    - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
    - USB: serial: option: add MeiG Smart SRM815
    - USB: serial: option: add Neoway N723-EA support
    - staging: iio: ad9834: Correct phase range check
    - staging: iio: ad9832: Correct phase range check
    - usb-storage: Add max sectors quirk for Nokia 208
    - USB: serial: cp210x: add Phoenix Contact UPS Device
    - usb: dwc3: gadget: fix writing NYET threshold
    - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set
      config
    - tty: serial: 8250: Fix another runtime PM usage counter underflow
    - usb: dwc3-am62: Disable autosuspend during remove
    - USB: usblp: return error when setting unsupported protocol
    - USB: core: Disable LPM only for non-suspended ports
    - usb: fix reference leak in usb_new_device()
    - usb: gadget: midi2: Reverse-select at the right place
    - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in
      the error path of .probe()
    - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
    - usb: typec: tcpm/tcpci_maxim: fix error code in
      max_contaminant_read_resistance_kohm()
    - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
    - iio: gyro: fxas21002c: Fix missing data update in trigger handler
    - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
    - iio: inkern: call iio_device_put() only on mapped devices
    - iio: adc: ad7124: Disable all channels at probe time
    - riscv: kprobes: Fix incorrect address calculation
    - ARM: dts: imxrt1050: Fix clocks for mmc
    - arm64: dts: rockchip: add hevc power domain clock to rk3328
    - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
    - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
    - workqueue: Add rcu lock check at the end of work item execution
    - workqueue: Update lock debugging code
    - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
    - riscv: Fix text patching when IPI are used
    - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
    - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
    - net: don't dump Tx and uninitialized NAPIs
    - ice: fix max values for dpll pin phase adjust
    - net: hns3: fixed reset failure issues caused by the incorrect reset type
    - net: hns3: fix missing features due to dev->features configuration too early
    - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
    - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
    - mctp i3c: fix MCTP I3C driver multi-thread issue
    - drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
    - drm/mediatek: Add support for 180-degree rotation in the display driver
    - drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
    - platform/x86: intel/pmc: Fix ioremap() of bad address
    - riscv: module: remove relocation_head rel_entry member allocation
    - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
    - fs: kill MNT_ONRB
    - gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
    - drm/amd/pm: fix BUG: scheduling while atomic
    - drm/amdkfd: wq_release signals dma_fence only when available
    - drm/amd/display: fix divide error in DM plane scale calcs
    - drm/amd/display: fix page fault due to max surface definition mismatch
    - serial: stm32: use port lock wrappers for break control
    - usb: host: xhci-plat: set skip_phy_initialization if software node has
      XHCI_SKIP_PHY_INIT property
    - iio: imu: inv_icm42600: add register caching in the regmap
    - iio: imu: inv_icm42600: fix spi burst write not supported
    - Upstream stable to v6.6.71, v6.6.72, v6.12.10
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21659
    - netdev: prevent accessing NAPI instances from another namespace
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21634
    - cgroup/cpuset: remove kernfs active break
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21635
    - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21643
    - netfs: Fix kernel async DIO
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21649
    - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21650
    - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21651
    - net: hns3: don't auto enable misc vector
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21654
    - ovl: support encoding fid from inode with no alias
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57883
    - mm: hugetlb: independent PMD page table shared count
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57888
    - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from
      !WQ_MEM_RECLAIM worker
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21631
    - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21656
    - hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21655
    - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57904
    - iio: adc: at91: call input_free_device() on allocated iio_dev
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57906
    - iio: adc: ti-ads8688: fix information leak in triggered buffer
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57907
    - iio: adc: rockchip_saradc: fix information leak in triggered buffer
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57908
    - iio: imu: kmx61: fix information leak in triggered buffer
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57910
    - iio: light: vcnl4035: fix information leak in triggered buffer
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57911
    - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered
      buffer
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57912
    - iio: pressure: zpa2326: fix information leak in triggered buffer
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57913
    - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21632
    - x86/fpu: Ensure shadow stack is active before "getting" registers
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57916
    - misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57917
    - topology: Keep the cpumask unchanged when printing cpumap
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57939
    - riscv: Fix sleeping in invalid context in die()
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21636
    - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21637
    - sctp: sysctl: udp_port: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21638
    - sctp: sysctl: auth_enable: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21639
    - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21640
    - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21642
    - mptcp: sysctl: sched: avoid using current->nsproxy
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21664
    - dm thin: make get_first_thin use rcu-safe list first function
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57945
    - riscv: mm: Fix the out of bound issue of vmemmap address
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21660
    - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21645
    - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled
      it
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21646
    - afs: Fix the maximum cell name length
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57925
    - ksmbd: fix a missing return value check bug
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57926
    - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind
      returns err
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21662
    - net/mlx5: Fix variable not being completed when function returns
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21663
    - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21647
    - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21648
    - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21652
    - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21658
    - btrfs: avoid NULL pointer dereference if no valid extent tree
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2025-21653
    - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-47736
    - erofs: handle overlapped pclusters out of crafted images properly
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57940
    - exfat: fix the infinite loop in exfat_readdir()
  * Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
    CVE-2024-57929
    - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  * intel_idle: add Granite Rapids Xeon (D) support (LP: #2106638)
    - intel_idle: add Granite Rapids Xeon support
    - intel_idle: add Granite Rapids Xeon D support
  * [SRU] Enable speaker/mic mute LEDs on Lenovo ideapad and thinkbook
    (LP: #2106449)
    - ALSA: hda: Support for Ideapad hotkey mute LEDs
    - platform/x86:lenovo-wmi-hotkey-utilities.c: Support for mic and audio mute
      LEDs
    - [Config] Enable Lenovo wmi hotkey driver
  * Backport "PCI: Wait for device readiness with Configuration RRS" to N/O
    (LP: #2106251)
    - PCI: Wait for device readiness with Configuration RRS
    - PCI: Avoid FLR for Mediatek MT7922 WiFi
  * Enable OOB P-state control for Intel Sierra Forest/Granite Rapids
    (LP: #2106275)
    - cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
  * mptcp BUG 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
    (LP: #2101120)
    - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  * CVE-2025-21971
    - net_sched: Prevent creation of classes with TC_H_ROOT
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632)
    - smb/client: rename cifs_ntsd to smb_ntsd
    - smb/client: rename cifs_sid to smb_sid
    - smb/client: rename cifs_acl to smb_acl
    - smb/client: rename cifs_ace to smb_ace
    - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
    - smb: client: stop flooding dmesg in smb2_calc_signature()
    - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
    - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
    - watchdog: rzg2l_wdt: Remove reset de-assert from probe
    - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
    - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
    - ALSA: ump: Use guard() for locking
    - ALSA: ump: Don't open legacy substream for an inactive group
    - scsi: mpi3mr: Use ida to manage mrioc ID
    - scsi: mpi3mr: Start controller indexing from 0
    - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
    - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
    - x86/ptrace: Cleanup the definition of the pt_regs structure
    - x86/ptrace: Add FRED additional information to the pt_regs structure
    - Bluetooth: btusb: add callback function in btusb suspend/resume
    - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
    - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
    - mmc: sdhci-msm: fix crypto key eviction
    - tracing: Handle old buffer mappings for event strings and functions
    - tracing: Fix trace_check_vprintf() when tp_printk is used
    - tracing: Check "%s" dereference via the field and not the TP_printk format
    - RDMA/bnxt_re: Allow MSN table capability check
    - RDMA/bnxt_re: Remove always true dattr validity check
    - RDMA/mlx5: Enforce same type port association for multiport RoCE
    - RDMA/bnxt_re: Avoid initializing the software queue for user queues
    - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
    - nvme-pci: 512 byte aligned dma pool segment quirk
    - RDMA/bnxt_re: Fix the check for 9060 condition
    - RDMA/bnxt_re: Add check for path mtu in modify_qp
    - RDMA/bnxt_re: Fix reporting hw_ver in query_device
    - RDMA/bnxt_re: Fix max_qp_wrs reported
    - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
    - RDMA/bnxt_re: Disable use of reserved wqes
    - RDMA/bnxt_re: Add send queue size check for variable wqe
    - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
    - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
    - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
    - net: dsa: microchip: Fix LAN937X set_ageing_time function
    - RDMA/hns: Refactor mtr find
    - RDMA/hns: Remove unused parameters and variables
    - RDMA/hns: Fix mapping error of zero-hop WQE buffer
    - RDMA/hns: Fix warning storm caused by invalid input in IO path
    - RDMA/hns: Fix missing flush CQE for DWQE
    - ip_tunnel: annotate data-races around t->parms.link
    - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
    - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
    - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
    - net: Fix netns for ip_tunnel_init_flow()
    - net/mlx5: DR, select MSIX vector 0 for completion queue creation
    - net/mlx5e: macsec: Maintain TX SA from encoding_sa
    - drm/i915/dg1: Fix power gate sequence.
    - net: llc: reset skb->transport_header
    - ALSA: usb-audio: US16x08: Initialize array before use
    - eth: bcmsysport: fix call balance of priv->clk handling routines
    - net: mv643xx_eth: fix an OF node reference leak
    - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
    - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
    - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
    - wifi: mac80211: wake the queues in case of failure in resume
    - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
    - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
    - sound: usb: enable DSD output for ddHiFi TC44C
    - sound: usb: format: don't warn that raw DSD is unsupported
    - bpf: fix potential error return
    - ksmbd: retry iterate_dir in smb2_query_dir
    - smb: client: destroy cfid_put_wq on module exit
    - net: usb: qmi_wwan: add Telit FE910C04 compositions
    - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
    - ARC: build: Try to guess GCC variant of cross compiler
    - RDMA/bnxt_re: Fix the max WQE size for static WQE support
    - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
    - modpost: fix the missed iteration for the max bit in do_input()
    - ALSA: seq: Check UMP support for midi_version change
    - ALSA hda/realtek: Add quirk for Framework F111:000C
    - kcov: mark in_softirq_really() as __always_inline
    - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
    - sky2: Add device ID 11ab:4373 for Marvell 88E8075
    - drm: adv7511: Drop dsi single lane support
    - dt-bindings: display: adi,adv7533: Drop single lane support
    - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
    - mm/readahead: fix large folio support in async readahead
    - mptcp: fix recvbuffer adjust on sleeping rcvmsg
    - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
    - RDMA/bnxt_re: Fix max SGEs for the Work Request
    - scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
    - platform/x86: hp-wmi: Add thermal profile support for 8BAD boards
    - platform/x86: hp-wmi: Fix platform profile option switch bug on Omen and
      Victus laptops
    - platform/x86: hp-wmi: Fix implementation of the platform_profile_omen_get
      function
    - platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
    - RDMA/core: Fix ENODEV error for iWARP test over vlan
    - net: phy: micrel: Dynamically control external clock of KSZ PHY
    - netdev-genl: avoid empty messages in napi get
    - net: stmmac: restructure the error path of stmmac_probe_config_dt()
    - net/mlx5e: Fix netif state handling
    - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
    - drm/i915/cx0_phy: Fix C10 pll programming sequence
    - RDMA/bnxt_re: Fix error recovery sequence
    - btrfs: allow swap activation to be interruptible
    - perf/x86/intel: Add Arrow Lake U support
    - ALSA: hda: cs35l56: Remove calls to
      cs35l56_force_sync_asp1_registers_from_cache()
    - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
    - spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
    - ARC: build: disallow invalid PAE40 + 4K page config
    - bpf: refactor bpf_helper_changes_pkt_data to use helper number
    - bpf: consider that tail calls invalidate packet pointers
    - maple_tree: reload mas before the second call for mas_empty_area
    - io_uring/rw: fix downgraded mshot read
    - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
    - net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
    - gve: process XSK TX descriptors as part of RX NAPI
    - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
    - mm: reinstate ability to map write-sealed memfd mappings read-only
    - Upstream stable to v6.6.70, v6.12.9
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57898
    - wifi: cfg80211: clear link ID from bitmap during link delete after clean up
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57882
    - mptcp: fix TCP options overflow.
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57884
    - mm: vmscan: account for free pages to prevent infinite Loop in
      throttle_direct_reclaim()
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57885
    - mm/kmemleak: fix sleeping function called from invalid context at print
      message
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57932
    - gve: guard XDP xmit NDO on existence of xdp queues
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57933
    - gve: guard XSK operations on the existence of queues
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57887
    - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57938
    - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57889
    - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57890
    - RDMA/uverbs: Prevent integer overflow issue
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57892
    - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57893
    - ALSA: seq: oss: Fix races at processing SysEx messages
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57895
    - ksmbd: set ATTR_CTIME flags when setting mtime
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57896
    - btrfs: flush delalloc workers queue before stopping cleaner kthread during
      unmount
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57897
    - drm/amdkfd: Correct the migration DMA map direction
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57899
    - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57900
    - ila: serialize calls to nf_register_net_hooks()
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57901
    - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57902
    - af_packet: fix vlan_get_tci() vs MSG_PEEK
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57903
    - net: restrict SO_REUSEPORT to inet sockets
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-36476
    - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-39282
    - net: wwan: t7xx: Fix FSM command timeout issue
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57801
    - net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57802
    - netrom: check buffer length before accessing it
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57841
    - net: fix memory leak in tcp_conn_request()
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-57931
    - selinux: ignore unknown extended permissions
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-56761
    - x86/fred: Clear WFE in missing-ENDBRANCH #CPs
  * Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
    CVE-2024-53179
    - smb: client: fix use-after-free of signing key
  * uprobe-related panics during profiling (LP: #2104210)
    - uprobes: Fix race in uprobe_free_utask
  * ubuntu_bpf failed to build on Noble / Oracular (LP: #2069407)
    - selftests/bpf: Fix compilation failure when CONFIG_NET_FOU!=y
  * nfsd hangs and never recovers after NFS4ERR_DELAY and a connection loss
    (LP: #2103564)
    - NFSD: Reset cb_seq_status after NFS4ERR_DELAY
  * thermal: Fix temperature readings on intel hardware (LP: #2103427)
    - thermal: intel: intel_tcc: Add model checks for temperature registers
    - thermal: intel: intel_tcc_cooling: Use a model-specific bitmask for TCC
      offset
    - hwmon: (coretemp) Extend the bitmask to read temperature to 0xff
  * [SRU] Fix Lenovo M70/90 gen6 micmute key and led (LP: #2101811)
    - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
    - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869)
    - ceph: allocate sparse_ext map only for sparse reads
    - mm/vmstat: fix a W=1 clang compiler warning
    - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
    - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
    - bpf: Check negative offsets in __bpf_skb_min_len()
    - mtd: diskonchip: Cast an operand to prevent potential overflow
    - mtd: rawnand: arasan: Fix double assertion of chip-select
    - mtd: rawnand: arasan: Fix missing de-registration of NAND
    - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
    - phy: core: Fix an OF node refcount leakage in _of_phy_get()
    - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
    - phy: core: Fix that API devm_phy_put() fails to release the phy
    - phy: core: Fix that API devm_of_phy_provider_unregister() fails to
      unregister the phy provider
    - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
    - phy: usb: Toggle the PHY power during init
    - phy: rockchip: naneng-combphy: fix phy reset
    - dmaengine: mv_xor: fix child node refcount handling in early exit
    - dmaengine: dw: Select only supported masters for ACPI devices
    - dmaengine: tegra: Return correct DMA status when paused
    - dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
    - dmaengine: apple-admac: Avoid accessing registers in probe
    - stddef: make __struct_group() UAPI C++-friendly
    - tracing/kprobe: Make trace_kprobe's module callback called after jump_label
      update
    - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
    - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
    - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
    - udf: Skip parent dir link count update if corrupted
    - ALSA: hda/conexant: fix Z60MR100 startup pop issue
    - ALSA: sh: Use standard helper for buffer accesses
    - smb: server: Fix building with GCC 15
    - regmap: Use correct format specifier for logging range errors
    - LoongArch: Fix reserving screen info memory for above-4G firmware
    - LoongArch: BPF: Adjust the parameter of emit_jirl()
    - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
    - spi: intel: Add Panther Lake SPI controller support
    - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
      time
    - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
      as an error
    - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
    - blk-mq: register cpuhp callback after hctx is added to xarray table
    - blk-mq: move cpuhp callback registering out of q->sysfs_lock
    - MIPS: Probe toolchain support of -msym32
    - MIPS: mipsregs: Set proper ISA level for virt extensions
    - freezer, sched: Report frozen tasks as 'D' instead of 'R'
    - tracing: Constify string literal data member in struct trace_event_call
    - io_uring/sqpoll: fix sqpoll error handling races
    - i2c: microchip-core: actually use repeated sends
    - i2c: imx: add imx7d compatible string for applying erratum ERR007805
    - i2c: microchip-core: fix "ghost" detections
    - btrfs: sysfs: fix direct super block member reads
    - ALSA: sh: Fix wrong argument order for copy_from_iter()
    - block: avoid to reuse `hctx` not removed from cpuhp callback list
    - fork: avoid inappropriate uprobe access to invalid mm
    - ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
    - power: supply: bq24190: Fix BQ24296 Vbus regulator support
    - udf: Verify inode link counts before performing rename
    - ALSA: ump: Indicate the inactive group in legacy substream names
    - ALSA: ump: Update legacy substream names upon FB info update
    - scsi: mpi3mr: Synchronize access to ioctl data buffer
    - scsi: mpi3mr: Handling of fault code for insufficient power
    - objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns
    - dmaengine: loongson2-apb: Change GENMASK to GENMASK_ULL
    - perf/x86/intel/ds: Add PEBS format 6
    - btrfs: add and use helper to verify the calling task has locked the inode
    - btrfs: fix race with memory mapped writes when activating swap file
    - btrfs: fix swap file activation failure due to extents that used to be
      shared
    - ALSA: ump: Shut up truncated string warning
    - Upstream stable to v6.6.69, v6.12.8
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56758
    - btrfs: check folio mapping after unlock in relocate_one_folio()
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56759
    - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-57806
    - btrfs: fix transaction atomicity bug when enabling simple quotas
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-57793
    - virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56764
    - ublk: detach gendisk from ublk device if add_disk() fails
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-57804
    - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-57792
    - power: supply: gpio-charger: Fix set charge current limits
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56760
    - PCI/MSI: Handle lack of irqdomain gracefully
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56763
    - tracing: Prevent bad count for tracing_cpumask_write
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-57946
    - virtio-blk: don't keep queue frozen during system suspend
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-57807
    - scsi: megaraid_sas: Fix for a potential deadlock
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56767
    - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  * Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
    CVE-2024-56769
    - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266)
    - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
      iommu enabled
    - PCI: vmd: Create domain symlink before pci_bus_add_devices()
    - PCI: Add ACS quirk for Broadcom BCM5760X NIC
    - usb: cdns3-ti: Add workaround for Errata i2409
    - MIPS: Loongson64: DTS: Fix msi node for ls7a
    - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
    - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
    - usb: cdns3: Add quirk flag to enable suspend residency
    - platform/x86: p2sb: Make p2sb_get_devfn() return void
    - p2sb: Factor out p2sb_read_from_cache()
    - p2sb: Introduce the global flag p2sb_hidden_by_bios
    - p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
    - p2sb: Do not scan and remove the P2SB device when it is unhidden
    - i2c: pnx: Fix timeout in wait functions
    - xfs: fix the contact address for the sysfs ABI documentation
    - xfs: verify buffer, inode, and dquot items every tx commit
    - xfs: use consistent uid/gid when grabbing dquots for inodes
    - xfs: declare xfs_file.c symbols in xfs_file.h
    - xfs: create a new helper to return a file's allocation unit
    - xfs: Fix xfs_flush_unmap_range() range for RT
    - xfs: Fix xfs_prepare_shift() range for RT
    - xfs: convert comma to semicolon
    - xfs: fix file_path handling in tracepoints
    - xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
    - xfs: attr forks require attr, not attr2
    - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
    - xfs: Fix the owner setting issue for rmap query in xfs fsmap
    - xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
    - xfs: take m_growlock when running growfsrt
    - xfs: reset rootdir extent size hint after growfsrt
    - tools: hv: change permissions of NetworkManager configuration file
    - cxl/pci: Fix potential bogus return value upon successful probing
    - cxl/region: Fix region creation for greater than x2 switches
    - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
    - ionic: use ee->offset when returning sprom data
    - net: renesas: rswitch: rework ts tags management
    - net: hinic: Fix cleanup in create_rxqs/txqs()
    - net: ethernet: bgmac-platform: fix an OF node reference leak
    - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
    - netfilter: ipset: Fix for recursive locking warning
    - selftests: openvswitch: fix tcpdump execution
    - net: mdiobus: fix an OF node reference leak
    - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
    - mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
    - EDAC/amd64: Simplify ECC check on unified memory controllers
    - chelsio/chtls: prevent potential integer overflow on 32bit
    - i2c: riic: Always round-up when calculating bus period
    - efivarfs: Fix error on non-existent file
    - hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
    - USB: serial: option: add TCL IK512 MBIM & ECM
    - USB: serial: option: add MeiG Smart SLM770A
    - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
    - USB: serial: option: add MediaTek T7XX compositions
    - USB: serial: option: add Telit FE910C04 rmnet compositions
    - thunderbolt: Improve redrive mode handling
    - drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
    - i915/guc: Reset engine utilization buffer before registration
    - i915/guc: Ensure busyness counter increases motonically
    - i915/guc: Accumulate active runtime on gt reset
    - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
      Registers
    - hwmon: (tmp513) Fix Current Register value interpretation
    - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
      Registers
    - zram: refuse to use zero sized block device as backing device
    - zram: fix uninitialized ZRAM not releasing backing device
    - zram: fix potential UAF of zram table
    - vmalloc: fix accounting with i915
    - btrfs: tree-checker: reject inline extent items with 0 ref count
    - smb: client: fix TCP timers deadlock after rmmod
    - tracing: Fix test_event_printk() to process entire print argument
    - tracing: Add missing helper functions in event pointer dereference check
    - tracing: Add "%s" check in test_event_printk()
    - tracing: Have process_string() also allow arrays
    - selftests/memfd: run sysctl tests when PID namespace support is enabled
    - selftests/bpf: Use asm constraint "m" for LoongArch
    - io_uring: Fix registered ring file refcount leak
    - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
    - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
    - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
    - nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
    - udmabuf: also check for F_SEAL_FUTURE_WRITE
    - of: Fix error path in of_parse_phandle_with_args_map()
    - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
    - ceph: validate snapdirname option length when mounting
    - ceph: improve error handling and short/overflow-read logic in
      __ceph_sync_read()
    - ceph: fix memory leaks in __ceph_sync_read()
    - epoll: Add synchronous wakeup support for ep_poll_callback
    - io_uring/rw: avoid punting to io-wq directly
    - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
    - xfs: sb_spino_align is not verified
    - xfs: fix sparse inode limits on runt AG
    - xfs: fix sb_spino_align checks for large fsblock sizes
    - xfs: fix zero byte checking in the superblock scrubber
    - netdev: fix repeated netlink messages in queue dump
    - team: Fix feature exposure when no ports are present
    - can: m_can: fix missed interrupts with m_can_pci
    - netdev-genl: avoid empty messages in queue dump
    - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
    - KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable
    - net: mctp: handle skb cleanup on sock_queue failures
    - xhci: retry Stop Endpoint on buggy NEC controllers
    - usb: xhci: Limit Stop Endpoint retries
    - usb: xhci: Avoid queuing redundant Stop Endpoint commands
    - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
    - thunderbolt: Add support for Intel Panther Lake-M/P
    - thunderbolt: Don't display nvm_version unless upgrade supported
    - drm/panel: st7701: Add prepare_prev_first flag to drm_panel
    - drm/panel: synaptics-r63353: Fix regulator unbalance
    - drm/amdgpu/nbio7.11: fix IP version check
    - drm/amdgpu/nbio7.7: fix IP version check
    - fgraph: Still initialize idle shadow stacks when starting
    - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
    - ocfs2: fix the space leak in LA when releasing LA
    - of: property: fw_devlink: Do not use interrupt-parent directly
    - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
    - Upstream stable to v6.6.68, v6.12.7
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56710
    - ceph: fix memory leak in ceph_direct_read_write()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-53685
    - ceph: give up on paths longer than PATH_MAX
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-54193
    - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-54455
    - accel/ivpu: Fix general protection fault in ivpu_bo_list()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-53690
    - nilfs2: prevent use of deleted inode
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56709
    - io_uring: check if iowq is killed before queuing
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-55881
    - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-55916
    - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56369
    - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56372
    - net: tun: fix tun_napi_alloc_frags()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56715
    - ionic: Fix netdev notifier unregister on failure
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56716
    - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56717
    - net: mscc: ocelot: fix incorrect IFH SRC_PORT field in
      ocelot_ifh_set_basic()
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-57791
    - net/smc: check return value of sock_recvmsg when draining clc data
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-47408
    - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-49568
    - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-49571
    - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
      msg
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-56718
    - net/smc: protect link down work from execute after lgr freed
  * Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
    CVE-2024-41013
    - xfs: don't walk off the end of a directory data block
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181)
    - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
    - ksmbd: fix racy issue from session lookup and expire
    - splice: do not checksum AF_UNIX sockets
    - tcp: check space before adding MPTCP SYN options
    - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
    - usb: host: max3421-hcd: Correctly abort a USB request.
    - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
    - usb: dwc2: Fix HCD resume
    - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
    - usb: dwc2: Fix HCD port connection race
    - scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
    - usb: gadget: midi2: Fix interpretation of is_midi1 bits
    - usb: ehci-hcd: fix call balance of clocks handling routines
    - usb: typec: anx7411: fix fwnode_handle reference leak
    - usb: typec: anx7411: fix OF node reference leaks in
      anx7411_typec_switch_probe()
    - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
    - drm/i915: Fix memory leak by correcting cache object name in error handler
    - xfs: update btree keys correctly when _insrec splits an inode root block
    - xfs: don't drop errno values when we fail to ficlone the entire range
    - xfs: return from xfs_symlink_verify early on V4 filesystems
    - xfs: fix scrub tracepoints when inode-rooted btrees are involved
    - xfs: only run precommits once per transaction object
    - bpf: Check size for BTF-based ctx access of pointer members
    - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
    - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
    - bpf, sockmap: Fix update element with same
    - wifi: mac80211: init cnt before accessing elem in
      ieee80211_copy_mbssid_beacon
    - wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
    - wifi: mac80211: fix station NSS capability initialization order
    - batman-adv: Do not send uninitialized TT changes
    - batman-adv: Remove uninitialized data in full table TT response
    - batman-adv: Do not let TT changes list grows indefinitely
    - wifi: cfg80211: sme: init n_channels before channels[] access
    - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
    - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
    - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
    - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
    - net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
    - net: mscc: ocelot: improve handling of TX timestamp for unknown skb
    - net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-
      safe
    - net: mscc: ocelot: be resilient to loss of PTP packets during transmission
    - net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
    - spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
    - net: sparx5: fix FDMA performance issue
    - net: sparx5: fix the maximum frame length register
    - ACPI: resource: Fix memory resource type union access
    - cxgb4: use port number to set mac addr
    - qca_spi: Fix clock speed for multiple QCA7000
    - qca_spi: Make driver probing reliable
    - ASoC: amd: yc: Fix the wrong return value
    - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
    - net: renesas: rswitch: fix race window between tx start and complete
    - net: renesas: rswitch: fix leaked pointer on error path
    - net: renesas: rswitch: handle stop vs interrupt race
    - net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
    - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
    - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    - ACPICA: events/evxfregn: don't release the ContextMutex that was never
      acquired
    - Bluetooth: iso: Fix recursive locking warning
    - Bluetooth: SCO: Add support for 16 bits transparent voice setting
    - net: renesas: rswitch: fix initial MPIC register setting
    - net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
    - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
    - kselftest/arm64: abi: fix SVCR detection
    - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
    - selftests/bpf: remove use of __xlated()
    - xen/netfront: fix crash when removing device
    - x86: make get_cpu_vendor() accessible from Xen code
    - objtool/x86: allow syscall instruction
    - x86/static-call: provide a way to do very early static-call updates
    - x86/xen: don't do PV iret hypercall through hypercall page
    - x86/xen: add central hypercall functions
    - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
    - x86/xen: add FRAME_END to xen_hypercall_hvm()
    - x86/xen: use new hypercall functions instead of hypercall page
    - x86/xen: remove hypercall page
    - x86/static-call: fix 32-bit build
    - x86/asm: Make serialize() always_inline
    - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
    - serial: sh-sci: Check if TX data was written to device in .tx_empty()
    - gpio: ljca: Initialize num before accessing item in ljca_gpio_config
    - ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
    - drm/amdkfd: Use device based logging for errors
    - drm/amdkfd: pause autosuspend when creating pdd
    - drm/amdkfd: fixed page fault when enable MES shader debugger
    - drm/i915/color: Stop using non-posted DSB writes for legacy LUT
    - drm/amd/pm: Set SMU v13.0.7 default workload type
    - xfs: return a 64-bit block count from xfs_btree_count_blocks
    - perf machine: Initialize machine->env to address a segfault
    - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
    - net: renesas: rswitch: fix possible early skb release
    - Bluetooth: Improve setsockopt() handling of malformed user input
    - libperf: evlist: Fix --cpu argument on hybrid platform
    - selftests: netfilter: Stabilize rpath.sh
    - net, team, bonding: Add netdev_base_features helper
    - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
    - team: Fix initial vlan_feature set in __team_compute_features
    - drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
    - Upstream stable to v6.6.67, v6.12.6
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56652
    - drm/xe/reg_sr: Remove register pool
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-54460
    - Bluetooth: iso: Fix circular lock in iso_listen_bis
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-57879
    - Bluetooth: iso: Always release hdev at the end of iso_listen_bis
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56656
    - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-53125
    - bpf: sync_linked_regs() must preserve subreg_def
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56654
    - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56770
    - net/sched: netem: account for backlog updates from child qdisc
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-54683
    - netfilter: IDLETIMER: Fix for possible ABBA deadlock
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-55639
    - net: renesas: rswitch: avoid use-after-put for a device tree node
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56657
    - ALSA: control: Avoid WARN() for symlink errors
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56659
    - net: lapb: increase LAPB_HEADER_LEN
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56660
    - net/mlx5: DR, prevent potential error pointer dereference
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56662
    - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56664
    - bpf, sockmap: Fix race between element replace and close()
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56667
    - drm/i915: Fix NULL pointer dereference in capture_engine
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56670
    - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
      accessing null pointer
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-53687
    - riscv: Fix IPIs usage in kfence_protect_page()
  * Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
    CVE-2024-56675
    - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  * Noble update: upstream stable patchset 2025-02-04 (LP: #2097393)
    - selftests: net: Remove executable bits from library scripts
  * CVE-2024-56653
    - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 24 Apr 2025 14:08:02 -0500

linux-nvidia (6.8.0-1027.30) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1027.30 -proposed tracker (LP: #2107062)

  [ Ubuntu: 6.8.0-59.61 ]

  * noble/linux: 6.8.0-59.61 -proposed tracker (LP: #2107076)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
  * CVE-2024-56653
    - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 15 Apr 2025 15:55:09 -0500

linux-nvidia (6.8.0-1026.29) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1026.29 -proposed tracker (LP: #2102515)

  * Backport: Fix mmu notifiers for range-based invalidates (LP: #2102677)
    - Fix mmu notifiers for range-based invalidates

  *  PCI/ACS: Fix 'pci=config_acs=' parameter (LP: #2100340)
    - NVIDIA: SAUCE: PCI/ACS: Fix 'pci=config_acs=' parameter

  * Backport: "Add support for AArch64 AMUv1-based average freq" Series
    (LP: #2100032)
    - arch_topology: init capacity_freq_ref to 0
    - arm64: amu: Delay allocating cpumask for AMU FIE support
    - cpufreq: Allow arch_freq_get_on_cpu to return an error
    - cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry
    - arm64: Provide an AMU-based version of arch_freq_get_on_cpu
    - arm64: Update AMU-based freq scale factor on entering idle
    - arm64: Utilize for_each_cpu_wrap for reference lookup
    - NVIDIA: [Config] set CONFIG_CPUFREQ_ARCH_CUR_FREQ=y for x86

  * DOE Discovery Issues (LP: #2100030)
    - PCI/DOE: Support discovery version 2

  [ Ubuntu: 6.8.0-58.60 ]

  * noble/linux: 6.8.0-58.60 -proposed tracker (LP: #2102529)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.03.17)
  * wdat_wdt.ko should be pulled in by linux-image-virtual (LP: #2098554)
    - [Packaging]: wdat_wdt.ko is moved from "linux-modules-extra-*-generic" to
      "linux-modules-*-generic"
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118)
    - openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix()
    - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
    - watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
    - watchdog: apple: Actually flush writes after requesting watchdog restart
    - watchdog: mediatek: Make sure system reset gets asserted in
      mtk_wdt_restart()
    - can: gs_usb: add VID/PID for Xylanta SAINT3 product family
    - can: gs_usb: add usb endpoint address detection at driver probe step
    - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
    - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
    - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
    - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
    - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
    - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
    - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
    - can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
    - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
    - selftests: hid: fix typo and exit code
    - ptp: Add error handling for adjfine callback in ptp_clock_adjtime
    - net/sched: tbf: correct backlog statistic for GSO packets
    - net: hsr: fix fill_frame_info() regression vs VLAN packets
    - platform/x86: asus-wmi: add support for vivobook fan profiles
    - platform/x86: asus-wmi: Fix inconsistent use of thermal policies
    - platform/x86: asus-wmi: Ignore return value when writing thermal policy
    - net/smc: mark optional smcd_ops and check for support when called
    - net/smc: add operations to merge sndbuf with peer DMB
    - net/smc: {at|de}tach sndbuf to peer DMB if supported
    - net/smc: refactoring initialization of smc sock
    - net/qed: allow old cards not supporting "num_images" to work
    - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
    - ixgbe: downgrade logging of unsupported VF API version to debug
    - net: sched: fix erspan_opt settings in cls_flower
    - netfilter: nft_set_hash: skip duplicated elements pending gc run
    - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
    - ethtool: Fix wrong mod state in case of verbose and no_mask bitset
    - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
    - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
    - net/mlx5e: Remove workaround to avoid syndrome for internal port
    - xhci: Allow RPM on the USB controller (1022:43f7) by default
    - gpio: grgpio: use a helper variable to store the address of ofdev->dev
    - usb: dwc3: gadget: Rewrite endpoint allocation flow
    - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
    - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
    - mmc: mtk-sd: use devm_mmc_alloc_host
    - mmc: mtk-sd: Fix error handle of probe function
    - mmc: mtk-sd: fix devm_clk_get_optional usage
    - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
    - zram: do not mark idle slots that cannot be idle
    - zram: clear IDLE flag in mark_idle()
    - powerpc/vdso: Refactor CFLAGS for CVDSO build
    - powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
    - ntp: Remove invalid cast in time offset math
    - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link
    - driver core: fw_devlink: Stop trying to optimize cycle detection logic
    - drivers: core: fix device leak in __fw_devlink_relax_cycles()
    - i3c: master: support to adjust first broadcast address speed
    - i3c: master: svc: use slow speed for first broadcast address
    - i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
    - i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
    - i3c: master: Extend address status bit to 4 and add
      I3C_ADDR_SLOT_EXT_DESIRED
    - i3c: master: Fix dynamic address leak when 'assigned-address' is present
    - i3c: master: Fix missing 'ret' assignment in set_speed()
    - drm/bridge: it6505: update usleep_range for RC circuit charge time
    - drm/bridge: it6505: Fix inverted reset polarity
    - scsi: ufs: core: Always initialize the UIC done completion
    - scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
    - bpf, vsock: Fix poll() missing a queue
    - bpf, vsock: Invoke proto::close on close()
    - xsk: always clear DMA mapping information when unmapping the pool
    - bpftool: fix potential NULL pointer dereferencing in prog_dump()
    - drm/sti: Add __iomem for mixer_dbg_mxn's parameter
    - ALSA: seq: ump: Use automatic cleanup of kfree()
    - ALSA: ump: Update substream name from assigned FB names
    - ALSA: seq: ump: Fix seq port updates per FB info notify
    - ALSA: usb-audio: Notify xrun for low-latency mode
    - tools: Override makefile ARCH variable if defined, but empty
    - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
    - ASoC: SOF: ipc3-topology: fix resource leaks in
      sof_ipc3_widget_setup_comp_dai()
    - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
    - scsi: scsi_debug: Fix hrtimer support for ndelay
    - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
    - drm/v3d: Enable Performance Counters before clearing them
    - scatterlist: fix incorrect func name in kernel-doc
    - iio: magnetometer: yas530: use signed integer type for clamp limits
    - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
    - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
    - bpf: Handle in-place update for full LPM trie correctly
    - bpf: Fix exact match conditions in trie_get_next_key()
    - x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
    - watchdog: rti: of: honor timeout-sec property
    - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
    - tracing: Fix cmp_entries_dup() to respect sort() comparison rules
    - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit
      ASIDs
    - ALSA: usb-audio: add mixer mapping for Corsair HS80
    - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
    - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
    - scsi: qla2xxx: Fix abort in bsg timeout
    - scsi: qla2xxx: Fix NVMe and NPIV connect issue
    - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
    - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
    - scsi: ufs: core: Add missing post notify for power mode change
    - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
    - drm/dp_mst: Verify request type in the corresponding down message reply
    - drm/amdgpu/hdp5.2: do a posting read when flushing HDP
    - modpost: Add .irqentry.text to OTHER_SECTIONS
    - x86/kexec: Restore GDT on return from ::preserve_context kexec
    - dma-buf: fix dma_fence_array_signaled v4
    - dma-fence: Fix reference leak on fence merge failure path
    - dma-fence: Use kernel's sort for merging fences
    - regmap: detach regmap from dev on regmap_exit
    - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10
      tablet
    - mmc: core: Further prevent card detect during shutdown
    - ocfs2: update seq_file index in ocfs2_dlm_seq_next
    - lib: stackinit: hide never-taken branch from compiler
    - kasan: make report_lock a raw spinlock
    - x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
    - epoll: annotate racy check
    - kselftest/arm64: Log fp-stress child startup errors to stdout
    - btrfs: avoid unnecessary device path update for the same device
    - btrfs: do not clear read-only when adding sprout device
    - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
    - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
    - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
    - perf/x86/amd: Warn only on new bits set
    - spi: spi-fsl-lpspi: Adjust type of scldiv
    - HID: add per device quirk to force bind to hid-generic
    - media: uvcvideo: RealSense D421 Depth module metadata
    - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
    - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
    - mmc: core: Add SD card quirk for broken poweroff notification
    - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
    - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
    - selftests/resctrl: Protect against array overflow when reading strings
    - drm/vc4: hdmi: Avoid log spam for audio start failure
    - drm/vc4: hvs: Set AXI panic modes for the HVS
    - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
    - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
    - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
    - drm/bridge: it6505: Enable module autoloading
    - drm/mcde: Enable module autoloading
    - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
    - drm/display: Fix building with GCC 15
    - ALSA: hda: Use own quirk lookup helper
    - ALSA: hda/conexant: Use the new codec SSID matching
    - r8169: don't apply UDP padding quirk on RTL8126A
    - samples/bpf: Fix a resource leak
    - net: fec_mpc52xx_phy: Use %pa to format resource_size_t
    - net: ethernet: fs_enet: Use %pa to format resource_size_t
    - net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
    - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
    - wifi: ath5k: add PCI ID for SX76X
    - wifi: ath5k: add PCI ID for Arcadyan devices
    - fanotify: allow reporting errors on failure to open fd
    - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
    - net: sfp: change quirks for Alcatel Lucent G-010S-P
    - net: stmmac: Programming sequence for VLAN packets with split header
    - drm/sched: memset() 'job' in drm_sched_job_init()
    - amdgpu/uvd: get ring reference from rq scheduler
    - drm/amdgpu: don't access invalid sched
    - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
    - drm/amdgpu: Dereference the ATCS ACPI buffer
    - netlink: specs: Add missing bitset attrs to ethtool spec
    - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
    - fsl/fman: Validate cell-index value obtained from Device Tree
    - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
    - ALSA: usb-audio: Make mic volume workarounds globally applicable
    - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
    - dsa: qca8k: Use nested lock to avoid splat
    - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
    - Bluetooth: Add new quirks for ATS2851
    - Bluetooth: Support new quirks for ATS2851
    - Bluetooth: Set quirks for ATS2851
    - ASoC: hdmi-codec: reorder channel allocation list
    - rocker: fix link status detection in rocker_carrier_init()
    - net/neighbor: clear error in case strict check is not set
    - netpoll: Use rcu_access_pointer() in __netpoll_setup
    - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
    - tracing/ftrace: disable preemption in syscall probe
    - tracing: Use atomic64_inc_return() in trace_clock_counter()
    - tools/rtla: fix collision with glibc sched_attr/sched_set_attr
    - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
    - scsi: ufs: core: Make DMA mask configuration more flexible
    - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
    - clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
    - clk: qcom: rpmh: add support for SAR2130P
    - clk: qcom: tcsrcc-sm8550: add SAR2130P support
    - scsi: st: Don't modify unknown block number in MTIOCGET
    - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
    - pinctrl: qcom-pmic-gpio: add support for PM8937
    - pinctrl: qcom: spmi-mpp: Add PM8937 compatible
    - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
    - nvdimm: rectify the illogical code within nd_dax_probe()
    - smb: client: memcpy() with surrounding object base address
    - verification/dot2: Improve dot parser robustness
    - KMSAN: uninit-value in inode_go_dump (5)
    - PCI: qcom: Add support for IPQ9574
    - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
    - PCI: vmd: Set devices to D0 before enabling PM L1 Substates
    - PCI: Detect and trust built-in Thunderbolt chips
    - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
    - PCI: Add ACS quirk for Wangxun FF5xxx NICs
    - f2fs: print message if fscorrupted was found in f2fs_new_node_page()
    - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
    - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
    - fs/ntfs3: Fix case when unmarked clusters intersect with zone
    - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
    - iio: light: ltr501: Add LTER0303 to the supported devices
    - ASoC: amd: yc: fix internal mic on Redmi G 2022
    - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
    - drm/amdgpu/vcn: reset fw_shared under SRIOV
    - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6
      21M1CTO1WW
    - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
    - rtc: cmos: avoid taking rtc_lock for extended period of time
    - serial: 8250_dw: Add Sophgo SG2044 quirk
    - smb: client: don't try following DFS links in cifs_tree_connect()
    - setlocalversion: work around "git describe" performance
    - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
    - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning
      busy
    - sched/core: Prevent wakeup of ksoftirqd during idle load balance
    - btrfs: fix missing snapshot drew unlock when root is dead during swap
      activation
    - clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
    - tracing/eprobe: Fix to release eprobe when failed to add dyn_event
    - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
    - Revert "unicode: Don't special case ignorable code points"
    - vfio/mlx5: Align the page tracking max message size with the device
      capability
    - selftests/ftrace: adjust offset for kprobe syntax error test
    - KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from
      kvm_faultin_pfn()
    - jffs2: Fix rtime decompressor
    - mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
    - iio: invensense: fix multiple odr switch when FIFO is off
    - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
    - ALSA: hda: Fix build error without CONFIG_SND_DEBUG
    - usb: dwc3: ep0: Don't reset resource alloc flag
    - ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
    - platform/x86: asus-wmi: Fix thermal profile initialization
    - i3c: master: svc: fix possible assignment of the same address to two devices
    - btrfs: drop unused parameter file_offset from
      btrfs_encoded_read_regular_fill_pages()
    - md/raid5: Wait sync io to finish before changing group cnt
    - media: platform: rga: fix 32-bit DMA limitation
    - net: phy: dp83869: fix status reporting for 1000base-x autonegotiation
    - remoteproc: qcom_q6v5_pas: disable auto boot for wpss
    - mtd: spinand: winbond: Fix 512GW and 02JW OOB layout
    - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
    - dt-bindings: net: fec: add pps channel property
    - net: fec: refactor PPS channel configuration
    - net: fec: make PPS channel configurable
    - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs
    - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE
    - drm/amd: Add some missing straps from NBIO 7.11.0
    - drm/amd: Fix initialization mistake for NBIO 7.11 devices
    - drm/amdgpu/pm: Don't use OD table on Arcturus
    - drm/amd/pm: Remove arcturus min power limit
    - drm/amd/display: update pipe selection policy to check head pipe
    - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto
    - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs"
    - ipv6: avoid possible NULL deref in modify_prefix_route()
    - net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on
      LAN7800/7850
    - ice: fix PHY Clock Recovery availability check
    - vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
    - vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
    - mmc: core Convert UNSTUFF_BITS macro to inline function
    - mmc: sd: SDUC Support Recognition
    - mmc: core: Adjust ACMD22 to SDUC
    - mmc: core: Use GFP_NOIO in ACMD22
    - f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
    - f2fs: fix to adjust appropriate length for fiemap
    - f2fs: fix to requery extent which cross boundary of inquiry
    - drm/amd/display: calculate final viewport before TAP optimization
    - drm/amd/display: Ignore scalar validation failure if pipe is phantom
    - pmdomain: core: Add missing put_device()
    - pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
    - pmdomain: core: add dummy release function to genpd device
    - bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
    - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
    - LoongArch: KVM: Protect kvm_check_requests() with SRCU
    - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
    - ALSA: usb-audio: Add extra PID for RME Digiface USB
    - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
    - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
    - io_uring/cmd: document some uring_cmd related helpers
    - io_uring: Change res2 parameter type in io_uring_cmd_done
    - selftests/damon: add _damon_sysfs.py to TEST_FILES
    - drm/amd/display: Correct prefetch calculation
    - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
    - drm/amdgpu/hdp6.0: do a posting read when flushing HDP
    - drm/amdgpu/hdp4.0: do a posting read when flushing HDP
    - drm/amdgpu/hdp5.0: do a posting read when flushing HDP
    - x86/cpu/intel: Switch to new Intel CPU model defines
    - x86/cpu/intel: Drop stray FAM6 check with new Intel CPU model defines
    - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
    - mm/damon: fix order of arguments in damos_before_apply tracepoint
    - mm: respect mmap hint address when aligning for THP
    - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
    - memblock: allow zero threshold in validate_numa_converage()
    - s390/pci: Sort PCI functions prior to creating virtual busses
    - s390/pci: Use topology ID for multi-function devices
    - s390/pci: Ignore RID for isolated VFs
    - s390/pci: Fix SR-IOV for PFs initially in standby
    - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
    - s390/pci: Fix handling of isolated VFs
    - ext4: partial zero eof block on unaligned inode size extension
    - crypto: ecdsa - Convert byte arrays with key coordinates to digits
    - crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
    - crypto: ecdsa - Rename keylen to bufsize where necessary
    - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
    - crypto: ecdsa - Avoid signed integer overflow on signature decoding
    - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
    - cleanup: Adjust scoped_guard() macros to avoid potential warning
    - gpio: free irqs that are still requested when the chip is being removed
    - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
    - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
    - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
    - drm/amd/display: skip disable CRTC in seemless bootup case
    - drm/amd/display: disable SG displays on cyan skillfish
    - wifi: mac80211: Add non-atomic station iterator
    - accel/qaic: Add AIC080 support
    - mptcp: annotate data-races around subflow->fully_established
    - net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
    - drm/amd/display: Prune Invalid Modes For HDMI Output
    - i2c: i801: Add support for Intel Arrow Lake-H
    - i2c: i801: Add support for Intel Panther Lake
    - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
    - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
    - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
    - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
    - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
    - Bluetooth: btusb: Add 3 HWIDs for MT7925
    - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
    - ring-buffer: Correct stale comments related to non-consuming readers
    - ring-buffer: Limit time with disabled interrupts in rb_check_pages()
    - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up
      FDMI
    - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback
    - clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
    - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
    - mailbox: pcc: Check before sending MCTP PCC response ACK
    - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
    - remoteproc: qcom: pas: enable SAR2130P audio DSP support
    - fs/ntfs3: Implement fallocate for compressed files
    - fs/ntfs3: Fix warning in ni_fiemap
    - regulator: qcom-rpmh: Update ranges for FTSMPS525
    - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
    - usb: chipidea: udc: limit usb request length to max 16KB
    - usb: chipidea: udc: create bounce buffer for problem sglist entries if
      possible
    - iio: adc: ad7192: Convert from of specific to fwnode property handling
    - iio: adc: ad7192: properly check spi_get_device_match_data()
    - usb: typec: ucsi: add callback for connector status updates
    - usb: typec: ucsi: glink: move GPIO reading into connector_status callback
    - usb: typec: ucsi: add update_connector callback
    - usb: typec: ucsi: glink: set orientation aware if supported
    - usb: typec: ucsi: glink: be more precise on orientation-aware ports
    - usb: typec: ucsi: glink: fix off-by-one in connector_status
    - usb: typec: ucsi: Set orientation as none when connector is unplugged
    - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
    - Revert "nvme: make keep-alive synchronous operation"
    - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack
    - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
    - [Config] updateconfigs for HISILICON_ERRATUM_162100801
    - drm/amd/display: Add option to retrieve detile buffer size
    - btrfs: drop unused parameter options from open_ctree()
    - btrfs: drop unused parameter data from btrfs_fill_super()
    - btrfs: fix mount failure due to remount races
    - net/mlx5: unique names for per device caches
    - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
    - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
    - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
    - Upstream stable to v6.6.65, v6.6.66, v6.12.4, v6.12.5
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-41932
    - sched: fix warning in sched_setaffinity
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-57872
    - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56588
    - scsi: hisi_sas: Create all dump files during debugfs initialization
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-47794
    - bpf: Prevent tailcall infinite loop caused by freplace
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56599
    - wifi: ath10k: avoid NULL pointer error during sdio remove
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56607
    - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56608
    - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56609
    - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56782
    - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-48876
    - stackdepot: fix stack_depot_save_flags() in NMI context
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56620
    - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56621
    - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-49569
    - nvme-rdma: unquiesce admin_q before destroy it
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56632
    - nvme-tcp: fix the memleak while create new ctrl failed
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56647
    - net: Fix icmp host relookup triggering ip_rt_bug
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56775
    - drm/amd/display: Fix handling of plane refcount
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56561
    - PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56550
    - s390/stacktrace: Use break instead of return statement
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56771
    - mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56568
    - iommu/arm-smmu: Defer probe of clients after smmu device bound
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56772
    - kunit: string-stream: Fix a UAF bug in kunit_init_suite()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56773
    - kunit: Fix potential null dereference in kunit_device_driver_test()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56580
    - media: qcom: camss: fix error path on configuration of power domains
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-57850
    - jffs2: Prevent rtime decompress memory corruption
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56583
    - sched/deadline: Fix warning in migrate_enable for boosted tasks
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56611
    - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a
      MM
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56613
    - sched/numa: fix memory leak due to the overwritten vma->numab_state
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56584
    - io_uring/tctx: work around xa_store() allocation error issue
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56781
    - powerpc/prom_init: Fixup missing powermac #size-cells
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56785
    - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56585
    - LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-41935
    - f2fs: fix to shrink read extent node in batches
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-43098
    - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to
      avoid deadlock
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-45828
    - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56586
    - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56587
    - leds: class: Protect brightness_show() with led_cdev->led_access mutex
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56786
    - bpf: put bpf_link's program when link is safe to be deallocated
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-47141
    - pinmux: Use sequential access to access desc->pinmux data
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56589
    - scsi: hisi_sas: Add cond_resched() for no forced preemption model
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56590
    - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56592
    - bpf: Call free_htab_elem() after htab_unlock_bucket()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56593
    - wifi: brcmfmac: Fix oops due to NULL pointer dereference in
      brcmf_sdiod_sglist_rw()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56594
    - drm/amdgpu: set the right AMDGPU sg segment limitation
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-57843
    - virtio-net: fix overflow inside virtnet_rq_alloc
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56596
    - jfs: fix array-index-out-of-bounds in jfs_readdir
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56597
    - jfs: fix shift-out-of-bounds in dbSplit
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-47143
    - dma-debug: fix a possible deadlock on radix_lock
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56601
    - net: inet: do not leave a dangling sk pointer in inet_create()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56602
    - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56603
    - net: af_can: do not leave a dangling sk pointer in can_create()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56604
    - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56605
    - Bluetooth: L2CAP: do not leave dangling sk pointer on error in
      l2cap_sock_create()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56606
    - af_packet: avoid erroring out after sock_init_data() in packet_create()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-47809
    - dlm: fix possible lkb_resource null dereference
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-48873
    - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  * Missing support for USB-C Apple Magic Trackpad (LP: #2098063) // Noble
    update: upstream stable patchset 2025-03-12 (LP: #2102118)
    - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56787
    - soc: imx8m: Probe the SoC driver as platform driver
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56610
    - kcsan: Turn report_filterlist_lock into a raw_spinlock
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-48875
    - btrfs: don't take dev_replace rwsem on task already holding it
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-57849
    - s390/cpum_sf: Handle CPU hotplug remove during sampling
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-57876
    - drm/dp_mst: Fix resetting msg rx state after topology removal
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56616
    - drm/dp_mst: Fix MST sideband message body length check
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-48881
    - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56619
    - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56622
    - scsi: ufs: core: sysfs: Prevent div by zero
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56623
    - scsi: qla2xxx: Fix use after free on unload
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-57874
    - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56625
    - can: dev: can_set_termination(): allow sleeping GPIOs
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56626
    - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56628
    - LoongArch: Add architecture specific huge_pte_clear()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56629
    - HID: wacom: fix when get product name maybe null pointer
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56630
    - ocfs2: free inode when ocfs2_get_init_inode() fails
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56631
    - scsi: sg: Fix slab-use-after-free read in sg_release()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-50051
    - spi: mpc52xx: Add cancel_work_sync before module remove
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56633
    - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56565
    - f2fs: fix to drop all discards after creating snapshot on lvm device
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56634
    - gpio: grgpio: Add NULL check in grgpio_probe
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56635
    - net: avoid potential UAF in default_operstate()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56636
    - geneve: do not assume mac header is set in geneve_xmit_skb()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56637
    - netfilter: ipset: Hold module reference while requesting a module
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56638
    - netfilter: nft_inner: incorrect percpu area handling under softirq
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-52332
    - igb: Fix potential invalid memory access in igb_init_module()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56640
    - net/smc: fix LGR and link use-after-free issue
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56641
    - net/smc: initialize close_work early to avoid warning
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56643
    - dccp: Fix memory leak in dccp_feat_change_recv
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56644
    - net/ipv6: release expired exception dst cached in socket
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56645
    - can: j1939: j1939_session_new(): fix skb reference counting
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56648
    - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56649
    - net: enetc: Do not configure preemptible TCs if SIs do not support
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56783
    - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
  * Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
    CVE-2024-56650
    - netfilter: x_tables: fix LED ID check in led_tg_check()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915)
    - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings
    - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
    - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
    - ASoC: Intel: sst: Support LPE0F28 ACPI HID
    - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
    - mac80211: fix user-power when emulating chanctx
    - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
    - selftests/watchdog-test: Fix system accidentally reset after watchdog-test
    - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
    - bpf: fix filed access without lock
    - net: usb: qmi_wwan: add Quectel RG650V
    - soc: qcom: Add check devm_kasprintf() returned value
    - firmware: arm_scmi: Reject clear channel request on A2P
    - regulator: rk808: Add apply_bit for BUCK3 on RK809
    - platform/x86: dell-smbios-base: Extends support to Alienware products
    - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
    - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
    - tools/lib/thermal: Remove the thermal.h soft link when doing make clean
    - can: j1939: fix error in J1939 documentation.
    - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect
      fan speed
    - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
    - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
    - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
    - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less
      strict
    - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
    - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
    - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
    - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
    - ARM: 9420/1: smp: Fix SMP for xip kernels
    - ipmr: Fix access to mfc_cache_list without lock held
    - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
    - arm64: probes: Disable kprobes/uprobes on MOPS instructions
    - kselftest/arm64: mte: fix printf type warnings about __u64
    - kselftest/arm64: mte: fix printf type warnings about longs
    - s390/cio: Do not unregister the subchannel based on DNV
    - s390/pageattr: Implement missing kernel_page_present()
    - ext4: avoid remount errors with 'abort' mount option
    - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
    - m68k: mvme147: Fix SCSI controller IRQ numbers
    - m68k: mvme147: Reinstate early console
    - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
    - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
    - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
    - block: fix bio_split_rw_at to take zone_write_granularity into account
    - s390/syscalls: Avoid creation of arch/arch/ directory
    - ext4: remove calls to to set/clear the folio error flag
    - ext4: pipeline buffer reads in mext_page_mkuptodate()
    - ext4: remove array of buffer_heads from mext_page_mkuptodate()
    - ext4: fix race in buffer_head read fault injection
    - nvme-pci: reverse request order in nvme_queue_rqs
    - virtio_blk: reverse request order in virtio_queue_rqs
    - crypto: qat - remove check after debugfs_create_dir()
    - firmware: google: Unregister driver_info on failure
    - crypto: qat - remove faulty arbiter config reset
    - thermal: core: Initialize thermal zones before registering them
    - EDAC/fsl_ddr: Fix bad bit shift operations
    - EDAC/skx_common: Differentiate memory error sources
    - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
    - crypto: cavium - Fix the if condition to exit loop after timeout
    - amd-pstate: Set min_perf to nominal_perf for active mode performance gov
    - crypto: hisilicon/qm - disable same error report before resetting
    - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
    - doc: rcu: update printed dynticks counter bits
    - hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
    - hwmon: (pmbus/core) clear faults after setting smbalert mask
    - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
    - ACPI: CPPC: Fix _CPC register setting issue
    - crypto: caam - add error check to caam_rsa_set_priv_key_form
    - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
    - rcuscale: Do a proper cleanup if kfree_scale_init() fails
    - tools/lib/thermal: Make more generic the command encoding function
    - thermal/lib: Fix memory leak on error in thermal_genl_auto()
    - x86/unwind/orc: Fix unwind for newly forked tasks
    - time: Partially revert cleanup on msecs_to_jiffies() documentation
    - time: Fix references to _msecs_to_jiffies() handling of values
    - kcsan, seqlock: Support seqcount_latch_t
    - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
    - clocksource/drivers:sp804: Make user selectable
    - clocksource/drivers/timer-ti-dm: Fix child node refcount handling
    - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
    - microblaze: Export xmb_manager functions
    - arm64: dts: mt8195: Fix dtbs_check error for mutex node
    - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
    - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
    - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
    - mmc: mmc_spi: drop buggy snprintf()
    - openrisc: Implement fixmap to fix earlycon
    - efi/libstub: fix efi_parse_options() ignoring the default command line
    - tpm: fix signed/unsigned bug when checking event logs
    - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
    - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
    - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
    - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
      trackpad
    - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
    - cgroup/bpf: only cgroup v2 can be attached by bpf programs
    - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
    - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
    - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
    - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
    - arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible
    - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
    - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
    - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
    - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
    - um: Unconditionally call unflatten_device_tree()
    - x86/of: Unconditionally call unflatten_and_copy_device_tree()
    - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
    - riscv: Fix wrong usage of __pa() on a fixmap address
    - pmdomain: ti-sci: Add missing of_node_put() for args.np
    - spi: tegra210-quad: Avoid shift-out-of-bounds
    - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
    - regmap: irq: Set lockdep class for hierarchical IRQ domains
    - arm64: dts: renesas: hihope: Drop #sound-dai-cells
    - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
    - arm64: dts: mediatek: mt6358: fix dtbs_check error
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
      regulators
    - selftests/resctrl: Split fill_buf to allow tests finer-grained control
    - selftests/resctrl: Refactor fill_buf functions
    - selftests/resctrl: Fix memory overflow due to unhandled wraparound
    - selftests/resctrl: Protect against array overrun during iMC config parsing
    - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
    - platform/x86: panasonic-laptop: Return errno correctly in show callback
    - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
    - drm/vc4: hvs: Don't write gamma luts on 2711
    - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
    - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
    - drm/vc4: hvs: Correct logic on stopping an HVS channel
    - drm/omap: Fix possible NULL dereference
    - drm/omap: Fix locking in omap_gem_new_dmabuf()
    - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
    - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/v3d: Address race-condition in MMU flush
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
    - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
    - ASoC: fsl_micfil: fix regmap_write_bits usage
    - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
    - drm/bridge: anx7625: Drop EDID cache on bridge power off
    - drm/bridge: it6505: Drop EDID cache on bridge power off
    - libbpf: Fix expected_attach_type set handling in program load callback
    - libbpf: Fix output .symtab byte-order during linking
    - bpf: Fix the xdp_adjust_tail sample prog issue
    - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
    - ice: consistently use q_idx in ice_vc_cfg_qs_msg()
    - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
    - libbpf: fix sym_is_subprog() logic for weak global subprogs
    - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
    - libbpf: never interpret subprogs in .text as entry programs
    - netdevsim: copy addresses for both in and out paths
    - drm/bridge: tc358767: Fix link properties discovery
    - selftests/bpf: Fix msg_verify_data in test_sockmap
    - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
    - drm: fsl-dcu: enable PIXCLK on LS1021A
    - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
    - drm/msm/dpu: drop LM_3 / LM_4 on SDM845
    - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
    - selftests/bpf: fix test_spin_lock_fail.c's global vars usage
    - drm/panfrost: Remove unused id_mask from struct panfrost_model
    - bpf, arm64: Remove garbage frame for struct_ops trampoline
    - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/msm/gpu: Check the status of registration to PM QoS
    - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    - drm/etnaviv: hold GPU lock across perfmon sampling
    - wifi: wfx: Fix error handling in wfx_core_init()
    - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
    - bpf, bpftool: Fix incorrect disasm pc
    - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
    - drm: use ATOMIC64_INIT() for atomic64_t
    - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
    - netfilter: nf_tables: must hold rcu read lock while iterating expression
      type list
    - netfilter: nf_tables: skip transaction if update object is not implemented
    - netfilter: nf_tables: must hold rcu read lock while iterating object type
      list
    - netlink: typographical error in nlmsg_type constants definition
    - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
    - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
    - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
    - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
    - bpf, sockmap: Several fixes to bpf_msg_push_data
    - bpf, sockmap: Fix sk_msg_reset_curr
    - sock_diag: add module pointer to "struct sock_diag_handler"
    - sock_diag: allow concurrent operations
    - sock_diag: allow concurrent operation in sock_diag_rcv_msg()
    - net: use unrcu_pointer() helper
    - selftests: net: really check for bg process completion
    - drm/amdkfd: Fix wrong usage of INIT_WORK()
    - bpf: Force uprobe bpf program to always return 0
    - net: rfkill: gpio: Add check for clk_enable()
    - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
    - wireguard: selftests: load nf_conntrack if not present
    - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
    - clk: mediatek: drop two dead config options
    - [Config] drop COMMON_CLK_MT8195_AUDSYS and COMMON_CLK_MT8195_MSDC
    - trace/trace_event_perf: remove duplicate samples on the first tracepoint
      event
    - pinctrl: zynqmp: drop excess struct member description
    - scsi: hisi_sas: Enable all PHYs that are not disabled by user during
      controller reset
    - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
    - mfd: da9052-spi: Change read-mask to write-mask
    - cpufreq: loongson2: Unregister platform_driver on failure
    - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
    - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
    - mtd: rawnand: atmel: Fix possible memory leak
    - mtd: rawnand: fix double free in atmel_pmecc_create_user()
    - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in
      RD_ANY_REG_OP
    - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
    - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
    - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
    - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
    - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
    - RDMA/rxe: Set queue pair cur_qp_state when being queried
    - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
    - clk: imx: lpcg-scu: SW workaround for errata (e10858)
    - clk: imx: fracn-gppll: correct PLL initialization flow
    - clk: imx: fracn-gppll: fix pll power up
    - clk: imx: clk-scu: fix clk enable state save and restore
    - clk: imx: imx8-acm: Fix return value check in
      clk_imx_acm_attach_pm_domains()
    - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
    - iommu/vt-d: Fix checks and print in pgtable_walk()
    - checkpatch: check for missing Fixes tags
    - checkpatch: always parse orig_commit in fixes tag
    - mfd: rt5033: Fix missing regmap_del_irq_chip()
    - fs/proc/kcore.c: fix coccinelle reported ERROR instances
    - scsi: fusion: Remove unused variable 'rc'
    - scsi: sg: Enable runtime power management
    - x86/tdx: Introduce wrappers to read and write TD metadata
    - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
    - x86/tdx: Dynamically disable SEPT violations from causing #VEs
    - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
    - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
    - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
    - dax: delete a stale directory pmem
    - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
    - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending
      doorbells
    - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
    - powerpc/kexec: Fix return of uninitialized variable
    - IB/mlx5: Allocate resources just before first QP/SRQ is created
    - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
    - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
    - dt-bindings: clock: axi-clkgen: include AXI clk
    - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
    - pinctrl: k210: Undef K210_PC_DEFAULT
    - smb: cached directories can be more than root file handle
    - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
    - perf cs-etm: Don't flush when packet_queue fills up
    - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
    - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
    - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
    - gfs2: Allow immediate GLF_VERIFY_DELETE work
    - gfs2: Fix unlinked inode cleanup
    - perf stat: Close cork_fd when create_perf_stat_counter() failed
    - perf stat: Fix affinity memory leaks on error path
    - perf trace: Keep exited threads for summary
    - perf test attr: Add back missing topdown events
    - f2fs: compress: fix inconsistent update of i_blocks in
      release_compress_blocks and reserve_compress_blocks
    - perf probe: Fix libdw memory leak
    - perf probe: Correct demangled symbols in C++ program
    - rust: macros: fix documentation of the paste! macro
    - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    - PCI: cpqphp: Fix PCIBIOS_* return value confusion
    - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
    - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
    - f2fs: check curseg->inited before write_sum_page in change_curseg
    - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or
      GC_URGENT_MID
    - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
    - PCI: cadence: Set cdns_pcie_host_init() global
    - PCI: j721e: Add reset GPIO to struct j721e_pcie
    - PCI: j721e: Use T_PERST_CLK_US macro
    - PCI: j721e: Add suspend and resume support
    - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
    - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data
      inode
    - perf trace: avoid garbage when not printing a trace event's arguments
    - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
    - m68k: coldfire/device.c: only build FEC when HW macros are defined
    - perf list: Fix topic and pmu_name argument order
    - perf trace: Fix tracing itself, creating feedback loops
    - perf trace: Do not lose last events in a race
    - perf trace: Avoid garbage when not printing a syscall's arguments
    - remoteproc: qcom: pas: add minidump_id to SM8350 resources
    - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
    - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
    - nfsd: restore callback functionality for NFSv4.0
    - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
    - NFSD: Fix nfsd4_shutdown_copy()
    - hwmon: (tps23861) Fix reporting of negative temperatures
    - vdpa/mlx5: Fix suboptimal range on iotlb iteration
    - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
    - gpio: zevio: Add missed label initialisation
    - fs_parser: update mount_api doc to match function signature
    - LoongArch: Fix build failure with GCC 15 (-std=gnu23)
    - LoongArch: BPF: Sign-extend return values
    - power: supply: core: Remove might_sleep() from power_supply_put()
    - power: supply: bq27xxx: Fix registers of bq27426
    - power: supply: rt9471: Fix wrong WDT function regfield declaration
    - power: supply: rt9471: Use IC status regfield to report real charger status
    - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
    - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
    - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
      configuration
    - net: microchip: vcap: Add typegroup table terminators in kunit tests
    - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
    - net: mdio-ipq4019: add missing error check
    - marvell: pxa168_eth: fix call balance of pep->clk handling routines
    - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
    - octeontx2-af: RPM: Fix mismatch in lmac type
    - octeontx2-af: RPM: Fix low network performance
    - octeontx2-pf: Reset MAC stats during probe
    - octeontx2-af: RPM: fix stale RSFEC counters
    - octeontx2-af: RPM: fix stale FCFEC counters
    - octeontx2-af: Quiesce traffic before NIX block reset
    - spi: atmel-quadspi: Fix register name in verbose logging function
    - net: hsr: fix hsr_init_sk() vs network/transport headers.
    - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
    - bnxt_en: Refactor bnxt_ptp_init()
    - bnxt_en: Unregister PTP during PCI shutdown and suspend
    - llc: Improve setsockopt() handling of malformed user input
    - rxrpc: Improve setsockopt() handling of malformed user input
    - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
    - ip6mr: fix tables suspicious RCU usage
    - ipmr: fix tables suspicious RCU usage
    - iio: light: al3010: Fix an error handling path in al3010_probe()
    - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
    - usb: yurex: make waiting on yurex_write interruptible
    - USB: chaoskey: fail open after removal
    - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
    - misc: apds990x: Fix missing pm_runtime_disable()
    - counter: stm32-timer-cnt: Add check for clk_enable()
    - counter: ti-ecap-capture: Add check for clk_enable()
    - ALSA: hda/realtek: Update ALC256 depop procedure
    - drm/radeon: add helper rdev_to_drm(rdev)
    - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
    - drm/radeon: Fix spurious unplug event on radeon HDMI
    - apparmor: fix 'Do simple duplicate message elimination'
    - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
    - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru
    - gfs2: Remove and replace gfs2_glock_queue_work
    - f2fs: fix fiemap failure issue when page size is 16KB
    - usb: ehci-spear: fix call balance of sehci clk handling routines
    - ALSA: usb-audio: Fix a DMA to stack memory bug
    - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
    - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
    - ext4: fix FS_IOC_GETFSMAP handling
    - jfs: xattr: check invalid xattr size more strictly
    - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5
      21MES00B00
    - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
    - perf/x86/intel/pt: Fix buffer full but size is 0 case
    - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
    - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
    - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
    - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
    - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
    - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
    - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
    - fsnotify: fix sending inotify event with unexpected filename
    - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    - locking/lockdep: Avoid creating new name string literals in
      lockdep_set_subclass()
    - tools/nolibc: s390: include std.h
    - pinctrl: qcom: spmi: fix debugfs drive strength
    - dt-bindings: iio: dac: ad3552r: fix maximum spi speed
    - exfat: fix uninit-value in __exfat_get_dentry_set
    - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    - Compiler Attributes: disable __counted_by for clang < 19.1.3
    - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
    - ARM: dts: omap36xx: declare 1GHz OPP as turbo again
    - wifi: brcmfmac: release 'root' node in all execution paths
    - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
    - gpio: exar: set value when external pull-up or pull-down is present
    - spi: Fix acpi deferred irq probe
    - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
    - cifs: support mounting with alternate password to allow password rotation
    - parisc/ftrace: Fix function graph tracing disablement
    - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
    - ubi: wl: Put source PEB into correct list if trying locking LEB failed
    - dt-bindings: serial: rs485: Fix rs485-rts-delay property
    - serial: 8250_fintek: Add support for F81216E
    - serial: 8250: omap: Move pm_runtime_get_sync
    - iio: gts: Fix uninitialized symbol 'ret'
    - ublk: fix ublk_ch_mmap() for 64K page size
    - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
    - block: fix missing dispatching request when queue is started or unquiesced
    - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
    - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
    - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
    - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
    - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
    - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
    - ALSA: ump: Fix evaluation of MIDI 1.0 FB info
    - ALSA: hda/realtek: Update ALC225 depop procedure
    - ALSA: hda/realtek: Fixup ALC225 depop procedure
    - ALSA: hda/realtek: Set PCBeep to default value for ALC274
    - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
    - ALSA: hda/realtek: Apply quirk for Medion E15433
    - smb3: request handle caching when caching directories
    - smb: client: handle max length for SMB symlinks
    - cifs: Add tracing for the cifs_tcon struct refcounting
    - usb: dwc3: gadget: Fix checking for number of TRBs left
    - ublk: fix error code for unsupported command
    - lib: string_helpers: silence snprintf() output truncation warning
    - um: Fix the return value of elf_core_copy_task_fpregs
    - um: Always dump trace for specified task in show_stack
    - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    - rtc: abx80x: Fix WDT bit position of the status register
    - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
    - ubifs: Correct the total block count by deducting journal reservation
    - jffs2: fix use of uninitialized variable
    - rtc: rzn1: fix BCD to rtc_time conversion errors
    - nvme-multipath: prepare for "queue-depth" iopolicy
    - nvme-multipath: implement "queue-depth" iopolicy
    - nvme-multipath: avoid hang on inaccessible namespaces
    - nvme/multipath: Fix RCU list traversal to use SRCU primitive
    - block: return unsigned int from bdev_io_min
    - 9p/xen: fix init sequence
    - perf/arm-smmuv3: Fix lockdep assert in ->event_init()
    - perf/arm-cmn: Ensure port and device id bits are set properly
    - smb: client: disable directory caching when dir_cache_timeout is zero
    - cifs: Fix parsing native symlinks relative to the export
    - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE
      session
    - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
    - init/modpost: conditionally check section mismatch to __meminit*
    - Rename .data.unlikely to .data..unlikely
    - Rename .data.once to .data..once to fix resetting WARN*_ONCE
    - modpost: remove incorrect code in do_eisa_entry()
    - cifs: during remount, make sure passwords are in sync
    - cifs: unlock on error in smb3_reconfigure()
    - nfs: ignore SB_RDONLY when mounting nfs
    - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
    - xfs: remove unknown compat feature check in superblock write validation
    - btrfs: don't loop for nowait writes when checking for cross references
    - md/md-bitmap: Add missing destroy_work_on_stack()
    - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
    - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
    - arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
    - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
    - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
    - media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
    - media: verisilicon: av1: Fix reference video buffer pointer assignment
    - media: platform: exynos4-is: Fix an OF node reference leak in
      fimc_md_is_isp_available
    - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
    - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
    - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
    - media: uvcvideo: Stop stream during unregister
    - maple_tree: refine mas_store_root() on storing NULL
    - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
    - zram: clear IDLE flag after recompression
    - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
    - leds: lp55xx: Remove redundant test for invalid channel number
    - clk: qcom: gcc-qcs404: fix initial rate of GPLL3
    - ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
    - ARM: 9430/1: entry: Do a dummy read from VMAP shadow
    - ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
    - ceph: extract entity name from device id
    - util_macros.h: fix/rework find_closest() macros
    - scsi: ufs: exynos: Fix hibern8 notify callbacks
    - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
    - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
    - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
    - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
    - fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful
      iov_iter_zero
    - thermal: int3400: Fix reading of current_uuid for active policy
    - leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error
      paths
    - ovl: properly handle large files in ovl_security_fileattr
    - dm: Fix typo in error message
    - dm thin: Add missing destroy_work_on_stack()
    - PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
    - PCI: rockchip-ep: Fix address translation unit programming
    - iio: accel: kx022a: Fix raw read format
    - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
    - iio: gts: fix infinite loop for gain_to_scaletables()
    - powerpc: Fix stack protector Kconfig test for clang
    - powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
    - udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap
    - drm/mediatek: Fix child node refcount handling in early exit
    - drm/etnaviv: flush shader L1 cache after user commandstream
    - drm: xlnx: zynqmp_dpsub: fix hotplug detection
    - drm/amdkfd: Use the correct wptr size
    - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu
      v13.0.7
    - posix-timers: Target group sigqueue to current task only if not exiting
    - wifi: cfg80211: Add wiphy_delayed_work_pending()
    - wifi: mac80211: Convert color collision detection to wiphy work
    - spi: stm32: fix missing device mode capability in stm32mp25
    - usb: typec: use cleanup facility for 'altmodes_node'
    - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
    - integrity: Avoid -Wflex-array-member-not-at-end warnings
    - integrity: Use static_assert() to check struct sizes
    - ASoC: max9768: Fix event generation for playback mute
    - ARM: 9434/1: cfi: Fix compilation corner case
    - drm/amd/display: Skip Invalid Streams from DSC Policy
    - drm/amd/display: Fix DSC-re-computing
    - drm/amd/display: Fix incorrect DSC recompute trigger
    - s390/facilities: Fix warning about shadow of global variable
    - cachefiles: Fix incorrect length return value in
      cachefiles_ondemand_fd_write_iter()
    - thermal: core: Drop thermal_zone_device_is_enabled()
    - thermal: core: Synchronize suspend-prepare and post-suspend actions
    - thermal: core: Rearrange PM notification code
    - thermal: core: Represent suspend-related thermal zone flags as bits
    - thermal: core: Mark thermal zones as initializing to start with
    - thermal: core: Fix race between zone registration and system suspend
    - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
    - sched/cpufreq: Ensure sd is rebuilt for EAS check
    - cleanup: Remove address space of returned pointer
    - ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash
    - arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy
    - scripts/kernel-doc: Do not track section counter across processed files
    - arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region
    - scripts/kernel-doc: add modeline for vim users
    - scripts/kernel-doc: simplify function printing
    - scripts/kernel-doc: separate out function signature
    - scripts/kernel-doc: simplify signature printing
    - doc: kerneldoc.py: fix indentation
    - kernel-doc: allow object-like macros in ReST output
    - arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status
    - arm64: dts: rockchip: Remove 'enable-active-low' from two boards
    - arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers
    - dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries
    - pwm: Assume a disabled PWM to emit a constant inactive output
    - drm/imagination: Convert to use time_before macro
    - drm/imagination: Use pvr_vm_context_get()
    - drm/v3d: Flush the MMU before we supply more memory to the binner
    - drm/amdgpu: Fix JPEG v4.0.3 register write
    - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios
    - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled
    - selftests/bpf: netns_new() and netns_free() helpers.
    - selftests/bpf: Fix backtrace printing for selftests crashes
    - selftests/bpf: add missing header include for htons
    - drm/vc4: hdmi: Increase audio MAI fifo dreq threshold
    - drm/vc4: Introduce generation number enum
    - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
    - drm/vc4: Correct generation check in vc4_hvs_lut_load
    - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable
    - drm/panfrost: Add missing OPP table refcnt decremental
    - selftests: netfilter: Fix missing return values in conntrack_dump_flush
    - Bluetooth: btintel: Do no pass vendor events to stack
    - Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
    - Bluetooth: ISO: Use kref to track lifetime of iso_conn
    - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending
    - Bluetooth: hci_conn: Use __counted_by() to avoid -Wfamnae warning
    - Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync()
    - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending
    - Bluetooth: ISO: Send BIG Create Sync via hci_sync
    - Bluetooth: iso: Fix circular lock in iso_conn_big_sync
    - net: txgbe: remove GPIO interrupt controller
    - net: txgbe: fix null pointer to pcs
    - RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages
    - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset
    - iommu/amd: Remove amd_iommu_domain_update() from page table freeing
    - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
    - RDMA/hns: Fix flush cqe error when racing with destroy qp
    - RDMA/hns: Modify debugfs name
    - leds: max5970: Fix unreleased fwnode_handle in probe function
    - kasan: move checks to do_strncpy_from_user
    - kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL
    - RDMA/hns: Fix different dgids mapping to the same dip_idx
    - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
    - rust: kernel: add srctree-relative doclinks
    - rust: kernel: fix THIS_MODULE header path in ThisModule doc comment
    - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
    - remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()
    - remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()
    - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
    - f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS
    - f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow
    - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()
    - exfat: fix file being changed by unaligned direct write
    - bnxt_en: Set backplane link modes correctly for ethtool
    - devres: Fix page faults when tracing devres from unloaded modules
    - usb: gadget: uvc: wake pump everytime we update the free list
    - drm/xe/ufence: Wake up waiters after setting ufence->signalled
    - net_sched: sch_fq: don't follow the fast path if Tx is behind now
    - ASoC: da7213: Populate max_register to regmap_config
    - KVM: x86: switch hugepage recovery thread to vhost_task
    - kvm: defer huge page recovery vhost task to later
    - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking
    - KVM: arm64: Change kvm_handle_mmio_return() return polarity
    - dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with
      fallbacks
    - xhci: Fix control transfer error on Etron xHCI host
    - xhci: Combine two if statements for Etron xHCI host
    - xhci: Don't perform Soft Retry for Etron xHCI host
    - xhci: Don't issue Reset Device command to Etron xHCI host
    - mtd: spi-nor: core: replace dummy buswidth from addr to data
    - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
    - RISC-V: Scalar unaligned access emulated on hotplug CPUs
    - serial: amba-pl011: Fix RX stall when DMA is used
    - serial: amba-pl011: fix build regression
    - i40e: Fix handling changed priv flags
    - netdev-genl: Hold rcu_read_lock in napi_get
    - usb: misc: ljca: set small runtime autosuspend delay
    - usb: misc: ljca: move usb_autopm_put_interface() after wait for response
    - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs
    - block: model freeze & enter queue as lock for supporting lockdep
    - block: always verify unfreeze lock on the owner task
    - x86/Documentation: Update algo in init_size description of boot protocol
    - kbuild: deb-pkg: Don't fail if modules.order is missing
    - tools/power turbostat: Fix trailing '\n' parsing
    - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq()
    - zram: permit only one post-processing operation at a time
    - perf jevents: Don't stop at the first matched pmu when searching a events
      table
    - docs: media: update location of the media patches
    - Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of
      setup_vmcs_config()"
    - soc: fsl: cpm1: qmc: Fix blank line and spaces
    - soc: fsl: cpm1: qmc: Re-order probe() operations
    - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
    - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
    - soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
    - x86/mm: Carve out INVLPG inline asm for use by others
    - ALSA: hda/realtek: Enable mic on Vaio VJFH52
    - ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform
    - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
    - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing
      logic
    - sched: Initialize idle tasks only once
    - Upstream stable to v6.6.64, v6.11.11, v6.12.1, v6.12.2, v6.12.3
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53222
    - zram: fix NULL pointer in comp_algorithm_show()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53169
    - nvme-fabrics: fix kernel crash while shutting down controller
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56721
    - x86/CPU/AMD: Terminate the erratum_1386_microcode array
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53187
    - io_uring: check for overflows in io_pin_pages
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53147
    - exfat: fix out-of-bounds access of directory entries
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53196
    - KVM: arm64: Don't retire aborted MMIO instruction
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56685
    - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53201
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in
      dcn20_program_pipe
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53203
    - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53209
    - bnxt_en: Fix receive ring space parameters when XDP is active
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56742
    - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53216
    - nfsd: release svc_expkey/svc_export with rcu_work
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53219
    - virtiofs: use pages instead of pointer for kernel direct IO
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53221
    - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53228
    - riscv: kvm: Fix out-of-bounds array access
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53232
    - iommu/s390: Implement blocking domain
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53236
    - xsk: Free skb when TX metadata options are invalid
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56703
    - ipv6: Fix soft lockups in fib6_select_path under high next hop churn
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56540
    - accel/ivpu: Prevent recovery invocation during probe and resume
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53163
    - crypto: qat/qat_420xx - fix off by one in uof_get_name()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56755
    - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56549
    - cachefiles: Fix NULL pointer dereference in object->file
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56551
    - drm/amdgpu: fix usage slab after free
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56776
    - drm/sti: avoid potential dereference of error pointers
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56777
    - drm/sti: avoid potential dereference of error pointers in
      sti_gdp_atomic_check
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56778
    - drm/sti: avoid potential dereference of error pointers in
      sti_hqvdp_atomic_check
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56557
    - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56779
    - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56558
    - nfsd: make sure exp active before svc_export_show
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56562
    - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56566
    - mm/slub: Avoid list corruption when removing a slab from the full list
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-57838
    - s390/entry: Mark IRQ entries to fix stack depot warnings
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56567
    - ad7780: fix division by zero in ad7780_write_raw()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56569
    - ftrace: Fix regression with module command in stack_trace_filter
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56570
    - ovl: Filter invalid inodes with missing lookup function
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56572
    - media: platform: allegro-dvt: Fix possible memory leak in
      allocate_buffers_internal()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56573
    - efi/libstub: Free correct pointer on failure
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56574
    - media: ts2020: fix null-ptr-deref in ts2020_probe()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56575
    - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56576
    - media: i2c: tc358743: Fix crash in the probe error path when using polling
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56577
    - media: mtk-jpeg: Fix null-ptr-deref during unload module
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56578
    - media: imx-jpeg: Set video drvdata before register video device
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56579
    - media: amphion: Set video drvdata before register video device
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56581
    - btrfs: ref-verify: fix use-after-free after invalid ref action
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56774
    - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56780
    - quota: flush quota_release_work upon quota writeback
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53168
    - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56688
    - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56729
    - smb: Initialize cfid->tcon before performing network ops
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56704
    - 9p/xen: fix release of IRQ
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53171
    - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53172
    - ubi: fastmap: Fix duplicate slab cache names while attaching
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56739
    - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53173
    - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53145
    - um: Fix potential integer overflow during physmem setup
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53174
    - SUNRPC: make sure cache entry active before cache_show
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53146
    - NFSD: Prevent a potential integer overflow
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53175
    - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56692
    - f2fs: fix to do sanity check on node blkaddr in truncate_node()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56698
    - usb: dwc3: gadget: Fix looping of queued SG entries
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56687
    - usb: musb: Fix hardware lockup on first Rx endpoint request
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53176
    - smb: During unmount, ensure all cached dir instances drop their dentry
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53177
    - smb: prevent use-after-free due to open_cached_dir error paths
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53178
    - smb: Don't leak cfid when reconnect races with open_cached_dir
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53180
    - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56700
    - media: wl128x: Fix atomicity violation in fmc_send_cmd()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2022-49034
    - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53181
    - um: vector: Do not use drvdata in release
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53183
    - um: net: Do not use drvdata in release
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53184
    - um: ubd: Do not use drvdata in release
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53185
    - smb: client: fix NULL ptr deref in crypto_aead_setkey()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53188
    - wifi: ath12k: fix crash when unbinding
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53190
    - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of
      failures
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53191
    - wifi: ath12k: fix warning when unbinding
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56741
    - apparmor: test: Fix memory leak for aa_unpack_strdup()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53148
    - comedi: Flush partial mappings in error case
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53194
    - PCI: Fix use-after-free of slot->bus on hot remove
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53195
    - KVM: arm64: Get rid of userspace_irqchip_in_use
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53197
    - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
      devices
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-42122
    - drm/amd/display: Add NULL pointer check for kzalloc
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-49906
    - drm/amd/display: Check null pointer before try to access it
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53150
    - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53198
    - xen: Fix the issue of resource not being properly released in
      xenbus_dev_probe()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-41014
    - xfs: add bounds checking to xlog_recover_process_data
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53200
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53202
    - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53208
    - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53210
    - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53213
    - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53214
    - vfio/pci: Properly hide first-in-list PCIe extended capability
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53215
    - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53217
    - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56689
    - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53151
    - svcrdma: Address an integer overflow
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53218
    - f2fs: fix race in concurrent f2fs_stop_gc_thread
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56744
    - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53220
    - f2fs: fix to account dirty data in __get_secs_required()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56745
    - PCI: Fix reset_method_store() memory leak
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53223
    - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53154
    - clk: clk-apple-nco: Add NULL check in applnco_probe
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53224
    - RDMA/mlx5: Move events notifier registration to be after device registration
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56746
    - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53155
    - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53226
    - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56747
    - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56748
    - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53229
    - RDMA/rxe: Fix the qp flush warnings in req
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56722
    - RDMA/hns: Fix cpu stuck caused by printings during reset
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53230
    - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53231
    - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56701
    - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56678
    - powerpc/mm/fault: Fix kfence page fault reporting
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56677
    - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56723
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56724
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56691
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53233
    - unicode: Fix utf8_load() error path
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56694
    - bpf: fix recursive lock when verdict program return SK_PASS
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53234
    - erofs: handle NONHEAD !delta[1] lclusters gracefully
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53239
    - ALSA: 6fire: Release resources at card release
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56531
    - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56532
    - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56533
    - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56751
    - ipv6: release nexthop on device removal
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56720
    - bpf, sockmap: Several fixes to bpf_msg_pop_data
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56538
    - drm: zynqmp_kms: Unplug DRM device before removal
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56752
    - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56725
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56707
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56726
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56727
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56728
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56679
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56539
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_config_scan()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56543
    - wifi: ath12k: Skip Rx TID cleanup for self peer
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56683
    - drm/vc4: hdmi: Avoid hang with debug registers when suspended
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56545
    - HID: hyperv: streamline driver probe to avoid devres issues
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56705
    - media: atomisp: Add check for rgby_data memory allocation failure
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53157
    - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53158
    - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56546
    - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56681
    - crypto: bcm - add error check in the ahash_hmac_init function
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53160
    - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56708
    - EDAC/igen6: Avoid segmentation fault on module unload
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56690
    - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
      -EBUSY
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53161
    - EDAC/bluefield: Fix potential integer overflow
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53162
    - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56754
    - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56548
    - hfsplus: don't query the device logical block size multiple times
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56756
    - nvme-pci: fix freeing of the HMB descriptor table
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-53142
    - initramfs: avoid filename buffer overrun
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-56693
    - brd: defer automatic disk creation until module initialization succeeds
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-44955
    - drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute
  * Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
    CVE-2024-49899
    - drm/amd/display: Initialize denominators' default to 1
  * Noble update: upstream stable patchset 2025-03-06 (LP: #2101042)
    - sctp: fix possible UAF in sctp_v6_available()
    - net: vertexcom: mse102x: Fix tx_bytes calculation
    - drm/rockchip: vop: Fix a dereferenced before check warning
    - mptcp: error out earlier on disconnect
    - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
    - net/mlx5: fs, lock FTE when checking if active
    - net/mlx5e: kTLS, Fix incorrect page refcounting
    - net/mlx5e: clear xdp features on non-uplink representors
    - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
    - virtio/vsock: Fix accept_queue memory leak
    - Bluetooth: btintel: Direct exception event to bluetooth stack
    - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
      hnodes.
    - samples: pktgen: correct dev to DEV
    - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
    - net: Make copy_safe_from_sockptr() match documentation
    - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
    - net: ti: icssg-prueth: Fix 1 PPS sync
    - bonding: add ns target multicast address to slave device
    - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
    - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
    - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
    - ocfs2: uncache inode which has failed entering the group
    - vdpa: solidrun: Fix UB bug with devres
    - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    - vp_vdpa: fix id_table array not null terminated error
    - ima: fix buffer overrun in ima_eventdigest_init_common
    - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
    - KVM: x86: Unconditionally set irr_pending when updating APICv state
    - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
      CONFIG_BROKEN
    - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
    - nommu: pass NULL argument to vma_iter_prealloc()
    - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
    - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
    - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
    - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
    - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
    - LoongArch: Make KASAN work with 5-level page-tables
    - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
    - mmc: sunxi-mmc: Fix A100 compatible description
    - drm/bridge: tc358768: Fix DSI command tx
    - pmdomain: imx93-blk-ctrl: correct remove path
    - nouveau: fw: sync dma after setup is called.
    - drm/amd: Fix initialization mistake for NBIO 7.7.0
    - drm/amd/display: Adjust VSDB parser for replay feature
    - lib/buildid: Fix build ID parsing logic
    - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    - mptcp: add userspace_pm_lookup_addr_by_id helper
    - mptcp: update local address flags when setting it
    - mptcp: hold pm lock when deleting entry
    - mptcp: drop lookup_by_id in lookup_addr
    - mptcp: pm: use _rcu variant under rcu_read_lock
    - mm: avoid unsafe VMA hook invocation when error arises on mmap hook
    - mm: unconditionally close VMAs on error
    - mm: refactor map_deny_write_exec()
    - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    - mm: resolve faulty mmap_region() error path behaviour
    - net/mlx5: Fix msix vectors to respect platform limit
    - vsock: Fix sk_error_queue memory leak
    - virtio/vsock: Improve MSG_ZEROCOPY error handling
    - net: phylink: ensure PHY momentary link-fails are handled
    - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
    - ARM: fix cacheflush with PAN
    - drm/amd/display: Run idle optimizations at end of vblank handler
    - drm/amd/display: Change some variable name of psr
    - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
    - x86/stackprotector: Work around strict Clang TLS symbol requirements
    - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
    - fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
    - mm/mremap: fix address wraparound in move_page_tables()
    - KVM: selftests: Disable strict aliasing
    - mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
    - LoongArch: Add WriteCombine shadow mapping in KASAN
    - drm/xe: handle flat ccs during hibernation on igpu
    - pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
    - pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
    - nouveau: handle EBUSY and EAGAIN for GSP aux errors.
    - nouveau/dp: handle retries for AUX CH transfers with GSP.
    - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
    - drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
    - drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
    - drm/amd/display: Handle dml allocation failure to avoid crash
    - drm/amd/display: Fix failure to read vram info due to static BP_RESULT
    - drm/xe: Restore system memory GGTT mappings
    - drm/xe: improve hibernation on igpu
    - net: sched: u32: Add test case for systematic hnode IDR leaks
    - Upstream stable to v6.6.63, v6.11.10
  * Noble update: upstream stable patchset 2025-03-04 (LP: #2100894)
    - 9p: v9fs_fid_find: also lookup by inode if not found dentry
    - 9p: Avoid creating multiple slab caches with the same name
    - selftests/bpf: Verify that sync_linked_regs preserves subreg_def
    - irqchip/ocelot: Fix trigger register address
    - nvme: tcp: avoid race between queue_lock lock and destroy
    - block: Fix elevator_get_default() checking for NULL q->tag_set
    - HID: multitouch: Add support for B2402FVA track point
    - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    - iommu/arm-smmu: Clarify MMU-500 CPRE workaround
    - nvme: disable CC.CRIME (NVME_CC_CRIME)
    - bpf: use kvzmalloc to allocate BPF verifier environment
    - crypto: api - Fix liveliness check in crypto_alg_tested
    - crypto: marvell/cesa - Disable hash algorithms
    - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    - drm/vmwgfx: Limit display layout ioctl array size to
      VMWGFX_NUM_DISPLAY_UNITS
    - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
    - nvme-multipath: defer partition scanning
    - drm/amdkfd: Accounting pdd vram_usage for svm
    - powerpc/powernv: Free name on error in opal_event_init()
    - net: phy: mdio-bcm-unimac: Add BCM6846 support
    - nvme-loop: flush off pending I/O while shutting down loop controller
    - smb: client: Fix use-after-free of network namespace.
    - nvme/host: Fix RCU list traversal to use SRCU primitive
    - vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
    - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
    - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
    - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
    - fs: Fix uninitialized value issue in from_kuid and from_kgid
    - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
    - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    - RISCV: KVM: use raw_spinlock for critical section in imsic
    - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
    - LoongArch: Use "Exception return address" to comment ERA
    - ASoC: fsl_micfil: Add sample rate constraint
    - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    - bpf: Check validity of link->type in bpf_link_show_fdinfo()
    - mm: support order-1 folios in the page cache
    - mm: always initialise folio->_deferred_list
    - mm: refactor folio_undo_large_rmappable()
    - mm/thp: fix deferred split unqueue naming and locking
    - 9p: fix slab cache name creation for real
    - nvmet-passthru: clear EUID/NGUID/UUID while using loop target
    - pinctrl: intel: platform: Add Panther Lake to the list of supported
    - s390/ap: Fix CCA crypto card behavior within protected execution environment
    - selftests/bpf: Assert link info uprobe_multi count & path_size if unset
    - ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
    - drm/xe/query: Increase timestamp width
    - nvme: make keep-alive synchronous operation
    - samples/landlock: Fix port parsing in sandboxer
    - ASoC: Intel: avs: Update stream status in a separate thread
    - ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
    - netfs: Downgrade i_rwsem for a buffered write
    - afs: Fix lock recursion
    - HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
    - LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
    - drm/xe: Don't restart parallel queues multiple times on GT reset
    - Upstream stable to v6.6.62, v6.11.9
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292)
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
      excavator
    - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
    - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
    - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    - arm64: dts: rockchip: Remove undocumented supports-emmc property
    - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
    - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
    - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
    - arm64: dts: imx8mp: correct sdhc ipg clk
    - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
    - ARM: dts: rockchip: fix rk3036 acodec node
    - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    - ARM: dts: rockchip: Fix the spi controller on rk3036
    - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
    - NFSv3: only use NFS timeout for MOUNT when protocols are compatible
    - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    - net: enetc: set MAC address to the VF net_device
    - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
    - can: c_can: fix {rx,tx}_errors statistics
    - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation
      fails
    - ice: change q_index variable type to s16 to store -1 value
    - e1000e: Remove Meteor Lake SMBUS workarounds
    - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
    - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
    - netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
    - netfilter: nf_tables: wait for rcu grace period on net_device removal
    - netfilter: nf_tables: do not defer rule destruction via call_rcu
    - net: arc: rockchip: fix emac mdio node support
    - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
    - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    - media: stb0899_algo: initialize cfr before using it
    - media: dvb_frontend: don't play tricks with underflow values
    - media: adv7604: prevent underflow condition when reporting colorspace
    - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
    - tools/lib/thermal: Fix sampling handler context ptr
    - thermal/of: support thermal zones w/o trips subnode
    - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    - media: pulse8-cec: fix data timestamp at pulse8_setup()
    - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
    - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
      switching CAN modes
    - ksmbd: count all requests in req_running counter
    - ksmbd: fix broken transfers when exceeding max simultaneous operations
    - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    - rpmsg: glink: Handle rejected intent request better
    - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    - drm/amdgpu: Adjust debugfs register access permissions
    - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
    - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    - dm cache: correct the number of origin blocks to match the target length
    - dm cache: optimize dirty bit checking with find_next_bit when resizing
    - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
      overflow
    - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
    - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
    - mptcp: use sock_kfree_s instead of kfree
    - arm64: Kconfig: Make SME depend on BROKEN for now
    - [Config] updateconfigs for ARM64_SME
    - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
    - Revert "wifi: mac80211: fix RCU list iterations"
    - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
    - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    - usb: dwc3: fix fault at system suspend if device was already runtime
      suspended
    - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    - USB: serial: option: add Fibocom FG132 0x0112 composition
    - USB: serial: option: add Quectel RG650V
    - irqchip/gic-v3: Force propagation of the active state with a read-back
    - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    - arm64: dts: rockchip: Designate Turing RK1's system power controller
    - EDAC/qcom: Make irq configuration optional
    - arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
    - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
    - virtio_net: Sync rss config to device when virtnet_probe
    - drm/xe: Set mask bits for CCS_MODE register
    - drm/amd/display: Fix brightness level not retained over reboot
    - drm/imagination: Add a per-file PVR context list
    - mptcp: no admin perm to list endpoints
    - btrfs: fix the length of reserved qgroup to free
    - btrfs: fix per-subvolume RO/RW flags with new mount API
    - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
    - objpool: fix to make percpu slot allocation more robust
    - mm/damon/core: handle zero {aggregation,ops_update} intervals
    - mm/damon/core: handle zero schemes apply interval
    - mm/mlock: set the correct prev on failure
    - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    - staging: vchiq_arm: Get the rid off struct vchiq_2835_state
    - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
    - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    - drm/xe: Move LNL scheduling WA to xe_device.h
    - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    - xtensa: Emulate one-byte cmpxchg
    - Upstream stable to v6.6.61, v6.11.8
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50270
    - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50274
    - idpf: avoid vport access in idpf_get_link_ksettings
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53067
    - scsi: ufs: core: Start the RTC update work later
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53084
    - drm/imagination: Break an object reference loop
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53085
    - tpm: Lock TPM chip in tpm_pm_suspend() first
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53086
    - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53087
    - drm/xe: Fix possible exec queue leak in exec IOCTL
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50288
    - media: vivid: fix buffer overwrite when using > 32 buffers
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50289
    - media: av7110: fix a spectre vulnerability
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53062
    - media: mgb4: protect driver against spectre
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50291
    - media: dvb-core: add missing buffer index check
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50297
    - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50267
    - USB: serial: io_edgeport: fix use after free in debug printk
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50268
    - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53083
    - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50269
    - usb: musb: sunxi: Fix accessing an released usb phy
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50271
    - signal: restore the override_rlimit logic
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50272
    - filemap: Fix bounds checking in filemap_read()
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50273
    - btrfs: reinitialize delayed ref list after deleting it from the list
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50275
    - arm64/sve: Discard stale CPU state when handling SVE traps
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50276
    - net: vertexcom: mse102x: Fix possible double free of TX skb
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53066
    - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50278
    - dm cache: fix potential out-of-bounds access on the first resume
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50279
    - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50280
    - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53060
    - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50282
    - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50283
    - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50284
    - ksmbd: Fix the missing xa_store error check
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50285
    - ksmbd: check outstanding simultaneous SMB operations
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50286
    - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50287
    - media: v4l2-tpg: prevent the risk of a division by zero
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50290
    - media: cx24116: prevent overflows on SNR calculus
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53061
    - media: s5p-jpeg: prevent buffer overflows
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53081
    - media: ar0521: don't overflow when checking PLL values
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50292
    - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50294
    - rxrpc: Fix missing locking causing hanging calls
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50295
    - net: arc: fix the device for dma_map_single/dma_unmap_single
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53082
    - virtio_net: Add hash_key_length check
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50296
    - net: hns3: fix kernel crash when uninstalling driver
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53088
    - i40e: fix race condition by adding filter's intermediate sync state
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50298
    - net: enetc: allocate vf_state during PF probes
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50299
    - sctp: properly validate chunk size in sctp_sf_ootb()
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50300
    - regulator: rtq2208: Fix uninitialized use of regulator_config
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-50301
    - security/keys: fix slab-out-of-bounds in key_task_permission
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53072
    - platform/x86/amd/pmc: Detect when STB is not available
  * Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
    CVE-2024-53068
    - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996)
    - Input: xpad - sort xpad_device by vendor and product ID
    - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
    - cgroup: Fix potential overflow issue when checking max_depth
    - spi: geni-qcom: Fix boot warning related to pm_runtime and devres
    - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
    - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    - wifi: ath11k: Fix invalid ring usage in full monitor mode
    - wifi: brcm80211: BRCM_TRACING should depend on TRACING
    - RDMA/cxgb4: Dump vendor specific QP details
    - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
    - RDMA/bnxt_re: Fix the usage of control path spin locks
    - RDMA/bnxt_re: synchronize the qp-handle table array
    - RDMA/bnxt_re: Fix the locking while accessing the QP table
    - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
    - wifi: iwlwifi: mvm: don't add default link in fw restart flow
    - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
      register values
    - net: stmmac: fix TSO DMA API usage causing oops
    - gtp: allow -1 to be specified as file description from userspace
    - bpf: Force checkpoint when jmp history is too long
    - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
    - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
    - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
    - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
    - iomap: improve shared block detection in iomap_unshare_iter
    - iomap: don't bother unsharing delalloc extents
    - iomap: share iomap_unshare_iter predicate code with fsdax
    - fsdax: remove zeroing code from dax_unshare_iter
    - iomap: turn iomap_want_unshare_iter into an inline function
    - kasan: Fix Software Tag-Based KASAN with GCC
    - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
    - afs: Fix missing subdir edit when renamed between parent dirs
    - smb: client: set correct device number on nfs reparse points
    - cxl/events: Fix Trace DRAM Event Record
    - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
    - fs/ntfs3: Stale inode instead of bad
    - scsi: scsi_transport_fc: Allow setting rport state to current state
    - cifs: Fix creating native symlinks pointing to current or parent directory
    - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
    - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
    - net: amd: mvme147: Fix probe banner message
    - NFS: remove revoked delegation from server's delegation list
    - misc: sgi-gru: Don't disable preemption in GRU driver
    - usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
    - usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
    - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
    - USB: gadget: dummy-hcd: Fix "task hung" problem
    - ALSA: usb-audio: Add quirks for Dell WD19 dock
    - usbip: tools: Fix detach_port() invalid port error path
    - usb: phy: Fix API devm_usb_put_phy() can not release the phy
    - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
    - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
    - xhci: Fix Link TRB DMA in command ring stopped completion event
    - xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    - Revert "driver core: Fix uevent_show() vs driver detach race"
    - iio: light: veml6030: fix microlux value calculation
    - RISC-V: ACPI: fix early_ioremap to early_memremap
    - tools/mm: -Werror fixes in page-types/slabinfo
    - tools/mm: fix compile error
    - thunderbolt: Honor TMU requirements in the domain when setting TMU mode
    - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
    - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
    - block: fix sanity checks in blk_rq_map_user_bvec
    - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
    - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
    - riscv: vdso: Prevent the compiler from inserting calls to memset()
    - Input: edt-ft5x06 - fix regmap leak when probe fails
    - ALSA: hda/realtek: Limit internal Mic boost on Dell platform
    - riscv: efi: Set NX compat flag in PE/COFF header
    - riscv: Use '%u' to format the output of 'cpu'
    - riscv: Remove unused GENERATING_ASM_OFFSETS
    - riscv: Remove duplicated GET_RM
    - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
    - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
    - mei: use kvmalloc for read buffer
    - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
    - x86/traps: Enable UBSAN traps on x86
    - x86/traps: move kmsan check after instrumentation_begin
    - kasan: remove vmalloc_percpu test
    - vmscan,migrate: fix page count imbalance on node stats when demoting pages
    - io_uring: always lock __io_cqring_overflow_flush
    - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
    - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
    - perf trace: Fix non-listed archs in the syscalltbl routines
    - dpll: add Embedded SYNC feature for a pin
    - ice: add callbacks for Embedded SYNC enablement on dpll pins
    - bpf: Add bpf_mem_alloc_check_size() helper
    - net: ethernet: mtk_wed: fix path of MT7988 WO firmware
    - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
    - drm/mediatek: Fix get efuse issue for MT8188 DPTX
    - ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
    - powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
    - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
    - mm: shrinker: avoid memleak in alloc_shrinker_info
    - firmware: microchip: auto-update: fix poll_complete() to not report spurious
      timeout errors
    - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
    - cxl/port: Fix CXL port initialization order when the subsystem is built-in
    - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
    - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
    - mm/ksm: remove redundant code in ksm_fork
    - nvme: re-fix error-handling for io_uring nvme-passthrough
    - btrfs: fix extent map merging not happening for adjacent extents
    - btrfs: fix defrag not merging contiguous extents due to merged extent maps
    - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
    - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
    - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
    - mm: shrink skip folio mapped by an exiting process
    - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
    - drm/i915: Skip programming FIA link enable bits for MTL+
    - drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
    - drm/i915/dp: Clear VSC SDP during post ddi disable routine
    - drm/i915/pps: Disable DPLS_GATING around pps sequence
    - drm/i915: move rawclk from runtime to display runtime info
    - drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
    - drm/xe: Support 'nomodeset' kernel command-line option
    - drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
    - drm/amdgpu/swsmu: fix ordering for setting workload_mask
    - drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
    - drm/amdgpu: handle default profile on on devices without fullscreen 3D
    - MIPS: export __cmpxchg_small()
    - rcu/kvfree: Add kvfree_rcu_barrier() API
    - rcu/kvfree: Refactor kvfree_rcu_queue_batch()
    - Upstream stable to v6.6.60, v6.11.7
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53050
    - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53051
    - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50303
    - resource,kexec: walk_system_ram_res_rev must retain resource flags
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50263
    - fork: only invoke khugepaged, ksm hooks if no error
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50220
    - fork: do not invoke uffd on fork if error occurs
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50221
    - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53053
    - scsi: ufs: core: Fix another deadlock during RTC update
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50225
    - btrfs: fix error propagation of split bios
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50230
    - nilfs2: fix kernel bug due to missing clearing of checked flag
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50238
    - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53044
    - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50304
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53048
    - ice: fix crash on probe for DPLL enabled E810 LOM
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53045
    - ASoC: dapm: fix bounds checker error in dapm_widget_list_create
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53055
    - wifi: iwlwifi: mvm: fix 6 GHz scan construction
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53046
    - arm64: dts: imx8ulp: correct the flexspi compatible string
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53052
    - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50215
    - nvmet-auth: assign dh_key to NULL after kfree_sensitive
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50216
    - xfs: fix finding a last resort AG in xfs_filestream_pick_ag
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53043
    - mctp i2c: handle NULL header address
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50218
    - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53047
    - mptcp: init: protect sched with rcu_read_lock
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50222
    - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50223
    - sched/numa: Fix the potential null pointer dereference in task_numa_work()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50224
    - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50226
    - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50231
    - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53076
    - iio: gts-helper: Fix memory leaks for the error path of
      iio_gts_build_avail_scale_table()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50232
    - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50234
    - wifi: iwlegacy: Clear stale interrupts before resuming device
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50235
    - wifi: cfg80211: clear wdev->cqm_config pointer on free
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50236
    - wifi: ath10k: Fix memory leak in management tx
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50237
    - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50239
    - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50240
    - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50242
    - fs/ntfs3: Additional check in ntfs_file_release
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50243
    - fs/ntfs3: Fix general protection fault in run_is_mapped_full
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50244
    - fs/ntfs3: Additional check in ni_clear()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50245
    - fs/ntfs3: Fix possible deadlock in mi_read
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50246
    - fs/ntfs3: Add rough attr alloc_size check
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50247
    - fs/ntfs3: Check if more than chunk-size bytes are written
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50250
    - fsdax: dax_unshare_iter needs to copy entire blocks
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50251
    - netfilter: nft_payload: sanitize offset and length before calling
      skb_checksum()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50252
    - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50255
    - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50257
    - netfilter: Fix use-after-free in get_info()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50258
    - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50262
    - bpf: Fix out-of-bounds write in trie_get_next_key()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50259
    - netdevsim: Add trailing zero to terminate the string in
      nsim_nexthop_bucket_activity_write()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53042
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53058
    - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-50261
    - macsec: Fix use-after-free while sending the offloading packet
  * Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
    CVE-2024-53059
    - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  * Noble update: upstream stable patchset 2025-02-07 (LP: #2097575)
    - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
    - xfs: fix error returns from xfs_bmapi_write
    - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
    - xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
    - xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item
      recovery
    - xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
    - xfs: fix missing check for invalid attr flags
    - xfs: check shortform attr entry flags specifically
    - xfs: validate recovered name buffers when recovering xattr items
    - xfs: enforce one namespace per attribute
    - xfs: revert commit 44af6c7e59b12
    - xfs: use dontcache for grabbing inodes during scrub
    - xfs: match lock mode in xfs_buffered_write_iomap_begin()
    - xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
    - xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
    - xfs: convert delayed extents to unwritten when zeroing post eof blocks
    - xfs: allow symlinks with short remote targets
    - xfs: make sure sb_fdblocks is non-negative
    - xfs: fix unlink vs cluster buffer instantiation race
    - xfs: fix freeing speculative preallocations for preallocated files
    - xfs: allow unlinked symlinks and dirs with zero size
    - xfs: restrict when we try to align cow fork delalloc to cowextsz hints
    - selftests: mptcp: join: change capture/checksum as bool
    - selftests: mptcp: join: test for prohibited MPC to port-based endp
    - selftests: mptcp: remove duplicated variables
    - iio: accel: bma400: Fix uninitialized variable field_value in tap event
      handling.
    - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
    - bpf: devmap: provide rxq after redirect
    - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
    - lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
    - bpf: Fix memory leak in bpf_core_apply
    - RDMA/bnxt_re: Fix a possible memory leak
    - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
    - RDMA/bnxt_re: Add a check for memory allocation
    - x86/resctrl: Avoid overflow in MB settings in bw_validate()
    - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
    - bpf: Add cookie to perf_event bpf_link_info records
    - bpf: fix unpopulated name_len field in perf_event link info
    - selftests/bpf: Add cookies check for perf_event fill_link_info test
    - selftests/bpf: fix perf_event link info name_len assertion
    - s390/pci: Handle PCI error codes other than 0x3a
    - bpf: fix kfunc btf caching for modules
    - iio: frequency: {admv4420,adrf6780}: format Kconfig entries
    - iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
    - drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
    - selftests/bpf: Fix cross-compiling urandom_read
    - task_work: Add TWA_NMI_CURRENT as an additional notify mode.
    - sched/core: Disable page allocation in task_tick_mm_cid()
    - ALSA: hda/cs8409: Fix possible NULL dereference
    - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
    - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
    - RDMA/irdma: Fix misspelling of "accept*"
    - RDMA/srpt: Make slab cache names unique
    - ipv4: give an IPv4 dev to blackhole_netdev
    - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
    - RDMA/bnxt_re: Fix out of bound check
    - RDMA/bnxt_re: Return more meaningful error
    - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
    - RDMA/bnxt_re: Fix the GID table length
    - accel/qaic: Fix the for loop used to walk SG table
    - drm/msm/dpu: make sure phys resources are properly initialized
    - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
    - drm/msm/dsi: improve/fix dsc pclk calculation
    - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
    - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
    - drm/msm: Allocate memory for disp snapshot with kvzalloc()
    - firmware: arm_scmi: Queue in scmi layer for mailbox implementation
    - net/smc: Fix memory leak when using percpu refs
    - net: usb: usbnet: fix race in probe failure
    - net: stmmac: dwmac-tegra: Fix link bring-up sequence
    - octeontx2-af: Fix potential integer overflows on integer shifts
    - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
    - macsec: don't increment counters for an unrelated SA
    - netdevsim: use cond_resched() in nsim_dev_trap_report_work()
    - net: ethernet: aeroflex: fix potential memory leak in
      greth_start_xmit_gbit()
    - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
    - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
    - bpf: Fix truncation bug in coerce_reg_to_size_sx()
    - irqchip/renesas-rzg2l: Fix missing put_device
    - drm/msm/dpu: don't always program merge_3d block
    - net: bcmasp: fix potential memory leak in bcmasp_xmit()
    - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
    - net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
    - genetlink: hold RCU in genlmsg_mcast()
    - ravb: Remove setting of RX software timestamp
    - net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
    - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
    - smb: client: fix possible double free in smb2_set_ea()
    - smb: client: fix OOBs when building SMB2_IOCTL request
    - usb: typec: altmode should keep reference to parent
    - s390: Initialize psw mask in perf_arch_fetch_caller_regs()
    - bpf: Fix link info netfilter flags to populate defrag flag
    - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
    - net/mlx5: Check for invalid vector index on EQ creation
    - net/mlx5: Fix command bitmask initialization
    - net/mlx5: Unregister notifier on eswitch init failure
    - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
    - vsock: Update rx_bytes on read_skb()
    - vsock: Update msg_count on read_skb()
    - bpf, vsock: Drop static vsock_bpf_prot initialization
    - riscv, bpf: Make BPF_CMPXCHG fully ordered
    - nvme-pci: fix race condition between reset and nvme_dev_disable()
    - bpf: Fix iter/task tid filtering
    - cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
    - khugepaged: inline hpage_collapse_alloc_folio()
    - khugepaged: convert alloc_charge_hpage to alloc_charge_folio
    - khugepaged: remove hpage from collapse_file()
    - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace
      point
    - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - xhci: dbgtty: remove kfifo_out() wrapper
    - xhci: dbgtty: use kfifo from tty_port struct
    - xhci: dbc: honor usb transfer size boundaries.
    - usb: gadget: f_uac2: fix non-newline-terminated function name
    - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
    - XHCI: Separate PORT and CAPs macros into dedicated file
    - usb: dwc3: core: Fix system suspend on TI AM62 platforms
    - tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
    - tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
    - tracing/probes: Support $argN in return probe (kprobe and fprobe)
    - uprobes: encapsulate preparation of uprobe args buffer
    - uprobes: prepare uprobe args buffer lazily
    - uprobes: prevent mutex_lock() under rcu_read_lock()
    - uprobe: avoid out-of-bounds memory access of fetching args
    - exec: don't WARN for racy path_noexec check
    - ASoC: amd: yc: Add quirk for HP Dragonfly pro one
    - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
      default regs values
    - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
    - arm64: Force position-independent veneers
    - udf: refactor udf_current_aext() to handle error
    - udf: refactor udf_next_aext() to handle error
    - udf: refactor inode_bmap() to handle error
    - udf: fix uninit-value use in udf_get_fileshortad
    - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
    - cifs: Validate content of NFS reparse point buffer
    - platform/x86: dell-sysman: add support for alienware products
    - LoongArch: Don't crash in stack_top() for tasks without vDSO
    - jfs: Fix sanity check in dbMount
    - tracing/probes: Fix MAX_TRACE_ARGS limit handling
    - tracing: Consider the NULL character when validating the event length
    - xfrm: extract dst lookup parameters into a struct
    - xfrm: respect ip protocols rules criteria when performing dst lookups
    - netfilter: bpf: must hold reference on net namespace
    - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
    - net: plip: fix break; causing plip to never transmit
    - octeon_ep: Implement helper for iterating packets in Rx queue
    - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
    - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
    - fsl/fman: Save device references taken in mac_probe()
    - fsl/fman: Fix refcount handling of fman-related devices
    - netfilter: xtables: fix typo causing some targets not to load on IPv6
    - net: wwan: fix global oob in wwan_rtnl_policy
    - net/sched: adjust device watchdog timer to detect stopped queue at right
      time
    - net: fix races in netdev_tx_sent_queue()/dev_watchdog()
    - net: usb: usbnet: fix name regression
    - bpf: Add MEM_WRITE attribute
    - bpf: Fix overloading of MEM_UNINIT's meaning
    - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
    - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
      created by classifiers
    - net: sched: fix use-after-free in taprio_change()
    - net: sched: use RCU read-side critical section in taprio_dump()
    - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
    - Bluetooth: SCO: Fix UAF on sco_sock_timeout
    - Bluetooth: ISO: Fix UAF on iso_sock_timeout
    - bpf,perf: Fix perf_event_detach_bpf_prog error handling
    - net: dsa: mv88e6xxx: group cycle counter coefficients
    - net: dsa: mv88e6xxx: read cycle counter period from hardware
    - net: dsa: mv88e6xxx: support 4000ps cycle counter period
    - ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
    - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
    - ASoC: loongson: Fix component check failed on FDT systems
    - ASoC: max98388: Fix missing increment of variable slot_found
    - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
    - ASoC: fsl_micfil: Add a flag to distinguish with different volume control
      types
    - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
    - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
    - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
    - ALSA: hda/realtek: Update default depop procedure
    - smb: client: Handle kstrdup failures for passwords
    - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
    - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
    - btrfs: zoned: fix zone unusable accounting for freed reserved extent
    - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
    - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
      detection issue
    - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
    - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
    - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
    - KVM: arm64: Fix shift-out-of-bounds bug
    - KVM: arm64: Don't eagerly teardown the vgic on init error
    - x86/lam: Disable ADDRESS_MASKING in most cases
    - [Config] disable ADDRESS_MASKING
    - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
    - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
    - LoongArch: Get correct cores_per_package for SMT systems
    - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
    - LoongArch: Make KASAN usable for variable cpu_vabits
    - xfrm: fix one more kernel-infoleak in algo dumping
    - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
    - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
    - selinux: improve error checking in sel_write_load()
    - net: phy: dp83822: Fix reset pin definitions
    - ata: libata: Set DID_TIME_OUT for commands that actually timed out
    - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
    - platform/x86: dell-wmi: Ignore suspend notifications
    - ACPI: PRM: Clean up guid type in struct prm_handler_info
    - tracing: probes: Fix to zero initialize a local variable
    - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
    - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
    - bpf: Use raw_spinlock_t in ringbuf
    - reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
    - bpf: Fix unpopulated path_size when uprobe_multi fields unset
    - RDMA/bnxt_re: Fix incorrect dereference of srq in async event
    - RDMA/bnxt_re: Get the toggle bits from SRQ events
    - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
    - drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
    - ring-buffer: Fix reader locking when changing the sub buffer order
    - drm/msm/dpu: Don't always set merge_3d pending flush
    - drm/msm/a6xx+: Insert a fence wait before SMMU table update
    - drm/xe: Take job list lock in xe_sched_add_pending_job
    - drm/xe: Use bookkeep slots for external BO's in exec IOCTL
    - net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
    - net/mlx5e: Don't call cleanup on profile rollback failure
    - bpf: Fix print_reg_state's constant scalar dump
    - fsnotify: optimize the case of no parent watcher
    - fsnotify: Avoid data race between fsnotify_recalc_mask() and
      fsnotify_object_watched()
    - drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
    - objpool: fix choosing allocation for percpu slots
    - bnxt_en: replace ptp_lock with irqsave variant
    - bpf, arm64: Fix address emission with tag-based KASAN enabled
    - net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
    - ASoC: topology: Bump minimal topology ABI version
    - fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
    - btrfs: qgroup: set a more sane default value for subtree drop threshold
    - btrfs: clear force-compress on remount when compress mount option is given
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
    - x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
    - btrfs: reject ro->rw reconfiguration if there are hard ro requirements
    - xfs: don't fail repairs on metadata files with no attr fork
    - drm/bridge: Fix assignment of the of_node of the parent to aux bridge
    - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
      addresses
    - fgraph: Fix missing unlock in register_ftrace_graph()
    - fgraph: Change the name of cpuhp state to "fgraph:online"
    - ASoC: SOF: Intel: hda: Always clean up link DMA during stop
    - ASoC: dapm: avoid container_of() to get component
    - ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
    - ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
    - soundwire: intel_ace2x: Send PDI stream number during prepare
    - x86: support user address masking instead of non-speculative conditional
    - ASoC: qcom: Select missing common Soundwire module code on SDM845
    - SAUCE: Revert "iio: adc: ti-lmp92064: add missing select
      IIO_(TRIGGERED_)BUFFER in Kconfig"
    - Upstream stable to v6.6.58, v6.6.59, v6.11.6
  * CVE-2025-21756
    - vsock: Keep the binding until socket destruction
    - vsock: Orphan socket after transport release
  * Fix NIC name changes for ice (LP: #2100264)
    - ice: Remove ndo_get_phys_port_name
  * CVE-2024-50256
    - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  * CVE-2025-21702
    - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  * CVE-2024-50167
    - be2net: fix potential memory leak in be_xmit()
  * Fix line-out playback on some platforms with Cirrus Logic “Dolphin” hardware
    (LP: #2099880)
    - ALSA: hda/cirrus: Correct the full scale volume set logic
  * Enable Large Language Model (LLM) workloads using Intel NPU (LP: #2098972)
    - accel/ivpu: Increase DMA address range
  * Patchset for TUXEDO devices (LP: #2098104)
    - wifi: ath12k: add fallback board name without variant while searching
      board-2.bin
    - wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT
    - wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850
    - wifi: ath12k: support default regdb while searching board-2.bin for WCN7850
    - ACPI: resource: Use IRQ override on Maibenben X565
    - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
    - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
    - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
    - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
    - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
    - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
  * Introduce and use sendpages_ok() instead of sendpage_ok() in nvme-tcp and
    drbd (LP: #2093871)
    - net: introduce helper sendpages_ok()
    - nvme-tcp: use sendpages_ok() instead of sendpage_ok()
    - drbd: use sendpages_ok() instead of sendpage_ok()
  * CVE-2024-56765
    - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  * CVE-2025-21700
    - net: sched: Disallow replacing of child qdisc from one parent to another
  * CVE-2024-56615
    - bpf: fix OOB devmap writes when deleting elements
  * CVE-2024-56651
    - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  * CVE-2024-56627
    - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  * CVE-2024-56600
    - net: inet6: do not leave a dangling sk pointer in inet6_create()
  * CVE-2024-56661
    - tipc: fix NULL deref in cleanup_bearer()
  * CVE-2024-56642
    - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  * CVE-2024-53227
    - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
  * CVE-2024-53237
    - Bluetooth: fix use-after-free in device_for_each_child()
  * CVE-2024-53166
    - block, bfq: fix bfqq uaf in bfq_limit_depth()
  * CVE-2024-50265
    - ocfs2: remove entry once instead of null-ptr-dereference in
      ocfs2_xa_remove()
  * CVE-2024-50249
    - ACPI: CPPC: Make rmw_lock a raw_spin_lock
  * iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
    - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  * [Ubuntu 24.04] MultiVM - L2 guest(s) running stress-ng getting stuck at
    booting after triggering crash (LP: #2077722)
    - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
      spurious interrupts
  * btrfs will WARN_ON() in btrfs_remove_qgroup() unnecessarily (LP: #2091719)
    - btrfs: improve the warning and error message for btrfs_remove_qgroup()
  * CVE-2024-50248
    - ntfs3: Add bounds checking to mi_enum_attr()
    - fs/ntfs3: Sequential field availability check in mi_enum_attr()
  * CVE-2025-21701
    - net: avoid race between device unregistration and ethnl ops
  * CVE-2024-57798
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * CVE-2024-56672
    - blk-cgroup: Fix UAF in blkcg_unpin_online()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle
  * CVE-2024-56598
    - jfs: array-index-out-of-bounds fix in dtReadFirst
  * CVE-2024-56595
    - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  * CVE-2024-53140
    - netlink: terminate outstanding dump on socket close
  * CVE-2024-53063
    - media: dvbdev: prevent the risk of out of memory access
  * CVE-2024-50302
    - HID: core: zero-initialize the report buffer

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 25 Mar 2025 18:26:53 -0500

linux-nvidia (6.8.0-1025.28) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1025.28 -proposed tracker (LP: #2102475)

  [ Ubuntu: 6.8.0-57.59 ]

  * noble/linux: 6.8.0-57.59 -proposed tracker (LP: #2102490)
  * CVE-2024-57798
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * CVE-2024-56672
    - blk-cgroup: Fix UAF in blkcg_unpin_online()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle
  * CVE-2024-56598
    - jfs: array-index-out-of-bounds fix in dtReadFirst
  * CVE-2024-56595
    - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  * CVE-2024-53140
    - netlink: terminate outstanding dump on socket close
  * CVE-2024-53063
    - media: dvbdev: prevent the risk of out of memory access
  * CVE-2024-50302
    - HID: core: zero-initialize the report buffer

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 24 Mar 2025 18:15:19 -0500

linux-nvidia (6.8.0-1024.27) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1024.27 -proposed tracker (LP: #2098230)

  [ Ubuntu: 6.8.0-56.58 ]

  * noble/linux: 6.8.0-56.58 -proposed tracker (LP: #2098244)
  * Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
    - Revert "drm: Make drivers depends on DRM_DW_HDMI"
    - Revert "UBUNTU: [Config] Drivers now depend on DRM_DW_HDMI"
  * drm/amd/display: Add check for granularity in dml ceil/floor helpers
    (LP: #2098080)
    - drm/amd/display: Add check for granularity in dml ceil/floor helpers
  * optimized default EPP for GNR family (LP: #2097554)
    - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  * Incorrect LAPIC/x2APIC parsing order (LP: #2097455)
    - x86/acpi: Fix LAPIC/x2APIC parsing order
  * MGLRU: page allocation failure on NUMA-enabled systems (LP: #2097214)
    - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  * Upstream commit 65357e2c164a: "RDMA/mana_ib: set node_guid" applied
    incorrectly (LP: #2096885)
    - Revert "RDMA/mana_ib: set node_guid"
  * AppArmor early policy load not funcitoning (LP: #2095370)
    - SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [67/90]: userns - add the
      ability to reference a global variable for a feature value"
  * apparmor unconfined profile blocks pivot_root (LP: #2067900)
    - SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [81/90]: apparmor: convert easy
      uses of unconfined() to label_mediates()"
  * CVE-2024-50117
    - drm/amd: Guard against bad data for ATIF ACPI method
  * CVE-2024-56582
    - btrfs: fix use-after-free in btrfs_encoded_read_endio()
  * CVE-2024-53165
    - sh: intc: Fix use-after-free bug in register_intc_controller()
  * CVE-2024-53156
    - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
  * CVE-2024-56663
    - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  * CVE-2024-56614
    - xsk: fix OOB map writes when deleting elements
  * VM boots slowly with large-BAR GPU Passthrough due to pci/probe.c redundancy
    (LP: #2097389)
    - PCI: Batch BAR sizing operations
  * Noble update: upstream stable patchset 2025-02-04 (LP: #2097393)
    - Revert "PCI/MSI: Provide stubs for IMS functions"
    - gfs2: Revert "introduce qd_bh_get_or_undo"
    - gfs2: qd_check_sync cleanups
    - gfs2: Revert "ignore negated quota changes"
    - Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
    - tracing: Have saved_cmdlines arrays all in one allocation
    - spi: spi-fsl-lpspi: remove redundant spi_controller_put call
    - ata: ahci: Add mask_port_map module parameter
    - ASoC: tas2781: mark dvc_tlv with __maybe_unused
    - scsi: sd: Do not repeat the starting disk message
    - bootconfig: Fix the kerneldoc of _xbc_exit()
    - perf sched: Move start_work_mutex and work_done_wait_mutex initialization to
      perf_sched__replay()
    - perf sched: Fix memory leak in perf_sched__map()
    - perf sched: Move curr_thread initialization to perf_sched__map()
    - perf sched: Move curr_pid and cpu_last_switched initialization to
      perf_sched__{lat|map|replay}()
    - libsubcmd: Don't free the usage string
    - selftests: Introduce Makefile variable to list shared bash scripts
    - jbd2: fix kernel-doc for j_transaction_overhead_buffers
    - lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2
      compat
    - drm/amd/display: Remove a redundant check in authenticated_dp
    - drm/amd/display: Revert "Check HDCP returned status"
    - zram: don't free statically defined names
    - x86/amd_nb: Add new PCI IDs for AMD family 0x1a
    - rtnetlink: change nlk->cb_mutex role
    - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
    - mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
    - phonet: no longer hold RTNL in route_dumpit()
    - rcu/nocb: Make IRQs disablement symmetric
    - HID: asus: add ROG Ally N-Key ID and keycodes
    - HID: asus: add ROG Z13 lightbar
    - hid-asus: add ROG Ally X prod ID to quirk list
    - scsi: Revert "scsi: sd: Do not repeat the starting disk message"
    - btrfs: fix uninitialized pointer free in add_inode_ref()
    - btrfs: fix uninitialized pointer free on read_alloc_one_name() error
    - ksmbd: fix user-after-free from session log off
    - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
    - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
    - net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
    - net: enetc: block concurrent XDP transmissions during ring reconfiguration
    - net: enetc: disable Tx BD rings after they are empty
    - net: enetc: disable NAPI after all rings are disabled
    - net: enetc: add missing static descriptor and inline keyword
    - posix-clock: Fix missing timespec64 check in pc_clock_settime()
    - udp: Compute L4 checksum as usual when not segmenting the skb
    - arm64: probes: Remove broken LDR (literal) uprobe support
    - arm64: probes: Fix simulate_ldr*_literal()
    - arm64: probes: Fix uprobes for big-endian kernels
    - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
      link PHY
    - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
    - maple_tree: correct tree corruption on spanning store
    - nilfs2: propagate directory read errors from nilfs_find_entry()
    - fat: fix uninitialized variable
    - mm/mremap: fix move_normal_pmd/retract_page_tables race
    - mm/swapfile: skip HugeTLB pages for unuse_vma
    - mm/damon/tests/sysfs-kunit.h: fix memory leak in
      damon_sysfs_test_add_targets()
    - tcp: fix mptcp DSS corruption due to large pmtu xmit
    - net: fec: Move `fec_ptp_read()` to the top of the file
    - net: fec: Remove duplicated code
    - mptcp: prevent MPC handshake on port-based signal endpoints
    - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
    - s390/sclp: Deactivate sclp after all its users
    - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    - KVM: s390: gaccess: Check if guest address is in memslot
    - KVM: s390: Change virtual to physical address access in diag 0x258 handler
    - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
    - x86/cpufeatures: Add a IBPB_NO_RET BUG flag
    - x86/entry: Have entry_ibpb() invalidate return predictions
    - x86/bugs: Skip RSB fill at VMEXIT
    - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
    - fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks
    - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
    - io_uring/sqpoll: close race on waiting for sqring entries
    - blk-mq: setup queue ->tag_set before initializing hctx
    - ublk: don't allow user copy for unprivileged device
    - selftest: hid: add the missing tests directory
    - Input: xpad - add support for MSI Claw A1M
    - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add()
    - scsi: mpi3mr: Validate SAS port assignments
    - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
    - scsi: ufs: core: Fix the issue of ICU failure
    - scsi: ufs: core: Requeue aborted request
    - drm/radeon: Fix encoder->possible_clones
    - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
    - drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible
      mode
    - drm/xe/xe_sync: initialise ufence.signalled
    - drm/xe/ufence: ufence can be signaled right after wait_woken
    - drm/vmwgfx: Cleanup kms setup without 3d
    - drm/vmwgfx: Handle surface check failure correctly
    - drm/amdgpu/pm: Fix code alignment issue
    - drm/amdgpu/smu13: always apply the powersave optimization
    - drm/amdgpu/swsmu: Only force workload setup on init
    - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
    - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
    - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
    - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: hid-sensors: Fix an error handling path in
      _hid_sensor_set_report_latency()
    - iio: light: veml6030: fix ALS sensor resolution
    - iio: light: veml6030: fix IIO device retrieval from embedded device
    - iio: light: opt3001: add missing full-scale range value
    - iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
    - iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
    - iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: resolver: ad2s1210 add missing select REGMAP in Kconfig
    - iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
    - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig
    - iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - Bluetooth: Call iso_exit() on module unload
    - Bluetooth: Remove debugfs directory on module init failure
    - Bluetooth: ISO: Fix multiple init when debugfs is disabled
    - Bluetooth: btusb: Fix not being able to reconnect after suspend
    - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
    - vt: prevent kernel-infoleak in con_font_get()
    - xhci: tegra: fix checked USB2 port number
    - xhci: Fix incorrect stream context type macro
    - xhci: Mitigate failed set dequeue pointer commands
    - USB: serial: option: add support for Quectel EG916Q-GL
    - USB: serial: option: add Telit FN920C04 MBIM compositions
    - usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
    - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
    - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM
      device
    - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
    - serial: imx: Update mctrl old_status on RTSD interrupt
    - parport: Proper fix for array out-of-bounds access
    - x86/resctrl: Annotate get_mem_config() functions as __init
    - x86/apic: Always explicitly disarm TSC-deadline timer
    - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
    - x86/entry_32: Do not clobber user EFLAGS.ZF
    - x86/entry_32: Clear CPU buffers after register restore in NMI return
    - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
    - x86/bugs: Use code segment selector for VERW operand
    - pinctrl: intel: platform: fix error path in device_for_each_child_node()
    - pinctrl: ocelot: fix system hang on level based interrupts
    - pinctrl: stm32: check devm_kasprintf() returned value
    - pinctrl: apple: check devm_kasprintf() returned value
    - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
    - irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
    - serial: qcom-geni: fix polled console initialisation
    - serial: qcom-geni: revert broken hibernation support
    - serial: qcom-geni: fix shutdown race
    - serial: qcom-geni: fix dma rx cancellation
    - serial: qcom-geni: fix receiver enable
    - mm: vmscan.c: fix OOM on swap stress test
    - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
      1000 G2
    - Upstream stable to v6.6.57, v6.11.5
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301)
    - Revert "perf callchain: Fix stitch LBR memory leaks"
    - ASoC: amd: acp: add ZSC control register programming sequence
    - virtio: rename virtio_config_enabled to virtio_config_core_enabled
    - virtio: allow driver to disable the configure change notification
    - virtio-net: synchronize operstate with admin state on up/down
    - virtio-net: synchronize probe with ndo_set_features
    - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
    - af_unix: Don't call skb_get() for OOB skb.
    - af_unix: Remove single nest in manage_oob().
    - af_unix: Rename unlinked_skb in manage_oob().
    - af_unix: Move spin_lock() in manage_oob().
    - iommu/amd: Move allocation of the top table into v1_alloc_pgtable
    - iommu/amd: Set the pgsize_bitmap correctly
    - drm/xe: Move and export xe_hw_engine lookup.
    - drm/msm/dp: rename wide_bus_en to wide_bus_supported
    - drm/msm/dp: enable widebus on all relevant chipsets
    - bpf, arm64: Fix tailcall hierarchy
    - libbpf: Don't take direct pointers into BTF data from st_ops
    - s390/entry: Move early program check handler to entry.S
    - selftests/bpf: fix to avoid __msg tag de-duplication by clang
    - libbpf: Ensure new BTF objects inherit input endianness
    - PCI: dwc: ep: Rename dw_pcie_ep_exit() to dw_pcie_ep_deinit()
    - PCI: qcom-ep: Enable controller resources like PHY only after refclk is
      available
    - net: ravb: Fix maximum TX frame size for GbEth devices
    - ravb: Make it clear the information relates to maximum frame size
    - net: ravb: Fix R-Car RX frame size limit
    - netfilter: nf_tables: missing objects with no memcg accounting
    - PCI: dra7xx: Fix error handling when IRQ request fails in probe
    - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
    - intel_idle: fix ACPI _CST matching for newer Xeon platforms
    - wifi: mt76: mt7925: fix a potential association failure upon resuming
    - cifs: Remove intermediate object of failed create reparse call
    - drm/amd/display: Disable replay if VRR capability is false
    - drm/amd/display: Fix VRR cannot enable
    - l2tp: free sessions using rcu
    - net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
    - nvme: fix metadata handling in nvme-passthrough
    - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
    - x86/apic: Remove logical destination mode for 64-bit
    - pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
    - drm/xe: Name and document Wa_14019789679
    - drm/xe: Add timeout to preempt fences
    - drm/amd/display: Fix possible overflow in integer multiplication
    - ext4: fix error message when rejecting the default hash
    - power: supply: Drop use_cnt check from power_supply_property_is_writeable()
    - ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
    - drm/xe: Generate oob before compiling anything
    - clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
    - drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
    - Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
    - pmdomain: core: Reduce debug summary table width
    - fs/ntfs3: Do not call file_modified if collapse range failed
    - fs/ntfs3: Optimize large writes into sparse file
    - fs/ntfs3: Fix sparse warning in ni_fiemap
    - fs/ntfs3: Refactor enum_rstbl to suppress static checker
    - virtio_console: fix misc probe bugs
    - ntfs3: Change to non-blocking allocation in ntfs_d_hash
    - bpf: Call the missed btf_record_free() when map creation fails
    - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
    - bpf: Check percpu map value size first
    - s390/facility: Disable compile time optimization for decompressor code
    - s390/mm: Add cond_resched() to cmm_alloc/free_pages()
    - bpf, x64: Fix a jit convergence issue
    - ext4: nested locking for xattr inode
    - s390/cpum_sf: Remove WARN_ON_ONCE statements
    - ktest.pl: Avoid false positives with grub2 skip regex
    - soundwire: intel_bus_common: enable interrupts before exiting reset
    - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
    - clk: bcm: bcm53573: fix OF node leak in init
    - PCI: Add ACS quirk for Qualcomm SA8775P
    - i2c: i801: Use a different adapter-name for IDF adapters
    - PCI: Mark Creative Labs EMU20k2 INTx masking as broken
    - RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
    - mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
    - mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs
    - mfd: intel-lpss: Rename SPI intel_lpss_platform_info structs
    - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
    - riscv: Omit optimized string routines when using KASAN
    - riscv: avoid Imbalance in RAS
    - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
    - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
    - PCI: endpoint: Assign PCI domain number for endpoint controllers
    - soundwire: cadence: re-check Peripheral status with delayed_work
    - riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
      unknown
    - media: videobuf2-core: clear memory related fields in
      __vb2_plane_dmabuf_put()
    - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
    - usb: chipidea: udc: enable suspend interrupt after usb reset
    - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
      Crashkernel Scenario
    - xhci: dbc: Fix STALL transfer event handling
    - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
    - comedi: ni_routing: tools: Check when the file could not be opened
    - LoongArch: Fix memleak in pci_acpi_scan_root()
    - netfilter: nf_nat: don't try nat source port reallocation for reverse dir
      clash
    - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
    - tools/iio: Add memory allocation failure check for trigger_name
    - staging: vme_user: added bound check to geoid
    - driver core: bus: Return -EIO instead of 0 when show/store invalid bus
      attribute
    - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
      lpfc_els_flush_cmd()
    - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
      KERN_WARNING
    - NFSD: Mark filecache "down" if init fails
    - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net()
      failed
    - ice: set correct dst VSI in only LAN filters
    - ice: clear port vlan config during reset
    - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
    - ice: fix VLAN replay after reset
    - SUNRPC: Fix integer overflow in decode_rc_list()
    - tcp: fix to allow timestamp undo if no retransmits were sent
    - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
    - tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
    - rxrpc: Fix uninitialised variable in rxrpc_send_data()
    - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids()
      test
    - Bluetooth: btusb: Don't fail external suspend requests
    - net: phy: bcm84881: Fix some error handling paths
    - Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
    - net: ethernet: adi: adin1110: Fix some error handling path in
      adin1110_read_fifo()
    - net: dsa: b53: fix jumbo frame mtu check
    - net: dsa: b53: fix max MTU for 1g switches
    - net: dsa: b53: fix max MTU for BCM5325/BCM5365
    - net: dsa: b53: allow lower MTUs on BCM5325/5365
    - net: dsa: b53: fix jumbo frames on 10/100 ports
    - drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
    - nouveau/dmem: Fix privileged error in copy engine channel
    - gpio: aspeed: Add the flush write to ensure the write complete.
    - gpio: aspeed: Use devm_clk api to manage clock source
    - powercap: intel_rapl_tpmi: Ignore minor version change
    - ice: Fix netif_is_ice() in Safe Mode
    - ice: Flush FDB entries before reset
    - e1000e: change I219 (19) devices to ADP
    - net: ibm: emac: mal: fix wrong goto
    - btrfs: zoned: fix missing RCU locking in error message when loading zone
      info
    - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
    - netfilter: fib: check correct rtable in vrf setups
    - net: ibm: emac: mal: add dcr_unmap to _remove
    - net: dsa: refuse cross-chip mirroring operations
    - rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
    - vxlan: Handle error of rtnl_register_module().
    - bridge: Handle error of rtnl_register_module().
    - mctp: Handle error of rtnl_register_module().
    - mpls: Handle error of rtnl_register_module().
    - phonet: Handle error of rtnl_register_module().
    - rcu/nocb: Fix rcuog wake-up from offline softirq
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
    - HID: multitouch: Add support for lenovo Y9000P Touchpad
    - hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
    - hwmon: (tmp513) Add missing dependency on REGMAP_I2C
    - hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
    - hwmon: (adm9240) Add missing dependency on REGMAP_I2C
    - hwmon: (adt7470) Add missing dependency on REGMAP_I2C
    - hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
    - HID: plantronics: Workaround for an unexcepted opposite volume key
    - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
    - usb: dwc3: core: Stop processing of pending events if controller is halted
    - usb: xhci: Fix problem with xhci resume from suspend
    - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
    - usb: dwc3: re-enable runtime PM after failed resume
    - usb: gadget: core: force synchronous registration
    - hid: intel-ish-hid: Fix uninitialized variable 'rv' in
      ish_fw_xfer_direct_dma
    - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
    - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
    - drm/amdkfd: Fix an eviction fence leak
    - drm/amd/display: fix hibernate entry for DCN35+
    - drm/xe/guc_submit: fix xa_store() error checking
    - drm/i915/hdcp: fix connector refcounting
    - drm/xe/ct: fix xa_store() error checking
    - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
    - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
    - mptcp: fallback when MPTCP opts are dropped after 1st data
    - ata: libata: avoid superfluous disk spin down + spin up during hibernation
    - OPP: fix error code in dev_pm_opp_set_config()
    - net: dsa: lan9303: ensure chip reset and wait for READY status
    - mptcp: pm: do not remove closing subflows
    - powercap: intel_rapl_tpmi: Fix bogus register reading
    - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
    - selftests/rseq: Fix mm_cid test failure
    - btrfs: split remaining space to discard in chunks
    - btrfs: add cancellation points to trim loops
    - fs/proc/kcore.c: allow translation of physical memory addresses
    - io_uring/rw: fix cflags posting for single issue multishot read
    - Upstream stable to v6.6.56, v6.11.1, v6.11.2, v6.11.3, v6.11.4
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50182
    - secretmem: disable memfd_secret() if arch cannot set direct map
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50019
    - kthread: unpark only parked kthread
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50096
    - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50020
    - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50021
    - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50022
    - device-dax: correct pgoff align in dax_set_mapping()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50185
    - mptcp: handle consistently DSS corruption
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50023
    - net: phy: Remove LED entry from LEDs list on unregister
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50024
    - net: Fix an unsafe loop on the list
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50186
    - net: explicitly clear the sk pointer, when pf->create fails
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50025
    - scsi: fnic: Move flush_work initialization out of if block
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50026
    - scsi: wd33c93: Don't use stale scsi_pointer value
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50027
    - thermal: core: Free tzp copy along with the thermal zone
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50028
    - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50029
    - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50030
    - drm/xe/ct: prevent UAF in send_recv()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50187
    - drm/vc4: Stop the active perfmon before being destroyed
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50031
    - drm/v3d: Stop the active perfmon before being destroyed
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50189
    - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50033
    - slip: make slhc_remember() more robust against malicious packets
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50035
    - ppp: fix ppp_async_encode() illegal access
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50036
    - net: do not delay dst_entries_add() in dst_release()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50038
    - netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50039
    - net/sched: accept TCA_STAB only for root qdisc
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50040
    - igb: Do not bring the device up after non-fatal error
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50041
    - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50042
    - ice: Fix increasing MSI-X on VF
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50093
    - thermal: intel: int340x: processor: Fix warning during module unload
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50044
    - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50045
    - netfilter: br_netfilter: fix panic with metadata_dst skb
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50188
    - net: phy: dp83869: fix memory corruption when enabling fiber
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50046
    - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50180
    - fbdev: sisfb: Fix strbuf array overflow
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50047
    - smb: client: fix UAF in async decryption
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50048
    - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50049
    - drm/amd/display: Check null pointer before dereferencing se
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50090
    - drm/xe/oa: Fix overflow in oa batch buffer
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50183
    - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
      instance
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50055
    - driver core: bus: Fix double free in driver API bus_register()
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50056
    - usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50184
    - virtio_pmem: Check device status before requesting flush
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50057
    - usb: typec: tipd: Free IRQ only if it was requested before
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50058
    - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50181
    - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50059
    - ntb: ntb_hw_switchtec: Fix use after free vulnerability in
      switchtec_ntb_remove due to race condition
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50060
    - io_uring: check if we need to reschedule during overflow flush
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50061
    - i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
      Driver Due to Race Condition
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50062
    - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50095
    - RDMA/mad: Improve handling of timed out WRs of mad agent
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50063
    - bpf: Prevent tail call between progs attached to different hooks
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50191
    - ext4: don't set SB_RDONLY after filesystem errors
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50064
    - zram: free secondary algorithms names
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50089
    - unicode: Don't special case ignorable code points
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49865
    - drm/xe/vm: move xa_alloc to prevent UAF
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49968
    - ext4: filesystems without casefold feature cannot be mounted with siphash
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49893
    - drm/amd/display: Check stream_status before it is used
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49972
    - drm/amd/display: Deallocate DML memory if allocation fails
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49914
    - drm/amd/display: Add null check for pipe_ctx->plane_state in
      dcn20_program_pipe
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49920
    - drm/amd/display: Check null pointers before multiple uses
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-49921
    - drm/amd/display: Check null pointers before used
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-50009
    - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-47726
    - f2fs: fix to wait dio completion
  * Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
    CVE-2024-47711
    - af_unix: Don't return OOB skb in manage_oob().
  * CVE-2024-53170
    - block: fix uaf for flush rq while iterating tags
  * CVE-2024-50148
    - Bluetooth: bnep: fix wild-memory-access in proto_unregister
  * CVE-2024-50134
    - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
      VLA
  * CVE-2024-50171
    - net: systemport: fix potential memory leak in bcm_sysport_xmit()
  * CVE-2024-50229
    - nilfs2: fix potential deadlock with newly created symlinks
  * CVE-2024-50233
    - staging: iio: frequency: ad9832: fix division by zero in
      ad9832_calc_freqreg()
  * [Lenovo Ubuntu 24.04 Bug] dmesg show "spi-nor: probe of spi0.0 failed with
    error -95" (LP: #2070339)
    - mtd: core: Don't fail mtd_otp_nvmem_add() if OTP is unsupported
    - mtd: core: Align comment with an action in mtd_otp_nvmem_add()
  * python perf module missing in realtime kernel (LP: #2089411)
    - [Packaging] linux-tools: Add missing python perf symlink
    - [Packaging] linux-tools: Fix python perf library packaging
    - [Packaging] linux-tools: Fall back to old python perf path
  * CVE-2024-53104
    - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
      uvc_parse_format

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 20 Feb 2025 10:45:27 -0600

linux-nvidia (6.8.0-1023.26) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1023.26 -proposed tracker (LP: #2097967)

  [ Ubuntu: 6.8.0-55.57 ]

  * noble/linux: 6.8.0-55.57 -proposed tracker (LP: #2097981)
  * python perf module missing in realtime kernel (LP: #2089411)
    - [Packaging] linux-tools: Add missing python perf symlink
    - [Packaging] linux-tools: Fix python perf library packaging
    - [Packaging] linux-tools: Fall back to old python perf path
  * CVE-2024-53104
    - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
      uvc_parse_format

  [ Ubuntu: 6.8.0-54.56 ]

  * CVE-2025-0927
    - SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 18 Feb 2025 15:18:07 -0600

linux-nvidia (6.8.0-1022.25) noble; urgency=medium

  * Enable Coresight in Perf (LP: #2093957)
    - [Packaging] Only build perf with CORESIGHT=1 on arm64

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 27 Jan 2025 21:41:19 -0600

linux-nvidia (6.8.0-1022.24) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1022.24 -proposed tracker (LP: #2093663)

  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Add dwarfdump to build dependencies

  * PCI resources unassigned with Bluefield3 switch (LP: #2094821)
    - NVIDIA: SAUCE: PCI: Use downstream bridges for distributing resources

  * Enable Coresight in Perf (LP: #2093957)
    - NVIDIA: [Packaging] Enable coresight in Perf
    - NVIDIA: [Config] add libopencsd-dev to build dependencies due to adding
      coresight to the perf build

  * ETE tracing failure on multi-socket system (LP: #2092141)
    - coresight: Make language around "activated" sinks consistent
    - coresight: Remove ops callback checks
    - coresight: Move mode to struct coresight_device
    - coresight: Remove the 'enable' field.
    - coresight: Move all sysfs code to sysfs file
    - coresight: Remove atomic type from refcnt
    - coresight: Remove unused stubs
    - coresight: Add explicit member initializers to coresight_dev_type
    - coresight: Add helper for atomically taking the device
    - coresight: Add a helper for getting csdev->mode
    - coresight: Add helper for setting csdev->mode
    - perf auxtrace: Allow number of queues to be specified
    - perf cs-etm: Print error for new PERF_RECORD_AUX_OUTPUT_HW_ID versions
    - libperf cpumap: Add any, empty and min helpers
    - perf arm-spe/cs-etm: Directly iterate CPU maps
    - perf cs-etm: Use struct perf_cpu as much as possible
    - perf cs-etm: Create decoders after both AUX and HW_ID search passes
    - perf: cs-etm: Allocate queues for all CPUs
    - perf: cs-etm: Move traceid_list to each queue
    - perf: cs-etm: Create decoders based on the trace ID mappings
    - perf: cs-etm: Only save valid trace IDs into files
    - perf: cs-etm: Support version 0.1 of HW_ID packets
    - perf: cs-etm: Print queue number in raw trace dump
    - coresight: Remove unused ETM Perf stubs
    - coresight: Clarify comments around the PID of the sink owner
    - coresight: Move struct coresight_trace_id_map to common header
    - coresight: Expose map arguments in trace ID API
    - coresight: Make CPU id map a property of a trace ID map
    - coresight: Use per-sink trace ID maps for Perf sessions
    - coresight: Remove pending trace ID release mechanism
    - coresight: Emit sink ID in the HW_ID packets
    - coresight: Make trace ID map spinlock local to the map

  * Pull-request to address ACPI/HMAT messages at boot (LP: #2091186)
    - NVIDIA: SAUCE: ACPI/HMAT: Move HMAT messages to pr_debug()

  [ Ubuntu: 6.8.0-53.55 ]

  * noble/linux: 6.8.0-53.55 -proposed tracker (LP: #2093677)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.01.13)
  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] add linux-bpf-dev package
    - [Packaging] do not attempt to generate BTF header on armhf
  * Unable to boot as a guest on VMware ESX (LP: #2091941)
    - ptp/vmware: Use VMware hypercall API
    - input/vmmouse: Use VMware hypercall API
    - drm/vmwgfx: Use VMware hypercall API
    - x86/vmware: Use VMware hypercall API
    - x86/vmware: Correct macro names
    - x86/vmware: Remove legacy VMWARE_HYPERCALL* macros
  * When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744)
    - [Packaging] disable hv-kvp-daemon if needed
  * Backport "netkit: Add option for scrubbing skb meta data" to 6.8
    (LP: #2091184)
    - netkit: Add option for scrubbing skb meta data
  * KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
    Exit (LP: #2093146)
    - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  * [SRU] add support of QCA BT 0489:e0fc (LP: #2085406)
    - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x
  * ice driver RTNL assertion failed warning on shutdown/reboot (LP: #2091107)
    - ice: Remove and readd netdev during devlink reload
  * vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
    - SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
    - SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"
  * [SRU] Fix error of resume on rtl8168fp (LP: #2087507)
    - r8169: avoid unsolicited interrupts
  * [SRU] power: intel_pstate: HWP interrupt support for maximum ratio changed
    (LP: #2090852)
    - x86/cpufeatures: Add HWP highest perf change feature flag
    - cpufreq: intel_pstate: Support highest performance change interrupt
  * Noble update: upstream stable patchset 2024-11-29 (LP: #2089884)
    - static_call: Handle module init failure correctly in
      static_call_del_module()
    - static_call: Replace pointless WARN_ON() in static_call_module_notify()
    - jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
    - jump_label: Fix static_key_slow_dec() yet again
    - scsi: st: Fix input/output error on empty drive reset
    - scsi: pm8001: Do not overwrite PCI queue mapping
    - drm/amdgpu: Fix get each xcp macro
    - mailbox: rockchip: fix a typo in module autoloading
    - mailbox: bcm2835: Fix timeout during suspend mode
    - ceph: remove the incorrect Fw reference check when dirtying pages
    - ieee802154: Fix build error
    - net: sparx5: Fix invalid timestamps
    - net/mlx5: Fix error path in multi-packet WQE transmit
    - net/mlx5: Added cond_resched() to crdump collection
    - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
    - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
    - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
    - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
    - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
    - selftests: netfilter: Fix nft_audit.sh for newer nft binaries
    - netfilter: nf_tables: prevent nf_skb_duplicated corruption
    - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
    - Bluetooth: MGMT: Fix possible deadlocks
    - Bluetooth: L2CAP: Fix uaf in l2cap_connect
    - Bluetooth: hci_core: Fix calling mgmt_device_connected
    - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
    - net: Add netif_get_gro_max_size helper for GRO
    - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
    - net: ethernet: lantiq_etop: fix memory disclosure
    - net: fec: Restart PPS after link state change
    - net: fec: Reload PTP registers after link-state change
    - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
    - net: add more sanity checks to qdisc_pkt_len_init()
    - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
    - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
    - net: test for not too small csum_start in virtio_net_hdr_to_skb()
    - ppp: do not assume bh is held in ppp_channel_bridge_input()
    - iomap: constrain the file range passed to iomap_file_unshare
    - dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
    - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
    - i2c: xiic: improve error message when transfer fails to start
    - i2c: xiic: Try re-initialization on bus busy timeout
    - loop: don't set QUEUE_FLAG_NOMERGES
    - ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
      uninitialized
    - ALSA: mixer_oss: Remove some incorrect kfree_const() usages
    - ALSA: hda/realtek: Fix the push button function for the ALC257
    - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
    - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
    - cifs: Fix buffer overflow when parsing NFS reparse points
    - cifs: Do not convert delimiter when parsing NFS-style symlinks
    - ALSA: gus: Fix some error handling paths related to get_bpos() usage
    - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
    - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
    - wifi: rtw89: avoid to add interface to list twice when SER
    - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
    - crypto: x86/sha256 - Add parentheses around macros' single arguments
    - crypto: octeontx - Fix authenc setkey
    - crypto: octeontx2 - Fix authenc setkey
    - ice: Adjust over allocation of memory in ice_sched_add_root_node() and
      ice_sched_add_node()
    - wifi: iwlwifi: mvm: Fix a race in scan abort flow
    - wifi: iwlwifi: mvm: drop wrong STA selection in TX
    - wifi: cfg80211: Set correct chandef when starting CAC
    - net/xen-netback: prevent UAF in xenvif_flush_hash()
    - net: hisilicon: hip04: fix OF node leak in probe()
    - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
    - net: hisilicon: hns_mdio: fix OF node leak in probe()
    - ACPI: PAD: fix crash in exit_round_robin()
    - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
    - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
    - e1000e: avoid failing the system during pm_suspend
    - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
    - net: sched: consistently use rcu_replace_pointer() in taprio_change()
    - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
    - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
    - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
    - ACPI: CPPC: Add support for setting EPP register in FFH
    - blk_iocost: fix more out of bound shifts
    - wifi: ath12k: fix array out-of-bound access in SoC stats
    - wifi: ath11k: fix array out-of-bound access in SoC stats
    - wifi: rtw88: select WANT_DEV_COREDUMP
    - ACPI: EC: Do not release locks during operation region accesses
    - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
      acpi_db_convert_to_package()
    - tipc: guard against string buffer overrun
    - net: mvpp2: Increase size of queue_name buffer
    - bnxt_en: Extend maximum length of version string by 1 byte
    - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
    - wifi: rtw89: correct base HT rate mask for firmware
    - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
    - net: atlantic: Avoid warning about potential string truncation
    - crypto: simd - Do not call crypto_alloc_tfm during registration
    - netpoll: Ensure clean state on setup failures
    - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
    - wifi: iwlwifi: mvm: use correct key iteration
    - wifi: iwlwifi: mvm: avoid NULL pointer dereference
    - ACPICA: iasl: handle empty connection_node
    - proc: add config & param to block forcing mem writes
    - [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
    - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
    - can: netlink: avoid call to do_set_data_bittiming callback with stale
      can_priv::ctrlmode
    - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
    - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_cmd_802_11_scan_ext()
    - nfp: Use IRQF_NO_AUTOEN flag in request_irq()
    - ALSA: usb-audio: Add input value sanity checks for standard types
    - x86/ioapic: Handle allocation failures gracefully
    - ALSA: usb-audio: Define macros for quirk table entries
    - ALSA: usb-audio: Replace complex quirk lines with macros
    - ALSA: usb-audio: Add logitech Audio profile quirk
    - ASoC: codecs: wsa883x: Handle reading version failure
    - tools/x86/kcpuid: Protect against faulty "max subleaf" values
    - x86/pkeys: Add PKRU as a parameter in signal handling functions
    - x86/pkeys: Restore altstack access in sigreturn()
    - x86/kexec: Add EFI config table identity mapping for kexec kernel
    - ALSA: asihpi: Fix potential OOB array access
    - ALSA: hdsp: Break infinite MIDI input flush loop
    - tools/nolibc: powerpc: limit stack-protector workaround to GCC
    - selftests/nolibc: avoid passing NULL to printf("%s")
    - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
    - hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
    - fbdev: efifb: Register sysfs groups through driver core
    - fbdev: pxafb: Fix possible use after free in pxafb_task()
    - rcuscale: Provide clear error when async specified without primitives
    - power: reset: brcmstb: Do not go into infinite loop if reset fails
    - iommu/vt-d: Always reserve a domain ID for identity setup
    - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
    - drm/stm: Avoid use-after-free issues with crtc and plane
    - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
    - drm/amdgpu: prevent BO_HANDLES error from being overwritten
    - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
    - drm/amd/display: Add null check for top_pipe_to_program in
      commit_planes_for_stream
    - ata: pata_serverworks: Do not use the term blacklist
    - ata: sata_sil: Rename sil_blacklist to sil_quirks
    - HID: Ignore battery for all ELAN I2C-HID devices
    - drm/amd/display: Handle null 'stream_status' in
      'planes_changed_for_existing_stream'
    - drm/amd/display: Check null pointers before using dc->clk_mgr
    - drm/amd/display: Add null check for 'afb' in
      amdgpu_dm_plane_handle_cursor_update (v2)
    - drm/amd/display: fix double free issue during amdgpu module unload
    - jfs: UBSAN: shift-out-of-bounds in dbFindBits
    - jfs: Fix uaf in dbFreeBits
    - jfs: check if leafidx greater than num leaves per dmap tree
    - scsi: smartpqi: correct stream detection
    - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
    - jfs: Fix uninit-value access of new_ea in ea_buffer
    - drm/amdgpu: add raven1 gfxoff quirk
    - drm/amdgpu: enable gfxoff quirk on HP 705G4
    - drm/amdkfd: Fix resource leak in criu restore queue
    - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
    - platform/x86: touchscreen_dmi: add nanote-next quirk
    - drm/stm: ltdc: reset plane transparency after plane disable
    - drm/amd/display: Check stream before comparing them
    - drm/amd/display: Check link_res->hpo_dp_link_enc before using it
    - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
      translation
    - drm/amd/display: Fix index out of bounds in degamma hardware format
      translation
    - drm/amd/display: Fix index out of bounds in DCN30 color transformation
    - drm/amd/display: Avoid overflow assignment in link_dp_cts
    - drm/amd/display: Initialize get_bytes_per_element's default to 1
    - drm/printer: Allow NULL data in devcoredump printer
    - perf,x86: avoid missing caller address in stack traces captured in uprobe
    - scsi: lpfc: Update PRLO handling in direct attached topology
    - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
    - perf: Fix event_function_call() locking
    - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
    - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
    - drm/amdgpu: Block MMR_READ IOCTL in reset
    - drm/amdgpu/gfx9: use rlc safe mode for soft recovery
    - drm/amd/pm: ensure the fw_info is not null before using it
    - of/irq: Refer to actual buffer size in of_irq_parse_one()
    - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
    - drm/amdgpu/gfx11: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx10: use rlc safe mode for soft recovery
    - platform/x86: lenovo-ymc: Ignore the 0x0 state
    - ksmbd: add refcnt to ksmbd_conn struct
    - ksmbd: fix use-after-free in SMB request handling
    - bpf: Make the pointer returned by iter next method valid
    - ext4: ext4_search_dir should return a proper error
    - ext4: avoid use-after-free in ext4_ext_show_leaf()
    - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
    - bpftool: Fix undefined behavior caused by shifting into the sign bit
    - iomap: handle a post-direct I/O invalidate race in
      iomap_write_delalloc_release
    - bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
    - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: spi-cadence: Fix missing spi_controller_is_target() check
    - selftest: hid: add missing run-hid-tools-tests.sh
    - spi: s3c64xx: fix timeout counters in flush_fifo
    - selftests: breakpoints: use remaining time to check if suspend succeed
    - accel/ivpu: Add missing MODULE_FIRMWARE metadata
    - spi: rpc-if: Add missing MODULE_DEVICE_TABLE
    - perf: Really fix event_function_call() locking
    - selftests: vDSO: fix vDSO name for powerpc
    - selftests: vDSO: fix vdso_config for powerpc
    - selftests: vDSO: fix vDSO symbols lookup for powerpc64
    - powerpc/vdso: Flag VDSO64 entry points as functions
    - selftests/mm: fix charge_reserved_hugetlb.sh test
    - powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
    - selftests: vDSO: fix ELF hash table entry size for s390x
    - selftests: vDSO: fix vdso_config for s390
    - Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
    - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
    - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
    - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
    - i2c: xiic: Wait for TX empty to avoid missed TX NAKs
    - media: i2c: ar0521: Use cansleep version of gpiod_set_value()
    - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
    - i2c: designware: fix controller is holding SCL low while ENABLE bit is
      disabled
    - rust: sync: require `T: Sync` for `LockedBy::access`
    - ovl: fail if trusted xattrs are needed but caller lacks permission
    - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
    - memory: tegra186-emc: drop unused to_tegra186_emc()
    - dt-bindings: clock: exynos7885: Fix duplicated binding
    - spi: bcm63xx: Fix module autoloading
    - spi: bcm63xx: Fix missing pm_runtime_disable()
    - power: supply: hwmon: Fix missing temp1_max_alarm attribute
    - perf/core: Fix small negative period being ignored
    - parisc: Fix itlb miss handler for 64-bit programs
    - drm/mediatek: ovl_adaptor: Add missing of_node_put()
    - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
    - ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
    - ALSA: core: add isascii() check to card ID generator
    - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
    - ALSA: usb-audio: Add native DSD support for Luxman D-08u
    - ALSA: line6: add hw monitor volume control to POD HD500X
    - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
    - ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
    - ext4: correct encrypted dentry name hash when not casefolded
    - ext4: fix slab-use-after-free in ext4_split_extent_at()
    - ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
    - ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
    - ext4: dax: fix overflowing extents beyond inode size when partially writing
    - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
    - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
    - ext4: aovid use-after-free in ext4_ext_insert_extent()
    - ext4: fix double brelse() the buffer of the extents path
    - ext4: fix timer use-after-free on failed mount
    - ext4: update orig_path in ext4_find_extent()
    - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
    - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
    - ext4: fix fast commit inode enqueueing during a full journal commit
    - ext4: use handle to mark fc as ineligible in __track_dentry_update()
    - ext4: mark fc as ineligible using an handle in ext4_xattr_set()
    - parisc: Fix 64-bit userspace syscall path
    - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
    - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
    - drm/rockchip: vop: clear DMA stop bit on RK3066
    - of: address: Report error on resource bounds overflow
    - of/irq: Support #msi-cells=<0> in of_msi_get_domain
    - drm: omapdrm: Add missing check for alloc_ordered_workqueue
    - resource: fix region_intersects() vs add_memory_driver_managed()
    - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
    - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
    - mm: krealloc: consider spare memory for __GFP_ZERO
    - mm: krealloc: Fix MTE false alarm in __do_krealloc
    - ocfs2: fix the la space leak when unmounting an ocfs2 volume
    - ocfs2: fix uninit-value in ocfs2_get_block()
    - ocfs2: reserve space for inline xattr before attaching reflink tree
    - ocfs2: cancel dqi_sync_work before freeing oinfo
    - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
    - ocfs2: fix null-ptr-deref when journal load failed.
    - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
    - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
    - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
    - riscv: define ILLEGAL_POINTER_VALUE for 64bit
    - [Config] updateconfigs to set ILLEGAL_POINTER_VALUE for riscv64
    - exfat: fix memory leak in exfat_load_bitmap()
    - perf python: Disable -Wno-cast-function-type-mismatch if present on clang
    - perf hist: Update hist symbol when updating maps
    - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
    - nfsd: map the EBADMSG to nfserr_io to avoid warning
    - NFSD: Fix NFSv4's PUTPUBFH operation
    - i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver
      Due to Race Condition
    - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
    - riscv: Fix kernel stack size when KASAN is enabled
    - aoe: fix the potential use-after-free problem in more places
    - media: ov5675: Fix power on/off delay timings
    - clk: rockchip: fix error for unknown clocks
    - remoteproc: k3-r5: Fix error handling when power-up failed
    - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
    - media: sun4i_csi: Implement link validate for sun4i_csi subdev
    - clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
    - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
    - clk: qcom: clk-rpmh: Fix overflow in BCM vote
    - clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
    - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
    - media: venus: fix use after free bug in venus_remove due to race condition
    - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
    - media: qcom: camss: Remove use_count guard in stop_streaming
    - media: qcom: camss: Fix ordering of pm_runtime_enable
    - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
    - clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
    - smb: client: use actual path when queryfs
    - smb3: fix incorrect mode displayed for read-only files
    - iio: magnetometer: ak8975: Fix reading for ak099xx sensors
    - vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
    - gso: fix udp gso fraglist segmentation after pull from frag_list
    - tomoyo: fallback to realpath if symlink's pathname does not exist
    - net: stmmac: Fix zero-division error when disabling tc cbs
    - rtc: at91sam9: fix OF node leak in probe() error path
    - Input: adp5589-keys - fix NULL pointer dereference
    - Input: adp5589-keys - fix adp5589_gpio_get_value()
    - cachefiles: fix dentry leak in cachefiles_open_file()
    - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
    - btrfs: send: fix invalid clone operation for file that got its size
      decreased
    - btrfs: wait for fixup workers before stopping cleaner kthread during umount
    - cpufreq: Avoid a bad reference count on CPU node
    - gpio: davinci: fix lazy disable
    - net: pcs: xpcs: fix the wrong register that was written back
    - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
    - mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
    - ceph: fix cap ref leak via netfs init_request
    - tracing/hwlat: Fix a race during cpuhp processing
    - tracing/timerlat: Drop interface_lock in stop_kthread()
    - tracing/timerlat: Fix a race during cpuhp processing
    - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
    - rtla: Fix the help text in osnoise and timerlat top tools
    - drm/i915/gem: fix bitwise and logical AND mixup
    - drm/sched: Add locking to drm_sched_entity_modify_sched
    - drm/amd/display: Add HDR workaround for specific eDP
    - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
    - kconfig: qconf: fix buffer overflow in debug links
    - platform/x86: x86-android-tablets: Fix use after free on
      platform_device_register() errors
    - i2c: core: Lock address during client device instantiation
    - i2c: synquacer: Remove a clk reference from struct synquacer_i2c
    - i2c: synquacer: Deal with optional PCLK correctly
    - arm64: cputype: Add Neoverse-N3 definitions
    - arm64: errata: Expand speculative SSBS workaround once more
    - io_uring/net: harden multishot termination case for recv
    - uprobes: fix kernel info leak via "[uprobes]" vma
    - mm: z3fold: deprecate CONFIG_Z3FOLD
    - [Config] updateconfigs for deprecated CONFIG_Z3FOLD
    - drm/amd/display: Allow backlight to go below
      `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
    - build-id: require program headers to be right after ELF header
    - lib/buildid: harden build ID parsing logic
    - sched: psi: fix bogus pressure spikes from aggregation race
    - net: mana: Enable MANA driver on ARM64 with 4K page size
    - net: mana: Add support for page sizes other than 4KB on ARM64
    - [Config] updateconfigs for MICROSOFT_MANA
    - RDMA/mana_ib: use the correct page table index based on hardware page size
    - media: imx335: Fix reset-gpio handling
    - remoteproc: k3-r5: Acquire mailbox handle during probe routine
    - remoteproc: k3-r5: Delay notification of wakeup event
    - dt-bindings: clock: qcom: Add missing UFS QREF clocks
    - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
    - iio: pressure: bmp280: Improve indentation and line wrapping
    - iio: pressure: bmp280: Use BME prefix for BME280 specifics
    - iio: pressure: bmp280: Fix regmap for BMP280 device
    - iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
    - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
    - r8169: add tally counter fields added with RTL8125
    - clk: qcom: gcc-sc8180x: Add GPLL9 support
    - ACPI: battery: Simplify battery hook locking
    - ACPI: battery: Fix possible crash when unregistering a battery hook
    - btrfs: drop the backref cache during relocation if we commit
    - drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
    - rxrpc: Fix a race between socket set up and I/O thread creation
    - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
    - crypto: octeontx* - Select CRYPTO_AUTHENC
    - drm/amd/display: Revert Avoid overflow assignment
    - perf report: Fix segfault when 'sym' sort key is not used
    - drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc
      before using it
    - Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"
    - perf python: Allow checking for the existence of warning options in clang
    - drm/i915/dp: Fix AUX IO power enabling for eDP PSR
    - drm/amd/display: handle nulled pipe context in DCE110's set_drr()
    - selftests: netfilter: Add missing return value
    - afs: Fix the setting of the server responding flag
    - net: dsa: improve shutdown sequence
    - bridge: mcast: Fail MDB get request on empty entry
    - net/ncsi: Disable the ncsi work before freeing the associated structure
    - drm/xe: Restore pci state upon resume
    - drm/xe: Resume TDR after GT reset
    - drm/xe: Prevent null pointer access in xe_migrate_copy
    - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
    - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
    - nvme-keyring: restrict match length for version '1' identifiers
    - nvme-tcp: sanitize TLS key handling
    - nvme-fabrics: typo in nvmf_parse_key()
    - nvme-tcp: check for invalidated or revoked key
    - net: fec: don't save PTP state if PTP is unsupported
    - wifi: mac80211: fix RCU list iterations
    - netdev-genl: Set extack and fix error on napi-get
    - block: fix integer overflow in BLKSECDISCARD
    - arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
    - net: phy: Check for read errors in SIOCGMIIREG
    - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
    - x86/bugs: Add missing NO_SSB flag
    - x86/bugs: Fix handling when SRSO mitigation is disabled
    - net: napi: Prevent overflow of napi_defer_hard_irqs
    - crypto: hisilicon - fix missed error branch
    - ALSA: usb-audio: Add quirk for RME Digiface USB
    - ALSA: usb-audio: Add mixer quirk for RME Digiface USB
    - ALSA: control: Use automatic cleanup of kfree()
    - ALSA: control: Fix unannotated kfree() cleanup
    - ALSA: control: Use guard() for locking
    - ALSA: control: Take power_ref lock primarily
    - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
    - ASoC: Intel: boards: always check the result of
      acpi_dev_get_first_match_dev()
    - rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
    - rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
    - rcu-tasks: Fix access non-existent percpu rtpcp variable in
      rcu_tasks_need_gpcb()
    - pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
    - iommu/vt-d: Unconditionally flush device TLB for pasid table updates
    - iommu/arm-smmu-v3: Do not use devm for the cd table allocations
    - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
    - drm/amd/display: Check null pointers before using them
    - drm/amd/display: Add null check for head_pipe in
      dcn201_acquire_free_pipe_for_layer
    - drm/amd/display: Add null check for head_pipe in
      dcn32_acquire_idle_pipe_for_head_pipe_in_layer
    - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
      dcn30_init_hw
    - drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
    - drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
    - scsi: smartpqi: Add new controller PCI IDs
    - drm/amd/display: Add NULL check for function pointer in
      dcn20_set_output_transfer_func
    - drm/amd/display: Add NULL check for function pointer in
      dcn32_set_output_transfer_func
    - scsi: smartpqi: add new controller PCI IDs
    - drm/amd/display: Check null-initialized variables
    - drm/amd/display: Check phantom_stream before it is used
    - drm/amdgpu/gfx9: properly handle error ints on all pipes
    - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
      paths
    - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
      topology
    - drm/amdgpu: check PS, WS index
    - drm/amdgpu: fix wrong sizeof argument
    - drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
    - drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
    - drm/xe: Invert page fault queue head / tail
    - drm/xe: Add helper macro to loop each DSS
    - drm/xe: fix multicast support for Xe_LP platforms
    - drm/xe: Use topology to determine page fault queue size
    - drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
    - ovl: fsync after metadata copy-up
    - HID: i2c-hid: ensure various commands do not interfere with each other
    - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types
    - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up
    - platform/mellanox: mlxbf-pmc: fix signedness bugs
    - platform/mellanox: mlxbf-pmc: fix lockdep warning
    - bpf: Fix a sdiv overflow issue
    - ALSA: control: Fix power_ref lock order for compat code, too
    - perf callchain: Fix stitch LBR memory leaks
    - drm/xe: fixup xe_alloc_pf_queue
    - drm/xe: Fix memory leak on xe_alloc_pf_queue failure
    - nvme-tcp: fix link failure for TCP auth
    - f2fs: fix zoned block device information initialization
    - f2fs: add write priority option based on zone UFS
    - f2fs: make BG GC more aggressive for zoned devices
    - f2fs: introduce migration_window_granularity
    - f2fs: increase BG GC migration window granularity when boosted for zoned
      devices
    - f2fs: do FG_GC when GC boosting is required for zoned devices
    - f2fs: forcibly migrate to secure space for zoned device file pinning
    - mm, slub: avoid zeroing kmalloc redzone
    - drm/v3d: Prevent out of bounds access in performance query extensions
    - ext4: fix access to uninitialised lock in fc replay path
    - ext4: fix off by one issue in alloc_flex_gd()
    - scripts/gdb: add iteration function for rbtree
    - scripts/gdb: fix lx-mounts command error
    - sched/deadline: Comment sched_dl_entity::dl_server variable
    - sched/core: Add clearing of ->dl_server in put_prev_task_balance()
    - sched/core: Clear prev->dl_server in CFS pick fast path
    - drivers/perf: riscv: Align errno for unsupported perf event
    - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
    - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
    - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
    - ACPI: resource: Add Asus ExpertBook B2502CVA to
      irq1_level_low_skip_override[]
    - firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
    - close_range(): fix the logics in descriptor table trimming
    - drm/sched: Fix dynamic job-flow control race
    - drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
    - drm/sched: Always increment correct scheduler score
    - drm/xe: Delete unused GuC submission_state.suspend
    - drm/xe: Use ordered wq for preempt fence waiting
    - drm/xe: fix UAF around queue destruction
    - sunrpc: change sp_nrthreads from atomic_t to unsigned int.
    - NFSD: Async COPY result needs to return a write verifier
    - NFSD: Limit the number of concurrent async COPY operations
    - NFSD: Initialize struct nfsd4_copy earlier
    - NFSD: Never decrement pending_async_copies on error
    - drm/sched: revert "Always increment correct scheduler score"
    - ALSA: control: Fix leftover snd_power_unref()
    - Upstream stable to v6.6.55, v6.10.14
  * By always inlining _compound_head(), clone() sees 3%+ performance increase
    (LP: #2089327)
    - mm: always inline _compound_head() with
      CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
  * Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+
    (LP: #2086587)
    - SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx
  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Sort build dependencies alphabetically
    - [Packaging] Add list of used source files to buildinfo package
  * UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
    - ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
  * Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983)
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  * Noble update: upstream stable patchset 2024-11-22 (LP: #2089340)
    - EDAC/synopsys: Fix ECC status and IRQ control race condition
    - EDAC/synopsys: Fix error injection on Zynq UltraScale+
    - wifi: rtw88: always wait for both firmware loading attempts
    - crypto: xor - fix template benchmarking
    - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
    - wifi: brcmfmac: export firmware interface functions
    - wifi: brcmfmac: introducing fwil query functions
    - wifi: ath9k: Remove error checks when creating debugfs entries
    - wifi: ath12k: fix BSS chan info request WMI command
    - wifi: ath12k: match WMI BSS chan info structure with firmware definition
    - wifi: ath12k: fix invalid AMPDU factor calculation in
      ath12k_peer_assoc_h_he()
    - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
    - arm64: signal: Fix some under-bracketed UAPI macros
    - wifi: rtw88: remove CPT execution branch never used
    - RISC-V: KVM: Fix sbiret init before forwarding to userspace
    - RISC-V: KVM: Allow legacy PMU access from guest
    - RISC-V: KVM: Fix to allow hpmcounter31 from the guest
    - mount: handle OOM on mnt_warn_timestamp_expiry
    - ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
    - powercap: intel_rapl: Fix off by one in get_rpi()
    - kselftest/arm64: signal: fix/refactor SVE vector length enumeration
    - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
    - wifi: mac80211: don't use rate mask for offchannel TX either
    - wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
    - wifi: iwlwifi: config: label 'gl' devices as discrete
    - wifi: iwlwifi: mvm: increase the time between ranging measurements
    - padata: Honor the caller's alignment in case of chunk_size 0
    - drivers/perf: hisi_pcie: Record hardware counts correctly
    - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
    - kselftest/arm64: Actually test SME vector length changes via sigreturn
    - can: j1939: use correct function name in comment
    - ACPI: CPPC: Fix MASK_VAL() usage
    - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
    - netfilter: nf_tables: reject element expiration with no timeout
    - netfilter: nf_tables: reject expiration higher than timeout
    - netfilter: nf_tables: remove annotation to access set timeout while holding
      lock
    - perf/arm-cmn: Improve debugfs pretty-printing for large configs
    - perf/arm-cmn: Refactor node ID handling. Again.
    - perf/arm-cmn: Fix CCLA register offset
    - perf/arm-cmn: Ensure dtm_idx is big enough
    - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
    - wifi: mt76: mt7915: fix oops on non-dbdc mt7986
    - wifi: mt76: mt7996: use hweight16 to get correct tx antenna
    - wifi: mt76: mt7996: fix traffic delay when switching back to working channel
    - wifi: mt76: mt7996: fix wmm set of station interface to 3
    - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
    - wifi: mt76: mt7996: fix EHT beamforming capability check
    - x86/sgx: Fix deadlock in SGX NUMA node search
    - pm:cpupower: Add missing powercap_set_enabled() stub function
    - crypto: hisilicon/hpre - mask cluster timeout error
    - crypto: hisilicon/qm - reset device before enabling it
    - crypto: hisilicon/qm - inject error before stopping queue
    - wifi: mt76: mt7603: fix mixed declarations and code
    - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
    - wifi: mt76: mt7915: fix rx filter setting for bfee functionality
    - wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
    - wifi: mt76: mt7996: fix uninitialized TLV data
    - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
    - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
    - wifi: wilc1000: fix potential RCU dereference issue in
      wilc_parse_join_bss_param
    - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
    - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
    - sock_map: Add a cond_resched() in sock_hash_free()
    - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
    - can: m_can: enable NAPI before enabling interrupts
    - can: m_can: m_can_close(): stop clocks after device has been shut down
    - Bluetooth: btusb: Fix not handling ZPL/short-transfer
    - bareudp: Pull inner IP header in bareudp_udp_encap_recv().
    - bareudp: Pull inner IP header on xmit.
    - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
    - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
    - net: tipc: avoid possible garbage value
    - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
    - ublk: move zone report data out of request pdu
    - nbd: fix race between timeout and normal completion
    - block, bfq: fix possible UAF for bfqq->bic with merge chain
    - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
    - block, bfq: don't break merge chain in bfq_split_bfqq()
    - cachefiles: Fix non-taking of sb_writers around set/removexattr
    - erofs: fix incorrect symlink detection in fast symlink
    - block, bfq: fix uaf for accessing waker_bfqq after splitting
    - block, bfq: fix procress reference leakage for bfqq in merge chain
    - io_uring/io-wq: do not allow pinning outside of cpuset
    - io_uring/io-wq: inherit cpuset of cgroup in io worker
    - block: fix potential invalid pointer dereference in blk_add_partition
    - spi: ppc4xx: handle irq_of_parse_and_map() errors
    - arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
    - arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
    - firmware: arm_scmi: Fix double free in OPTEE transport
    - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
    - regulator: Return actual error in of_regulator_bulk_get_all()
    - arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
    - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
    - arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
    - arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
    - arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
    - spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
    - ARM: dts: microchip: sama7g5: Fix RTT clock
    - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
    - ARM: versatile: fix OF node leak in CPUs prepare
    - reset: berlin: fix OF node leak in probe() error path
    - reset: k210: fix OF node leak in probe() error path
    - clocksource/drivers/qcom: Add missing iounmap() on errors in
      msm_dt_timer_init()
    - arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
    - x86/mm: Use IPIs to synchronize LAM enablement
    - ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
    - ASoC: tas2781: remove unused acpi_subysystem_id
    - ASoC: tas2781: Use of_property_read_reg()
    - ASoC: tas2781-i2c: Drop weird GPIO code
    - ASoC: tas2781-i2c: Get the right GPIO line
    - selftests/ftrace: Add required dependency for kprobe tests
    - ALSA: hda: cs35l41: fix module autoloading
    - m68k: Fix kernel_clone_args.flags in m68k_clone()
    - ASoC: loongson: fix error release
    - hwmon: (max16065) Fix overflows seen when writing limits
    - hwmon: (max16065) Remove use of i2c_match_id()
    - hwmon: (max16065) Fix alarm attributes
    - mtd: slram: insert break after errors in parsing the map
    - hwmon: (ntc_thermistor) fix module autoloading
    - power: supply: axp20x_battery: Remove design from min and max voltage
    - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
    - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
    - iommu/amd: Do not set the D bit on AMD v2 table entries
    - mtd: powernv: Add check devm_kasprintf() returned value
    - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
    - mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
    - mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
    - mtd: rawnand: mtk: Fix init error path
    - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
    - iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
    - iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
    - pmdomain: core: Harden inter-column space in debug summary
    - drm/stm: Fix an error handling path in stm_drm_platform_probe()
    - drm/stm: ltdc: check memory returned by devm_kzalloc()
    - drm/amd/display: Add null check for set_output_gamma in
      dcn30_set_output_transfer_func
    - drm/amdgpu: properly handle vbios fake edid sizing
    - drm/radeon: properly handle vbios fake edid sizing
    - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
    - scsi: NCR5380: Check for phase match during PDMA fixup
    - drm/amd/amdgpu: Properly tune the size of struct
    - drm/rockchip: vop: Allow 4096px width scaling
    - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
    - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
    - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
    - drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
    - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
    - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
    - drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
    - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
    - powerpc/8xx: Fix initial memory mapping
    - powerpc/8xx: Fix kernel vs user address comparison
    - powerpc/vdso: Inconditionally use CFUNC macro
    - drm/msm: Fix incorrect file name output in adreno_request_fw()
    - drm/msm/a5xx: disable preemption in submits by default
    - drm/msm/a5xx: properly clear preemption records on resume
    - drm/msm/a5xx: fix races in preemption evaluation stage
    - drm/msm/a5xx: workaround early ring-buffer emptiness check
    - ipmi: docs: don't advertise deprecated sysfs entries
    - drm/msm/dsi: correct programming sequence for SM8350 / SM8450
    - drm/msm: fix %s null argument error
    - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
    - xen: use correct end address of kernel for conflict checking
    - HID: wacom: Support sequence numbers smaller than 16-bit
    - HID: wacom: Do not warn about dropped packets for first packet
    - ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
    - minmax: avoid overly complex min()/max() macro arguments in xen
    - xen: introduce generic helper checking for memory map conflicts
    - xen: move max_pfn in xen_memory_setup() out of function scope
    - xen: add capability to remap non-RAM pages to different PFNs
    - xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
    - xen/swiotlb: add alignment check for dma buffers
    - xen/swiotlb: fix allocated size
    - tpm: Clean up TPM space after command failure
    - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
    - selftests/bpf: Workaround strict bpf_lsm return value check.
    - selftests/bpf: Fix error linking uprobe_multi on mips
    - bpf: Use -Wno-error in certain tests when building with GCC
    - bpf: Disable some `attribute ignored' warnings in GCC
    - bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
    - selftests/bpf: Add CFLAGS per source file and runner
    - selftests/bpf: Fix wrong binary in Makefile log output
    - tools/runqslower: Fix LDFLAGS and add LDLIBS support
    - selftests/bpf: Use pid_t consistently in test_progs.c
    - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
    - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
    - selftests/bpf: Drop unneeded error.h includes
    - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
    - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
    - selftests/bpf: Fix missing BUILD_BUG_ON() declaration
    - selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
    - selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
    - selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
    - selftests/bpf: Fix include of <sys/fcntl.h>
    - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
    - selftests/bpf: Fix compiling kfree_skb.c with musl-libc
    - selftests/bpf: Fix compiling flow_dissector.c with musl-libc
    - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
    - selftests/bpf: Fix compiling core_reloc.c with musl-libc
    - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
    - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
    - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
    - selftests/bpf: Fix arg parsing in veristat, test_progs
    - selftests/bpf: Fix error compiling test_lru_map.c
    - selftests/bpf: Fix C++ compile error from missing _Bool type
    - selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
    - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
    - selftests/bpf: Fix compile if backtrace support missing in libc
    - selftests/bpf: Fix error compiling tc_redirect.c with musl libc
    - samples/bpf: Fix compilation errors with cf-protection option
    - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
    - xz: cleanup CRC32 edits from 2018
    - kthread: fix task state in kthread worker if being frozen
    - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
    - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
    - ext4: avoid buffer_head leak in ext4_mark_inode_used()
    - ext4: avoid potential buffer_head leak in __ext4_new_inode()
    - ext4: avoid negative min_clusters in find_group_orlov()
    - ext4: return error on ext4_find_inline_entry
    - ext4: avoid OOB when system.data xattr changes underneath the filesystem
    - ext4: check stripe size compatibility on remount as well
    - sched/numa: Fix the vma scan starving issue
    - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
    - nilfs2: determine empty node blocks as corrupted
    - nilfs2: fix potential oob read in nilfs_btree_check_delete()
    - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
    - bpf: Fix helper writes to read-only maps
    - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
    - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
    - perf mem: Free the allocated sort string, fixing a leak
    - perf inject: Fix leader sampling inserting additional samples
    - perf report: Fix --total-cycles --stdio output error
    - perf sched timehist: Fix missing free of session in perf_sched__timehist()
    - perf stat: Display iostat headers correctly
    - perf sched timehist: Fixed timestamp error when unable to confirm event
      sched_in time
    - perf time-utils: Fix 32-bit nsec parsing
    - clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
    - clk: imx: imx6ul: fix default parent for enet*_ref_sel
    - clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite()
      after error detection
    - clk: imx: composite-8m: Enable gate clk with mcore_booted
    - clk: imx: composite-93: keep root clock on when mcore enabled
    - clk: imx: composite-7ulp: Check the PCC present bit
    - clk: imx: fracn-gppll: fix fractional part of PLL getting lost
    - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
    - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
    - clk: imx: imx8qxp: Parent should be initialized earlier than the clock
    - remoteproc: imx_rproc: Correct ddr alias for i.MX8M
    - remoteproc: imx_rproc: Initialize workqueue earlier
    - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
    - clk: qcom: dispcc-sm8550: fix several supposed typos
    - clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
    - clk: qcom: dispcc-sm8650: Update the GDSC flags
    - clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
    - leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
    - pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
    - pinctrl: ti: ti-iodelay: Fix some error handling paths
    - Input: ilitek_ts_i2c - avoid wrong input subsystem sync
    - Input: ilitek_ts_i2c - add report id message validation
    - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
    - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
    - PCI: Wait for Link before restoring Downstream Buses
    - firewire: core: correct range of block for case of switch statement
    - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
    - clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
    - clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
    - leds: leds-pca995x: Add support for NXP PCA9956B
    - leds: pca995x: Use device_for_each_child_node() to access device child nodes
    - leds: pca995x: Fix device child node usage in pca995x_probe()
    - x86/PCI: Check pcie_find_root_port() return for NULL
    - nvdimm: Fix devs leaks in scan_labels()
    - PCI: xilinx-nwl: Fix register misspelling
    - PCI: xilinx-nwl: Clean up clock on probe failure/removal
    - media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
    - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
    - pinctrl: single: fix missing error code in pcs_probe()
    - clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
    - media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
    - media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
    - media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
    - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
    - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
    - clk: ti: dra7-atl: Fix leak of of_nodes
    - clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync()
      usage
    - clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
    - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
    - nfsd: fix refcount leak when file is unhashed after being found
    - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
    - IB/core: Fix ib_cache_setup_one error flow cleanup
    - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
    - RDMA/erdma: Return QP state in erdma_query_qp
    - RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
    - watchdog: imx_sc_wdt: Don't disable WDT in suspend
    - RDMA/hns: Don't modify rq next block addr in HIP09 QPC
    - RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
    - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
    - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
    - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
    - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
    - RDMA/hns: Optimize hem allocation performance
    - RDMA/hns: Fix restricted __le16 degrades to integer issue
    - RDMA/mlx5: Obtain upper net device only when needed
    - riscv: Fix fp alignment bug in perf_callchain_user()
    - RDMA/cxgb4: Added NULL check for lookup_atid
    - RDMA/irdma: fix error message in irdma_modify_qp_roce()
    - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
    - ntb_perf: Fix printk format
    - ntb: Force physically contiguous allocation of rx ring buffers
    - nfsd: call cache_put if xdr_reserve_space returns NULL
    - nfsd: return -EINVAL when namelen is 0
    - crypto: caam - Pad SG length when allocating hash edesc
    - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
    - f2fs: atomic: fix to avoid racing w/ GC
    - f2fs: reduce expensive checkpoint trigger frequency
    - f2fs: fix to avoid racing in between read and OPU dio write
    - f2fs: Create COW inode from parent dentry for atomic write
    - f2fs: fix to wait page writeback before setting gcing flag
    - f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
    - f2fs: support .shutdown in f2fs_sops
    - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
    - f2fs: compress: don't redirty sparse cluster during {,de}compress
    - f2fs: prevent atomic file from being dirtied before commit
    - f2fs: get rid of online repaire on corrupted directory
    - f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
    - spi: atmel-quadspi: Undo runtime PM changes at driver exit time
    - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
    - lib/sbitmap: define swap_lock as raw_spinlock_t
    - spi: atmel-quadspi: Avoid overwriting delay register settings
    - nvme-multipath: system fails to create generic nvme device
    - iio: adc: ad7606: fix oversampling gpio array
    - iio: adc: ad7606: fix standby gpio state to match the documentation
    - driver core: Fix error handling in driver API device_rename()
    - ABI: testing: fix admv8818 attr description
    - iio: chemical: bme680: Fix read/write ops to device by adding mutexes
    - iio: magnetometer: ak8975: drop incorrect AK09116 compatible
    - dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
    - driver core: Fix a potential null-ptr-deref in module_add_driver()
    - serial: 8250: omap: Cleanup on error in request_irq
    - coresight: tmc: sg: Do not leak sg_table
    - interconnect: icc-clk: Add missed num_nodes initialization
    - cxl/pci: Fix to record only non-zero ranges
    - vhost_vdpa: assign irq bypass producer token correctly
    - ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
    - Revert "dm: requeue IO if mapping table not yet available"
    - net: xilinx: axienet: Schedule NAPI in two steps
    - net: xilinx: axienet: Fix packet counting
    - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
    - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
      Condition
    - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
    - tcp: check skb is non-NULL in tcp_rto_delta_us()
    - net: qrtr: Update packets cloning when broadcasting
    - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
    - virtio_net: Fix mismatched buf address when unmapping for small packets
    - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
    - netfilter: ctnetlink: compile ctnetlink_label_size with
      CONFIG_NF_CONNTRACK_EVENTS
    - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump
      path
    - io_uring/sqpoll: do not allow pinning outside of cpuset
    - io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
    - mm: call the security_mmap_file() LSM hook in remap_file_pages()
    - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
    - Revert "net: libwx: fix alloc msix vectors failed"
    - xen: move checks for e820 conflicts further up
    - xen: allow mapping ACPI data using a different physical address
    - io_uring/sqpoll: retain test for whether the CPU is valid
    - io_uring/sqpoll: do not put cpumask on stack
    - Remove *.orig pattern from .gitignore
    - PCI: Revert to the original speed after PCIe failed link retraining
    - PCI: Clear the LBMS bit after a link retrain
    - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
    - PCI: imx6: Fix missing call to phy_power_off() in error handling
    - PCI: Correct error reporting with PCIe failed link retraining
    - PCI: Use an error code with PCIe failed link retraining
    - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
    - Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
    - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
    - soc: fsl: cpm1: tsa: Fix tsa_write8()
    - soc: versatile: integrator: fix OF node leak in probe() error path
    - Revert "media: tuners: fix error return code of
      hybrid_tuner_request_state()"
    - iommufd: Protect against overflow of ALIGN() during iova allocation
    - Input: adp5588-keys - fix check on return code
    - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
    - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
    - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
    - KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
    - KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
    - KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
    - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
    - drm/amd/display: Add HDMI DSC native YCbCr422 support
    - drm/amd/display: Round calculated vtotal
    - drm/amd/display: Validate backlight caps are sane
    - KEYS: prevent NULL pointer dereference in find_asymmetric_key()
    - powerpc/atomic: Use YZ constraints for DS-form instructions
    - fs: Create a generic is_dot_dotdot() utility
    - ksmbd: make __dir_empty() compatible with POSIX
    - ksmbd: allow write with FILE_APPEND_DATA
    - ksmbd: handle caseless file creation
    - ata: libata-scsi: Fix ata_msense_control() CDL page reporting
    - scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
    - scsi: ufs: qcom: Update MODE_MAX cfg_bw value
    - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
    - scsi: mac_scsi: Refactor polling loop
    - scsi: mac_scsi: Disallow bus errors during PDMA send
    - can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
    - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
    - usbnet: fix cyclical race on disconnect with work queue
    - USB: appledisplay: close race between probe and completion handler
    - USB: misc: cypress_cy7c63: check for short transfer
    - USB: class: CDC-ACM: fix race between get_serial and set_serial
    - usb: cdnsp: Fix incorrect usb_request status
    - usb: dwc2: drd: fix clock gating on USB role switch
    - bus: integrator-lm: fix OF node leak in probe()
    - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
    - firmware_loader: Block path traversal
    - tty: rp2: Fix reset with non forgiving PCIe host bridges
    - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
    - serial: qcom-geni: fix fifo polling timeout
    - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
    - drbd: Fix atomicity violation in drbd_uuid_set_bm()
    - drbd: Add NULL check for net_conf to prevent dereference in state validation
    - ACPI: sysfs: validate return type of _STR method
    - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
    - perf/x86/intel/pt: Fix sampling synchronization
    - wifi: mt76: mt7921: Check devm_kasprintf() returned value
    - wifi: mt76: mt7915: check devm_kasprintf() returned value
    - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
    - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
    - wifi: rtw88: 8822c: Fix reported RX band width
    - wifi: mt76: mt7615: check devm_kasprintf() returned value
    - debugobjects: Fix conditions in fill_pool()
    - btrfs: tree-checker: fix the wrong output of data backref objectid
    - btrfs: always update fstrim_range on failure in FITRIM ioctl
    - f2fs: fix several potential integer overflows in file offsets
    - f2fs: prevent possible int overflow in dir_block_index()
    - f2fs: avoid potential int overflow in sanity_check_area_boundary()
    - f2fs: Require FMODE_WRITE for atomic write ioctls
    - f2fs: fix to check atomic_file in f2fs ioctl interfaces
    - hwrng: mtk - Use devm_pm_runtime_enable
    - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
    - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
    - arm64: esr: Define ESR_ELx_EC_* constants as UL
    - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
    - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
    - arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
    - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
    - vfs: fix race between evice_inodes() and find_inode()&iput()
    - fs: Fix file_set_fowner LSM hook inconsistencies
    - nfs: fix memory leak in error path of nfs4_do_reclaim
    - EDAC/igen6: Fix conversion of system address to physical memory address
    - icmp: change the order of rate limits
    - cpuidle: riscv-sbi: Use scoped device node handling to fix missing
      of_node_put
    - padata: use integer wrap around to prevent deadlock on seq_nr overflow
    - spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
    - ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
    - soc: versatile: realview: fix memory leak during device remove
    - soc: versatile: realview: fix soc_dev leak during device remove
    - USB: misc: yurex: fix race between read and write
    - xhci: Add a quirk for writing ERST in high-low order
    - usb: xhci: fix loss of data on Cadence xHC
    - pps: remove usage of the deprecated ida_simple_xx() API
    - pps: add an error check in parport_attach
    - serial: don't use uninitialized value in uart_poll_init()
    - x86/idtentry: Incorporate definitions/declarations of the FRED entries
    - x86/entry: Remove unwanted instrumentation in common_interrupt()
    - lib/bitmap: add bitmap_{read,write}()
    - btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
    - btrfs: fix race setting file private on concurrent lseek using same fd
    - dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
    - dt-bindings: spi: nxp-fspi: add imx8ulp support
    - thunderbolt: Improve DisplayPort tunnel setup process to be more robust
    - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
    - dm-verity: restart or panic on an I/O error
    - lockdep: fix deadlock issue between lockdep and rcu
    - mm: only enforce minimum stack gap size if it's sensible
    - spi: fspi: add support for imx8ulp
    - module: Fix KCOV-ignored file name
    - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu
      read lock
    - i2c: aspeed: Update the stop sw state when the bus recovery occurs
    - i2c: isch: Add missed 'else'
    - Documentation: KVM: fix warning in "make htmldocs"
    - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
    - wifi: brcmfmac: add linefeed at end of file
    - x86/tdx: Fix "in-kernel MMIO" check
    - spi: atmel-quadspi: Fix wrong register value written to MR
    - Revert: "dm-verity: restart or panic on an I/O error"
    - wifi: ath11k: use work queue to process beacon tx event
    - crypto: qat - disable IOV in adf_dev_stop()
    - crypto: qat - fix recovery flow for VFs
    - crypto: qat - ensure correct order in VF restarting handler
    - crypto: iaa - Fix potential use after free bug
    - autofs: fix missing fput for FSCONFIG_SET_FD
    - arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI
      first
    - thermal: core: Fold two functions into their respective callers
    - thermal: core: Fix rounding of delay jiffies
    - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
    - perf/dwc_pcie: Always register for PCIe bus notifier
    - ACPI: video: force native for some T2 macbooks
    - ACPI: video: force native for Apple MacbookPro9,2
    - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
    - wifi: mac80211: fix the comeback long retry times
    - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
    - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the
      spec
    - netfilter: nft_dynset: annotate data-races around set timeout
    - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
    - crypto: ccp - do not request interrupt on cmd completion when irqs disabled
    - wifi: mt76: connac: fix checksum offload fields of connac3 RXD
    - net: hsr: Use the seqnr lock for frames received via interlink port.
    - crypto: n2 - Set err to EINVAL if snprintf fails for hmac
    - firmware: qcom: scm: Disable SDI and write no dump to dump mode
    - arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
    - arm64: tegra: Correct location of power-sensors for IGX Orin
    - arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
    - selftests/ftrace: Fix eventfs ownership testcase to find mount point
    - iommu/amd: Introduce struct protection_domain.pd_mode
    - iommu/amd: Allocate the page table root using GFP_KERNEL
    - iommu/amd: Convert comma to semicolon
    - platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
    - kselftest: dt: Ignore nodes that have ancestors disabled
    - bpf, x64: Fix tailcall hierarchy
    - bpf, lsm: Add check for BPF LSM return value
    - bpf: Fix compare error in function retval_range_within
    - bpf: Fail verification for sign-extension of packet data/data_end/data_meta
    - selftests/bpf: Support checks against a regular expression
    - selftests/bpf: no need to track next_match_pos in struct test_loader
    - selftests/bpf: extract test_loader->expect_msgs as a data structure
    - selftests/bpf: allow checking xlated programs in verifier_* tests
    - selftests/bpf: __arch_* macro to limit test cases to specific archs
    - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
    - s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
    - sched/deadline: Fix schedstats vs deadline servers
    - perf scripts python cs-etm: Restore first sample log in verbose mode
    - perf lock contention: Change stack_id type to s32
    - quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
    - media: staging: media: starfive: camss: Drop obsolete return value
      documentation
    - leds: gpio: Set num_leds after allocation
    - iommufd/selftest: Fix buffer read overrrun in the dirty test
    - iommufd: Check the domain owner of the parent before creating a nesting
      domain
    - RDMA/mlx5: Fix counter update on MR cache mkey creation
    - RDMA/mlx5: Drop redundant work canceling from clean_keys()
    - RDMA/mlx5: Fix MR cache temp entries cleanup
    - RDMA/hns: Fix ah error counter in sw stat not increasing
    - Coresight: Set correct cs_mode for TPDM to fix disable issue
    - Coresight: Set correct cs_mode for dummy source to fix disable issue
    - interconnect: qcom: sm8250: Enable sync_state
    - vdpa/mlx5: Fix invalid mr resource destroy
    - net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
    - selftests: netfilter: Avoid hanging ipvs.sh
    - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
    - mm: migrate: annotate data-race in migrate_folio_unmap()
    - selftests/bpf: correctly move 'log' upon successful match
    - soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
    - drm/amdgpu/vcn: enable AV1 on both instances
    - drm/amd/display: Clean up dsc blocks in accelerated mode
    - drm/amd/display: Skip to enable dsc if it has been off
    - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
    - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
    - serial: qcom-geni: fix false console tx restart
    - crypto: qcom-rng - fix support for ACPI-based systems
    - ACPI: resource: Do IRQ override on MECHREV GM7XG0M
    - perf/x86/intel: Allow to setup LBR for counting event for BPF
    - f2fs: check discard support for conventional zones
    - netfs: Delete subtree of 'fs/netfs' when netfs module exits
    - md: Don't flush sync_work in md_write_start()
    - tools/nolibc: include arch.h from string.h
    - KVM: x86: Make x2APIC ID 100% readonly
    - x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails
    - x86/mm: Make x86_platform.guest.enc_status_change_*() return an error
    - x86/tdx: Account shared memory
    - x86/mm: Add callbacks to prepare encrypted memory for kexec
    - x86/tdx: Convert shared memory back to private on kexec
    - soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
    - serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
    - serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
    - idpf: stop using macros for accessing queue descriptors
    - fs_parse: add uid & gid option option parsing helpers
    - compiler.h: specify correct attribute for .rodata..c_jump_table
    - exfat: resolve memory leak from exfat_create_upcase_table()
    - s390/ftrace: Avoid calling unwinder in ftrace_return_address()
    - fbdev: xen-fbfront: Assign fb_info->device
    - [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10
    - Upstream stable to v6.6.54, v6.10.13
  * Backport some AppArmor complain-mode profile bugfixes from Oracular
    (LP: #2086210)
    - SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside
      aa_alloc_null
    - SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure
      for complain mode profiles
  * Noble update: upstream stable patchset 2024-11-08 (LP: #2087519)
    - ASoC: SOF: mediatek: Add missing board compatible
    - ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
    - ASoC: allow module autoloading for table db1200_pids
    - ASoC: allow module autoloading for table board_ids
    - scsi: lpfc: Fix overflow build issue
    - pinctrl: at91: make it work with current gpiolib
    - hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
    - microblaze: don't treat zero reserved memory regions as error
    - platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match
      less strict
    - net: ftgmac100: Ensure tx descriptor updates are visible
    - LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
    - wifi: iwlwifi: lower message level for FW buffer destination
    - wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
    - wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
    - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
    - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
    - wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
    - wifi: iwlwifi: clear trans->state earlier upon error
    - can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
    - ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
    - ASoC: intel: fix module autoloading
    - ASoC: google: fix module autoloading
    - ASoC: tda7419: fix module autoloading
    - ASoC: fix module autoloading
    - spi: spidev: Add an entry for elgin,jg10309-01
    - ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
    - ALSA: hda: add HDMI codec ID for Intel PTL
    - drm: komeda: Fix an issue related to normalized zpos
    - spi: bcm63xx: Enable module autoloading
    - smb: client: fix hang in wait_for_response() for negproto
    - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
    - tools: hv: rm .*.cmd when make clean
    - spi: spidev: Add missing spi_device_id for jg10309-01
    - ocfs2: add bounds checking to ocfs2_xattr_find_entry()
    - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
    - drm: Use XArray instead of IDR for minors
    - accel: Use XArray instead of IDR for minors
    - drm: Expand max DRM device number to full MINORBITS
    - powercap/intel_rapl: Add support for AMD family 1Ah
    - netfilter: nft_socket: make cgroupsv2 matching work with namespaces
    - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in
      nft_socket_cgroup_subtree_level()
    - nvme-pci: qdepth 1 quirk
    - x86/mm: Switch to new Intel CPU model defines
    - can: mcp251xfd: properly indent labels
    - can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into
      mcp251xfd_chip_start/stop()
    - USB: serial: pl2303: add device id for Macrosilicon MS3020
    - USB: usbtmc: prevent kernel-usb-infoleak
    - platform/x86: asus-wmi: Fix spurious rfkill on UX8406MA
    - ASoC: mediatek: mt8188-mt6359: Modify key
    - clk: qcom: gcc-sm8650: Don't use shared clk_ops for QUPs
    - ice: check for XDP rings instead of bpf program when unconfiguring
    - powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs
    - powercap: intel_rapl: Change an error pointer to NULL
    - Upstream stable to v6.6.53, v6.10.12

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 27 Jan 2025 09:45:37 -0600

linux-nvidia (6.8.0-1021.23) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1021.23 -proposed tracker (LP: #2093505)

  [ Ubuntu: 6.8.0-52.53 ]

  * noble/linux: 6.8.0-52.53 -proposed tracker (LP: #2093521)
  * CVE-2024-53164
    - net: sched: fix ordering of qlen adjustment
  * CVE-2024-53141
    - netfilter: ipset: add missing range check in bitmap_ip_uadt
  * CVE-2024-53103
    - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 15 Jan 2025 18:00:31 -0600

linux-nvidia (6.8.0-1020.22) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1020.22 -proposed tracker (LP: #2090351)

  * ice driver RTNL assertion failed warning on shutdown/reboot (LP: #2091107)
    - ice: Remove and readd netdev during devlink reload

  * vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
    - SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
    - SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"

  [ Ubuntu: 6.8.0-51.52 ]

  * noble/linux: 6.8.0-51.52 -proposed tracker (LP: #2090369)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] update variants
  * MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure
    (LP: #2087886)
    - mm/mglru: only clear kswapd_failures if reclaimable
  * CVE-2024-50264
    - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  * CVE-2024-53057
    - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  * CVE-2024-49967
    - ext4: no need to continue when the number of entries is 1

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 09 Dec 2024 09:27:25 -0600

linux-nvidia (6.8.0-1019.21) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1019.21 -proposed tracker (LP: #2086287)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2024.10.28)

  * Pull-request to address cpufreq bug (LP: #2088114)
    - cpufreq/cppc: Don't compare desired_perf in target()

  * Pull-request: AC cycle testing is showing errors in syslog (LP: #2086233)
    - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
    - cppc_cpufreq: Remove HiSilicon CPPC workaround

  [ Ubuntu: 6.8.0-50.51 ]

  * noble/linux: 6.8.0-50.51 -proposed tracker (LP: #2086301)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.10.28)
  * Noble update: upstream stable patchset 2024-10-31 (LP: #2086138)
    - device property: Add cleanup.h based fwnode_handle_put() scope based
      cleanup.
    - device property: Introduce device_for_each_child_node_scoped()
    - iio: adc: ad7124: Switch from of specific to fwnode based property handling
    - ksmbd: override fsids for share path check
    - ksmbd: override fsids for smb2_query_info()
    - usbnet: ipheth: remove extraneous rx URB length check
    - usbnet: ipheth: drop RX URBs with no payload
    - usbnet: ipheth: do not stop RX on failing RX callback
    - usbnet: ipheth: fix carrier detection in modes 1 and 4
    - net: ethernet: use ip_hdrlen() instead of bit shift
    - drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
    - drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
    - net: phy: vitesse: repair vsc73xx autonegotiation
    - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
    - wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
    - net: hns3: use correct release function during uninitialization
    - btrfs: update target inode's ctime on unlink
    - Input: ads7846 - ratelimit the spi_sync error message
    - Input: synaptics - enable SMBus for HP Elitebook 840 G2
    - HID: multitouch: Add support for GT7868Q
    - scripts: kconfig: merge_config: config files: add a trailing newline
    - platform/surface: aggregator_registry: Add Support for Surface Pro 10
    - platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
    - drm/msm/adreno: Fix error return if missing firmware-name
    - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
    - smb/server: fix return value of smb2_open()
    - NFSv4: Fix clearing of layout segments in layoutreturn
    - NFS: Avoid unnecessary rescanning of the per-server delegation list
    - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
    - platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
    - mptcp: pm: Fix uaf in __timer_delete_sync
    - arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on
      RK3399 Puma
    - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399
      Puma
    - minmax: reduce min/max macro expansion in atomisp driver
    - net: tighten bad gso csum offset check in virtio_net_hdr
    - dm-integrity: fix a race condition when accessing recalc_sector
    - x86/hyperv: fix kexec crash due to VP assist page corruption
    - mm: avoid leaving partial pfn mappings around in error case
    - arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
    - drm/amd/display: Disable error correction if it's not supported
    - drm/amd/display: Fix FEC_READY write on DP LT
    - eeprom: digsy_mtc: Fix 93xx46 driver probe failure
    - cxl/core: Fix incorrect vendor debug UUID define
    - selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
    - hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >=
      1.2
    - ice: Fix lldp packets dropping after changing the number of channels
    - ice: fix accounting for filters shared by multiple VSIs
    - ice: fix VSI lists confusion when adding VLANs
    - igb: Always call igb_xdp_ring_update_tail() under Tx lock
    - net/mlx5: Update the list of the PCI supported devices
    - net/mlx5e: Add missing link modes to ptys2ethtool_map
    - net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
    - net/mlx5: Explicitly set scheduling element and TSAR type
    - net/mlx5: Add missing masks and QoS bit masks for scheduling elements
    - net/mlx5: Correct TASR typo into TSAR
    - net/mlx5: Verify support for scheduling element and TSAR type
    - net/mlx5: Fix bridge mode operations when there are no VFs
    - fou: fix initialization of grc
    - octeontx2-af: Modify SMQ flush sequence to drop packets
    - net: ftgmac100: Enable TX interrupt to avoid TX timeout
    - selftests: net: csum: Fix checksums for packets with non-zero padding
    - netfilter: nft_socket: fix sk refcount leaks
    - net: dsa: felix: ignore pending status of TAS module when it's disabled
    - net: dpaa: Pad packets to ETH_ZLEN
    - tracing/osnoise: Fix build when timerlat is not enabled
    - spi: nxp-fspi: fix the KASAN report out-of-bounds bug
    - drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
    - dma-buf: heaps: Fix off-by-one in CMA heap fault handler
    - drm/nouveau/fb: restore init() for ramgp102
    - drm/amdgpu/atomfirmware: Silence UBSAN warning
    - drm/amd/amdgpu: apply command submission parser for JPEG v1
    - spi: geni-qcom: Undo runtime PM changes at driver exit time
    - spi: geni-qcom: Fix incorrect free_irq() sequence
    - drm/i915/guc: prevent a possible int overflow in wq offsets
    - ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
    - cifs: Fix signature miscalculation
    - pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
    - ASoC: meson: axg-card: fix 'use-after-free'
    - drm/mediatek: Set sensible cursor width/height values to fix crash
    - Input: edt-ft5x06 - add support for FocalTech FT5452 and FT8719
    - Input: edt-ft5x06 - add support for FocalTech FT8201
    - cgroup/cpuset: Eliminate unncessary sched domains rebuilds in hotplug
    - spi: zynqmp-gqspi: Scale timeout by data size
    - drm/xe: use devm instead of drmm for managed bo
    - net: libwx: fix number of Rx and Tx descriptors
    - clocksource: hyper-v: Use lapic timer in a TDX VM without paravisor
    - bcachefs: Fix bch2_extents_match() false positive
    - bcachefs: Don't delete open files in online fsck
    - firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()
    - riscv: dts: starfive: jh7110-common: Fix lower rate of CPUfreq by setting
      PLL0 rate to 1.5GHz
    - cxl: Restore XOR'd position bits during address translation
    - netlink: specs: mptcp: fix port endianness
    - drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct()
    - drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct()
    - drm/amd/amdgpu: apply command submission parser for JPEG v2+
    - drm/xe/client: fix deadlock in show_meminfo()
    - drm/xe/client: remove bogus rcu list usage
    - drm/xe/client: add missing bo locking in show_meminfo()
    - tracing/kprobes: Fix build error when find_module() is not available
    - drm/xe/display: fix compat IS_DISPLAY_STEP() range end
    - Upstream stable to v6.6.52, v6.10.11
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849)
    - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
    - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
    - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius
      devices
    - ALSA: hda/realtek: add patch for internal mic in Lenovo V145
    - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
    - ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
    - ata: libata: Fix memory leak for error path in ata_host_alloc()
    - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
    - x86/kaslr: Expose and use the end of the physical memory address space
    - nvme-pci: Add sleep quirk for Samsung 990 Evo
    - rust: types: Make Opaque::get const
    - rust: macros: provide correct provenance when constructing THIS_MODULE
    - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
    - Bluetooth: MGMT: Ignore keys being loaded with invalid type
    - mmc: core: apply SD quirks earlier during probe
    - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
    - mmc: sdhci-of-aspeed: fix module autoloading
    - mmc: cqhci: Fix checking of CQHCI_HALT state
    - fuse: update stats for pages in dropped aux writeback list
    - fuse: use unsigned type for getxattr/listxattr size truncation
    - fuse: fix memory leak in fuse_create_open
    - clk: starfive: jh7110-sys: Add notifier for PLL0 clock
    - clk: qcom: clk-alpha-pll: Fix the pll post div mask
    - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
    - kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
    - tracing: Avoid possible softlockup in tracing_iter_reset()
    - tracing/timerlat: Add interface_lock around clearing of kthread in
      stop_kthread()
    - net: mctp-serial: Fix missing escapes on transmit
    - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
    - x86/apic: Make x2apic_disable() work correctly
    - drm/i915: Do not attempt to load the GSC multiple times
    - ALSA: control: Apply sanity check of input values for user elements
    - ALSA: hda: Add input value sanity checks to HDMI channel map controls
    - wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
    - smack: unix sockets: fix accept()ed socket label
    - bpf, verifier: Correct tail_call_reachable for bpf prog
    - accel/habanalabs/gaudi2: unsecure edma max outstanding register
    - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
    - af_unix: Remove put_pid()/put_cred() in copy_peercred().
    - x86/kmsan: Fix hook for unaligned accesses
    - iommu: sun50i: clear bypass register
    - netfilter: nf_conncount: fix wrong variable type
    - fs/ntfs3: One more reason to mark inode bad
    - riscv: kprobes: Use patch_text_nosync() for insn slots
    - media: vivid: fix wrong sizeimage value for mplane
    - leds: spi-byte: Call of_node_put() on error path
    - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
    - usb: uas: set host status byte on data completion error
    - drm/amd/display: Check HDCP returned status
    - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
    - media: vivid: don't set HDMI TX controls if there are no HDMI outputs
    - vfio/spapr: Always clear TCEs before unsetting the window
    - ice: Check all ice_vsi_rebuild() errors in function
    - Input: ili210x - use kvmalloc() to allocate buffer for firmware update
    - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
    - pcmcia: Use resource_size function on resource object
    - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
    - can: m_can: Release irq on error in m_can_open
    - can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD
      mode
    - rust: kbuild: fix export of bss symbols
    - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
    - igb: Fix not clearing TimeSync interrupts for 82580
    - platform/x86: dell-smbios: Fix error path in dell_smbios_init()
    - regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
    - can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
    - can: kvaser_pciefd: Remove unnecessary comment
    - can: kvaser_pciefd: Rename board_irq to pci_irq
    - can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
    - can: kvaser_pciefd: Use a single write when releasing RX buffers
    - Bluetooth: qca: If memdump doesn't work, re-enable IBS
    - Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
    - Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
    - igc: Unlock on error in igc_io_resume()
    - ice: do not bring the VSI up, if it was down before the XDP setup
    - usbnet: modern method to get random MAC
    - bpf, net: Fix a potential race in do_sock_getsockopt()
    - bareudp: Fix device stats updates.
    - r8152: fix the firmware doesn't work
    - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
    - net: dsa: vsc73xx: fix possible subblocks range of CAPT block
    - selftests: net: enable bind tests
    - firmware: cs_dsp: Don't allow writes to read-only controls
    - phy: zynqmp: Take the phy mutex in xlate
    - ASoC: topology: Properly initialize soc_enum values
    - dm init: Handle minors larger than 255
    - iommu/vt-d: Handle volatile descriptor status read
    - cgroup: Protect css->cgroup write under css_set_lock
    - devres: Initialize an uninitialized struct member
    - virtio_ring: fix KMSAN error for premapped mode
    - crypto: qat - fix unintentional re-enabling of error interrupts
    - ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially
      broken alignment
    - libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
    - drm/amdgpu: Set no_hw_access when VF request full GPU fails
    - ext4: fix possible tid_t sequence overflows
    - jbd2: avoid mount failed when commit block is partial submitted
    - dma-mapping: benchmark: Don't starve others when doing the test
    - drm/amdgpu: reject gang submit on reserved VMIDs
    - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
    - fs/ntfs3: Check more cases when directory is corrupted
    - btrfs: replace BUG_ON with ASSERT in walk_down_proc()
    - cxl/region: Verify target positions using the ordered target list
    - riscv: set trap vector earlier
    - tcp: Don't drop SYN+ACK for simultaneous connect().
    - net: dpaa: avoid on-stack arrays of NR_CPUS elements
    - LoongArch: Use correct API to map cmdline in relocate_kernel()
    - regmap: maple: work around gcc-14.1 false-positive warning
    - vfs: Fix potential circular locking through setxattr() and removexattr()
    - i3c: master: svc: resend target address when get NACK
    - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
    - btrfs: initialize location to fix -Wmaybe-uninitialized in
      btrfs_lookup_dentry()
    - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
    - usbnet: ipheth: race between ipheth_close and error handling
    - spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
    - ata: pata_macio: Use WARN instead of BUG
    - NFSv4: Add missing rescheduling points in
      nfs_client_return_marked_delegations
    - ACPI: CPPC: Add helper to get the highest performance value
    - cpufreq: amd-pstate: Enable amd-pstate preferred core support
    - cpufreq: amd-pstate: fix the highest frequency issue which limits
      performance
    - tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
    - iio: buffer-dmaengine: fix releasing dma channel on error
    - iio: fix scale application in iio_convert_raw_to_processed_unlocked
    - iio: adc: ad7124: fix config comparison
    - iio: adc: ad7606: remove frstdata check for serial mode
    - iio: adc: ad7124: fix chip ID mismatch
    - usb: dwc3: core: update LC timer as per USB Spec V3.2
    - usb: cdns2: Fix controller reset issue
    - usb: dwc3: Avoid waking up gadget during startxfer
    - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
    - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
    - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
    - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
    - clocksource/drivers/timer-of: Remove percpu irq related code
    - uprobes: Use kzalloc to allocate xol area
    - Revert "mm: skip CMA pages when they are not available"
    - workqueue: wq_watchdog_touch is always called with valid CPU
    - workqueue: Improve scalability of workqueue watchdog touch
    - ACPI: processor: Return an error if acpi_processor_get_info() fails in
      processor_add()
    - ACPI: processor: Fix memory leaks in error paths of processor_add()
    - arm64: acpi: Move get_cpu_for_acpi_id() to a header
    - can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate
      function
    - can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
    - can: mcp251xfd: clarify the meaning of timestamp
    - can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
    - drm/amd: Add gfx12 swizzle mode defs
    - drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
    - ata: libata-scsi: Remove redundant sense_buffer memsets
    - ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
    - crypto: starfive - Align rsa input data to 32-bit
    - crypto: starfive - Fix nent assignment in rsa dec
    - clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
    - powerpc/64e: remove unused IBM HTW code
    - powerpc/64e: split out nohash Book3E 64-bit code
    - powerpc/64e: Define mmu_pte_psize static
    - powerpc/vdso: Don't discard rela sections
    - ASoC: tegra: Fix CBB error during probe()
    - nvme-pci: allocate tagset on reset if necessary
    - ASoc: SOF: topology: Clear SOF link platform name upon unload
    - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
    - clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
    - clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
    - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
    - drm/i915/fence: Mark debug_fence_free() with __maybe_unused
    - gpio: rockchip: fix OF node leak in probe()
    - gpio: modepin: Enable module autoloading
    - riscv: Fix toolchain vector detection
    - riscv: Do not restrict memory size because of linear mapping on nommu
    - membarrier: riscv: Add full memory barrier in switch_mm()
    - [Config] updateconfigs for ARCH_HAS_MEMBARRIER_CALLBACKS
    - x86/mm: Fix PTI for i386 some more
    - btrfs: fix race between direct IO write and fsync when using same fd
    - spi: spi-fsl-lpspi: Fix off-by-one in prescale max
    - ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx
    - ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15
      X1504VAP
    - fuse: clear PG_uptodate when using a stolen page
    - riscv: misaligned: remove CONFIG_RISCV_M_MODE specific code
    - parisc: Delay write-protection until mark_rodata_ro() call
    - pinctrl: qcom: x1e80100: Bypass PDC wakeup parent for now
    - maple_tree: remove rcu_read_lock() from mt_validate()
    - Revert "wifi: ath11k: restore country code during resume"
    - btrfs: qgroup: don't use extent changeset when not needed
    - btrfs: zoned: handle broken write pointer on zones
    - drm/xe/gsc: Do not attempt to load the GSC multiple times
    - drm/amdgpu: always allocate cleared VRAM for GEM allocations
    - drm/amd/display: Lock DC and exit IPS when changing backlight
    - ALSA: hda/realtek: extend quirks for Clevo V5[46]0
    - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition
    - virt: sev-guest: Mark driver struct with __refdata to prevent section
      mismatch
    - media: b2c2: flexcop-usb: fix flexcop_usb_memory_req
    - gve: Add adminq mutex lock
    - wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware
    - drm/amdgpu: add missing error handling in function
      amdgpu_gmc_flush_gpu_tlb_pasid
    - crypto: qat - initialize user_input.lock for rate_limiting
    - locking: Add rwsem_assert_held() and rwsem_assert_held_write()
    - fs: don't copy to userspace under namespace semaphore
    - fs: relax permissions for statmount()
    - seccomp: release task filters when the task exits
    - drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported
    - can: m_can: Remove m_can_rx_peripheral indirection
    - can: m_can: Do not cancel timer from within timer
    - mm: Provide a means of invalidation without using launder_folio
    - cifs: Fix copy offload to flush destination region
    - hwmon: ltc2991: fix register bits defines
    - scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum
    - ptp: ocp: convert serial ports to array
    - ptp: ocp: adjust sysfs entries to expose tty information
    - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset
    - ice: remove ICE_CFG_BUSY locking from AF_XDP code
    - net: xilinx: axienet: Fix race in axienet_stop
    - iommu/vt-d: Remove control over Execute-Requested requests
    - block: don't call bio_uninit from bio_endio
    - tracing/kprobes: Add symbol counting check when module loads
    - perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
    - PCI: qcom: Override NO_SNOOP attribute for SA8775P RC
    - staging: vchiq_core: Bubble up wait_event_interruptible() return value
    - watchdog: imx7ulp_wdt: keep already running watchdog enabled
    - btrfs: slightly loosen the requirement for qgroup removal
    - drm/amdgpu: add PSP RAS address query command
    - drm/amdgpu: add mutex to protect ras shared memory
    - s390/boot: Do not assume the decompressor range is reserved
    - drm/amdgpu: Fix two reset triggered in a row
    - drm/amdgpu: Add reset_context flag for host FLR
    - drm/amdgpu: Fix amdgpu_device_reset_sriov retry logic
    - fs: only copy to userspace on success in listmount()
    - iio: adc: ad7124: fix DT configuration parsing
    - nvmem: u-boot-env: error if NVMEM device is too small
    - mm: zswap: rename is_zswap_enabled() to zswap_is_enabled()
    - mm/memcontrol: respect zswap.writeback setting from parent cg too
    - path: add cleanup helper
    - fs: simplify error handling
    - fs: relax permissions for listmount()
    - hid: bpf: add BPF_JIT dependency
    - net/mlx5e: SHAMPO, Use KSMs instead of KLMs
    - net/mlx5e: SHAMPO, Fix page leak
    - drm/xe/xe2: Add workaround 14021402888
    - drm/xe/xe2lpg: Extend workaround 14021402888
    - clk: qcom: gcc-x1e80100: Fix USB 0 and 1 PHY GDSC pwrsts flags
    - clk: qcom: gcc-x1e80100: Don't use parking clk_ops for QUPs
    - nouveau: fix the fwsec sb verification register.
    - riscv: Add tracepoints for SBI calls and returns
    - riscv: Improve sbi_ecall() code generation by reordering arguments
    - riscv: Fix RISCV_ALTERNATIVE_EARLY
    - cifs: Fix zero_point init on inode initialisation
    - nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err
    - nvme: fix status magic numbers
    - nvme: rename CDR/MORE/DNR to NVME_STATUS_*
    - nvmet: Identify-Active Namespace ID List command should reject invalid nsid
    - drm/i915/display: Add mechanism to use sink model when applying quirk
    - drm/i915/display: Increase Fast Wake Sync length as a quirk
    - LoongArch: Use accessors to page table entries instead of direct dereference
    - Upstream stable to v6.6.51, v6.10.10
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46823
    - kunit/overflow: Fix UB in overflow_allocation_test
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46834
    - ethtool: fail closed if we can't get max channel used in indirection tables
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46751
    - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46753
    - btrfs: handle errors from btrfs_dec_ref() properly
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46841
    - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in
      walk_down_proc()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46754
    - bpf: Remove tst_run from lwt_seg6local_prog_ops.
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46824
    - iommufd: Require drivers to supply the cache_invalidate_user ops
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46842
    - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46766
    - ice: move netif_queue_set_napi to rtnl-protected sections
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46772
    - drm/amd/display: Check denominator crb_pipes before used
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46774
    - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46775
    - drm/amd/display: Validate function returns
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46778
    - drm/amd/display: Check UnboundedRequestEnabled's value
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46779
    - drm/imagination: Free pvr_vm_gpuva after unlink
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46792
    - riscv: misaligned: Restrict user access to kernel memory
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46793
    - ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46735
    - ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46737
    - nvmet-tcp: fix kernel crash if commands allocation fails
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46822
    - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46713
    - perf/aux: Fix AUX buffer serialization
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46739
    - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46740
    - binder: fix UAF caused by offsets overwrite
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46741
    - misc: fastrpc: Fix double free of 'buf' in error path
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47663
    - staging: iio: frequency: ad9834: Validate frequency parameter value
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46832
    - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47668
    - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46744
    - Squashfs: sanity check symbolic link size
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46745
    - Input: uinput - reject requests with unreasonable number of slots
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46746
    - HID: amd_sfh: free driver_data after destroying hid device
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47664
    - spi: hisi-kunpeng: Add verification for the max_frequency provided by the
      firmware
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47665
    - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46749
    - Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46750
    - PCI: Add missing bridge lock to pci_bus_lock()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46752
    - btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46840
    - btrfs: clean up our handling of refs == 0 in snapshot delete
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46755
    - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47666
    - scsi: pm80xx: Set phy->enable_completion only when we wait for it
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46843
    - scsi: ufs: core: Remove SCSI host only if added
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46760
    - wifi: rtw88: usb: schedule rx work after everything is set up
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46761
    - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46844
    - um: line: always fill *error_out in setup_one_line()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46762
    - xen: privcmd: Fix possible access to a freed kirqfd instance
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46763
    - fou: Fix null-ptr-deref in GRO.
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46765
    - ice: protect XDP configuration with a mutex
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46767
    - net: phy: Fix missing of_node_put() for leds
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46768
    - hwmon: (hp-wmi-sensors) Check if WMI event data exists
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46770
    - ice: Add netif_device_attach/detach into PF reset flow
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46771
    - can: bcm: Remove proc entry when dev is unregistered.
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46773
    - drm/amd/display: Check denominator pbn_div before used
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47667
    - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46835
    - drm/amdgpu: Fix smatch static checker warning
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46776
    - drm/amd/display: Run DC_LOG_DC after checking link->link_enc
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46836
    - usb: gadget: aspeed_udc: validate endpoint index for ast udc
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46777
    - udf: Avoid excessive partition lengths
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46825
    - wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46826
    - ELF: fix kernel.randomize_va_space double read
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46827
    - wifi: ath12k: fix firmware crash due to invalid peer nss
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-47669
    - nilfs2: fix state management in error path of log writing function
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46780
    - nilfs2: protect references to superblock parameters exposed in sysfs
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46781
    - nilfs2: fix missing cleanup on rollforward recovery error
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46828
    - sched: sch_cake: fix bulk flow accounting logic for host fairness
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46782
    - ila: call nf_unregister_net_hooks() sooner
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46783
    - tcp_bpf: fix return value of tcp_bpf_sendmsg()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46784
    - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46785
    - eventfs: Use list_del_rcu() for SRCU protected list variable
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46786
    - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46787
    - userfaultfd: fix checks for huge PMDs
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46838
    - userfaultfd: don't BUG_ON() if khugepaged yanks our page table
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46845
    - tracing/timerlat: Only clear timer if a kthread exists
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46788
    - tracing/osnoise: Use a cpumask to know what threads are kthreads
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46846
    - spi: rockchip: Resolve unbalanced runtime PM / system PM handling
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46847
    - mm: vmalloc: ensure vmap_block is initialised before adding to queue
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46791
    - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46829
    - rtmutex: Drop rt_mutex::wait_lock before scheduling
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46848
    - perf/x86/intel: Limit the period on Haswell
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46794
    - x86/tdx: Fix data leak in mmio_read()
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46795
    - ksmbd: unset the binding mark of a reused connection
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46797
    - powerpc/qspinlock: Fix deadlock in MCS queue
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46830
    - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46798
    - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  * Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
    CVE-2024-46831
    - net: microchip: vcap: Fix use-after-free error in kunit test
  * Navi24 RX6300 light up issue on 6.8 kernel (LP: #2084513)
    - drm/amd/display: Ensure populate uclk in bb construction
  * Noble update: upstream stable patchset 2024-10-18 (LP: #2084941)
    - drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
    - drm: panel-orientation-quirks: Add quirk for OrangePi Neo
    - scsi: ufs: core: Check LSDBS cap when !mcq
    - scsi: ufs: core: Bypass quick recovery if force reset is needed
    - btrfs: tree-checker: validate dref root and objectid
    - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
    - ALSA: hda/conexant: Mute speakers at suspend / shutdown
    - ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
    - ALSA: ump: Explicitly reset RPN with Null RPN
    - ALSA: seq: ump: Use the common RPN/bank conversion context
    - ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
    - ALSA: seq: ump: Explicitly reset RPN with Null RPN
    - net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
    - ASoC: amd: yc: Support mic on HP 14-em0002la
    - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
    - i2c: Fix conditional for substituting empty ACPI functions
    - dma-debug: avoid deadlock between dma debug vs printk and netconsole
    - net: usb: qmi_wwan: add MeiG Smart SRM825L
    - ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
    - ASoC: codecs: ES8326: button detect issue
    - selftests: mptcp: userspace pm create id 0 subflow
    - selftests: mptcp: dump userspace addrs list
    - selftests: mptcp: userspace pm get addr tests
    - selftests: mptcp: declare event macros in mptcp_lib
    - selftests: mptcp: join: cannot rm sf if closed
    - selftests: mptcp: add explicit test case for remove/readd
    - selftests: mptcp: join: check re-using ID of unused ADD_ADDR
    - selftests: mptcp: join: check re-adding init endp with != id
    - selftests: mptcp: add mptcp_lib_events helper
    - selftests: mptcp: join: validate event numbers
    - selftests: mptcp: join: check re-re-adding ID 0 signal
    - selftests: mptcp: join: test for flush/re-add endpoints
    - selftests: mptcp: join: disable get and dump addr checks
    - selftests: mptcp: join: stop transfer when check is done (part 2.2)
    - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
    - drm/amd/display: Assign linear_pitch_alignment even for VM
    - drm/amdgpu: fix overflowed array index read warning
    - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
    - drm/amd/pm: fix uninitialized variable warning
    - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
    - drm/amd/pm: fix warning using uninitialized value of max_vid_step
    - drm/amd/pm: Fix negative array index read
    - drm/amd/pm: fix the Out-of-bounds read warning
    - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
    - drm/amdgpu: avoid reading vf2pf info size from FB
    - drm/amd/display: Check gpio_id before used as array index
    - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
    - drm/amd/display: Check index for aux_rd_interval before using
    - drm/amd/display: Add array index check for hdcp ddc access
    - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
    - drm/amd/display: Check msg_id before processing transcation
    - drm/amd/display: Fix Coverity INTERGER_OVERFLOW within
      construct_integrated_info
    - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
      dal_gpio_service_create
    - drm/amd/display: Spinlock before reading event
    - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
      decide_fallback_link_setting_max_bw_policy
    - drm/amd/display: Ensure index calculation will not overflow
    - drm/amd/display: Skip inactive planes within
      ModeSupportAndSystemConfiguration
    - drm/amd/display: Fix index may exceed array range within
      fpu_update_bw_bounding_box
    - drm/amd/amdgpu: Check tbo resource pointer
    - drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
    - drm/amdgpu/pm: Fix uninitialized variable warning for smu10
    - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
    - drm/amdgpu: Fix the uninitialized variable warning
    - drm/amdkfd: Check debug trap enable before write dbg_ev_file
    - drm/amdkfd: Reconcile the definition and use of oem_id in struct
      kfd_topology_device
    - apparmor: fix possible NULL pointer dereference
    - wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
    - wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
    - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy
      SOCs
    - drm/amdgpu: Fix the warning division or modulo by zero
    - drm/amdgpu: fix dereference after null check
    - drm/amdgpu: fix the waring dereferencing hive
    - drm/amd/pm: check specific index for aldebaran
    - drm/amd/pm: check specific index for smu13
    - drm/amdgpu: the warning dereferencing obj for nbio_v7_4
    - drm/amd/pm: check negtive return for table entries
    - wifi: rtw89: ser: avoid multiple deinit on same CAM
    - drm/kfd: Correct pinned buffer handling at kfd restore and validate process
    - drm/amdgpu: update type of buf size to u32 for eeprom functions
    - wifi: iwlwifi: remove fw_running op
    - cpufreq: scmi: Avoid overflow of target_freq in fast switch
    - PCI: al: Check IORESOURCE_BUS existence during probe
    - wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
    - hwspinlock: Introduce hwspin_lock_bust()
    - soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
    - RDMA/efa: Properly handle unexpected AQ completions
    - ionic: fix potential irq name truncation
    - pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
    - rcu/nocb: Remove buggy bypass lock contention mitigation
    - media: v4l2-cci: Always assign *val
    - usbip: Don't submit special requests twice
    - usb: typec: ucsi: Fix null pointer dereference in trace
    - fsnotify: clear PARENT_WATCHED flags lazily
    - net: remove NULL-pointer net parameter in ip_metrics_convert
    - drm/amdgu: fix Unintentional integer overflow for mall size
    - regmap: spi: Fix potential off-by-one when calculating reserved size
    - smack: tcp: ipv4, fix incorrect labeling
    - platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
    - net/mlx5e: SHAMPO, Fix incorrect page release
    - drm/meson: plane: Add error handling
    - crypto: stm32/cryp - call finalize with bh disabled
    - gfs2: Revert "Add quota_change type"
    - drm/bridge: tc358767: Check if fully initialized before signalling HPD event
      via IRQ
    - dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking
      callbacks
    - dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
    - hwmon: (k10temp) Check return value of amd_smn_read()
    - wifi: cfg80211: make hash table duplicates more survivable
    - f2fs: fix to do sanity check on blocks for inline_data inode
    - driver: iio: add missing checks on iio_info's callback access
    - block: remove the blk_flush_integrity call in blk_integrity_unregister
    - drm/amdgpu: add skip_hw_access checks for sriov
    - drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
    - drm/amdgpu: add lock in kfd_process_dequeue_from_device
    - drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
    - drm/amd/display: added NULL check at start of dc_validate_stream
    - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
    - drm/amd/display: use preferred link settings for dp signal only
    - drm/amd/display: Check BIOS images before it is used
    - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
    - media: uvcvideo: Enforce alignment of frame and interval
    - virtio_net: Fix napi_skb_cache_put warning
    - i2c: Use IS_REACHABLE() for substituting empty ACPI functions
    - btrfs: factor out stripe length calculation into a helper
    - btrfs: scrub: update last_physical after scrubbing one stripe
    - btrfs: fix qgroup reserve leaks in cow_file_range
    - virtio-net: check feature before configuring the vq coalescing command
    - drm/amd/display: Handle the case which quad_part is equal 0
    - drm/amdgpu: Handle sg size limit for contiguous allocation
    - drm/amd/pm: fix uninitialized variable warning for smu_v13
    - drm/amdgpu: fix uninitialized scalar variable warning
    - drm/amd/display: Ensure array index tg_inst won't be -1
    - drm/amd/display: handle invalid connector indices
    - drm/amd/display: Increase MAX_LINKS by 2
    - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than
      max_links
    - drm/amd/display: Fix incorrect size calculation for loop
    - drm/amd/display: Use kcalloc() instead of kzalloc()
    - drm/amd/display: Add missing NULL pointer check within
      dpcd_extend_address_range
    - drm/amd/display: Release state memory if amdgpu_dm_create_color_properties
      fail
    - drm/amd/display: Check link_index before accessing dc->links[]
    - drm/amd/display: Add otg_master NULL check within
      resource_log_pipe_topology_update
    - drm/amd/display: Release clck_src memory if clk_src_construct fails
    - drm/amd/display: Fix writeback job lock evasion within dm_crtc_high_irq
    - drm/xe: Demote CCS_MODE info to debug only
    - drm/drm-bridge: Drop conditionals around of_node pointers
    - drm/amdgpu: fix uninitialized variable warning for amdgpu_xgmi
    - drm/amdgpu: fix uninitialized variable warning for jpeg_v4
    - drm/amdgpu: Fix uninitialized variable warning in amdgpu_info_ioctl
    - wifi: ath12k: initialize 'ret' in ath12k_dp_rxdma_ring_sel_config_wcn7850()
    - drm/amdgpu/pm: Check input value for power profile setting on smu11, smu13
      and smu14
    - drm/xe: Fix the warning conditions
    - drm/amd/display: Fix pipe addition logic in calc_blocks_to_ungate DCN35
    - wifi: cfg80211: restrict operation during radar detection
    - remoteproc: qcom_q6v5_pas: Add hwspinlock bust on stop
    - tcp: annotate data-races around tw->tw_ts_recent and tw->tw_ts_recent_stamp
    - drm/xe: Don't overmap identity VRAM mapping
    - net: tcp/dccp: prepare for tw_timer un-pinning
    - drm/xe: Ensure caller uses sole domain for xe_force_wake_assert_held
    - drm/xe: Check valid domain is passed in xe_force_wake_ref
    - thermal: trip: Use READ_ONCE() for lockless access to trip properties
    - drm/xe: Add GuC state asserts to deregister_exec_queue
    - drm/amdgpu: fix overflowed constant warning in mmhub_set_clockgating()
    - drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection
    - drm/amd/display: Disable DMCUB timeout for DCN35
    - drm/amd/display: Avoid overflow from uint32_t to uint8_t
    - pinctrl: core: reset gpio_device in loop in pinctrl_pins_show()
    - Upstream stable to v6.6.50, v6.10.9
  * CVE-2024-46747
    - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  * CVE-2024-46725
    - drm/amdgpu: Fix out-of-bounds write warning
  * CVE-2024-46724
    - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  * [SRU] Fix AST DP output after resume (LP: #2083022)
    - drm/ast: Inline drm_simple_encoder_init()
    - drm/ast: Implement atomic enable/disable for encoders
    - drm/ast: Program mode for AST DP in atomic_mode_set
    - drm/ast: Move mode-setting code into mode_set_nofb CRTC helper
    - drm/ast: Handle primary-plane format setup in atomic_update
    - drm/ast: Remove gamma LUT updates from DPMS code
    - drm/ast: Only set VGA SCREEN_DISABLE bit in CRTC code
    - drm/ast: Inline ast_crtc_dpms() into callers
    - drm/ast: Use drm_atomic_helper_commit_tail() helper
  * UBSAN array-index-out-of-bounds reported with N-6.8 on P9 node baltar
    (LP: #2078038)
    - scripts/kernel-doc: reindent
    - compiler_types: add Endianness-dependent __counted_by_{le, be}
    - scsi: aacraid: union aac_init: Replace 1-element array with flexible array
    - scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with
      flexible array
    - scsi: aacraid: Rearrange order of struct aac_srb_unit
    - scsi: aacraid: struct {user, }sgmap{, 64, raw}: Replace 1-element arrays
      with flexible arrays
  * r8169: transmit queue 0 timed out error when re-plugging the Ethernet cable
    (LP: #2084526)
    - r8169: disable ALDPS per default for RTL8125
  * [SRU] cpufreq: intel_pstate: Support Emerald Rapids OOB mode (LP: #2084834)
    - cpufreq: intel_pstate: Support Emerald Rapids OOB mode
  * CVE-2024-46723
    - drm/amdgpu: fix ucode out-of-bounds read warning
  * CVE-2024-46743
    - of/irq: Prevent device address out-of-bounds read in interrupt map walk
  * CVE-2024-46757
    - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  * [SRU] Ubuntu 24.04 - GPU cannot be installed with DL380a Gen12 (2P, SRF-SP)
    (LP: #2081079)
    - perf/x86/uncore: Save the unit control address of all units
    - perf/x86/uncore: Support per PMU cpumask
    - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
    - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
    - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
    - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
    - perf/x86/uncore: Cleanup unused unit structure
    - perf/x86/intel/uncore: Support HBM and CXL PMON counters
  * Noble update: upstream stable patchset 2024-10-11 (LP: #2084225)
    - ALSA: seq: Skip event type filtering for UMP events
    - LoongArch: Remove the unused dma-direct.h
    - btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
    - btrfs: run delayed iputs when flushing delalloc
    - smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
    - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
    - pinctrl: single: fix potential NULL dereference in pcs_get_function()
    - wifi: wfx: repair open network AP mode
    - wifi: mwifiex: duplicate static structs used in driver instances
    - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
    - mptcp: close subflow when receiving TCP+FIN
    - mptcp: sched: check both backup in retrans
    - mptcp: pm: reuse ID 0 after delete and re-add
    - mptcp: pm: skip connecting to already established sf
    - mptcp: pm: reset MPC endp ID when re-added
    - mptcp: pm: send ACK on an active subflow
    - mptcp: pm: do not remove already closed subflows
    - mptcp: pm: fix ID 0 endp usage after multiple re-creations
    - mptcp: pm: ADD_ADDR 0 is not a new address
    - selftests: mptcp: join: check removing ID 0 endpoint
    - selftests: mptcp: join: no extra msg if no counter
    - selftests: mptcp: join: check re-re-adding ID 0 endp
    - drm/amdgpu/swsmu: always force a state reprogram on init
    - drm/vmwgfx: Fix prime with external buffers
    - usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister
      existing source caps before re-registration"
    - ASoC: amd: acp: fix module autoloading
    - ASoC: SOF: amd: Fix for acp init sequence
    - pinctrl: mediatek: common-v2: Fix broken bias-disable for
      PULL_PU_PD_RSEL_TYPE
    - pinctrl: starfive: jh7110: Correct the level trigger configuration of iev
      register
    - ovl: pass string to ovl_parse_layer()
    - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir
    - ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err
    - mm: Fix missing folio invalidation calls during truncation
    - cifs: Fix FALLOC_FL_PUNCH_HOLE support
    - selinux,smack: don't bypass permissions check in inode_setsecctx hook
    - iommufd: Do not allow creating areas without READ or WRITE
    - phy: fsl-imx8mq-usb: fix tuning parameter name
    - dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
    - dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
    - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
    - dmaengine: dw: Add peripheral bus width verification
    - dmaengine: dw: Add memory bus width verification
    - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
    - Bluetooth: btnxpuart: Handle FW Download Abort scenario
    - Bluetooth: btnxpuart: Fix random crash seen while removing driver
    - Bluetooth: hci_core: Fix not handling hibernation actions
    - iommu: Do not return 0 from map_pages if it doesn't do anything
    - netfilter: nf_tables: restore IP sanity checks for netdev/egress
    - wifi: iwlwifi: fw: fix wgds rev 3 exact size
    - ethtool: check device is present when getting link settings
    - netfilter: nf_tables_ipv6: consider network offset in netdev/egress
      validation
    - selftests: forwarding: no_forwarding: Down ports on cleanup
    - selftests: forwarding: local_termination: Down ports on cleanup
    - bonding: implement xdo_dev_state_free and call it after deletion
    - bonding: extract the use of real_device into local variable
    - bonding: change ipsec_lock from spin lock to mutex
    - gtp: fix a potential NULL pointer dereference
    - sctp: fix association labeling in the duplicate COOKIE-ECHO case
    - drm/amd/display: avoid using null object of framebuffer
    - net: busy-poll: use ktime_get_ns() instead of local_clock()
    - nfc: pn533: Add poll mod list filling check
    - soc: qcom: cmd-db: Map shared memory as WC, not WB
    - soc: qcom: pmic_glink: Actually communicate when remote goes down
    - soc: qcom: pmic_glink: Fix race during initialization
    - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
    - scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
    - USB: serial: option: add MeiG Smart SRM825L
    - ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
    - usb: dwc3: omap: add missing depopulate in probe error path
    - usb: dwc3: core: Prevent USB core invalid event buffer address access
    - usb: dwc3: st: fix probed platform device ref count on probe error path
    - usb: dwc3: st: add missing depopulate in probe error path
    - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
      remove_power_attributes()
    - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
    - usb: cdnsp: fix for Link TRB with TC
    - ARM: dts: omap3-n900: correct the accelerometer orientation
    - arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
    - arm64: dts: imx93: add nvmem property for fec1
    - arm64: dts: imx93: add nvmem property for eqos
    - arm64: dts: imx93: update default value for snps,clk-csr
    - arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
    - arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
    - scsi: aacraid: Fix double-free on probe failure
    - apparmor: fix policy_unpack_test on big endian systems
    - mptcp: pr_debug: add missing \n at the end
    - mptcp: make pm_remove_addrs_and_subflows static
    - mptcp: pm: fix RM_ADDR ID for the initial subflow
    - mptcp: avoid duplicated SUB_CLOSED events
    - drm/i915/dsi: Make Lenovo Yoga Tab 3 X90F DMI match less strict
    - drm/vmwgfx: Prevent unmapping active read buffers
    - drm/vmwgfx: Disable coherent dumb buffers without 3d
    - firmware/sysfb: Set firmware-framebuffer parent device
    - firmware/sysfb: Create firmware device only for enabled PCI devices
    - video/aperture: optionally match the device in sysfb_disable()
    - drm/xe: Prepare display for D3Cold
    - drm/xe/display: Make display suspend/resume work on discrete
    - drm/xe/vm: Simplify if condition
    - drm/xe/exec_queue: Rename xe_exec_queue::compute to xe_exec_queue::lr
    - drm/xe: prevent UAF around preempt fence
    - pinctrl: qcom: x1e80100: Update PDC hwirq map
    - ASoC: SOF: amd: move iram-dram fence register programming sequence
    - nfsd: ensure that nfsd4_fattr_args.context is zeroed out
    - backing-file: convert to using fops->splice_write
    - pinctrl: qcom: x1e80100: Fix special pin offsets
    - afs: Fix post-setattr file edit to do truncation correctly
    - netfs: Fix netfs_release_folio() to say no if folio dirty
    - netfs: Fix missing iterator reset on retry of short read
    - dmaengine: ti: omap-dma: Initialize sglen after allocation
    - pktgen: use cpus_read_lock() in pg_net_init()
    - net_sched: sch_fq: fix incorrect behavior for small weights
    - tcp: fix forever orphan socket caused by tcp_abort
    - drm/xe/hwmon: Fix WRITE_I1 param from u32 to u16
    - usb: typec: fsa4480: Relax CHIP_ID check
    - firmware: qcom: scm: Mark get_wq_ctx() as atomic call
    - usb: gadget: uvc: queue pump work in uvcg_video_enable()
    - usb: dwc3: xilinx: add missing depopulate in probe error path
    - usb: typec: ucsi: Move unregister out of atomic section
    - firmware: microchip: fix incorrect error report of programming:timeout on
      success
    - Upstream stable to v6.6.49, v6.10.8
  * Fix blank screen on external display after reconnecting the USB type-C
    (LP: #2081786) // Noble update: upstream stable patchset 2024-10-11
    (LP: #2084225)
    - drm/i915/display: add intel_display -> drm_device backpointer
    - drm/i915/display: add generic to_intel_display() macro
    - drm/i915/dp_mst: Fix MST state after a sink reset
  * Noble update: upstream stable patchset 2024-10-09 (LP: #2084005)
    - tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
    - tty: atmel_serial: use the correct RTS flag.
    - Revert "ACPI: EC: Evaluate orphan _REG under EC device"
    - Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
    - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
    - selinux: revert our use of vma_is_initial_heap()
    - fuse: Initialize beyond-EOF page contents before setting uptodate
    - char: xillybus: Don't destroy workqueue from work item running on it
    - char: xillybus: Refine workqueue handling
    - char: xillybus: Check USB endpoints when probing device
    - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
    - ALSA: usb-audio: Support Yamaha P-125 quirk entry
    - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
    - thunderbolt: Mark XDomain as unplugged when router is removed
    - ALSA: hda/tas2781: fix wrong calibrated data order
    - s390/dasd: fix error recovery leading to data corruption on ESE devices
    - KVM: s390: fix validity interception issue when gisa is switched off
    - riscv: change XIP's kernel_map.size to be size of the entire kernel
    - i2c: tegra: Do not mark ACPI devices as irq safe
    - ACPICA: Add a depth argument to acpi_execute_reg_methods()
    - ACPI: EC: Evaluate _REG outside the EC scope more carefully
    - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
      NUMA_NO_NODE
    - dm resume: don't return EINVAL when signalled
    - dm persistent data: fix memory allocation failure
    - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
    - s390/cio: rename bitmap_size() -> idset_bitmap_size()
    - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
    - bitmap: introduce generic optimized bitmap_size()
    - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
    - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
    - rtla/osnoise: Prevent NULL dereference in error handling
    - net: mana: Fix RX buf alloc_size alignment and atomic op panic
    - net: mana: Fix doorbell out of order violation and avoid unnecessary
      doorbell rings
    - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
    - selinux: fix potential counting error in avc_add_xperms_decision()
    - selinux: add the processing of the failure of avc_add_xperms_decision()
    - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
    - btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
    - btrfs: zoned: properly take lock to read/update block group's zoned
      variables
    - btrfs: tree-checker: add dev extent item checks
    - drm/amdgpu: Actually check flags for all context ops.
    - memcg_write_event_control(): fix a user-triggerable oops
    - drm/amdgpu/jpeg2: properly set atomics vmid field
    - drm/amdgpu/jpeg4: properly set atomics vmid field
    - s390/uv: Panic for set and remove shared access UVC errors
    - bpf: Fix updating attached freplace prog in prog_array map
    - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
    - igc: Fix qbv_config_change_errors logics
    - igc: Fix reset adapter logics when tx mode change
    - net/mlx5e: Take state lock during tx timeout reporter
    - net/mlx5e: Correctly report errors for ethtool rx flows
    - net: axienet: Fix register defines comment description
    - net: dsa: vsc73xx: pass value in phy_write operation
    - net: dsa: vsc73xx: use read_poll_timeout instead delay loop
    - net: dsa: vsc73xx: check busy flag in MDIO operations
    - net: ethernet: mtk_wed: fix use-after-free panic in
      mtk_wed_setup_tc_block_cb()
    - mlxbf_gige: disable RX filters until RX path initialized
    - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
    - tcp: Update window clamping condition
    - netfilter: allow ipv6 fragments to arrive on different devices
    - netfilter: flowtable: initialise extack before use
    - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
    - netfilter: nf_tables: Audit log dump reset after the fact
    - netfilter: nf_tables: Introduce nf_tables_getobj_single
    - netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
    - vsock: fix recursive ->recvmsg calls
    - selftests: net: lib: ignore possible errors
    - selftests: net: lib: kill PIDs before del netns
    - net: hns3: fix wrong use of semaphore up
    - net: hns3: use the user's cfg after reset
    - net: hns3: fix a deadlock problem when config TC during resetting
    - gpio: mlxbf3: Support shutdown() function
    - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
    - rust: work around `bindgen` 0.69.0 issue
    - rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
    - rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
    - cpu/SMT: Enable SMT only if a core is online
    - powerpc/topology: Check if a core is online
    - arm64: Fix KASAN random tag seed initialization
    - block: Fix lockdep warning in blk_mq_mark_tag_wait
    - wifi: ath12k: Add missing qmi_txn_cancel() calls
    - quota: Remove BUG_ON from dqget()
    - riscv: blacklist assembly symbols for kprobe
    - kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
    - media: pci: cx23885: check cx23885_vdev_init() return
    - fs: binfmt_elf_efpic: don't use missing interpreter's properties
    - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
    - media: drivers/media/dvb-core: copy user arrays safely
    - wifi: iwlwifi: mvm: avoid garbage iPN
    - net/sun3_82586: Avoid reading past buffer in debug output
    - drm/lima: set gp bus_stop bit before hard reset
    - gpio: sysfs: extend the critical section for unregistering sysfs devices
    - hrtimer: Select housekeeping CPU during migration
    - virtiofs: forbid newlines in tags
    - accel/habanalabs: fix debugfs files permissions
    - clocksource/drivers/arm_global_timer: Guard against division by zero
    - tick: Move got_idle_tick away from common flags
    - netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
    - md: clean up invalid BUG_ON in md_ioctl
    - x86: Increase brk randomness entropy for 64-bit systems
    - memory: stm32-fmc2-ebi: check regmap_read return value
    - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
    - rxrpc: Don't pick values out of the wire header when setting up security
    - f2fs: stop checkpoint when get a out-of-bounds segment
    - powerpc/boot: Handle allocation failure in simple_realloc()
    - powerpc/boot: Only free if realloc() succeeds
    - btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
    - btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
    - btrfs: change BUG_ON to assertion when checking for delayed_node root
    - btrfs: push errors up from add_async_extent()
    - btrfs: handle invalid root reference found in may_destroy_subvol()
    - btrfs: send: handle unexpected data in header buffer in begin_cmd()
    - btrfs: send: handle unexpected inode in header process_recorded_refs()
    - btrfs: change BUG_ON to assertion in tree_move_down()
    - btrfs: delete pointless BUG_ON check on quota root in
      btrfs_qgroup_account_extent()
    - f2fs: fix to do sanity check in update_sit_entry
    - usb: gadget: fsl: Increase size of name buffer for endpoints
    - nvme: clear caller pointer on identify failure
    - Bluetooth: bnep: Fix out-of-bound access
    - firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
    - rtc: nct3018y: fix possible NULL dereference
    - net: hns3: add checking for vf id of mailbox
    - nvmet-tcp: do not continue for invalid icreq
    - NFS: avoid infinite loop in pnfs_update_layout.
    - openrisc: Call setup_memory() earlier in the init sequence
    - s390/iucv: fix receive buffer virtual vs physical address confusion
    - irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
    - platform/x86: lg-laptop: fix %s null argument warning
    - usb: dwc3: core: Skip setting event buffers for host only controllers
    - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
    - ext4: set the type of max_zeroout to unsigned int to avoid overflow
    - nvmet-rdma: fix possible bad dereference when freeing rsps
    - selftests/bpf: Fix a few tests for GCC related warnings.
    - Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
    - nvme: use srcu for iterating namespace list
    - drm/amdgpu: fix dereference null return value for the function
      amdgpu_vm_pt_parent
    - hrtimer: Prevent queuing of hrtimer without a function callback
    - nvme: fix namespace removal list
    - gtp: pull network headers in gtp_dev_xmit()
    - riscv: entry: always initialize regs->a0 to -ENOSYS
    - smb3: fix lock breakage for cached writes
    - dm suspend: return -ERESTARTSYS instead of -EINTR
    - selftests: memfd_secret: don't build memfd_secret test on unsupported arches
    - mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order
      fallback to order 0
    - btrfs: send: allow cloning non-aligned extent if it ends at i_size
    - drm/amd/amdgpu: command submission parser for JPEG
    - platform/surface: aggregator: Fix warning when controller is destroyed in
      probe
    - ALSA: hda/tas2781: Use correct endian conversion
    - Bluetooth: hci_core: Fix LE quote calculation
    - Bluetooth: SMP: Fix assumption of Central always being Initiator
    - net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and
      register injection
    - net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
    - net: mscc: ocelot: serialize access to the injection/extraction groups
    - tc-testing: don't access non-existent variable on exception
    - selftests: udpgro: report error when receive failed
    - tcp/dccp: bypass empty buckets in inet_twsk_purge()
    - tcp/dccp: do not care about families in inet_twsk_purge()
    - tcp: prevent concurrent execution of tcp_sk_exit_batch
    - net: mctp: test: Use correct skb for route input check
    - kcm: Serialise kcm_sendmsg() for the same socket.
    - netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
    - netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
    - ip6_tunnel: Fix broken GRO
    - bonding: fix bond_ipsec_offload_ok return type
    - bonding: fix null pointer deref in bond_ipsec_offload_ok
    - bonding: fix xfrm real_dev null pointer dereference
    - bonding: fix xfrm state handling when clearing active slave
    - ice: fix page reuse when PAGE_SIZE is over 8k
    - ice: fix ICE_LAST_OFFSET formula
    - ice: fix truesize operations for PAGE_SIZE >= 8192
    - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
    - igb: cope with large MAX_SKB_FRAGS
    - net: dsa: mv88e6xxx: Fix out-of-bound access
    - udp: fix receiving fraglist GSO packets
    - ipv6: fix possible UAF in ip6_finish_output2()
    - ipv6: prevent possible UAF in ip6_xmit()
    - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
    - netfilter: flowtable: validate vlan header
    - octeontx2-af: Fix CPT AF register offset calculation
    - net: xilinx: axienet: Always disable promiscuous mode
    - net: xilinx: axienet: Fix dangling multicast addresses
    - net: ovs: fix ovs_drop_reasons error
    - drm/msm/dpu: don't play tricks with debug macros
    - drm/msm/dp: fix the max supported bpp logic
    - drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
    - drm/msm/dpu: capture snapshot on the first commit_done timeout
    - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
    - drm/msm/dp: reset the link phy params before link training
    - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
    - drm/msm/dpu: take plane rotation into account for wide planes
    - drm/msm: fix the highest_bank_bit for sc7180
    - mmc: mmc_test: Fix NULL dereference on allocation failure
    - Bluetooth: MGMT: Add error handling to pair_device()
    - scsi: core: Fix the return value of scsi_logical_block_count()
    - ksmbd: the buffer of smb2 query dir response has at least 1 byte
    - drm/amdgpu: Validate TA binary size
    - net: dsa: microchip: fix PTP config failure when using multiple ports
    - MIPS: Loongson64: Set timer mode in cpu-probe
    - HID: wacom: Defer calculation of resolution until resolution_code is known
    - Input: i8042 - add forcenorestore quirk to leave controller untouched even
      on s3
    - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk
      combination
    - cxgb4: add forgotten u64 ivlan cast before shift
    - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
    - mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
    - mmc: dw_mmc: allow biu and ciu clocks to defer
    - smb3: fix broken cached reads when posix locks
    - pmdomain: imx: scu-pd: Remove duplicated clocks
    - pmdomain: imx: wait SSAR when i.MX93 power domain on
    - nouveau/firmware: use dma non-coherent allocator
    - mptcp: pm: re-using ID of unused removed ADD_ADDR
    - mptcp: pm: re-using ID of unused removed subflows
    - mptcp: pm: re-using ID of unused flushed subflows
    - mptcp: pm: remove mptcp_pm_remove_subflow()
    - mptcp: pm: only mark 'subflow' endp as available
    - mptcp: pm: only decrement add_addr_accepted for MPJ req
    - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
    - mptcp: pm: only in-kernel cannot have entries with ID 0
    - mptcp: pm: fullmesh: select the right ID later
    - mptcp: pm: avoid possible UaF when selecting endp
    - selftests: mptcp: join: validate fullmesh endp on 1st sf
    - selftests: mptcp: join: restrict fullmesh endp on 1st sf
    - selftests: mptcp: join: check re-using ID of closed subflow
    - tcp: do not export tcp_twsk_purge()
    - drm/msm/mdss: specify cfg bandwidth for SDM670
    - drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
    - igc: Fix qbv tx latency by setting gtxoffset
    - ALSA: timer: Relax start tick time check for slave timer elements
    - bpf: Fix a kernel verifier crash in stacksafe()
    - selftests/bpf: Add a test to verify previous stacksafe() fix
    - Revert "s390/dasd: Establish DMA alignment"
    - Input: MT - limit max slots
    - tools: move alignment-related macros to new <linux/align.h>
    - Revert "serial: 8250_omap: Set the console genpd always on if no console
      suspend"
    - usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[]
    - usb: xhci: Check for xhci->interrupters being allocated in
      xhci_mem_clearup()
    - vfs: Don't evict inode under the inode lru traversing context
    - tracing: Return from tracing_buffers_read() if the file has been closed
    - mm: fix endless reclaim on machines with unaccepted memory
    - fs/netfs/fscache_cookie: add missing "n_accesses" check
    - mm/numa: no task_numa_fault() call if PMD is changed
    - mm/numa: no task_numa_fault() call if PTE is changed
    - btrfs: check delayed refs when we're checking if a ref exists
    - drm/amd/display: Adjust cursor position
    - drm/amd/display: fix s2idle entry for DCN3.5+
    - drm/amd/display: Enable otg synchronization logic for DCN321
    - drm/amd/display: fix cursor offset on rotation 180
    - netfs: Fault in smaller chunks for non-large folio mappings
    - libfs: fix infinite directory reads for offset dir
    - kallsyms: Avoid weak references for kallsyms symbols
    - kbuild: avoid unneeded kallsyms step 3
    - kbuild: refactor variables in scripts/link-vmlinux.sh
    - kbuild: remove PROVIDE() for kallsyms symbols
    - kallsyms: get rid of code for absolute kallsyms
    - [Config] Remove CONFIG_KALLSYMS_BASE_RELATIVE
    - kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols
    - bpf: Replace deprecated strncpy with strscpy
    - kallsyms: replace deprecated strncpy with strscpy
    - kallsyms: rework symbol lookup return codes
    - kallsyms: Match symbols exactly with CONFIG_LTO_CLANG
    - drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()`
    - drm/amd/display: Don't register panel_power_savings on OLED panels
    - wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850
    - kbuild: merge temporary vmlinux for BTF and kallsyms
    - kbuild: avoid scripts/kallsyms parsing /dev/null
    - Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in
    - net/mlx5: Fix IPsec RoCE MPV trace call
    - selftests: udpgro: no need to load xdp for gro
    - ice: use internal pf id instead of function number
    - drm/msm/dpu: limit QCM2290 to RGB formats only
    - drm/msm/dpu: relax YUV requirements
    - spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume
    - drm/xe/display: stop calling domains_driver_remove twice
    - drm/xe: Fix opregion leak
    - drm/xe/mmio: move mmio_fini over to devm
    - drm/xe: reset mmio mappings with devm
    - drm/xe: Fix tile fini sequence
    - drm/xe: Fix missing workqueue destroy in xe_gt_pagefault
    - drm/xe: Free job before xe_exec_queue_put
    - thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir()
    - nvme: move stopping keep-alive into nvme_uninit_ctrl()
    - drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1
    - s390/ap: Refine AP bus bindings complete processing
    - net: ngbe: Fix phy mode set to external phy
    - iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace()
    - cgroup/cpuset: fix panic caused by partcmd_update
    - cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if
      cpus.exclusive not set
    - of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put()
      handling
    - thermal: of: Fix OF node leak in thermal_of_trips_init() error path
    - thermal: of: Fix OF node leak in thermal_of_zone_register()
    - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
    - Upstream stable to v6.6.48, v6.10.7
  * Unable to list directories using CIFS on 6.8 kernel (LP: #2082423) // Noble
    update: upstream stable patchset 2024-10-09 (LP: #2084005)
    - smb: client: ignore unhandled reparse tags
  * CVE-2024-46759
    - hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  * CVE-2024-46758
    - hwmon: (lm95234) Fix underflows seen when writing limit attributes
  * CVE-2024-46756
    - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  * CVE-2024-46738
    - VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  * CVE-2024-46722
    - drm/amdgpu: fix mc_data out-of-bounds read warning
  * LXD fan bridge causes blocked tasks (LP: #2064176)
    - SAUCE: fan: release rcu_read_lock on skb discard path
    - SAUCE: fan: fix racy device stat update
  * x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (LP: #2081863)
    - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
  * UBSAN: array-index-out-of-bounds in module mt76 (LP: #2081785)
    - wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc
  * The system hangs after resume with thunderbolt monitor(AMD GPU [1002:1900])
    (LP: #2083182)
    - SAUCE: drm/amd/display: Fix system hang while resume with TBT monitor
  * [SRU] GPU: support additional device ids for DG2 driver (LP: #2083701)
    - drm/i915: Add new PCI IDs to DG2 platform in driver
  * [SRU]Intel Arrow Lake IBECC feature backport request for ubuntu 22.04.5 and
    24.04.1 server (LP: #2077861)
    - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support
  * Noble update: upstream stable patchset 2024-10-07 (LP: #2083794)
    - ASoC: topology: Clean up route loading
    - ASoC: topology: Fix route memory corruption
    - LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
    - sunrpc: don't change ->sv_stats if it doesn't exist
    - nfsd: stop setting ->pg_stats for unused stats
    - sunrpc: pass in the sv_stats struct through svc_create_pooled
    - sunrpc: remove ->pg_stats from svc_program
    - nfsd: remove nfsd_stats, make th_cnt a global counter
    - nfsd: make svc_stat per-network namespace instead of global
    - mm: gup: stop abusing try_grab_folio
    - nvme/pci: Add APST quirk for Lenovo N60z laptop
    - genirq/cpuhotplug: Skip suspended interrupts when restoring affinity
    - genirq/cpuhotplug: Retry with cpu_online_mask when migration fails
    - quota: Detect loops in quota tree
    - bpf: Replace bpf_lpm_trie_key 0-length array with flexible array
    - fs: Annotate struct file_handle with __counted_by() and use struct_size()
    - mISDN: fix MISDN_TIME_STAMP handling
    - mm/page_table_check: support userfault wr-protect entries
    - bpf, net: Use DEV_STAT_INC()
    - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
    - f2fs: fix to cover read extent cache access with lock
    - fou: remove warn in gue_gro_receive on unsupported protocol
    - jfs: fix null ptr deref in dtInsertEntry
    - jfs: Fix shift-out-of-bounds in dbDiscardAG
    - fs/ntfs3: Do copy_to_user out of run_lock
    - ALSA: usb: Fix UBSAN warning in parse_audio_unit()
    - binfmt_flat: Fix corruption when not offsetting data start
    - mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick
    - KVM: arm64: Don't defer TLB invalidation when zapping table entries
    - KVM: arm64: Don't pass a TLBI level hint when zapping table entries
    - drm/amd/display: Defer handling mst up request in resume
    - drm/amd/display: Guard cursor idle reallow by DC debug option
    - drm/amd/display: Separate setting and programming of cursor
    - drm/amd/display: Prevent IPX From Link Detect and Set Mode
    - ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value
    - platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled
    - platform/x86: ideapad-laptop: introduce a generic notification chain
    - platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
    - platform/x86: ideapad-laptop: add a mutex to synchronize VPC commands
    - drm/amd/display: Solve mst monitors blank out problem after resume
    - drm/amdgpu/display: Fix null pointer dereference in
      dc_stream_program_cursor_position
    - Upstream stable to v6.6.47, v6.10.6
  * Noble update: upstream stable patchset 2024-10-04 (LP: #2083656)
    - irqchip/mbigen: Fix mbigen node address layout
    - platform/x86/intel/ifs: Initialize union ifs_status to zero
    - jump_label: Fix the fix, brown paper bags galore
    - x86/mm: Fix pti_clone_pgtable() alignment assumption
    - x86/mm: Fix pti_clone_entry_text() for i386
    - smb: client: move most of reparse point handling code to common file
    - smb: client: set correct d_type for reparse DFS/DFSR and mount point
    - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support
    - sctp: Fix null-ptr-deref in reuseport_add_sock().
    - net: usb: qmi_wwan: fix memory leak for not ip packets
    - net: bridge: mcast: wait for previous gc cycles when removing port
    - net: linkwatch: use system_unbound_wq
    - ice: Fix reset handler
    - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
    - Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv
      monitor
    - net/smc: add the max value of fallback reason count
    - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
    - l2tp: fix lockdep splat
    - net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities
    - net: fec: Stop PPS on driver remove
    - gpio: prevent potential speculation leaks in gpio_device_get_desc()
    - hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu
    - rcutorture: Fix rcu_torture_fwd_cb_cr() data race
    - md: do not delete safemode_timer in mddev_suspend
    - md/raid5: avoid BUG_ON() while continue reshape after reassembling
    - block: change rq_integrity_vec to respect the iterator
    - rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation
    - clocksource/drivers/sh_cmt: Address race condition for clock events
    - ACPI: battery: create alarm sysfs attribute atomically
    - ACPI: SBS: manage alarm sysfs attribute through psy core
    - xen: privcmd: Switch from mutex to spinlock for irqfds
    - wifi: nl80211: disallow setting special AP channel widths
    - wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup()
    - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink
    - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
    - af_unix: Don't retry after unix_state_lock_nested() in
      unix_stream_connect().
    - PCI: Add Edimax Vendor ID to pci_ids.h
    - udf: prevent integer overflow in udf_bitmap_free_blocks()
    - wifi: nl80211: don't give key data to userspace
    - can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index
      erratum
    - can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of
      mcp2518fd
    - net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on
      sa8775p-ride-r3
    - btrfs: do not clear page dirty inside extent_write_locked_range()
    - btrfs: fix invalid mapping of extent xarray state
    - btrfs: fix bitmap leak when loading free space cache on duplicate entry
    - Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver
      unloading
    - drm/amd/display: Add delay to improve LTTPR UHBR interop
    - drm/amdgpu: fix potential resource leak warning
    - drm/amdgpu/pm: Fix the param type of set_power_profile_mode
    - drm/amdgpu/pm: Fix the null pointer dereference for smu7
    - drm/amdgpu: Fix the null pointer dereference to ras_manager
    - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
    - drm/admgpu: fix dereferencing null pointer context
    - drm/amdgpu: Add lock around VF RLCG interface
    - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
    - media: amphion: Remove lock in s_ctrl callback
    - drm/amd/display: Add null checker before passing variables
    - media: uvcvideo: Ignore empty TS packets
    - media: uvcvideo: Fix the bandwdith quirk on USB 3.x
    - media: xc2028: avoid use-after-free in load_firmware_cb()
    - ext4: fix uninitialized variable in ext4_inlinedir_to_tree
    - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
    - s390/sclp: Prevent release of buffer in I/O
    - SUNRPC: Fix a race to wake a sync task
    - profiling: remove profile=sleep support
    - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
    - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to
      'raw_spinlock_t'
    - irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq()
    - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
    - net: drop bad gso csum_start and offset in virtio_net_hdr
    - arm64: Add Neoverse-V2 part
    - arm64: barrier: Restore spec_bar() macro
    - arm64: cputype: Add Cortex-X4 definitions
    - arm64: cputype: Add Neoverse-V3 definitions
    - arm64: errata: Add workaround for Arm errata 3194386 and 3312417
    - arm64: cputype: Add Cortex-X3 definitions
    - arm64: cputype: Add Cortex-A720 definitions
    - arm64: cputype: Add Cortex-X925 definitions
    - arm64: errata: Unify speculative SSBS errata logic
    - [Config] Set ARM64_ERRATUM_3194386=y
    - arm64: errata: Expand speculative SSBS workaround
    - arm64: cputype: Add Cortex-X1C definitions
    - arm64: cputype: Add Cortex-A725 definitions
    - arm64: errata: Expand speculative SSBS workaround (again)
    - i2c: smbus: Improve handling of stuck alerts
    - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask
    - ASoC: codecs: wsa881x: Correct Soundwire ports mask
    - ASoC: codecs: wsa883x: parse port-mapping information
    - ASoC: codecs: wsa883x: Correct Soundwire ports mask
    - ASoC: codecs: wsa884x: parse port-mapping information
    - ASoC: codecs: wsa884x: Correct Soundwire ports mask
    - ASoC: sti: add missing probe entry for player and reader
    - spi: spidev: Add missing spi_device_id for bh2228fv
    - ASoC: SOF: Remove libraries from topology lookups
    - i2c: smbus: Send alert notifications to all devices if source not found
    - bpf: kprobe: remove unused declaring of bpf_kprobe_override
    - kprobes: Fix to check symbol prefixes correctly
    - i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume
    - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
    - spi: spi-fsl-lpspi: Fix scldiv calculation
    - ALSA: usb-audio: Re-add ScratchAmp quirk entries
    - ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT
    - cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath
    - module: warn about excessively long module waits
    - module: make waiting for a concurrent module loader interruptible
    - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
    - drm/amd/display: Skip Recompute DSC Params if no Stream on Link
    - drm/amdgpu: Forward soft recovery errors to userspace
    - drm/i915/gem: Adjust vma offset for framebuffer mmap offset
    - drm/client: fix null pointer dereference in drm_client_modeset_probe
    - ALSA: line6: Fix racy access to midibuf
    - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
    - ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks
    - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
    - usb: vhci-hcd: Do not drop references before new references are gained
    - USB: serial: debug: do not echo input by default
    - usb: gadget: core: Check for unset descriptor
    - usb: gadget: midi2: Fix the response for FB info with block 0xff
    - usb: gadget: u_serial: Set start_delayed during suspend
    - usb: gadget: u_audio: Check return codes from usb_ep_enable and
      config_ep_by_speed.
    - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES
    - scsi: ufs: core: Do not set link to OFF state while waking up from
      hibernation
    - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
    - tick/broadcast: Move per CPU pointer access into the atomic section
    - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
    - ntp: Clamp maxerror and esterror to operating range
    - clocksource: Scale the watchdog read retries automatically
    - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read()
    - driver core: Fix uevent_show() vs driver detach race
    - tracefs: Fix inode allocation
    - tracefs: Use generic inode RCU for synchronizing freeing
    - ntp: Safeguard against time_constant overflow
    - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex()
    - serial: core: check uartclk for zero to avoid divide by zero
    - memcg: protect concurrent access to mem_cgroup_idr
    - parisc: fix unaligned accesses in BPF
    - parisc: fix a possible DMA corruption
    - ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx
    - kcov: properly check for softirq context
    - irqchip/xilinx: Fix shift out of bounds
    - genirq/irqdesc: Honor caller provided affinity in alloc_desc()
    - LoongArch: Enable general EFI poweroff method
    - power: supply: qcom_battmgr: return EAGAIN when firmware service is not up
    - power: supply: axp288_charger: Fix constant_charge_voltage writes
    - power: supply: axp288_charger: Round constant_charge_voltage writes down
    - tracing: Fix overflow in get_free_elt()
    - padata: Fix possible divide-by-0 panic in padata_mt_helper()
    - smb3: fix setting SecurityFlags when encryption is required
    - eventfs: Don't return NULL in eventfs_create_dir()
    - eventfs: Use SRCU for freeing eventfs_inodes
    - selftests: mm: add s390 to ARCH check
    - btrfs: avoid using fixed char array size for tree names
    - x86/paravirt: Fix incorrect virt spinlock setting on bare metal
    - x86/mtrr: Check if fixed MTRRs exist before saving them
    - sched/smt: Introduce sched_smt_present_inc/dec() helper
    - sched/smt: Fix unbalance sched_smt_present dec/inc
    - sched/core: Introduce sched_set_rq_on/offline() helper
    - sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate()
    - drm/bridge: analogix_dp: properly handle zero sized AUX transactions
    - drm/dp_mst: Skip CSN if topology probing is not done yet
    - drm/lima: Mark simple_ondemand governor as softdep
    - drm/mgag200: Set DDC timeout in milliseconds
    - drm/mgag200: Bind I2C lifetime to DRM device
    - drm/radeon: Remove __counted_by from StateArray.states[]
    - mptcp: fully established after ADD_ADDR echo on MPJ
    - mptcp: pm: deny endp with signal + subflow + port
    - block: use the right type for stub rq_integrity_vec()
    - btrfs: fix corruption after buffer fault in during direct IO append write
    - tools headers arm64: Sync arm64's cputype.h with the kernel sources
    - mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio()
    - xfs: fix log recovery buffer allocation for the legacy h_size fixup
    - mptcp: pm: reduce indentation blocks
    - mptcp: pm: don't try to create sf if alloc failed
    - mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set
    - selftests: mptcp: join: ability to invert ADD_ADDR check
    - selftests: mptcp: join: test both signal & subflow
    - Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky"
    - btrfs: fix double inode unlock for direct IO sync writes
    - perf/x86/intel/cstate: Switch to new Intel CPU model defines
    - perf/x86/intel/cstate: Add Arrowlake support
    - perf/x86/intel/cstate: Add Lunarlake support
    - perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest
    - platform/x86: intel-vbtn: Protect ACPI notify handler against recursion
    - perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c
    - perf/x86/intel: Support the PEBS event mask
    - perf/x86: Support counter mask
    - perf/x86: Fix smp_processor_id()-in-preemptible warnings
    - virtio-net: unbreak vq resizing when coalescing is not negotiated
    - net: dsa: microchip: Fix Wake-on-LAN check to not return an error
    - net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897.
    - regmap: kunit: Use a KUnit action to call regmap_exit()
    - regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc
    - regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap()
    - debugobjects: Annotate racy debug variables
    - nvme: apple: fix device reference counting
    - cpufreq: amd-pstate: Allow users to write 'default' EPP string
    - cpufreq: amd-pstate: auto-load pstate driver by default
    - soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances
    - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU
    - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ
    - thermal: intel: hfi: Give HFI instances package scope
    - wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early
    - wifi: rtlwifi: handle return value of usb init TX/RX
    - wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length
    - wifi: mac80211: fix NULL dereference at band check in starting tx ba session
    - bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory
      accesses
    - mlxsw: pci: Lock configuration space of upstream bridge during reset
    - btrfs: do not BUG_ON() when freeing tree block after error
    - btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
    - btrfs: fix data race when accessing the last_trans field of a root
    - drm/xe/preempt_fence: enlarge the fence critical section
    - drm/amd/display: Handle HPD_IRQ for internal link
    - drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map()
    - drm/xe/xe_guc_submit: Fix exec queue stop race condition
    - drm/amd/display: Add null checks for 'stream' and 'plane' before
      dereferencing
    - drm/amd/display: Wake DMCUB before sending a command for replay feature
    - drm/amd/display: reduce ODM slice count to initial new dc state only when
      needed
    - of: Add cleanup.h based auto release via __free(device_node) markings
    - media: i2c: ov5647: replacing of_node_put with __free(device_node)
    - drm/amd/display: Fix null pointer deref in dcn20_resource.c
    - ext4: sanity check for NULL pointer after ext4_force_shutdown
    - mm, slub: do not call do_slab_free for kfence object
    - ASoC: cs35l56: Revert support for dual-ownership of ASP registers
    - drm/atomic: allow no-op FB_ID updates for async flips
    - drm/amd/display: Replace dm_execute_dmub_cmd with
      dc_wake_and_execute_dmub_cmd
    - drm/xe/rtp: Fix off-by-one when processing rules
    - drm/xe: Use dma_fence_chain_free in chain fence unused as a sync
    - drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write
    - drm/xe: Move lrc snapshot capturing to xe_lrc.c
    - drm/xe: Minor cleanup in LRC handling
    - drm/test: fix the gem shmem test to map the sg table.
    - usb: typec: pd: no opencoding of FIELD_GET
    - usb: typec: fsa4480: Check if the chip is really there
    - PM: runtime: Simplify pm_runtime_get_if_active() usage
    - scsi: ufs: core: Fix deadlock during RTC update
    - serial: sc16is7xx: fix invalid FIFO access with special register set
    - tracing: Have format file honor EVENT_FILE_FL_FREED
    - mm: list_lru: fix UAF for memory cgroup
    - net/tcp: Disable TCP-AO static key after RCU grace period
    - Revert "drm/amd/display: Handle HPD_IRQ for internal link"
    - idpf: fix memleak in vport interrupt configuration
    - drm/amd/display: Add null check in resource_log_pipe_topology_update
    - Upstream stable to v6.6.46, v6.10.5
  * Noble update: upstream stable patchset 2024-10-02 (LP: #2083488)
    - sysctl: allow change system v ipc sysctls inside ipc namespace
    - sysctl: allow to change limits for posix messages queues
    - sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table)
    - ext4: factor out a common helper to query extent map
    - ext4: check the extent status again before inserting delalloc block
    - leds: trigger: Store brightness set by led_trigger_event()
    - leds: trigger: Call synchronize_rcu() before calling trig->activate()
    - KVM: VMX: Move posted interrupt descriptor out of VMX code
    - fbdev/vesafb: Replace references to global screen_info by local pointer
    - video: Add helpers for decoding screen_info
    - [Config] Update CONFIG_SCREEN_INFO
    - video: Provide screen_info_get_pci_dev() to find screen_info's PCI device
    - firmware/sysfb: Update screen_info for relocated EFI framebuffers
    - mm: page_alloc: control latency caused by zone PCP draining
    - mm/page_alloc: fix pcp->count race between drain_pages_zone() vs
      __rmqueue_pcplist()
    - f2fs: fix to avoid use SSR allocate when do defragment
    - f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid
    - dmaengine: fsl-edma: add address for channel mux register in fsl_edma_chan
    - dmaengine: fsl-edma: add i.MX8ULP edma support
    - perf: imx_perf: fix counter start and config sequence
    - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a
    - MIPS: dts: loongson: Fix liointc IRQ polarity
    - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt
    - ARM: 9406/1: Fix callchain_trace() return value
    - HID: amd_sfh: Move sensor discovery before HID device initialization
    - perf tool: fix dereferencing NULL al->maps
    - drm/nouveau: prime: fix refcount underflow
    - drm/vmwgfx: Fix overlay when using Screen Targets
    - drm/vmwgfx: Trigger a modeset when the screen moves
    - sched: act_ct: take care of padding in struct zones_ht_key
    - wifi: cfg80211: fix reporting failed MLO links status with
      cfg80211_connect_done
    - net: phy: realtek: add support for RTL8366S Gigabit PHY
    - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode
    - Bluetooth: btintel: Fail setup on error
    - Bluetooth: hci_sync: Fix suspending with wrong filter policy
    - tcp: annotate data-races around tp->window_clamp
    - tcp: Adjust clamping window for applications specifying SO_RCVBUF
    - net: axienet: start napi before enabling Rx/Tx
    - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in
      rtnl_dellink().
    - i915/perf: Remove code to update PWR_CLK_STATE for gen12
    - ice: respect netif readiness in AF_XDP ZC related ndo's
    - ice: don't busy wait for Rx queue disable in ice_qp_dis()
    - ice: replace synchronize_rcu with synchronize_net
    - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog
    - drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro
    - net: mvpp2: Don't re-use loop iterator
    - net: phy: micrel: Fix the KSZ9131 MDI-X status issue
    - ALSA: hda: Conditionally use snooping for AMD HDMI
    - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
    - netfilter: iptables: Fix potential null-ptr-deref in
      ip6table_nat_table_init().
    - net/mlx5: Always drain health in shutdown callback
    - net/mlx5: Fix error handling in irq_pool_request_irq
    - net/mlx5: Lag, don't use the hardcoded value of the first port
    - net/mlx5: Fix missing lock on sync reset reload
    - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio
      capability
    - net/mlx5e: Fix CT entry update leaks of modify header context
    - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
    - igc: Fix double reset adapter triggered from a single taprio cmd
    - ipv6: fix ndisc_is_useropt() handling for PIO
    - perf: riscv: Fix selecting counters in legacy mode
    - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
    - riscv: Fix linear mapping checks for non-contiguous memory regions
    - arm64: jump_label: Ensure patched jump_labels are visible to all CPUs
    - rust: SHADOW_CALL_STACK is incompatible with Rust
    - platform/chrome: cros_ec_proto: Lock device when updating MKBP version
    - HID: wacom: Modify pen IDs
    - btrfs: zoned: fix zone_unusable accounting on making block group read-write
      again
    - btrfs: do not subtract delalloc from avail bytes
    - protect the fetch of ->fd[fd] in do_dup2() from mispredictions
    - mptcp: sched: check both directions for backup
    - ALSA: usb-audio: Correct surround channels in UAC1 channel map
    - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
    - ALSA: seq: ump: Optimize conversions from SysEx to UMP
    - Revert "ALSA: firewire-lib: obsolete workqueue for period update"
    - Revert "ALSA: firewire-lib: operate for period elapse event in process
      context"
    - drm/vmwgfx: Fix a deadlock in dma buf fence polling
    - drm/virtio: Fix type of dma-fence context variable
    - drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll()
    - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
    - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
    - mptcp: fix user-space PM announced address accounting
    - mptcp: distinguish rcv vs sent backup flag in requests
    - mptcp: fix NL PM announced address accounting
    - mptcp: mib: count MPJ with backup flag
    - mptcp: fix bad RCVPRUNED mib accounting
    - mptcp: pm: only set request_bkup flag when sending MP_PRIO
    - mptcp: fix duplicate data handling
    - selftests: mptcp: always close input's FD if opened
    - selftests: mptcp: join: validate backup in MPJ
    - selftests: mptcp: join: check backup support in signal endp
    - mm/huge_memory: mark racy access onhuge_anon_orders_always
    - mm: fix khugepaged activation policy
    - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86
    - perf/x86/intel: Switch to new Intel CPU model defines
    - perf/x86/intel: Add a distinct name for Granite Rapids
    - drm/gpuvm: fix missing dependency to DRM_EXEC
    - netlink: specs: correct the spec of ethtool
    - ethtool: rss: echo the context number back
    - wifi: cfg80211: correct S1G beacon length calculation
    - ethtool: fix setting key and resetting indir at once
    - ice: modify error handling when setting XSK pool in ndo_bpf
    - ice: toggle netif_carrier when setting up XSK pool
    - ice: improve updating ice_{t,r}x_ring::xsk_pool
    - ice: xsk: fix txq interrupt mapping
    - drm/atomic: Allow userspace to use explicit sync with atomic async flips
    - drm/atomic: Allow userspace to use damage clips with async flips
    - riscv/purgatory: align riscv_kernel_entry
    - perf arch events: Fix duplicate RISC-V SBI firmware event name
    - RISC-V: Enable the IPI before workqueue_online_cpu()
    - ceph: force sending a cap update msg back to MDS for revoke op
    - drm/vmwgfx: Remove unused code
    - drm/vmwgfx: Fix handling of dumb buffers
    - drm/v3d: Prevent out of bounds access in performance query extensions
    - drm/v3d: Fix potential memory leak in the timestamp extension
    - drm/v3d: Fix potential memory leak in the performance extension
    - drm/v3d: Validate passed in drm syncobj handles in the timestamp extension
    - drm/v3d: Validate passed in drm syncobj handles in the performance extension
    - nouveau: set placement to original placement on uvmm validate.
    - wifi: ath12k: fix soft lockup on suspend
    - mptcp: pm: fix backup support in signal endpoints
    - selftests: mptcp: fix error path
    - Upstream stable to v6.6.45, v6.10.4
  * [SRU] Fix AST DP output after resume (LP: #2083022) // Noble update:
    upstream stable patchset 2024-10-02 (LP: #2083488)
    - drm/ast: astdp: Wake up during connector status detection
    - drm/ast: Fix black screen after resume
  * [SRU]Fail to locate the LED of NVME disk behind  Intel VMD (LP: #2077287) //
    Noble update: upstream stable patchset 2024-10-02 (LP: #2083488)
    - PCI: pciehp: Retain Power Indicator bits for userspace indicators
  * Noble update: upstream stable patchset 2024-09-30 (LP: #2083196)
    - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
    - spi: spi-microchip-core: Fix the number of chip selects supported
    - spi: atmel-quadspi: Add missing check for clk_prepare
    - EDAC, i10nm: make skx_common.o a separate module
    - rcu/tasks: Fix stale task snaphot for Tasks Trace
    - platform/chrome: cros_ec_debugfs: fix wrong EC message version
    - ubd: refactor the interrupt handler
    - ubd: untagle discard vs write zeroes not support handling
    - block: initialize integrity buffer to zero before writing it to media
    - x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
    - hfsplus: fix to avoid false alarm of circular locking
    - x86/of: Return consistent error type from x86_of_pci_irq_enable()
    - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
    - x86/pci/xen: Fix PCIBIOS_* return code handling
    - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
    - cgroup/cpuset: Prevent UAF in proc_cpuset_show()
    - hwmon: (adt7475) Fix default duty on fan is disabled
    - block: Call .limit_depth() after .hctx has been set
    - block/mq-deadline: Fix the tag reservation code
    - md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
    - pwm: stm32: Always do lazy disabling
    - nvmet-auth: fix nvmet_auth hash error handling
    - drm/meson: fix canvas release in bind function
    - pwm: atmel-tcb: Fix race condition and convert to guards
    - hwmon: (max6697) Fix underflow when writing limit attributes
    - hwmon: (max6697) Fix swapped temp{1,8} critical alarms
    - arm64: dts: qcom: sc8180x: Correct PCIe slave ports
    - arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
    - arm64: dts: qcom: sdm845: add power-domain to UFS PHY
    - arm64: dts: qcom: sm6115: add power-domain to UFS PHY
    - arm64: dts: qcom: sm6350: add power-domain to UFS PHY
    - arm64: dts: qcom: sm8250: add power-domain to UFS PHY
    - arm64: dts: qcom: sm8350: add power-domain to UFS PHY
    - arm64: dts: qcom: sm8450: add power-domain to UFS PHY
    - arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
    - arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
    - arm64: dts: qcom: msm8998: enable adreno_smmu by default
    - soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
    - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data()
      callers
    - arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
    - arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
    - arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
    - arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
    - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
    - arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
    - soc: xilinx: rename cpu_number1 to dummy_cpu_number
    - ARM: dts: sunxi: remove duplicated entries in makefile
    - ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
    - arm64: dts: qcom: qrb4210-rb2: make L9A always-on
    - cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
    - OPP: ti: Fix ti_opp_supply_probe wrong return values
    - memory: fsl_ifc: Make FSL_IFC config visible and selectable
    - arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
    - arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
    - arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
    - arm64: dts: qcom: qdu1000: Add secure qfprom node
    - soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
    - soc: qcom: pdr: protect locator_addr with the main mutex
    - soc: qcom: pdr: fix parsing of domains lists
    - arm64: dts: rockchip: Increase VOP clk rate on RK3328
    - arm64: dts: amlogic: sm1: fix spdif compatibles
    - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
    - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
    - ARM: dts: imx6qdl-kontron-samx6i: fix board reset
    - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
    - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
    - arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
    - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
    - arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for
      pp3300_mipibrdg
    - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
    - arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate`
      mismatch
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
    - arm64: dts: amlogic: gx: correct hdmi clocks
    - arm64: dts: amlogic: add power domain to hdmitx
    - arm64: dts: amlogic: setup hdmi system clock
    - arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
    - arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
    - arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
    - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
    - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
    - arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
    - arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
    - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
    - arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
    - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
    - arm64: dts: imx8mp: Fix pgc_mlmix location
    - arm64: dts: imx8mp: add HDMI power-domains
    - arm64: dts: imx8mp: Fix pgc vpu locations
    - x86/xen: Convert comma to semicolon
    - arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
    - arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
    - arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
    - arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
    - arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
    - arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
    - arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
    - arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
    - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC
      systems
    - m68k: cmpxchg: Fix return value for default case in __arch_xchg()
    - ARM: spitz: fix GPIO assignment for backlight
    - vmlinux.lds.h: catch .bss..L* sections into BSS")
    - firmware: turris-mox-rwtm: Do not complete if there are no waiters
    - firmware: turris-mox-rwtm: Fix checking return value of
      wait_for_completion_timeout()
    - firmware: turris-mox-rwtm: Initialize completion before mailbox
    - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
    - wifi: ath12k: Correct 6 GHz frequency value in rx status
    - wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
    - bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
    - selftests/bpf: Fix prog numbers in test_sockmap
    - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
    - wifi: ath12k: change DMA direction while mapping reinjected packets
    - wifi: ath12k: fix invalid memory access while processing fragmented packets
    - wifi: ath12k: fix firmware crash during reo reinject
    - wifi: ath11k: fix wrong definition of CE ring's base address
    - wifi: ath12k: fix wrong definition of CE ring's base address
    - tcp: add tcp_done_with_error() helper
    - tcp: fix race in tcp_write_err()
    - tcp: fix races in tcp_v[46]_err()
    - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when
      CONFIG_ARCH_NO_SG_CHAIN is defined
    - selftests/bpf: Check length of recv in test_sockmap
    - udf: Fix lock ordering in udf_evict_inode()
    - lib: objagg: Fix general protection fault
    - mlxsw: spectrum_acl_erp: Fix object nesting warning
    - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
    - perf/x86: Serialize set_attr_rdpmc()
    - jump_label: Fix concurrency issues in static_key_slow_dec()
    - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
    - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
    - wifi: cfg80211: handle 2x996 RU allocation in
      cfg80211_calculate_bitrate_he()
    - udf: Fix bogus checksum computation in udf_rename()
    - net: fec: Refactor: #define magic constants
    - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
    - libbpf: Checking the btf_type kind when fixing variable offsets
    - xfrm: Fix unregister netdevice hang on hardware offload.
    - ipvs: Avoid unnecessary calls to skb_is_gso_sctp
    - netfilter: nf_tables: rise cap on SELinux secmark context
    - wifi: rtw89: 8852b: fix definition of KIP register number
    - wifi: rtl8xxxu: 8188f: Limit TX power index
    - xfrm: Export symbol xfrm_dev_state_delete.
    - bpftool: Mount bpffs when pinmaps path not under the bpffs
    - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
    - perf: Fix perf_aux_size() for greater-than 32-bit size
    - perf: Prevent passing zero nr_pages to rb_alloc_aux()
    - perf: Fix default aux_watermark calculation
    - perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
    - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
    - xfrm: fix netdev reference count imbalance
    - xfrm: call xfrm_dev_policy_delete when kill policy
    - wifi: virt_wifi: avoid reporting connection success with wrong SSID
    - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
    - wifi: virt_wifi: don't use strlen() in const context
    - locking/rwsem: Add __always_inline annotation to __down_write_common() and
      inlined callers
    - selftests/bpf: Close fd in error path in drop_on_reuseport
    - selftests/bpf: Null checks for links in bpf_tcp_ca
    - selftests/bpf: Close obj in error path in xdp_adjust_tail
    - selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
    - selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of
      loops
    - bpf: annotate BTF show functions with __printf
    - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
    - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
    - bpf: Fix null pointer dereference in resolve_prog_type() for
      BPF_PROG_TYPE_EXT
    - selftests: forwarding: devlink_lib: Wait for udev events after reloading
    - Bluetooth: hci_bcm4377: Use correct unit for timeouts
    - Bluetooth: btintel: Refactor btintel_set_ppag()
    - Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
    - xdp: fix invalid wait context of page_pool_destroy()
    - net: bridge: mst: Check vlan state for egress decision
    - drm/rockchip: vop2: Fix the port mux of VP2
    - drm/arm/komeda: Fix komeda probe failing if there are no links in the
      secondary pipeline
    - drm/amdkfd: Fix CU Masking for GFX 9.4.3
    - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
    - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
    - drm/amd/pm: Fix aldebaran pcie speed reporting
    - drm/amdgpu: Fix memory range calculation
    - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
    - drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
    - drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on()
      better
    - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before
      regulators
    - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
    - drm/bridge: Fixed a DP link training bug
    - drm/bridge: it6505: fix hibernate to resume no display issue
    - media: pci: ivtv: Add check for DMA map result
    - media: imon: Fix race getting ictx->lock
    - media: i2c: Fix imx412 exposure control
    - media: v4l: async: Fix NULL pointer dereference in adding ancillary links
    - s390/mm: Convert make_page_secure to use a folio
    - s390/mm: Convert gmap_make_secure to use a folio
    - s390/uv: Don't call folio_wait_writeback() without a folio reference
    - media: mediatek: vcodec: Handle invalid decoder vsi
    - x86/shstk: Make return uprobe work with shadow stack
    - ipmi: ssif_bmc: prevent integer overflow on 32bit systems
    - saa7134: Unchecked i2c_transfer function result fixed
    - media: i2c: imx219: fix msr access command sequence
    - media: uvcvideo: Disable autosuspend for Insta360 Link
    - media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
    - media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
    - media: uvcvideo: Override default flags
    - drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
    - drm: zynqmp_kms: Fix AUX bus not getting unregistered
    - media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
    - media: rcar-csi2: Disable runtime_pm in probe error
    - media: rcar-csi2: Cleanup subdevice in remove()
    - media: renesas: vsp1: Fix _irqsave and _irq mix
    - media: renesas: vsp1: Store RPF partition configuration per RPF instance
    - drm/mediatek: Add missing plane settings when async update
    - drm/mediatek: Use 8-bit alpha in ETHDR
    - drm/mediatek: Fix XRGB setting error in OVL
    - drm/mediatek: Fix XRGB setting error in Mixer
    - drm/mediatek: Fix destination alpha error in OVL
    - drm/mediatek: Turn off the layers with zero width or height
    - drm/mediatek: Add OVL compatible name for MT8195
    - media: imx-jpeg: Drop initial source change event if capture has been setup
    - leds: trigger: Unregister sysfs attributes before calling deactivate()
    - drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
    - drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
    - perf test: Make test_arm_callgraph_fp.sh more robust
    - perf pmus: Fixes always false when compare duplicates aliases
    - perf report: Fix condition in sort__sym_cmp()
    - drm/etnaviv: fix DMA direction handling for cached RW buffers
    - drm/qxl: Add check for drm_cvt_mode
    - Revert "leds: led-core: Fix refcount leak in of_led_get()"
    - drm/mediatek: Remove less-than-zero comparison of an unsigned value
    - ext4: fix infinite loop when replaying fast_commit
    - drm/mediatek/dp: switch to ->edid_read callback
    - drm/mediatek/dp: Fix spurious kfree()
    - media: venus: flush all buffers in output plane streamoff
    - perf intel-pt: Fix aux_watermark calculation for 64-bit size
    - perf intel-pt: Fix exclude_guest setting
    - mfd: rsmu: Split core code into separate module
    - mfd: omap-usb-tll: Use struct_size to allocate tll
    - xprtrdma: Fix rpcrdma_reqs_reset()
    - SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
    - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
    - ext4: don't track ranges in fast_commit if inode has inlined data
    - ext4: avoid writing unitialized memory to disk in EA inodes
    - leds: flash: leds-qcom-flash: Test the correct variable in init
    - sparc64: Fix incorrect function signature and add prototype for
      prom_cif_init
    - SUNRPC: Fixup gss_status tracepoint error output
    - iio: Fix the sorting functionality in iio_gts_build_avail_time_table
    - PCI: Fix resource double counting on remove & rescan
    - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
    - PCI: keystone: Don't enable BAR 0 for AM654x
    - PCI: keystone: Fix NULL pointer dereference in case of DT error in
      ks_pcie_setup_rc_app_regs()
    - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
    - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
    - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
    - clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
    - iio: frequency: adrf6780: rm clk provider include
    - coresight: Fix ref leak when of_coresight_parse_endpoint() fails
    - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
    - ASoc: tas2781: Enable RCA-based playback without DSP firmware download
    - ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
    - usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and
      remove
    - RDMA/cache: Release GID table even if leak is detected
    - clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
    - clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
    - clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
    - clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
    - clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
    - interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
    - Input: qt1050 - handle CHIP_ID reading error
    - RDMA/mlx4: Fix truncated output warning in mad.c
    - RDMA/mlx4: Fix truncated output warning in alias_GUID.c
    - RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
    - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
    - ASoC: qcom: Adjust issues in case of DT error in
      asoc_qcom_lpass_cpu_platform_probe()
    - scsi: lpfc: Fix a possible null pointer dereference
    - hwrng: core - Fix wrong quality calculation at hw rng registration
    - powerpc/prom: Add CPU info to hardware description string later
    - ASoC: max98088: Check for clk_prepare_enable() error
    - mtd: make mtd_test.c a separate module
    - RDMA/device: Return error earlier if port in not valid
    - Input: elan_i2c - do not leave interrupt disabled on suspend failure
    - ASoC: amd: Adjust error handling in case of absent codec device
    - PCI: endpoint: Clean up error handling in vpci_scan_bus()
    - PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
    - vhost/vsock: always initialize seqpacket_allow
    - net: missing check virtio
    - nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
    - crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
    - clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
    - clk: qcom: Park shared RCGs upon registration
    - clk: en7523: fix rate divider for slic and spi clocks
    - MIPS: Octeron: remove source file executable bit
    - PCI: qcom-ep: Disable resources unconditionally during PERST# assert
    - PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
    - powerpc/xmon: Fix disassembly CPU feature checks
    - macintosh/therm_windtunnel: fix module unload.
    - RDMA/hns: Check atomic wr length
    - RDMA/hns: Fix unmatch exception handling when init eq table fails
    - RDMA/hns: Fix missing pagesize and alignment check in FRMR
    - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
    - RDMA/hns: Fix undifined behavior caused by invalid max_sge
    - RDMA/hns: Fix insufficient extend DB for VFs.
    - iommu/vt-d: Fix identity map bounds in si_domain_init()
    - RDMA/core: Remove NULL check before dev_{put, hold}
    - RDMA: Fix netdev tracker in ib_device_set_netdev
    - bnxt_re: Fix imm_data endianness
    - netfilter: ctnetlink: use helper function to calculate expect ID
    - netfilter: nf_set_pipapo: fix initial map fill
    - ipvs: properly dereference pe in ip_vs_add_service
    - gve: Fix XDP TX completion handling when counters overflow
    - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
    - ipv4: Fix incorrect TOS in route get reply
    - ipv4: Fix incorrect TOS in fibmatch route get reply
    - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
    - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
    - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
    - fs/ntfs3: Fix transform resident to nonresident for compressed files
    - fs/ntfs3: Deny getting attr data block in compressed frame
    - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
    - fs/ntfs3: Fix getting file type
    - fs/ntfs3: Add missing .dirty_folio in address_space_operations
    - pinctrl: rockchip: update rk3308 iomux routes
    - pinctrl: core: fix possible memory leak when pinctrl_enable() fails
    - pinctrl: single: fix possible memory leak when pinctrl_enable() fails
    - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable()
      fails
    - pinctrl: freescale: mxs: Fix refcount of child
    - fs/ntfs3: Replace inode_trylock with inode_lock
    - fs/ntfs3: Correct undo if ntfs_create_inode failed
    - fs/ntfs3: Drop stray '\' (backslash) in formatting string
    - fs/ntfs3: Fix field-spanning write in INDEX_HDR
    - pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
    - pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
    - pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
    - pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
    - pinctrl: renesas: r8a779g0: Fix IRQ suffixes
    - pinctrl: renesas: r8a779g0: FIX PWM suffixes
    - pinctrl: renesas: r8a779g0: Fix TCLK suffixes
    - pinctrl: renesas: r8a779g0: Fix TPU suffixes
    - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
    - fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
    - fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
    - fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped
      THPs
    - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
    - rtc: interface: Add RTC offset to alarm after fix-up
    - fs/ntfs3: Fix the format of the "nocase" mount option
    - fs/ntfs3: Missed error return
    - fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
    - powerpc/8xx: fix size given to set_huge_pte_at()
    - s390/dasd: fix error checks in dasd_copy_pair_store()
    - sbitmap: use READ_ONCE to access map->word
    - sbitmap: fix io hung due to race on sbitmap_word::cleared
    - LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
    - landlock: Don't lose track of restrictions on cred_transfer
    - hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
    - mm/hugetlb: fix possible recursive locking detected warning
    - mm/mglru: fix div-by-zero in vmpressure_calc_level()
    - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
    - mm/mglru: fix overshooting shrinker memory
    - x86/efistub: Avoid returning EFI_SUCCESS on error
    - x86/efistub: Revert to heap allocated boot_params for PE entrypoint
    - exfat: fix potential deadlock on __exfat_get_dentry_set
    - dt-bindings: thermal: correct thermal zone node name limit
    - tick/broadcast: Make takeover of broadcast hrtimer reliable
    - net: netconsole: Disable target before netpoll cleanup
    - af_packet: Handle outgoing VLAN packets without hardware offloading
    - btrfs: fix extent map use-after-free when adding pages to compressed bio
    - kernel: rerun task_work while freezing in get_signal()
    - ipv4: fix source address selection with route leak
    - ipv6: take care of scope when choosing the src addr
    - NFSD: Support write delegations in LAYOUTGET
    - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE
      tasks
    - fuse: verify {g,u}id mount options correctly
    - ata: libata-scsi: Fix offsets for the fixed format sense data
    - char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
    - media: venus: fix use after free in vdec_close
    - ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
    - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
    - ext2: Verify bitmap and itable block numbers before using them
    - io_uring/io-wq: limit retrying worker initialisation
    - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
    - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
    - scsi: qla2xxx: Fix optrom version displayed in FDMI
    - drm/amd/display: Check for NULL pointer
    - apparmor: use kvfree_sensitive to free data->data
    - cifs: fix potential null pointer use in destroy_workqueue in init_cifs error
      path
    - cifs: fix reconnect with SMB1 UNIX Extensions
    - cifs: mount with "unix" mount option for SMB1 incorrectly handled
    - task_work: s/task_work_cancel()/task_work_cancel_func()/
    - task_work: Introduce task_work_cancel() again
    - udf: Avoid using corrupted block bitmap buffer
    - m68k: amiga: Turn off Warp1260 interrupts during boot
    - ext4: check dot and dotdot of dx_root before making dir indexed
    - ext4: make sure the first directory block is not a hole
    - io_uring: tighten task exit cancellations
    - trace/pid_list: Change gfp flags in pid_list_fill_irq()
    - selftests/landlock: Add cred_transfer test
    - wifi: mwifiex: Fix interface type change
    - wifi: rtw88: usb: Fix disconnection after beacon loss
    - drivers: soc: xilinx: check return status of get_api_version()
    - leds: ss4200: Convert PCIBIOS_* return codes to errnos
    - leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
    - media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
    - jbd2: make jbd2_journal_get_max_txn_bufs() internal
    - jbd2: precompute number of transaction descriptor blocks
    - jbd2: avoid infinite transaction commit loop
    - media: uvcvideo: Fix integer overflow calculating timestamp
    - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
    - KVM: nVMX: Request immediate exit iff pending nested event needs injection
    - ALSA: ump: Don't update FB name for static blocks
    - ALSA: ump: Force 1 Group for MIDI1 FBs
    - ALSA: usb-audio: Fix microphone sound on HD webcam.
    - ALSA: usb-audio: Move HD Webcam quirk to the right place
    - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
    - tools/memory-model: Fix bug in lock.cat
    - hwrng: amd - Convert PCIBIOS_* return codes to errnos
    - parisc: Fix warning at drivers/pci/msi/msi.h:121
    - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
    - PCI: dw-rockchip: Fix initial PERST# GPIO value
    - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
    - PCI: loongson: Enable MSI in LS7A Root Complex
    - binder: fix hang of unregistered readers
    - hostfs: fix dev_t handling
    - efi/libstub: Zero initialize heap allocated struct screen_info
    - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
    - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
    - ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
    - f2fs: fix to force buffered IO on inline_data inode
    - f2fs: fix to don't dirty inode for readonly filesystem
    - f2fs: fix return value of f2fs_convert_inline_inode()
    - f2fs: use meta inode for GC of atomic file
    - f2fs: use meta inode for GC of COW file
    - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
    - ubi: eba: properly rollback inside self_check_eba
    - block: fix deadlock between sd_remove & sd_release
    - mm: fix old/young bit handling in the faulting path
    - decompress_bunzip2: fix rare decompression failure
    - kbuild: Fix '-S -c' in x86 stack protector scripts
    - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
    - ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
    - kobject_uevent: Fix OOB access within zap_modalias_env()
    - gve: Fix an edge case for TSO skb validity check
    - ice: Add a per-VF limit on number of FDIR filters
    - devres: Fix devm_krealloc() wasting memory
    - devres: Fix memory leakage caused by driver API devm_free_percpu()
    - irqdomain: Fixed unbalanced fwnode get and put
    - irqchip/imx-irqsteer: Handle runtime power management correctly
    - mm/numa_balancing: teach mpol_to_str about the balancing mode
    - rtc: cmos: Fix return value of nvmem callbacks
    - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE
      state
    - scsi: qla2xxx: During vport delete send async logout explicitly
    - scsi: qla2xxx: Unable to act on RSCN for port online
    - scsi: qla2xxx: Fix for possible memory corruption
    - scsi: qla2xxx: Use QP lock to search for bsg
    - scsi: qla2xxx: Reduce fabric scan duplicate code
    - scsi: qla2xxx: Fix flash read failure
    - scsi: qla2xxx: Complete command early within lock
    - scsi: qla2xxx: validate nvme_local_port correctly
    - perf: Fix event leak upon exit
    - perf: Fix event leak upon exec and file release
    - perf stat: Fix the hard-coded metrics calculation on the hybrid
    - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
    - perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
    - perf/x86/intel/pt: Fix topa_entry base length
    - perf/x86/intel/pt: Fix a topa_entry base address calculation
    - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
    - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
    - drm/udl: Remove DRM_CONNECTOR_POLL_HPD
    - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
    - drm/amdgpu: reset vm state machine after gpu reset(vram lost)
    - drm/amd/amdgpu: Fix uninitialized variable warnings
    - drm/i915/dp: Reset intel_dp->link_trained before retraining the link
    - drm/i915/dp: Don't switch the LTTPR mode on an active link
    - rtc: isl1208: Fix return value of nvmem callbacks
    - rtc: abx80x: Fix return value of nvmem callback on read
    - watchdog/perf: properly initialize the turbo mode timestamp and rearm
      counter
    - platform: mips: cpu_hwmon: Disable driver on unsupported hardware
    - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
    - selftests/sigaltstack: Fix ppc64 GCC build
    - dm-verity: fix dm_is_verity_target() when dm-verity is builtin
    - rbd: don't assume rbd_is_lock_owner() for exclusive mappings
    - remoteproc: stm32_rproc: Fix mailbox interrupts queuing
    - remoteproc: imx_rproc: Skip over memory region when node value is NULL
    - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
    - MIPS: dts: loongson: Add ISA node
    - MIPS: ip30: ip30-console: Add missing include
    - MIPS: dts: loongson: Fix GMAC phy node
    - MIPS: Loongson64: env: Hook up Loongsson-2K
    - MIPS: Loongson64: Remove memory node for builtin-dtb
    - MIPS: Loongson64: reset: Prioritise firmware service
    - MIPS: Loongson64: Test register availability before use
    - drm/etnaviv: don't block scheduler when GPU is still active
    - drm/panfrost: Mark simple_ondemand governor as softdep
    - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
    - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
    - lib/build_OID_registry: don't mention the full path of the script in output
    - video: logo: Drop full path of the input filename in generated file
    - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
    - minmax: scsi: fix mis-use of 'clamp()' in sr.c
    - mm/mglru: fix ineffective protection calculation
    - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
    - f2fs: fix to truncate preallocated blocks in f2fs_file_open()
    - kdb: address -Wformat-security warnings
    - kdb: Use the passed prompt in kdb_position_cursor()
    - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
    - phy: cadence-torrent: Check return value on register read
    - phy: zynqmp: Enable reference clock correctly
    - um: time-travel: fix time-travel-start option
    - um: time-travel: fix signal blocking race/hang
    - f2fs: fix start segno of large section
    - watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
    - watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
    - f2fs: fix to update user block counts in block_operations()
    - kbuild: avoid build error when single DTB is turned into composite DTB
    - selftests/bpf: fexit_sleep: Fix stack allocation for arm64
    - libbpf: Fix no-args func prototype BTF dumping syntax
    - af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
    - dma: fix call order in dmam_free_coherent
    - bpf, events: Use prog to emit ksymbol event for main program
    - tools/resolve_btfids: Fix comparison of distinct pointer types warning in
      resolve_btfids
    - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
    - ipv4: Fix incorrect source address in Record Route option
    - net: bonding: correctly annotate RCU in bond_should_notify_peers()
    - ice: Fix recipe read procedure
    - netfilter: nft_set_pipapo_avx2: disable softinterrupts
    - net: stmmac: Correct byte order of perfect_match
    - net: nexthop: Initialize all fields in dumped nexthops
    - bpf: Fix a segment issue when downgrading gso_size
    - apparmor: Fix null pointer deref when receiving skb during sock creation
    - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
    - lirc: rc_dev_get_from_fd(): fix file leak
    - auxdisplay: ht16k33: Drop reference after LED registration
    - ASoC: SOF: imx8m: Fix DSP control regmap retrieval
    - spi: microchip-core: fix the issues in the isr
    - spi: microchip-core: defer asserting chip select until just before write to
      TX FIFO
    - spi: microchip-core: only disable SPI controller when register value change
      requires it
    - spi: microchip-core: fix init function not setting the master and motorola
      modes
    - spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
    - nvme-pci: Fix the instructions for disabling power management
    - ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
    - spi: spidev: add correct compatible for Rohm BH2228FV
    - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
    - ASoC: TAS2781: Fix tasdev_load_calibrated_data()
    - ceph: fix incorrect kmalloc size of pagevec mempool
    - s390/pci: Refactor arch_setup_msi_irqs()
    - s390/pci: Allow allocation of more than 1 MSI interrupt
    - s390/cpum_cf: Fix endless loop in CF_DIAG event stop
    - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
    - io_uring: fix io_match_task must_hold
    - nvme-pci: add missing condition check for existence of mapped data
    - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
    - md/raid0: don't free conf on raid0_run failure
    - md/raid1: don't free conf on raid0_run failure
    - io_uring: Fix probe of disabled operations
    - cgroup/cpuset: Optimize isolated partition only generate_sched_domains()
      calls
    - cgroup/cpuset: Fix remote root partition creation problem
    - x86/syscall: Mark exit[_group] syscall handlers __noreturn
    - perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
    - md/raid5: recheck if reshape has finished with device_lock held
    - hwmon: (ltc2991) re-order conditions to fix off by one bug
    - arm64: smp: Fix missing IPI statistics
    - arm64: dts: qcom: sc7280: Remove CTS/RTS configuration
    - ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly
    - OPP: Fix missing cleanup on error in _opp_attach_genpd()
    - arm64: dts: qcom: sc8280xp-*: Remove thermal zone polling delays
    - arm64: dts: ti: k3-am62-main: Fix the reg-range for main_pktdma
    - arm64: dts: ti: k3-am62a-main: Fix the reg-range for main_pktdma
    - arm64: dts: ti: k3-am62p-main: Fix the reg-range for main_pktdma
    - arm64: dts: ti: k3-am62a7: Drop McASP AFIFOs
    - arm64: dts: ti: k3-am62p5: Drop McASP AFIFOs
    - arm64: dts: ti: k3-am62p5-sk: Fix pinmux for McASP1 TX
    - arm64: dts: qcom: sc7180-trogdor: Disable pwmleds node where unused
    - arm64: dts: mediatek: mt8192: Fix GPU thermal zone name for SVS
    - arm64: dts: mediatek: mt8183-pico6: Fix wake-on-X event node names
    - arm64: dts: renesas: r9a08g045: Add missing hypervisor virtual timer IRQ
    - cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons
    - wifi: mac80211: cancel multi-link reconf work on disconnect
    - wifi: ath11k: refactor setting country code logic
    - wifi: ath11k: restore country code during resume
    - net: ethernet: cortina: Restore TSO support
    - tcp: fix races in tcp_abort()
    - hns3: avoid linking objects into multiple modules
    - sched/core: Move preempt_model_*() helpers from sched.h to preempt.h
    - sched/core: Drop spinlocks on contention iff kernel is preemptible
    - net: dsa: ksz_common: Allow only up to two HSR HW offloaded ports for
      KSZ9477
    - libbpf: Skip base btf sanity checks
    - wifi: mac80211: add ieee80211_tdls_sta_link_id()
    - wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant()
    - wifi: ath12k: advertise driver capabilities for MBSSID and EMA
    - riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
    - perf/x86/amd/uncore: Avoid PMU registration if counters are unavailable
    - perf/x86/amd/uncore: Fix DF and UMC domain identification
    - NFSD: Fix nfsdcld warning
    - net: page_pool: fix warning code
    - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
    - Bluetooth: hci_event: Set QoS encryption from BIGInfo report
    - Bluetooth: hci_core, hci_sync: cleanup struct discovery_state
    - Bluetooth: Fix usage of __hci_cmd_sync_status
    - tcp: Don't access uninit tcp_rsk(req)->ao_keyid in
      tcp_create_openreq_child().
    - drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators
    - drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare()
    - drm/amd/display: Move 'struct scaler_data' off stack
    - media: i2c: hi846: Fix V4L2_SUBDEV_FORMAT_TRY get_selection()
    - drm/msm/dpu: fix encoder irq wait skip
    - drm/msm/dpu: drop duplicate drm formats from wb2_formats arrays
    - drm/msm/dp: fix runtime_pm handling in dp_wait_hpd_asserted
    - perf maps: Switch from rbtree to lazily sorted array for addresses
    - perf maps: Fix use after free in __maps__fixup_overlap_and_insert
    - drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll
    - drm/i915/psr: Print Panel Replay status instead of frame lock status
    - drm/mediatek: Set DRM mode configs accordingly
    - drm/msm/dsi: set video mode widebus enable bit when widebus is enabled
    - tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load
    - drm/amd/display: Add null check before access structs
    - nfs: pass explicit offset/count to trace events
    - PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in
      pci_epf_test_core_init()
    - PCI: tegra194: Set EP alignment restriction for inbound ATU
    - riscv: smp: fail booting up smp if inconsistent vlen is detected
    - clk: meson: s4: fix fixed_pll_dco clock
    - clk: meson: s4: fix pwm_j_div parent clock
    - usb: typec-mux: ptn36502: unregister typec switch on probe error and remove
    - mtd: spi-nor: winbond: fix w25q128 regression
    - iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps
    - iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps
    - iommufd/selftest: Add tests for <= u8 bitmap sizes
    - iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes
    - iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead
    - clk: qcom: gcc-x1e80100: Fix halt_check for all pipe clocks
    - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
    - kvm: s390: Reject memory region operations for ucontrol VMs
    - eeprom: ee1004: Call i2c_new_scanned_device to instantiate thermal sensor
    - clk: qcom: gcc-x1e80100: Set parent rate for USB3 sec and tert PHY pipe clks
    - workqueue: Introduce from_work() helper for cleaner callback declarations
    - RDMA/hns: Fix mbx timing out before CMD execution is completed
    - crypto: mxs-dcp - Ensure payload is zero when using key slot
    - RDMA/mana_ib: Enable RoCE on port 1
    - RDMA/mana_ib: set node_guid
    - rtc: tps6594: Fix memleak in probe
    - selftests/damon/access_memory: use user-defined region size
    - md-cluster: fix hanging issue while a new disk adding
    - power: supply: ab8500: Fix error handling when calling
      iio_read_channel_processed()
    - power: supply: ingenic: Fix some error handling paths in
      ingenic_battery_get_property()
    - remoteproc: mediatek: Don't attempt to remap l1tcm memory if missing
    - remoteproc: k3-r5: Fix IPC-only mode detection
    - mailbox: imx: fix TXDB_V2 channel race condition
    - mailbox: mtk-cmdq: Move devm_mbox_controller_register() after
      devm_pm_runtime_enable()
    - mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit
      machines
    - mm/huge_memory: avoid PMD-size page cache if needed
    - thermal/drivers/broadcom: Fix race between removal and clock disable
    - workqueue: Always queue work items to the newest PWQ for order workqueues
    - ipv6: fix source address selection with route leak
    - drm/xe: Use write-back caching mode for system memory on DGFX
    - md/raid5: fix spares errors about rcu usage
    - media: stm32: dcmipp: correct error handling in dcmipp_create_subdevs
    - tpm_tis_spi: add missing attpm20p SPI device ID entry
    - sysctl: always initialize i_uid/i_gid
    - media: i2c: Kconfig: Fix missing firmware upload config select
    - genirq: Set IRQF_COND_ONESHOT in request_irq()
    - cpufreq: qcom-nvmem: fix memory leaks in probe error paths
    - leds: triggers: Flush pending brightness before activating trigger
    - media: i2c: alvium: Move V4L2_CID_GAIN to V4L2_CID_ANALOG_GAIN
    - KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector
    - KVM: nVMX: Check for pending posted interrupts when looking for nested
      events
    - ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models
    - fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes
    - drm/fbdev-dma: Fix framebuffer mode for big endian devices
    - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL
    - dmaengine: fsl-edma: clean up unused "fsl,imx8qm-adma" compatible string
    - dmaengine: fsl-edma: change the memory access from local into remote mode in
      i.MX 8QM
    - clk: samsung: fix getting Exynos4 fin_pll rate from external clocks
    - bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
    - ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin
      format
    - arch: um: rust: Use the generated target.json again
    - f2fs: fix null reference error when checking end of zone
    - selftests: forwarding: skip if kernel not support setting bridge fdb
      learning limit
    - xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len
    - drm/xe/exec: Fix minor bug related to xe_sync_entry_cleanup
    - thermal: trip: Split thermal_zone_device_set_mode()
    - apparmor: unpack transition table if dfa is not present
    - i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1
    - selinux,smack: remove the capability checks in the removexattr hooks
    - selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
    - nilfs2: handle inconsistent state in nilfs_btnode_create_block()
    - Upstream stable to v6.6.44, v6.10.3
  * Noble update: upstream stable patchset 2024-09-30 (LP: #2083196) //
    CVE-2024-42284
    - tipc: Return non-zero value from tipc_udp_addr2str() on error
  * CVE-2024-44987
    - ipv6: prevent UAF in ip6_send_skb()
  * CVE-2024-42301
    - dev/parport: fix the array out-of-bounds risk
  * CVE-2024-44998
    - atm: idt77252: prevent use after free in dequeue_rx()

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 20 Nov 2024 15:12:54 -0600

linux-nvidia (6.8.0-1018.20) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1018.20 -proposed tracker (LP: #2085928)

  [ Ubuntu: 6.8.0-49.49 ]

  * noble/linux: 6.8.0-49.49 -proposed tracker (LP: #2085942)
  * CVE-2024-46800
    - sch/netem: fix use after free in netem_dequeue
  * mm/folios: xfs hangs with hung task timeouts with corrupted folio pointer
    lists (LP: #2085495)
    - lib/xarray: introduce a new helper xas_get_order
    - mm/filemap: return early if failed to allocate memory for split
    - mm/filemap: optimize filemap folio adding
  * CVE-2024-43882
    - exec: Fix ToCToU between perm check and set-uid/gid usage

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 07 Nov 2024 10:07:53 -0600

linux-nvidia (6.8.0-1017.19) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1017.19 -proposed tracker (LP: #2084817)

  * MANA: include driver fixes and enable module on ARM64 (LP: #2084598)
    - net: mana: Enable MANA driver on ARM64 with 4K page size
    - net: mana: Add support for page sizes other than 4KB on ARM64
    - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
    - net: mana: Fix RX buf alloc_size alignment and atomic op panic
    - RDMA/mana_ib: use the correct page table index based on hardware page size
    - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
    - [Config] nvidia: Enable MANA configs on x86 and arm64
    - [Packaging] nvidia: Include mana.ko in linux-modules-ABIVER package

  * Kernel build failure when Launchpad provides only deb822 apt sources
    (LP: #2083936)
    - [Packaging] dkms-build: Support DEB822 sources

  * Don't produce linux-*-cloud-tools-common, linux-*-tools-common and
    linux-*-tools-host binary packages (LP: #2048183)
    - [Packaging] nvidia: Don't build linux-nvidia-tools-host

  * NVIDIA: SAUCE: acpi/prmt: find block with specific type (LP: #2081874)
    - NVIDIA: SAUCE: acpi/prmt: find block with specific type

  [ Ubuntu: 6.8.0-48.48 ]

  * noble/linux: 6.8.0-48.48 -proposed tracker (LP: #2082437)
  * [SRU][Noble] Bad EPP defaults cause performance regressions on select Intel
    CPUs (LP: #2077470)
    - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h
    - cpufreq: intel_pstate: Allow model specific EPPs
    - cpufreq: intel_pstate: Update default EPPs for Meteor Lake
    - cpufreq: intel_pstate: Switch to new Intel CPU model defines
    - cpufreq: intel_pstate: Update Meteor Lake EPPs
    - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake
    - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
  * power: Enable intel_rapl driver (LP: #2078834)
    - powercap: intel_rapl: Add support for ArrowLake-H platform
  * x86/vmware: Add TDX hypercall support (LP: #2077729)
    - x86/vmware: Introduce VMware hypercall API
    - x86/vmware: Add TDX hypercall support
  * Guest crashes post migration with migrate_misplaced_folio+0x4cc/0x5d0
    (LP: #2076866)
    - mm/mempolicy: use numa_node_id() instead of cpu_to_node()
    - mm/numa_balancing: allow migrate on protnone reference with
      MPOL_PREFERRED_MANY policy
    - mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
    - mm: factor out the numa mapping rebuilding into a new helper
    - mm: support multi-size THP numa balancing
    - mm/migrate: make migrate_misplaced_folio() return 0 on success
    - mm/migrate: move NUMA hinting fault folio isolation + checks under PTL
    - mm: fix possible OOB in numa_rebuild_large_mapping()
  * Add 'mm: hold PTL from the first PTE while reclaiming a large folio' to fix
    L2 Guest hang during LTP Test (LP: #2076147)
    - mm: hold PTL from the first PTE while reclaiming a large folio
  * KOP L2 guest fails to boot with 1 core - SMT8 topology (LP: #2070329)
    - KVM: PPC: Book3S HV nestedv2: Add DPDES support in helper library for Guest
      state buffer
    - KVM: PPC: Book3S HV nestedv2: Fix doorbell emulation
  * L2 Guest migration: continuously dumping while running NFS guest migration
    (LP: #2076406)
    - KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
    - KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
    - KVM: PPC: Book3S HV: Add one-reg interface for DEXCR register
    - KVM: PPC: Book3S HV nestedv2: Keep nested guest DEXCR in sync
    - KVM: PPC: Book3S HV: Add one-reg interface for HASHKEYR register
    - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHKEYR in sync
    - KVM: PPC: Book3S HV: Add one-reg interface for HASHPKEYR register
    - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHPKEYR in sync
  * perf build disables tracepoint support (LP: #2076190)
    - [Packaging] perf: reenable libtraceevent
  * Please backport the more restrictive XSAVES deactivation for  Zen1/2 arch
    (LP: #2077321)
    - x86/CPU/AMD: Improve the erratum 1386 workaround
  * Fix alsa scarlett2 driver in 6.8  (LP: #2076402)
    - ALSA: scarlett2: Move initialisation code lower in the source
    - ALSA: scarlett2: Implement handling of the ACK notification
  * rtw89: reset IDMEM mode to prevent download firmware failure (LP: #2077396)
    - wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
  * CVE-2024-43858
    - jfs: Fix array-index-out-of-bounds in diFree
  * CVE-2024-42280
    - mISDN: Fix a use after free in hfcmulti_tx()
  * CVE-2024-42271
    - net/iucv: fix use after free in iucv_sock_close()
  * [Ubuntu-24.04] FADump with recommended crash size is making the L1 hang
    (LP: #2060039)
    - powerpc/64s/radix/kfence: map __kfence_pool at page granularity
  * Noble update: upstream stable patchset 2024-09-09 (LP: #2079945)
    - ocfs2: add bounds checking to ocfs2_check_dir_entry()
    - jfs: don't walk off the end of ealist
    - fs/ntfs3: Add a check for attr_names and oatbl
    - fs/ntfs3: Validate ff offset
    - usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
    - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
    - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
    - arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
    - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
    - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
    - ALSA: seq: ump: Skip useless ports for static blocks
    - filelock: Fix fcntl/close race recovery compat path
    - tun: add missing verification for short frame
    - tap: add missing verification for short frame
    - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
    - ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop
    - arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode
    - arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode
    - arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio
    - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB
    - arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB
    - Upstream stable to v6.6.43, v6.9.12
  * Noble update: upstream stable patchset 2024-09-02 (LP: #2078304)
    - filelock: Remove locks reliably when fcntl/close race is detected
    - scsi: core: alua: I/O errors for ALUA state transitions
    - scsi: sr: Fix unintentional arithmetic wraparound
    - scsi: qedf: Don't process stag work during unload and recovery
    - scsi: qedf: Wait for stag work during unload
    - scsi: qedf: Set qed_slowpath_params to zero before use
    - efi/libstub: zboot.lds: Discard .discard sections
    - ACPI: EC: Abort address space access upon error
    - ACPI: EC: Avoid returning AE_OK on errors in address space handler
    - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
    - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
    - wifi: mac80211: apply mcast rate only if interface is up
    - wifi: mac80211: handle tasklet frames before stopping
    - wifi: cfg80211: fix 6 GHz scan request building
    - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
    - wifi: iwlwifi: mvm: remove stale STA link data during restart
    - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
    - wifi: iwlwifi: mvm: handle BA session teardown in RF-kill
    - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
    - wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill
    - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
    - selftests: cachestat: Fix build warnings on ppc64
    - selftests/openat2: Fix build warnings on ppc64
    - selftests/futex: pass _GNU_SOURCE without a value to the compiler
    - of/irq: Factor out parsing of interrupt-map parent phandle+args from
      of_irq_parse_raw()
    - Input: silead - Always support 10 fingers
    - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
    - ila: block BH in ila_output()
    - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
    - null_blk: fix validation of block size
    - kconfig: gconf: give a proper initial state to the Save button
    - kconfig: remove wrong expr_trans_bool()
    - input: Add event code for accessibility key
    - input: Add support for "Do Not Disturb"
    - HID: Ignore battery for ELAN touchscreens 2F2C and 4116
    - NFSv4: Fix memory leak in nfs4_set_security_label
    - nfs: propagate readlink errors in nfs_symlink_filler
    - nfs: Avoid flushing many pages with NFS_FILE_SYNC
    - nfs: don't invalidate dentries on transient errors
    - cachefiles: add consistency check for copen/cread
    - cachefiles: Set object to close if ondemand_id < 0 in copen
    - cachefiles: make on-demand read killable
    - fs/file: fix the check in find_next_fd()
    - mei: demote client disconnect warning on suspend to debug
    - iomap: Fix iomap_adjust_read_range for plen calculation
    - drm/exynos: dp: drop driver owner initialization
    - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN
    - drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time
    - nvme: avoid double free special payload
    - nvmet: always initialize cqe.result
    - ALSA: hda: cs35l56: Fix lifecycle of codec pointer
    - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
    - ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5
    - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
    - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
    - ALSA: hda/realtek: Add more codec ID to no shutup pins list
    - spi: Fix OCTAL mode support
    - cpumask: limit FORCE_NR_CPUS to just the UP case
    - [Config] Remove FORCE_NR_CPUS
    - selftests: openvswitch: Set value to nla flags.
    - drm/amdgpu: Indicate CU havest info to CP
    - ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE
    - mips: fix compat_sys_lseek syscall
    - Input: elantech - fix touchpad state on resume for Lenovo N24
    - Input: i8042 - add Ayaneo Kun to i8042 quirk table
    - ASoC: rt722-sdca-sdw: add silence detection register as volatile
    - Input: xpad - add support for ASUS ROG RAIKIRI PRO
    - ASoC: topology: Fix references to freed memory
    - ASoC: topology: Do not assign fields that are already set
    - bytcr_rt5640 : inverse jack detect for Archos 101 cesium
    - ALSA: dmaengine: Synchronize dma channel after drop()
    - ASoC: ti: davinci-mcasp: Set min period size using FIFO config
    - ASoC: ti: omap-hdmi: Fix too long driver name
    - ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback
    - ASoC: rt722-sdca-sdw: add debounce time for type detection
    - nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA.
    - Input: ads7846 - use spi_device_id table
    - can: kvaser_usb: fix return value for hif_usb_send_regout
    - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
    - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver
    - s390/sclp: Fix sclp_init() cleanup on failure
    - platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources
    - platform/x86: wireless-hotkey: Add support for LG Airplane Button
    - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
    - platform/x86: lg-laptop: Change ACPI device id
    - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
    - btrfs: qgroup: fix quota root leak after quota disable failure
    - ibmvnic: Add tx check to prevent skb leak
    - ALSA: PCM: Allow resume only for suspended streams
    - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
    - ALSA: dmaengine_pcm: terminate dmaengine before synchronize
    - ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA
    - net: usb: qmi_wwan: add Telit FN912 compositions
    - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and
      DEV_STATS_ADD()
    - powerpc/pseries: Whitelist dtl slub object for copying to userspace
    - powerpc/eeh: avoid possible crash when edev->pdev changes
    - scsi: libsas: Fix exp-attached device scan after probe failure scanned in
      again after probe failed
    - tee: optee: ffa: Fix missing-field-initializers warning
    - Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
    - Bluetooth: btnxpuart: Enable Power Save feature on startup
    - bluetooth/l2cap: sync sock recv cb and release
    - erofs: ensure m_llen is reset to 0 if metadata is invalid
    - drm/amd/display: Add refresh rate range check
    - drm/amd/display: Account for cursor prefetch BW in DML1 mode support
    - drm/amd/display: Fix refresh rate range for some panel
    - drm/radeon: check bo_va->bo is non-NULL before using it
    - fs: better handle deep ancestor chains in is_subdir()
    - wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK
    - drivers/perf: riscv: Reset the counter to hpmevent mapping while starting
      cpus
    - riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
    - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
    - ksmbd: return FILE_DEVICE_DISK instead of super magic
    - ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by
      MAX_BDL_ENTRIES
    - selftest/timerns: fix clang build failures for abs() calls
    - selftests/vDSO: fix clang build errors and warnings
    - hfsplus: fix uninit-value in copy_name
    - selftests/bpf: Extend tcx tests to cover late tcx_entry release
    - spi: mux: set ctlr->bits_per_word_mask
    - ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE
    - [Config] Update CONFIG_SERIAL_MULTI_INSTANTIATE
    - cifs: fix noisy message on copy_file_range
    - Bluetooth: L2CAP: Fix deadlock
    - of/irq: Disable "interrupt-map" parsing for PASEMI Nemo
    - wifi: cfg80211: wext: set ssids=NULL for passive scans
    - wifi: mac80211: disable softirqs for queued frame handling
    - wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL
    - cachefiles: fix slab-use-after-free in fscache_withdraw_volume()
    - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()
    - btrfs: ensure fast fsync waits for ordered extents after a write failure
    - PNP: Hide pnp_bus_type from the non-PNP code
    - ACPI: AC: Properly notify powermanagement core about changes
    - selftests/overlayfs: Fix build error on ppc64
    - nvme-fabrics: use reserved tag for reg read/write command
    - LoongArch: Fix GMAC's phy-mode definitions in dts
    - io_uring: fix possible deadlock in io_register_iowq_max_workers()
    - vfio: Create vfio_fs_type with inode per device
    - vfio/pci: Use unmap_mapping_range()
    - parport: amiga: Mark driver struct with __refdata to prevent section
      mismatch
    - drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time
    - vfio/pci: Insert full vma on mmap'd MMIO fault
    - ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5
    - ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4
    - ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4
    - wifi: mac80211: Avoid address calculations via out of bounds array indexing
    - drm/amd/display: change dram_clock_latency to 34us for dcn35
    - closures: Change BUG_ON() to WARN_ON()
    - ASoC: codecs: ES8326: Solve headphone detection issue
    - ASoC: Intel: avs: Fix route override
    - net: mvpp2: fill-in dev_port attribute
    - btrfs: scrub: handle RST lookup error correctly
    - clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs
    - drm/amd/display: Update efficiency bandwidth for dcn351
    - drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport
    - btrfs: fix uninitialized return value in the ref-verify tool
    - spi: davinci: Unset POWERDOWN bit when releasing resources
    - mm: page_ref: remove folio_try_get_rcu()
    - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x
      Gen4
    - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume()
    - Upstream stable to v6.6.42, v6.9.11
  * CVE-2024-27022
    - Revert "Revert "fork: defer linking file vma until vma is fully
      initialized""
  * UBSAN: array-index-out-of-bounds in /build/linux-Z1RxaK/linux-
    6.8.0/drivers/gpu/drm/amd/amdgpu/../pm/powerplay/hwmgr/processpptables.c:124
    9:61 (LP: #2078041)
    - drm/amdgpu/pptable: convert some variable sized arrays to [] style
    - drm/amdgpu: convert some variable sized arrays to [] style
    - drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds
  * alsa: Headphone and Speaker couldn't output sound intermittently
    (LP: #2077690)
    - ALSA: hda/realtek - Fixed ALC256 headphone no sound
    - ALSA: hda/realtek - FIxed ALC285 headphone no sound
  * Fix ethernet performance on JSL and EHL (LP: #2077858)
    - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
  * Noble update: upstream stable patchset 2024-08-29 (LP: #2078289)
    - Revert "usb: xhci: prevent potential failure in handle_tx_event() for
      Transfer events without TRB"
    - Compiler Attributes: Add __uninitialized macro
    - mm: prevent derefencing NULL ptr in pfn_section_valid()
    - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
    - scsi: ufs: core: Fix ufshcd_abort_one racing issue
    - vfio/pci: Init the count variable in collecting hot-reset devices
    - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop
    - cachefiles: stop sending new request when dropping object
    - cachefiles: cancel all requests for the object that is being dropped
    - cachefiles: wait for ondemand_object_worker to finish when dropping object
    - cachefiles: cyclic allocation of msg_id to avoid reuse
    - cachefiles: add missing lock protection when polling
    - dsa: lan9303: Fix mapping between DSA port number and PHY address
    - filelock: fix potential use-after-free in posix_lock_inode
    - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
    - vfs: don't mod negative dentry count when on shrinker list
    - net: bcmasp: Fix error code in probe()
    - tcp: fix incorrect undo caused by DSACK of TLP retransmit
    - bpf: Fix too early release of tcx_entry
    - net: phy: microchip: lan87xx: reinit PHY after cable test
    - skmsg: Skip zero length skb in sk_msg_recvmsg
    - octeontx2-af: Fix incorrect value output on error path in
      rvu_check_rsrc_availability()
    - net: fix rc7's __skb_datagram_iter()
    - i40e: Fix XDP program unloading while removing the driver
    - net: ethernet: lantiq_etop: fix double free in detach
    - bpf: fix order of args in call to bpf_map_kvcalloc
    - bpf: make timer data struct more generic
    - bpf: replace bpf_timer_init with a generic helper
    - bpf: Fail bpf_timer_cancel when callback is being cancelled
    - net: ethernet: mtk-star-emac: set mac_managed_pm when probing
    - ppp: reject claimed-as-LCP but actually malformed packets
    - ethtool: netlink: do not return SQI value if link is down
    - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
    - net, sunrpc: Remap EPERM in case of connection failure in
      xs_tcp_setup_socket
    - s390: Mark psw in __load_psw_mask() as __unitialized
    - arm64: dts: qcom: sc8180x: Fix LLCC reg property again
    - firmware: cs_dsp: Fix overflow checking of wmfw header
    - firmware: cs_dsp: Return error if block header overflows file
    - firmware: cs_dsp: Validate payload length before processing block
    - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
    - ASoC: SOF: Intel: hda: fix null deref on system suspend entry
    - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
    - ARM: davinci: Convert comma to semicolon
    - octeontx2-af: replace cpt slot with lf id on reg write
    - octeontx2-af: fix a issue with cpt_lf_alloc mailbox
    - octeontx2-af: fix detection of IP layer
    - octeontx2-af: fix issue with IPv6 ext match for RSS
    - octeontx2-af: fix issue with IPv4 match for RSS
    - cifs: fix setting SecurityFlags to true
    - Revert "sched/fair: Make sure to try to detach at least one movable task"
    - tcp: avoid too many retransmit packets
    - net: ks8851: Fix deadlock with the SPI chip variant
    - net: ks8851: Fix potential TX stall after interface reopen
    - USB: serial: option: add Telit generic core-dump composition
    - USB: serial: option: add Telit FN912 rmnet compositions
    - USB: serial: option: add Fibocom FM350-GL
    - USB: serial: option: add support for Foxconn T99W651
    - USB: serial: option: add Netprisma LCUK54 series modules
    - USB: serial: option: add Rolling RW350-GL variants
    - USB: serial: mos7840: fix crash on resume
    - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
    - usb: dwc3: pci: add support for the Intel Panther Lake
    - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
    - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
      descriptor
    - misc: microchip: pci1xxxx: Fix return value of nvmem callbacks
    - hpet: Support 32-bit userspace
    - xhci: always resume roothubs if xHC was reset during resume
    - s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
    - mm: vmalloc: check if a hash-index is in cpu_possible_mask
    - mm/filemap: skip to create PMD-sized page cache if needed
    - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
    - ksmbd: discard write access to the directory open
    - iio: trigger: Fix condition for own trigger
    - arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical
      timer
    - arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on
    - nvmem: rmem: Fix return value of rmem_read()
    - nvmem: meson-efuse: Fix return value of nvmem callbacks
    - nvmem: core: only change name to fram for current attribute
    - platform/x86: toshiba_acpi: Fix array out-of-bounds access
    - tty: serial: ma35d1: Add a NULL check for of_node
    - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
    - ALSA: hda/realtek: Enable Mute LED on HP 250 G7
    - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
    - Fix userfaultfd_api to return EINVAL as expected
    - pmdomain: qcom: rpmhpd: Skip retention level for Power Domains
    - libceph: fix race between delayed_work() and ceph_monc_stop()
    - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
    - cpufreq: ACPI: Mark boost policy as enabled when setting boost
    - cpufreq: Allow drivers to advertise boost enabled
    - wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU
    - wireguard: allowedips: avoid unaligned 64-bit memory accesses
    - wireguard: queueing: annotate intentional data race in cpu round robin
    - wireguard: send: annotate intentional data race in checking empty queue
    - misc: fastrpc: Fix DSP capabilities request
    - misc: fastrpc: Avoid updating PD type for capability request
    - misc: fastrpc: Copy the complete capability structure to user
    - misc: fastrpc: Fix memory leak in audio daemon attach operation
    - misc: fastrpc: Fix ownership reassignment of remote heap
    - misc: fastrpc: Restrict untrusted app to attach to privileged PD
    - mm/shmem: disable PMD-sized page cache if needed
    - mm/damon/core: merge regions aggressively when max_nr_regions is unmet
    - selftests/net: fix gro.c compilation failure due to non-existent
      opt_ipproto_off
    - ext4: avoid ptr null pointer dereference
    - sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath
    - i2c: rcar: bring hardware to known state when probing
    - i2c: mark HostNotify target address as used
    - i2c: rcar: ensure Gen3+ reset does not disturb local targets
    - i2c: testunit: avoid re-issued work after read message
    - i2c: rcar: clear NO_RXDMA flag after resetting
    - x86/bhi: Avoid warning in #DB handler due to BHI mitigation
    - kbuild: Make ld-version.sh more robust against version string changes
    - spi: axi-spi-engine: fix sleep calculation
    - minixfs: Fix minixfs_rename with HIGHMEM
    - bpf: Defer work in bpf_timer_cancel_and_free
    - netfilter: nf_tables: prefer nft_chain_validate
    - arm64: dts: qcom: x1e80100-*: Allocate some CMA buffers
    - arm64: dts: qcom: sm6115: add iommu for sdhc_1
    - arm64: dts: qcom: qdu1000: Fix LLCC reg property
    - net: ethtool: Fix RSS setting
    - nilfs2: fix kernel bug on rename operation of broken directory
    - cachestat: do not flush stats in recency check
    - mm: fix crashes from deferred split racing folio migration
    - nvmem: core: limit cell sysfs permissions to main attribute ones
    - serial: imx: ensure RTS signal is not left active after shutdown
    - mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
    - mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
    - mm/readahead: limit page cache size in page_cache_ra_order()
    - Revert "dt-bindings: cache: qcom,llcc: correct QDU1000 reg entries"
    - sched/deadline: Fix task_struct reference leak
    - Upstream stable to v6.6.40, v6.6.41, v6.9.10
  * [SRU][HPE 24.04] Intel FVL NIC FW flash fails with inbox driver, causing
    driver not detected (LP: #2076675) // Noble update: upstream stable patchset
    2024-08-29 (LP: #2078289)
    - i40e: fix: remove needless retries of NVM update
  * CVE-2024-41022
    - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  *  Deadlock occurs while suspending md raid  (LP: #2073695)
    - md: change the return value type of md_write_start to void
    - md: fix deadlock between mddev_suspend and flush bio
  * Lenovo X12 Detachable Gen 2 unresponsive under light load (LP: #2076361)
    - drm/i915: Enable Wa_16019325821
    - drm/i915/guc: Add support for w/a KLVs
    - drm/i915/guc: Enable Wa_14019159160
  * Regression: unable to reach low idle states on Tiger Lake (LP: #2072679)
    - SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of
    - SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain
  * Noble update: upstream stable patchset 2024-08-22 (LP: #2077600)
    - locking/mutex: Introduce devm_mutex_init()
    - leds: an30259a: Use devm_mutex_init() for mutex initialization
    - crypto: hisilicon/debugfs - Fix debugfs uninit process issue
    - drm/lima: fix shared irq handling on driver remove
    - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
    - media: dvb: as102-fe: Fix as10x_register_addr packing
    - media: dvb-usb: dib0700_devices: Add missing release_firmware()
    - IB/core: Implement a limit on UMAD receive List
    - scsi: qedf: Make qedf_execute_tmf() non-preemptible
    - selftests/bpf: adjust dummy_st_ops_success to detect additional error
    - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops
    - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params
    - RISC-V: KVM: Fix the initial sample period value
    - crypto: aead,cipher - zeroize key buffer after use
    - media: mediatek: vcodec: Only free buffer VA that is not NULL
    - drm/amdgpu: Fix uninitialized variable warnings
    - drm/amdgpu: Initialize timestamp for some legacy SOCs
    - drm/amd/display: Check index msg_id before read or write
    - drm/amd/display: Check pipe offset before setting vblank
    - drm/amd/display: Skip finding free audio for unknown engine_id
    - drm/amd/display: Fix uninitialized variables in DM
    - drm/amdgpu: fix uninitialized scalar variable warning
    - drm/amdgpu: fix the warning about the expression (int)size - len
    - media: dw2102: Don't translate i2c read into write
    - riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma
    - sctp: prefer struct_size over open coded arithmetic
    - firmware: dmi: Stop decoding on broken entry
    - Input: ff-core - prefer struct_size over open coded arithmetic
    - wifi: mt76: replace skb_put with skb_put_zero
    - wifi: mt76: mt7996: add sanity checks for background radar trigger
    - thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data
    - media: dvb-frontends: tda18271c2dd: Remove casting during div
    - media: s2255: Use refcount_t instead of atomic_t for num_channels
    - media: dvb-frontends: tda10048: Fix integer overflow
    - i2c: i801: Annotate apanel_addr as __ro_after_init
    - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
    - orangefs: fix out-of-bounds fsid access
    - kunit: Fix timeout message
    - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
    - selftests/net: fix uninitialized variables
    - igc: fix a log entry using uninitialized netdev
    - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
    - serial: imx: Raise TX trigger level to 8
    - jffs2: Fix potential illegal address access in jffs2_free_inode
    - s390/pkey: Wipe sensitive data on failure
    - btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation
      warning
    - cdrom: rearrange last_media_change check to avoid unintentional overflow
    - tools/power turbostat: Remember global max_die_id
    - vhost: Use virtqueue mutex for swapping worker
    - vhost: Release worker mutex during flushes
    - vhost_task: Handle SIGKILL by flushing work and exiting
    - mac802154: fix time calculation in ieee802154_configure_durations()
    - net: phy: phy_device: Fix PHY LED blinking code comment
    - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
    - net/mlx5: E-switch, Create ingress ACL when needed
    - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
    - Bluetooth: hci_event: Fix setting of unicast qos interval
    - Bluetooth: Ignore too large handle values in BIG
    - Bluetooth: ISO: Check socket flag instead of hcon
    - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
    - KVM: s390: fix LPSWEY handling
    - e1000e: Fix S0ix residency on corporate systems
    - gpiolib: of: fix lookup quirk for MIPS Lantiq
    - net: allow skb_datagram_iter to be called from any context
    - net: txgbe: initialize num_q_vectors for MSI/INTx interrupts
    - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from
      __netif_rx()
    - gpio: mmio: do not calculate bgpio_bits via "ngpios"
    - wifi: wilc1000: fix ies_len type in connect path
    - riscv: kexec: Avoid deadlock in kexec crash path
    - netfilter: nf_tables: unconditionally flush pending work before notifier
    - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
    - selftests: fix OOM in msg_zerocopy selftest
    - selftests: make order checking verbose in msg_zerocopy selftest
    - inet_diag: Initialize pad field in struct inet_diag_req_v2
    - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI
      file
    - gpiolib: of: add polarity quirk for TSC2005
    - cpu: Fix broken cmdline "nosmp" and "maxcpus=0"
    - platform/x86: toshiba_acpi: Fix quickstart quirk handling
    - Revert "igc: fix a log entry using uninitialized netdev"
    - nilfs2: fix inode number range checks
    - nilfs2: add missing check for inode numbers on directory entries
    - mm: optimize the redundant loop of mm_update_owner_next()
    - mm: avoid overflows in dirty throttling logic
    - btrfs: fix adding block group to a reclaim list and the unused list during
      reclaim
    - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
    - Bluetooth: hci_bcm4377: Fix msgid release
    - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
    - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
    - fsnotify: Do not generate events for O_PATH file descriptors
    - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(),
      again"
    - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
    - drm/amdgpu/atomfirmware: silence UBSAN warning
    - drm: panel-orientation-quirks: Add quirk for Valve Galileo
    - clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag
    - clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
    - powerpc/pseries: Fix scv instruction crash with kexec
    - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0
    - mtd: rawnand: Ensure ECC configuration is propagated to upper layers
    - mtd: rawnand: Fix the nand_read_data_op() early check
    - mtd: rawnand: Bypass a couple of sanity checks during NAND identification
    - mtd: rawnand: rockchip: ensure NVDDR timings are rejected
    - net: stmmac: dwmac-qcom-ethqos: fix error array size
    - arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
    - media: dw2102: fix a potential buffer overflow
    - clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
    - clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs
    - clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
    - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
    - fs/ntfs3: Mark volume as dirty if xattr is broken
    - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
    - vhost-scsi: Handle vhost_vq_work_queue failures for events
    - nvme-multipath: find NUMA path only for online numa-node
    - dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
    - connector: Fix invalid conversion in cn_proc.h
    - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
    - regmap-i2c: Subtract reg size from max_write
    - platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6"
      tablet
    - platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
    - nvmet: fix a possible leak when destroy a ctrl during qp establishment
    - kbuild: fix short log for AS in link-vmlinux.sh
    - nfc/nci: Add the inconsistency check between the input data length and count
    - spi: cadence: Ensure data lines set to low during dummy-cycle period
    - ALSA: ump: Set default protocol when not given explicitly
    - drm/amdgpu: silence UBSAN warning
    - null_blk: Do not allow runt zone with zone capacity smaller then zone size
    - nilfs2: fix incorrect inode allocation from reserved inodes
    - leds: mlxreg: Use devm_mutex_init() for mutex initialization
    - net: dql: Avoid calling BUG() when WARN() is enough
    - drm/xe: Add outer runtime_pm protection to xe_live_ktest@xe_dma_buf
    - bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
    - drm/amdgpu: fix double free err_addr pointer warnings
    - drm/amd/display: Fix overlapping copy within dml_core_mode_programming
    - drm/amd/display: update pipe topology log to support subvp
    - drm/amd/display: Do not return negative stream id for array
    - drm/amd/display: ASSERT when failing to find index by plane/stream id
    - usb: xhci: prevent potential failure in handle_tx_event() for Transfer
      events without TRB
    - media: i2c: st-mipid02: Use the correct div function
    - media: tc358746: Use the correct div_ function
    - crypto: hisilicon/sec2 - fix for register offset
    - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
    - s390/pkey: Wipe copies of clear-key structures on failure
    - s390/pkey: Wipe copies of protected- and secure-keys
    - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
    - wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP
    - net: txgbe: remove separate irq request for MSI and INTx
    - net: txgbe: add extra handle for MSI/INTx into thread irq handle
    - net: txgbe: free isb resources at the right time
    - btrfs: always do the basic checks for btrfs_qgroup_inherit structure
    - net: phy: aquantia: add missing include guards
    - drm/fbdev-generic: Fix framebuffer on big endian devices
    - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only
    - net: rswitch: Avoid use-after-free in rswitch_poll()
    - ice: use proper macro for testing bit
    - drm/xe/mcr: Avoid clobbering DSS steering
    - tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO.
    - btrfs: zoned: fix calc_available_free_space() for zoned mode
    - btrfs: fix folio refcount in __alloc_dummy_extent_buffer()
    - Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report
    - drm/xe: fix error handling in xe_migrate_update_pgtables
    - drm/ttm: Always take the bo delayed cleanup path for imported bos
    - fs: don't misleadingly warn during thaw operations
    - drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs
    - drm/amdgpu: correct hbm field in boot status
    - Upstream stable to v6.6.38, v6.6.39, v6.9.9
  * Panels show garbage or flickering when i915.psr2 enabled (LP: #2069993)
    - SAUCE: drm/i915/display/psr: add a psr2 disable quirk table
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x93_0x15
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8b_0x07
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x78_0x07
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8c_0x07
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0x9a_0xf9
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x8f_0x15
    - SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0xa3_0xc3
  * Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux
    6.8 (LP: #2062951)
    - SAUCE: iommu/intel: disable DMAR for SKL integrated gfx
  * [SRU][22.04.5]: mpi3mr driver update (LP: #2073583)
    - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers
    - scsi: mpi3mr: Trigger support
    - scsi: mpi3mr: Add ioctl support for HDB
    - scsi: mpi3mr: Support PCI Error Recovery callback handlers
    - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery
    - scsi: mpi3mr: Driver version update
  * Fix power consumption while using HW accelerated video decode on AMD
    platforms (LP: #2073282)
    - drm/amdgpu/vcn: identify unified queue in sw init
    - drm/amdgpu/vcn: not pause dpg for unified queue
  * Noble update: upstream stable patchset 2024-08-09 (LP: #2076435)
    - usb: typec: ucsi: Never send a lone connector change ack
    - usb: typec: ucsi: Ack also failed Get Error commands
    - Input: ili210x - fix ili251x_read_touch_data() return value
    - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
    - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
    - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
    - pinctrl: rockchip: use dedicated pinctrl type for RK3328
    - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
    - MIPS: pci: lantiq: restore reset gpio polarity
    - ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
    - ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
    - ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
    - workqueue: Increase worker desc's length to 32
    - ASoC: q6apm-lpass-dai: close graph on prepare errors
    - bpf: Add missed var_off setting in set_sext32_default_val()
    - bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
    - s390/pci: Add missing virt_to_phys() for directed DIBV
    - ASoC: amd: acp: add a null check for chip_pdev structure
    - ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
    - ASoC: fsl-asoc-card: set priv->pdev before using it
    - net: dsa: microchip: fix initial port flush problem
    - openvswitch: get related ct labels from its master if it is not confirmed
    - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
    - ibmvnic: Free any outstanding tx skbs during scrq reset
    - net: phy: micrel: add Microchip KSZ 9477 to the device table
    - net: dsa: microchip: use collision based back pressure mode
    - ice: Rebuild TC queues on VSI queue reconfiguration
    - xdp: Remove WARN() from __xdp_reg_mem_model()
    - netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when
      CONFIG_SYSCTL=n
    - btrfs: use NOFS context when getting inodes during logging and log replay
    - Fix race for duplicate reqsk on identical SYN
    - ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
    - net: dsa: microchip: fix wrong register write when masking interrupt
    - sparc: fix old compat_sys_select()
    - sparc: fix compat recv/recvfrom syscalls
    - parisc: use correct compat recv/recvfrom syscalls
    - powerpc: restore some missing spu syscalls
    - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
    - ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
    - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data
      registers
    - net: mana: Fix possible double free in error handling path
    - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
    - vduse: validate block features only with block devices
    - vduse: Temporarily fail if control queue feature requested
    - x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
    - mtd: partitions: redboot: Added conversion of operands to a larger type
    - wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
    - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
    - RDMA/restrack: Fix potential invalid address access
    - net/iucv: Avoid explicit cpumask var allocation on stack
    - net/dpaa2: Avoid explicit cpumask var allocation on stack
    - crypto: ecdh - explicitly zeroize private_key
    - ALSA: emux: improve patch ioctl data validation
    - media: dvbdev: Initialize sbuf
    - irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for
      IRQ_LOONGARCH_CPU
    - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
    - gfs2: Fix NULL pointer dereference in gfs2_log_flush
    - drm/radeon/radeon_display: Decrease the size of allocated memory
    - nvme: fixup comment for nvme RDMA Provider Type
    - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
    - gpio: davinci: Validate the obtained number of IRQs
    - RISC-V: fix vector insn load/store width mask
    - drm/amdgpu: Fix pci state save during mode-1 reset
    - riscv: stacktrace: convert arch_stack_walk() to noinstr
    - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
    - randomize_kstack: Remove non-functional per-arch entropy filtering
    - x86: stop playing stack games in profile_pc()
    - parisc: use generic sys_fanotify_mark implementation
    - Revert "MIPS: pci: lantiq: restore reset gpio polarity"
    - pinctrl: qcom: spmi-gpio: drop broken pm8008 support
    - ocfs2: fix DIO failure due to insufficient transaction credits
    - nfs: drop the incorrect assertion in nfs_swap_rw()
    - mm: fix incorrect vbq reference in purge_fragmented_block
    - mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
    - mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
    - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
    - mmc: sdhci: Do not invert write-protect twice
    - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
    - iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
    - counter: ti-eqep: enable clock at probe
    - kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
    - kbuild: Fix build target deb-pkg: ln: failed to create hard link
    - i2c: testunit: don't erase registers after STOP
    - i2c: testunit: discard write requests while old command is running
    - ata: libata-core: Fix null pointer dereference on error
    - ata,scsi: libata-core: Do not leak memory for ata_port struct members
    - iio: adc: ad7266: Fix variable checking bug
    - iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
    - iio: chemical: bme680: Fix pressure value output
    - iio: chemical: bme680: Fix calibration data variable
    - iio: chemical: bme680: Fix overflows in compensate() functions
    - iio: chemical: bme680: Fix sensor data read operation
    - net: usb: ax88179_178a: improve link status logs
    - usb: gadget: printer: SS+ support
    - usb: gadget: printer: fix races against disable
    - usb: musb: da8xx: fix a resource leak in probe()
    - usb: atm: cxacru: fix endpoint checking in cxacru_bind()
    - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to
      avoid deadlock
    - usb: gadget: aspeed_udc: fix device address configuration
    - usb: typec: ucsi: glink: fix child node release in probe function
    - usb: ucsi: stm32: fix command completion handling
    - usb: dwc3: core: Add DWC31 version 2.00a controller
    - usb: dwc3: core: Workaround for CSR read timeout
    - Revert "serial: core: only stop transmit when HW fifo is empty"
    - serial: 8250_omap: Implementation of Errata i2310
    - serial: imx: set receiver level before starting uart
    - serial: core: introduce uart_port_tx_limited_flags()
    - serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
    - tty: mcf: MCF54418 has 10 UARTS
    - net: can: j1939: Initialize unused data in j1939_send_one()
    - net: can: j1939: recover socket queue on CAN bus error during BAM
      transmission
    - net: can: j1939: enhanced error handling for tightly received RTS messages
      in xtp_rx_rts_session_new
    - PCI/MSI: Fix UAF in msi_capability_init
    - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
    - irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node()
    - cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
    - irqchip/loongson-liointc: Set different ISRs for different cores
    - kbuild: Install dtb files as 0644 in Makefile.dtbinst
    - sh: rework sync_file_range ABI
    - btrfs: zoned: fix initial free space detection
    - csky, hexagon: fix broken sys_sync_file_range
    - hexagon: fix fadvise64_64 calling conventions
    - drm/drm_file: Fix pid refcounting race
    - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
    - drm/fbdev-dma: Only set smem_start is enable per module option
    - drm/amdgpu: avoid using null object of framebuffer
    - drm/i915/gt: Fix potential UAF by revoke of fence registers
    - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
    - drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is
      present
    - drm/amdgpu/atomfirmware: fix parsing of vram_info
    - batman-adv: Don't accept TT entries for out-of-spec VIDs
    - can: mcp251xfd: fix infinite loop when xmit fails
    - ata: ahci: Clean up sysfs file on error
    - ata: libata-core: Fix double free on error
    - ftruncate: pass a signed offset
    - syscalls: fix compat_sys_io_pgetevents_time64 usage
    - syscalls: fix sys_fanotify_mark prototype
    - Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
    - mm/page_alloc: Separate THP PCP into movable and non-movable categories
    - arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
    - arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
    - arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on
      rk3399-gru
    - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
    - arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
    - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
    - arm64: dts: rockchip: Add sound-dai-cells for RK3368
    - cxl/region: Move cxl_dpa_to_region() work to the region driver
    - cxl/region: Avoid null pointer dereference in region lookup
    - cxl/region: check interleave capability
    - serial: imx: only set receiver level if it is zero
    - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
    - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
    - pwm: stm32: Improve precision of calculation in .apply()
    - pwm: stm32: Fix for settings using period > UINT32_MAX
    - pwm: stm32: Calculate prescaler with a division instead of a loop
    - pwm: stm32: Refuse too small period requests
    - ASoC: cs42l43: Increase default type detect time and button delay
    - ASoC: amd: acp: move chip->flag variable assignment
    - bonding: fix incorrect software timestamping report
    - mlxsw: pci: Fix driver initialization with Spectrum-4
    - vxlan: Pull inner IP header in vxlan_xmit_one().
    - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
    - af_unix: Stop recv(MSG_PEEK) at consumed OOB skb.
    - af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head.
    - af_unix: Don't stop recv() at consumed ex-OOB skb.
    - af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head.
    - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
    - bpf: Take return from set_memory_rox() into account with
      bpf_jit_binary_lock_ro()
    - drm/xe: Fix potential integer overflow in page size calculation
    - drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
    - drm/amd/display: correct hostvm flag
    - drm/amd/display: Skip pipe if the pipe idx not set properly
    - bpf: Add a check for struct bpf_fib_lookup size
    - drm/xe/xe_devcoredump: Check NULL before assignments
    - iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
    - evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
    - drm/xe: Check pat.ops before dumping PAT settings
    - nvmet: do not return 'reserved' for empty TSAS values
    - nvmet: make 'tsas' attribute idempotent for RDMA
    - iommu/amd: Fix GT feature enablement again
    - gpiolib: cdev: Ignore reconfiguration without direction
    - kasan: fix bad call to unpoison_slab_object
    - mm/memory: don't require head page for do_set_pmd()
    - SUNRPC: Fix backchannel reply, again
    - Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment"
    - Revert "usb: gadget: u_ether: Replace netif_stop_queue with
      netif_device_detach"
    - tty: serial: 8250: Fix port count mismatch with the device
    - tty: mxser: Remove __counted_by from mxser_board.ports[]
    - nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[]
    - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models
    - bcachefs: Fix sb_field_downgrade validation
    - bcachefs: Fix sb-downgrade validation
    - bcachefs: Fix bch2_sb_downgrade_update()
    - bcachefs: Fix setting of downgrade recovery passes/errors
    - bcachefs: btree_gc can now handle unknown btrees
    - pwm: stm32: Fix calculation of prescaler
    - pwm: stm32: Fix error message to not describe the previous error path
    - cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management
    - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
    - arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B
    - netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
    - netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait
    - Upstream stable to v6.6.37, v6.9.8
  * [UBUNTU 22.04] s390/cpum_cf: make crypto counters upward compatible
    (LP: #2074380)
    - s390/cpum_cf: make crypto counters upward compatible across machine types
  * CVE-2024-45016
    - netem: fix return value if duplicate enqueue fails

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 17 Oct 2024 09:34:32 -0500

linux-nvidia (6.8.0-1015.16) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1015.16 -proposed tracker (LP: #2082104)

  [ Ubuntu: 6.8.0-47.47 ]

  * noble/linux: 6.8.0-47.47 -proposed tracker (LP: #2082118)
  * CVE-2024-45016
    - netem: fix return value if duplicate enqueue fails

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 02 Oct 2024 09:38:11 -0500

linux-nvidia (6.8.0-1014.15) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1014.15 -proposed tracker (LP: #2078086)

  [ Ubuntu: 6.8.0-45.45 ]

  * noble/linux: 6.8.0-45.45 -proposed tracker (LP: #2078100)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/s2024.08.05)
  * Noble update: upstream stable patchset 2024-08-09 (LP: #2076435) //
    CVE-2024-41009
    - bpf: Fix overrunning reservations in ringbuf
  * CVE-2024-42160
    - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    - f2fs: Add inline to f2fs_build_fault_attr() stub
  * Noble update: upstream stable patchset 2024-08-22 (LP: #2077600) //
    CVE-2024-42224
    - net: dsa: mv88e6xxx: Correct check for empty list
  * Noble update: upstream stable patchset 2024-08-22 (LP: #2077600) //
    CVE-2024-42154
    - tcp_metrics: validate source addr length
  * CVE-2024-42228
    - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  * CVE-2024-42159
    - scsi: mpi3mr: Sanitise num_phys

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 02 Sep 2024 21:31:16 -0500

linux-nvidia (6.8.0-1013.14) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1013.14 -proposed tracker (LP: #2076633)

  * Pull-request to address ARM SMMU issue (LP: #2031320)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Allow default substream bypass with a
      pasid support

  * Apply patch to set CONFIG_EFI_CAPSULE_LOADER=y for arm64 (LP: #2067111)
    - NVIDIA: [Config] EFI: set CAPSULE_LOADER=y for arm64

  * Pull request: mm: fix old/young bit handling in the faulting path of
    set_pte_range() (LP: #2075396)
    - mm: fix old/young bit handling in the faulting path

  * Pull-request:Add a kernel command-line option 'config_acs' to directly
    control all the ACS bits for specific devices (LP: #2073811)
    - PCI: Extend ACS configurability

  [ Ubuntu: 6.8.0-44.44 ]

  * noble/linux: 6.8.0-44.44 -proposed tracker (LP: #2076647)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.08.05)
  * Disable PCI_DYNAMIC_OF_NODES in Ubuntu (LP: #2074376)
    - [Config] Disable PCI_DYNAMIC_OF_NODES
  * [SRU] Turbostat support for Arrow Lake H (LP: #2074372)
    - tools/power turbostat: Enhance ARL/LNL support
    - x86/cpu: Add model number for another Intel Arrow Lake mobile processor
    - tools/power turbostat: Add ARL-H support
  * Noble update: upstream stable patchset 2024-07-30 (LP: #2075154)
    - fs/writeback: bail out if there is no more inodes for IO and queued once
    - padata: Disable BH when taking works lock on MT path
    - crypto: hisilicon/sec - Fix memory leak for sec resource release
    - crypto: hisilicon/qm - Add the err memory release process to qm uninit
    - io_uring/sqpoll: work around a potential audit memory leak
    - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
    - rcutorture: Make stall-tasks directly exit when rcutorture tests end
    - rcutorture: Fix invalid context warning when enable srcu barrier testing
    - block/ioctl: prefer different overflow check
    - ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
    - selftests/bpf: Prevent client connect before server bind in
      test_tc_tunnel.sh
    - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
    - batman-adv: bypass empty buckets in batadv_purge_orig_ref()
    - wifi: ath9k: work around memset overflow warning
    - af_packet: avoid a false positive warning in packet_setsockopt()
    - ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets
    - drop_monitor: replace spin_lock by raw_spin_lock
    - scsi: qedi: Fix crash while reading debugfs attribute
    - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module
    - net/sched: fix false lockdep warning on qdisc root lock
    - kselftest: arm64: Add a null pointer check
    - net: dsa: realtek: keep default LED state in rtl8366rb
    - netpoll: Fix race condition in netpoll_owner_active
    - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
    - HID: Add quirk for Logitech Casa touchpad
    - HID: asus: fix more n-key report descriptors if n-key quirked
    - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7
    - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
    - drm/amd/display: Exit idle optimizations before HDCP execution
    - platform/x86: toshiba_acpi: Add quirk for buttons on Z830
    - ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14
    - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0C0F
    - drm/lima: add mask irq callback to gp and pp
    - drm/lima: mask irqs in timeout path before hard reset
    - ALSA: hda/realtek: Add quirks for Lenovo 13X
    - powerpc/pseries: Enforce hcall result buffer validity and size
    - media: intel/ipu6: Fix build with !ACPI
    - media: mtk-vcodec: potential null pointer deference in SCP
    - powerpc/io: Avoid clang null pointer arithmetic warnings
    - platform/x86: p2sb: Don't init until unassigned resources have been assigned
    - power: supply: cros_usbpd: provide ID table for avoiding fallback match
    - iommu/arm-smmu-v3: Free MSIs in case of ENOMEM
    - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
    - kprobe/ftrace: bail out if ftrace was killed
    - usb: gadget: uvc: configfs: ensure guid to be valid before set
    - f2fs: remove clear SB_INLINECRYPT flag in default_options
    - usb: misc: uss720: check for incompatible versions of the Belkin F5U002
    - Avoid hw_desc array overrun in dw-axi-dmac
    - usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga
      Tab2 1380
    - usb: typec: ucsi_glink: drop special handling for CCI_BUSY
    - udf: udftime: prevent overflow in udf_disk_stamp_to_time()
    - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
    - f2fs: don't set RO when shutting down f2fs
    - MIPS: Octeon: Add PCIe link status check
    - serial: imx: Introduce timeout when waiting on transmitter empty
    - serial: exar: adding missing CTI and Exar PCI ids
    - usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API
    - tty: add the option to have a tty reject a new ldisc
    - vfio/pci: Collect hot-reset devices to local buffer
    - cpufreq: amd-pstate: fix memory leak on CPU EPP exit
    - ACPI: EC: Install address space handler at the namespace root
    - PCI: Do not wait for disconnected devices when resuming
    - ALSA: hda: cs35l41: Possible null pointer dereference in
      cs35l41_hda_unbind()
    - ALSA: seq: ump: Fix missing System Reset message handling
    - MIPS: Routerboard 532: Fix vendor retry check code
    - mips: bmips: BCM6358: make sure CBR is correctly set
    - tracing: Build event generation tests only as modules
    - ALSA: hda/realtek: Remove Framework Laptop 16 from quirks
    - ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option
    - ice: avoid IRQ collision to fix init failure on ACPI S3 resume
    - btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
    - net: mvpp2: use slab_build_skb for oversized frames
    - cipso: fix total option length computation
    - ALSA: hda: cs35l56: Component should be unbound before deconstruction
    - ALSA: hda: tas2781: Component should be unbound before deconstruction
    - bpf: Avoid splat in pskb_pull_reason
    - ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM
    - netrom: Fix a memory leak in nr_heartbeat_expiry()
    - ipv6: prevent possible NULL deref in fib6_nh_init()
    - ipv6: prevent possible NULL dereference in rt6_probe()
    - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
    - netns: Make get_net_ns() handle zero refcount net
    - qca_spi: Make interrupt remembering atomic
    - net: lan743x: disable WOL upon resume to restore full data path operation
    - net: lan743x: Support WOL at both the PHY and MAC appropriately
    - net: phy: mxl-gpy: Remove interrupt mask clearing from config_init
    - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
    - tipc: force a dst refcount before doing decryption
    - sched: act_ct: add netns into the key of tcf_ct_flow_table
    - ptp: fix integer overflow in max_vclocks_store
    - selftests: openvswitch: Use bash as interpreter
    - net: stmmac: No need to calculate speed divider when offload is disabled
    - virtio_net: checksum offloading handling fix
    - virtio_net: fixing XDP for fully checksummed packets handling
    - octeontx2-pf: Add error handling to VLAN unoffload handling
    - octeontx2-pf: Fix linking objects into multiple modules
    - netfilter: ipset: Fix suspicious rcu_dereference_protected()
    - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6
      behaviors
    - netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core
    - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type
    - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
    - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
    - RDMA/bnxt_re: Fix the max msix vectors macro
    - spi: cs42l43: Correct SPI root clock speed
    - RDMA/rxe: Fix responder length checking for UD request packets
    - regulator: core: Fix modpost error "regulator_get_regmap" undefined
    - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
    - dmaengine: ioatdma: Fix leaking on version mismatch
    - dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
    - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
    - dmaengine: fsl-edma: avoid linking both modules
    - dmaengine: ioatdma: Fix missing kmem_cache_destroy()
    - regulator: bd71815: fix ramp values
    - thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse
      data
    - arm64: dts: imx8mp: Fix TC9595 input clock on DH i.MX8M Plus DHCOM SoM
    - arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix BT shutdown GPIO
    - arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property
    - arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin
    - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is
      fine."
    - spi: spi-imx: imx51: revert burst length calculation back to bits_per_word
    - io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed
    - firmware: psci: Fix return value from psci_system_suspend()
    - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init
    - RDMA/mlx5: Add check for srq max_sge attribute
    - RDMA/mana_ib: Ignore optional access flags for MRs
    - ACPI: EC: Evaluate orphan _REG under EC device
    - arm64: defconfig: enable the vf610 gpio driver
    - ext4: avoid overflow when setting values via sysfs
    - ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
    - net: stmmac: Assign configured channel value to EXTTS event
    - net: usb: ax88179_178a: improve reset check
    - net: do not leave a dangling sk pointer, when socket creation fails
    - btrfs: retry block group reclaim without infinite loop
    - scsi: ufs: core: Free memory allocated for model before reinit
    - cifs: fix typo in module parameter enable_gcm_256
    - LoongArch: Fix watchpoint setting error
    - LoongArch: Trigger user-space watchpoints correctly
    - LoongArch: Fix multiple hardware watchpoint issues
    - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
    - KVM: arm64: Disassociate vcpus from redistributor region on teardown
    - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
    - RDMA/rxe: Fix data copy for IB_SEND_INLINE
    - RDMA/mlx5: Remove extra unlock on error path
    - RDMA/mlx5: Follow rb_key.ats when creating new mkeys
    - ovl: fix encoding fid for lower only root
    - ALSA: hda/realtek: Limit mic boost on N14AP7
    - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9
    - drm/i915/mso: using joiner is not possible with eDP MSO
    - drm/radeon: fix UBSAN warning in kv_dpm.c
    - drm/amdgpu: fix UBSAN warning in kv_dpm.c
    - dt-bindings: dma: fsl-edma: fix dma-channels constraints
    - ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
    - ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
    - gcov: add support for GCC 14
    - kcov: don't lose track of remote references during softirqs
    - efi/x86: Free EFI memory map only when installing a new one.
    - serial: 8250_dw: Revert "Move definitions to the shared header"
    - mm: mmap: allow for the maximum number of bits for randomizing mmap_base by
      default
    - tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
    - mm/page_table_check: fix crash on ZONE_DEVICE
    - i2c: ocores: set IACK bit after core is enabled
    - dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema
    - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller
      schema
    - spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup()
    - arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
    - spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4
    - perf: script: add raw|disasm arguments to --insn-trace option
    - nbd: Improve the documentation of the locking assumptions
    - nbd: Fix signal handling
    - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
    - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
    - x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
    - drm/amd/display: revert Exit idle optimizations before HDCP execution
    - ASoC: Intel: sof-sdw: really remove FOUR_SPEAKER quirk
    - net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
    - kprobe/ftrace: fix build error due to bad function definition
    - hid: asus: asus_report_fixup: fix potential read out of bounds
    - Revert "mm: mmap: allow for the maximum number of bits for randomizing
      mmap_base by default"
    - platform/chrome: cros_usbpd_logger: provide ID table for avoiding fallback
      match
    - platform/chrome: cros_usbpd_notify: provide ID table for avoiding fallback
      match
    - ubsan: Avoid i386 UBSAN handler crashes with Clang
    - arm64: defconfig: select INTERCONNECT_QCOM_SM6115 as built-in
    - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
    - devlink: use kvzalloc() to allocate devlink instance resources
    - wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms
    - clocksource: Make watchdog and suspend-timing multiplication overflow safe
    - ACPI: resource: Do IRQ override on GMxBGxx (XMG APEX 17 M23)
    - wifi: ath12k: add string type to search board data in board-2.bin for
      WCN7850
    - wifi: ath12k: add firmware-2.bin support
    - wifi: ath12k: fix kernel crash during resume
    - arm64/sysreg: Update PIE permission encodings
    - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MV
    - wifi: ath12k: fix the problem that down grade phy mode operation
    - bpf: avoid uninitialized warnings in verifier_global_subprogs.c
    - selftests: net: fix timestamp not arriving in cmsg_time.sh
    - net: ena: Add validation for completion descriptors consistency
    - drm/amd/display: Workaround register access in idle race with cursor
    - cgroup/cpuset: Make cpuset hotplug processing synchronous
    - platform/x86: x86-android-tablets: Unregister devices in reverse order
    - platform/x86: x86-android-tablets: Add Lenovo Yoga Tablet 2 Pro 1380F/L data
    - ALSA: hda/realtek: Add quirks for HP Omen models using CS35L41
    - ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
    - ext4: do not create EA inode under buffer lock
    - f2fs: fix to detect inconsistent nat entry during truncation
    - usb: typec: ucsi_glink: rework quirks implementation
    - xhci: remove XHCI_TRUST_TX_LENGTH quirk
    - clk: Add a devm variant of clk_rate_exclusive_get()
    - clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
    - i2c: lpi2c: Avoid calling clk_get_rate during transfer
    - cxl: Add post-reset warning if reset results in loss of previously committed
      HDM decoders
    - OPP: Fix required_opp_tables for multiple genpds using same table
    - wifi: iwlwifi: mvm: fix ROC version check
    - wifi: mac80211: Recalc offload when monitor stop
    - ice: fix 200G link speed message log
    - ice: implement AQ download pkg retry
    - bpf: Fix reg_set_min_max corruption of fake_reg
    - ALSA: hda: cs35l41: Component should be unbound before deconstruction
    - netdev-genl: fix error codes when outputting XDP features
    - arm64: dts: freescale: imx8mm-verdin: Fix GPU speed
    - phy: qcom-qmp: qserdes-txrx: Add missing registers offsets
    - phy: qcom-qmp: pcs: Add missing v6 N4 register offsets
    - phy: qcom: qmp-combo: Switch from V6 to V6 N4 register offsets
    - powerpc/crypto: Add generated P8 asm to .gitignore
    - spi: Exctract spi_dev_check_cs() helper
    - spi: Fix SPI slave probe failure
    - net: phy: dp83tg720: wake up PHYs in managed mode
    - net: phy: dp83tg720: get master/slave configuration in link down state
    - RDMA/mlx5: Ensure created mkeys always have a populated rb_key
    - drm/amdgpu: fix locking scope when flushing tlb
    - drm/amd/display: Remove redundant idle optimization check
    - drm/amd/display: Attempt to avoid empty TUs when endpoint is DPIA
    - ata: ahci: Do not enable LPM if no LPM states are supported by the HBA
    - dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()
    - net/tcp_ao: Don't leak ao_info on error-path
    - mm: shmem: fix getting incorrect lruvec when replacing a shmem folio
    - selftests: mptcp: print_test out of verify_listener_events
    - selftests: mptcp: userspace_pm: fixed subtest names
    - ima: Avoid blocking in RCU read-side critical section
    - virt: guest_memfd: fix reference leak on hwpoisoned page
    - thermal: int340x: processor_thermal: Support shared interrupts
    - thermal: core: Change PM notifier priority to the minimum
    - wifi: ath12k: check M3 buffer size as well whey trying to reuse it
    - Upstream stable to v6.6.36, v6.9.7
  * [SRU] Add Dynamic Tuning Technology (DTT)  support for Lunar Lake
    (LP: #2073961)
    - thermal: int340x: processor_thermal: Add Lunar Lake-M PCI ID
  * Kubuntu 24.04 freezes after plugging in ethernet cable (LP: #2073358)
    - e1000e: move force SMBUS near the end of enable_ulp function
    - e1000e: fix force smbus during suspend flow
  * Noble update: upstream stable patchset 2024-07-25 (LP: #2074091)
    - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
    - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
    - wifi: cfg80211: fully move wiphy work to unbound workqueue
    - wifi: cfg80211: Lock wiphy in cfg80211_get_station
    - wifi: cfg80211: pmsr: use correct nla_get_uX functions
    - wifi: iwlwifi: mvm: don't initialize csa_work twice
    - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
    - wifi: iwlwifi: mvm: set properly mac header
    - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
    - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
    - wifi: iwlwifi: mvm: don't read past the mfuart notifcation
    - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
    - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort()
    - RISC-V: KVM: No need to use mask when hart-index-bit is 0
    - RISC-V: KVM: Fix incorrect reg_subtype labels in
      kvm_riscv_vcpu_set_reg_isa_ext function
    - ax25: Fix refcount imbalance on inbound connections
    - ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
    - net/ncsi: Fix the multi thread manner of NCSI driver
    - net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume
    - bpf: Fix a potential use-after-free in bpf_link_free()
    - KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent
    - KVM: SEV-ES: Delegate LBR virtualization to the processor
    - vmxnet3: disable rx data ring on dma allocation failure
    - ipv6: ioam: block BH from ioam6_output()
    - ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
    - net: tls: fix marking packets as decrypted
    - bpf: Set run context for rawtp test_run callback
    - octeontx2-af: Always allocate PF entries from low prioriy zone
    - net/smc: avoid overwriting when adjusting sock bufsizes
    - net: phy: Micrel KSZ8061: fix errata solution not taking effect problem
    - net: sched: sch_multiq: fix possible OOB write in multiq_tune()
    - vxlan: Fix regression when dropping packets due to invalid src addresses
    - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
    - mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB
    - net/mlx5: Stop waiting for PCI if pci channel is offline
    - net/mlx5: Always stop health timer during driver removal
    - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
    - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
    - ptp: Fix error message on failed pin verification
    - ice: fix iteration of TLVs in Preserved Fields Area
    - ice: remove af_xdp_zc_qps bitmap
    - ice: add flag to distinguish reset from .ndo_bpf in XDP rings config
    - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
    - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted
      peer.
    - af_unix: Annodate data-races around sk->sk_state for writers.
    - af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
    - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and
      poll().
    - af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
    - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
    - af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
    - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
    - af_unix: Annotate data-races around sk->sk_sndbuf.
    - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
    - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
    - af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
    - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
    - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
    - ipv6: fix possible race in __fib6_drop_pcpu_from()
    - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
    - selftests/mm: log a consistent test name for check_compaction
    - irqchip/riscv-intc: Allow large non-standard interrupt number
    - irqchip/riscv-intc: Introduce Andes hart-level interrupt controller
    - eventfs: Update all the eventfs_inodes from the events descriptor
    - io_uring/rsrc: don't lock while !TASK_RUNNING
    - io_uring: check for non-NULL file pointer in io_file_can_poll()
    - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
    - USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected
    - usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
    - usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
    - mei: me: release irq in mei_me_pci_resume error path
    - tty: n_tty: Fix buffer offsets when lookahead is used
    - serial: port: Don't block system suspend even if bytes are left to xmit
    - landlock: Fix d_parent walk
    - jfs: xattr: fix buffer overflow for invalid xattr
    - xhci: Set correct transferred length for cancelled bulk transfers
    - xhci: Apply reset resume quirk to Etron EJ188 xHCI host
    - xhci: Handle TD clearing for multiple streams case
    - xhci: Apply broken streams quirk to Etron EJ188 xHCI host
    - thunderbolt: debugfs: Fix margin debugfs node creation condition
    - scsi: core: Disable CDL by default
    - scsi: mpi3mr: Fix ATA NCQ priority support
    - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
    - scsi: sd: Use READ(16) when reading block zero on large capacity disks
    - gve: Clear napi->skb before dev_kfree_skb_any()
    - powerpc/uaccess: Fix build errors seen with GCC 13/14
    - HID: nvidia-shield: Add missing check for input_ff_create_memless
    - cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c
    - cxl/region: Fix memregion leaks in devm_cxl_add_region()
    - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
    - cachefiles: remove requests from xarray during flushing requests
    - cachefiles: add spin_lock for cachefiles_ondemand_info
    - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
    - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
    - cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()
    - cachefiles: never get a new anonymous fd if ondemand_id is valid
    - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
    - cachefiles: flush all requests after setting CACHEFILES_DEAD
    - selftests/ftrace: Fix to check required event file
    - clk: sifive: Do not register clkdevs for PRCI clocks
    - NFSv4.1 enforce rootpath check in fs_location query
    - SUNRPC: return proper error from gss_wrap_req_priv
    - NFS: add barriers when testing for NFS_FSDATA_BLOCKED
    - selftests/tracing: Fix event filter test to retry up to 10 times
    - nvme: fix nvme_pr_* status code parsing
    - drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation
    - platform/x86: dell-smbios: Fix wrong token data in sysfs
    - gpio: tqmx86: fix typo in Kconfig label
    - gpio: tqmx86: introduce shadow register for GPIO output value
    - gpio: tqmx86: store IRQ trigger type and unmask status separately
    - gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type
    - HID: core: remove unnecessary WARN_ON() in implement()
    - iommu/amd: Fix sysfs leak in iommu init
    - iommu: Return right value in iommu_sva_bind_device()
    - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
    - io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue()
    - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
    - drm/vmwgfx: Refactor drm connector probing for display modes
    - drm/vmwgfx: Filter modes which exceed graphics memory
    - drm/vmwgfx: 3D disabled should not effect STDU memory limits
    - drm/vmwgfx: Remove STDU logic from generic mode_valid function
    - drm/vmwgfx: Don't memcmp equivalent pointers
    - af_unix: Annotate data-race of sk->sk_state in unix_accept().
    - modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o
    - net: sfp: Always call `sfp_sm_mod_remove()` on remove
    - net: hns3: fix kernel crash problem in concurrent scenario
    - net: hns3: add cond_resched() to hns3 ring buffer init process
    - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
    - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width
    - drm/komeda: check for error-valued pointer
    - drm/bridge/panel: Fix runtime warning on panel bridge release
    - tcp: fix race in tcp_v6_syn_recv_sock()
    - net dsa: qca8k: fix usages of device_get_named_child_node()
    - geneve: Fix incorrect inner network header offset when innerprotoinherit is
      set
    - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN)
      packets
    - Bluetooth: fix connection setup in l2cap_connect
    - netfilter: nft_inner: validate mandatory meta and payload
    - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set
      type
    - x86/asm: Use %c/%n instead of %P operand modifier in asm templates
    - x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking
    - scsi: ufs: core: Quiesce request queues before checking pending cmds
    - net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP
    - gve: ignore nonrelevant GSO type bits when processing TSO headers
    - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs
      parameters
    - block: sed-opal: avoid possible wrong address reference in
      read_sed_opal_key()
    - block: fix request.queuelist usage in flush
    - nvmet-passthru: propagate status from id override functions
    - net/ipv6: Fix the RT cache flush via sysctl using a previous delay
    - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
    - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
    - ionic: fix use after netif_napi_del()
    - af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
    - bnxt_en: Adjust logging of firmware messages in case of released token in
      __hwrm_send()
    - misc: microchip: pci1xxxx: fix double free in the error handling of
      gp_aux_bus_probe()
    - ksmbd: move leading slash check to smb2_get_name()
    - ksmbd: fix missing use of get_write in in smb2_set_ea()
    - x86/boot: Don't add the EFI stub to targets, again
    - iio: adc: ad9467: fix scan type sign
    - iio: dac: ad5592r: fix temperature channel scaling value
    - iio: invensense: fix odr switching to same value
    - iio: imu: inv_icm42600: delete unneeded update watermark call
    - drivers: core: synchronize really_probe() and dev_uevent()
    - parisc: Try to fix random segmentation faults in package builds
    - ACPI: x86: Force StorageD3Enable on more products
    - drm/exynos/vidi: fix memory leak in .get_modes()
    - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
    - mptcp: ensure snd_una is properly initialized on connect
    - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
    - mptcp: pm: update add_addr counters after connect
    - clkdev: Update clkdev id usage to allow for longer names
    - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
    - x86/kexec: Fix bug with call depth tracking
    - x86/amd_nb: Check for invalid SMN reads
    - perf/core: Fix missing wakeup when waiting for context reference
    - perf auxtrace: Fix multiple use of --itrace option
    - riscv: fix overlap of allocated page and PTR_ERR
    - tracing/selftests: Fix kprobe event name test for .isra. functions
    - kheaders: explicitly define file modes for archived headers
    - null_blk: Print correct max open zones limit in null_init_zoned_dev()
    - sock_map: avoid race between sock_map_close and sk_psock_put
    - dma-buf: handle testing kthreads creation failure
    - vmci: prevent speculation leaks by sanitizing event in event_deliver()
    - spmi: hisi-spmi-controller: Do not override device identifier
    - knfsd: LOOKUP can return an illegal error value
    - fs/proc: fix softlockup in __read_vmcore
    - ocfs2: use coarse time for new created files
    - ocfs2: fix races between hole punching and AIO+DIO
    - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
    - dmaengine: axi-dmac: fix possible race in remove()
    - remoteproc: k3-r5: Wait for core0 power-up before powering up core1
    - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs
    - iio: adc: axi-adc: make sure AXI clock is enabled
    - iio: invensense: fix interrupt timestamp alignment
    - riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
    - rtla/timerlat: Simplify "no value" printing on top
    - rtla/auto-analysis: Replace \t with spaces
    - drm/i915/gt: Disarm breadcrumbs if engines are already idle
    - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
    - drm/i915/dpt: Make DPT object unshrinkable
    - drm/i915: Fix audio component initialization
    - intel_th: pci: Add Meteor Lake-S support
    - pmdomain: ti-sci: Fix duplicate PD referrals
    - btrfs: zoned: fix use-after-free due to race with dev replace
    - xfs: fix imprecise logic in xchk_btree_check_block_owner
    - xfs: fix scrub stats file permissions
    - xfs: fix SEEK_HOLE/DATA for regions with active COW extents
    - xfs: shrink failure needs to hold AGI buffer
    - xfs: ensure submit buffers on LSN boundaries in error handlers
    - xfs: allow sunit mount option to repair bad primary sb stripe values
    - xfs: don't use current->journal_info
    - xfs: allow cross-linking special files without project quota
    - swiotlb: Enforce page alignment in swiotlb_alloc()
    - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE
    - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary
    - tick/nohz_full: Don't abuse smp_call_function_single() in
      tick_setup_device()
    - mm/huge_memory: don't unpoison huge_zero_folio
    - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
    - Revert "fork: defer linking file vma until vma is fully initialized"
    - remoteproc: k3-r5: Jump to error handling labels in start/stop errors
    - greybus: Fix use-after-free bug in gb_interface_release due to race
      condition.
    - ima: Fix use-after-free on a dentry's dname.name
    - serial: core: Add UPIO_UNKNOWN constant for unknown port type
    - serial: port: Introduce a common helper to read properties
    - serial: 8250_dw: Switch to use uart_read_port_properties()
    - serial: 8250_dw: Replace ACPI device check by a quirk
    - serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw
    - usb-storage: alauda: Check whether the media is initialized
    - misc: microchip: pci1xxxx: Fix a memory leak in the error handling of
      gp_aux_bus_probe()
    - i2c: at91: Fix the functionality flags of the slave-only interface
    - i2c: designware: Fix the functionality flags of the slave-only interface
    - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
    - wifi: ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs
    - cpufreq: amd-pstate: Unify computation of
      {max,min,nominal,lowest_nonlinear}_freq
    - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing
    - cpufreq: amd-pstate: remove global header file
    - virtio_net: fix possible dim status unrecoverable
    - net: ethernet: mtk_eth_soc: handle dma buffer size soc specific
    - ice: fix reads from NVM Shadow RAM on E830 and E825-C devices
    - ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors()
    - x86/cpu: Get rid of an unnecessary local variable in get_cpu_address_sizes()
    - x86/cpu: Provide default cache line size if not enumerated
    - selftests/mm: ksft_exit functions do not return
    - selftests/mm: compaction_test: fix bogus test success and reduce probability
      of OOM-killer invocation
    - .editorconfig: remove trim_trailing_whitespace option
    - kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
    - ata: libata-scsi: Set the RMB bit only for removable media devices
    - powerpc/85xx: fix compile error without CONFIG_CRASH_DUMP
    - kselftest/alsa: Ensure _GNU_SOURCE is defined
    - thermal: core: Do not fail cdev registration because of invalid initial
      state
    - Bluetooth: hci_sync: Fix not using correct handle
    - net/sched: initialize noop_qdisc owner
    - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
    - drm/nouveau: don't attempt to schedule hpd_work on headless cards
    - drm/xe/xe_gt_idle: use GT forcewake domain assertion
    - drm/xe: flush engine buffers before signalling user fence on all engines
    - drm/xe: Remove mem_access from guc_pc calls
    - drm/xe: move disable_c6 call
    - bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response
    - iio: imu: bmi323: Fix trigger notification in case of error
    - iio: pressure: bmp280: Fix BMP580 temperature reading
    - iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe()
    - thermal: ACPI: Invalidate trip points with temperature of 0 or below
    - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
    - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
    - perf script: Show also errors for --insn-trace option
    - wifi: cfg80211: validate HE operation element parsing
    - wifi: rtlwifi: Ignore IEEE80211_CONF_CHANGE_RETRY_LIMITS
    - locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc
    - ata: ahci: Do not apply Intel PCS quirk on Intel Alder Lake
    - ata: libata-core: Add ATA_HORKAGE_NOLPM for Apacer AS340
    - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1
    - ata: libata-core: Add ATA_HORKAGE_NOLPM for AMD Radeon S3 SSD
    - kexec: fix the unexpected kexec_dprintk() macro
    - ocfs2: update inode fsync transaction id in ocfs2_unlink and ocfs2_link
    - dm-integrity: set discard_granularity to logical block size
    - drm/bridge: aux-hpd-bridge: correct devm_drm_dp_hpd_bridge_add() stub
    - iio: temperature: mcp9600: Fix temperature reading for negative values
    - drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2
    - riscv: force PAGE_SIZE linear mapping if debug_pagealloc is enabled
    - drm/xe: Properly handle alloc_guc_id() failure
    - wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8
    - wifi: iwlwifi: mvm: fix a crash on 7265
    - mei: vsc: Fix wrong invocation of ACPI SID method
    - Upstream stable to v6.6.35, v6.9.6
  * [SRU] Add support for intel trace hub for last platforms (LP: #2073926) //
    Noble update: upstream stable patchset 2024-07-25 (LP: #2074091)
    - intel_th: pci: Add Granite Rapids support
    - intel_th: pci: Add Granite Rapids SOC support
    - intel_th: pci: Add Sapphire Rapids SOC support
    - intel_th: pci: Add Lunar Lake support
  * Fix L2CAP/LE/CPU/BV-02-C bluetooth certification failure (LP: #2072858) //
    Noble update: upstream stable patchset 2024-07-25 (LP: #2074091)
    - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
  * Noble update: upstream stable patchset 2024-07-22 (LP: #2073788)
    - drm/i915/hwmon: Get rid of devm
    - afs: Don't cross .backup mountpoint from backup volume
    - erofs: avoid allocating DEFLATE streams before mounting
    - vxlan: Fix regression when dropping packets due to invalid src addresses
    - drm/sun4i: hdmi: Convert encoder to atomic
    - drm/sun4i: hdmi: Move mode_set into enable
    - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
    - media: lgdt3306a: Add a check against null-pointer-def
    - drm/amdgpu: add error handle to avoid out-of-bounds
    - wifi: rtw89: correct aSIFSTime for 6GHz band
    - ata: pata_legacy: make legacy_exit() work again
    - fsverity: use register_sysctl_init() to avoid kmemleak warning
    - proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission
      operation
    - platform/chrome: cros_ec: Handle events during suspend after resume
      completion
    - thermal/drivers/qcom/lmh: Check for SCM availability at probe
    - soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
    - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
    - arm64: tegra: Correct Tegra132 I2C alias
    - arm64: dts: qcom: qcs404: fix bluetooth device address
    - md/raid5: fix deadlock that raid5d() wait for itself to clear
      MD_SB_CHANGE_PENDING
    - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
    - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
    - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
    - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
    - arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
    - arm64: dts: hi3798cv200: fix the size of GICR
    - arm64: dts: ti: verdin-am62: Set memory size to 2gb
    - media: mc: Fix graph walk in media_pipeline_start
    - media: mc: mark the media devnode as registered from the, start
    - media: mxl5xx: Move xpt structures off stack
    - media: v4l2-core: hold videodev_lock until dev reg, finishes
    - media: v4l: async: Properly re-initialise notifier entry in unregister
    - media: v4l: async: Don't set notifier's V4L2 device if registering fails
    - media: v4l: async: Fix notifier list entry init
    - mmc: core: Add mmc_gpiod_set_cd_config() function
    - mmc: sdhci: Add support for "Tuning Error" interrupts
    - mmc: sdhci-acpi: Sort DMI quirks alphabetically
    - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
    - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
    - mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus
      T100TA
    - drm/fbdev-generic: Do not set physical framebuffer address
    - fbdev: savage: Handle err return when savagefb_check_var failed
    - drm/amdgpu/atomfirmware: add intergrated info v2.3 table
    - 9p: add missing locking around taking dentry fid list
    - drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms
    - Revert "drm/amdkfd: fix gfx_target_version for certain 11.0.3 devices"
    - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
    - KVM: arm64: Fix AArch32 register narrowing on userspace write
    - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
    - KVM: arm64: AArch32: Fix spurious trapping of conditional instructions
    - LoongArch: Add all CPUs enabled by fdt to NUMA node 0
    - LoongArch: Override higher address bits in JUMP_VIRT_ADDR
    - clk: bcm: dvp: Assign ->num before accessing ->hws
    - clk: bcm: rpi: Assign ->num before accessing ->hws
    - clk: qcom: clk-alpha-pll: fix rate setting for Stromer PLLs
    - crypto: ecdsa - Fix module auto-load on add-key
    - crypto: ecrdsa - Fix module auto-load on add_key
    - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
    - kbuild: Remove support for Clang's ThinLTO caching
    - mm: fix race between __split_huge_pmd_locked() and GUP-fast
    - filemap: add helper mapping_max_folio_size()
    - iomap: fault in smaller chunks for non-large folio mappings
    - i2c: acpi: Unbind mux adapters before delete
    - HID: i2c-hid: elan: fix reset suspend current leakage
    - scsi: core: Handle devices which return an unusually large VPD page count
    - net/ipv6: Fix route deleting failure when metric equals 0
    - net/9p: fix uninit-value in p9_client_rpc()
    - mm/ksm: fix ksm_pages_scanned accounting
    - mm/ksm: fix ksm_zero_pages accounting
    - kmsan: do not wipe out origin when doing partial unpoisoning
    - tpm_tis: Do *not* flush uninitialized work
    - intel_th: pci: Add Meteor Lake-S CPU support
    - rtla/timerlat: Fix histogram report when a cpu count is 0
    - sparc64: Fix number of online CPUs
    - mm/cma: drop incorrect alignment check in cma_init_reserved_mem
    - mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid
    - mm: /proc/pid/smaps_rollup: avoid skipping vma after getting mmap_lock again
    - mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
    - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
    - selftests/mm: fix build warnings on ppc64
    - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
    - bonding: fix oops during rmmod
    - wifi: ath10k: fix QCOM_RPROC_COMMON dependency
    - kdb: Fix buffer overflow during tab-complete
    - kdb: Use format-strings rather than '\0' injection in kdb_read()
    - kdb: Fix console handling when editing and tab-completing commands
    - kdb: Merge identical case statements in kdb_read()
    - kdb: Use format-specifiers rather than memset() for padding in kdb_read()
    - sparc: move struct termio to asm/termios.h
    - drm/amdkfd: handle duplicate BOs in reserve_bo_and_cond_vms
    - ext4: Fixes len calculation in mpage_journal_page_buffers
    - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
    - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
    - riscv: dts: starfive: Remove PMIC interrupt info for Visionfive 2 board
    - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
    - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
    - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
    - parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA
    - parisc: Define sigset_t in parisc uapi header
    - s390/ap: Fix crash in AP internal function modify_bitmap()
    - s390/cpacf: Split and rework cpacf query functions
    - s390/cpacf: Make use of invalid opcode produce a link error
    - i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
    - genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
    - ASoC: SOF: ipc4-topology: Fix input format query of process modules without
      base extension
    - ALSA: ump: Don't clear bank selection after sending a program change
    - ALSA: ump: Don't accept an invalid UMP protocol number
    - EDAC/amd64: Convert PCIBIOS_* return codes to errnos
    - EDAC/igen6: Convert PCIBIOS_* return codes to errnos
    - nfs: fix undefined behavior in nfs_block_bits()
    - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
    - eventfs: Fix a possible null pointer dereference in eventfs_find_events()
    - eventfs: Keep the directories from having the same inode number as files
    - tracefs: Clear EVENT_INODE flag in tracefs_drop_inode()
    - btrfs: fix crash on racing fsync and size-extending write into prealloc
    - btrfs: fix leak of qgroup extent records after transaction abort
    - ALSA: seq: Fix incorrect UMP type for system messages
    - powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH
    - smb: client: fix deadlock in smb2_find_smb_tcon()
    - smp: Provide 'setup_max_cpus' definition on UP too
    - drm/xe/bb: assert width in xe_bb_create_job()
    - crypto: starfive - Do not free stack buffer
    - btrfs: qgroup: fix initialization of auto inherit array
    - wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor
    - media: mgb4: Fix double debugfs remove
    - media: ov2740: Fix LINK_FREQ and PIXEL_RATE control value reporting
    - firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails
    - LoongArch: Fix built-in DTB detection
    - LoongArch: Fix entry point in kernel image header
    - clk: qcom: apss-ipq-pll: use stromer ops for IPQ5018 to fix boot failure
    - net/tcp: Don't consider TCP_CLOSE in TCP_AO_ESTABLISHED
    - selftests: net: lib: support errexit with busywait
    - selftests: net: lib: avoid error removing empty netns name
    - cpufreq: amd-pstate: Fix the inconsistency in max frequency units
    - mm/memory-failure: fix handling of dissolved but not taken off from buddy
      pages
    - selftests/mm: compaction_test: fix bogus test success on Aarch64
    - irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails
    - Revert "perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES
      event"
    - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
    - riscv: enable HAVE_ARCH_HUGE_VMAP for XIP kernel
    - btrfs: qgroup: update rescan message levels and error codes
    - btrfs: qgroup: fix qgroup id collision across mounts
    - btrfs: cache folio size and shift in extent_buffer
    - btrfs: protect folio::private when attaching extent buffer folios
    - bpf: fix multi-uprobe PID filtering logic
    - powerpc/64/bpf: fix tail calls for PCREL addressing
    - nilfs2: fix potential kernel bug due to lack of writeback flag waiting
    - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
    - Upstream stable to v6.6.34, v6.9.5
  * Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
    - perf record: Delete session after stopping sideband thread
    - perf probe: Add missing libgen.h header needed for using basename()
    - iio: core: Leave private pointer NULL when no private data supplied
    - greybus: lights: check return of get_channel_from_mode
    - phy: qcom: qmp-combo: fix duplicate return in qmp_v4_configure_dp_phy
    - f2fs: multidev: fix to recognize valid zero block address
    - f2fs: fix to wait on page writeback in __clone_blkaddrs()
    - fpga: manager: add owner module and take its refcount
    - fpga: bridge: add owner module and take its refcount
    - counter: linux/counter.h: fix Excess kernel-doc description warning
    - perf annotate: Get rid of duplicate --group option item
    - usb: typec: ucsi: always register a link to USB PD device
    - usb: typec: ucsi: simplify partner's PD caps registration
    - perf stat: Do not fail on metrics on s390 z/VM systems
    - soundwire: cadence: fix invalid PDI offset
    - dmaengine: idma64: Add check for dma_set_max_seg_size
    - firmware: dmi-id: add a release callback function
    - perf annotate: Fix annotation_calc_lines() to pass correct address to
      get_srcline()
    - serial: max3100: Lock port->lock when calling uart_handle_cts_change()
    - serial: max3100: Update uart_driver_registered on driver removal
    - serial: max3100: Fix bitwise types
    - greybus: arche-ctrl: move device table to its right location
    - PCI: tegra194: Fix probe path for Endpoint mode
    - serial: sc16is7xx: add proper sched.h include for sched_set_fifo()
    - module: don't ignore sysfs_create_link() failures
    - interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment
    - arm64: dts: meson: fix S4 power-controller node
    - perf tests: Make "test data symbol" more robust on Neoverse N1
    - perf tests: Apply attributes to all events in object code reading test
    - perf record: Fix debug message placement for test consumption
    - dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties
    - perf bench uprobe: Remove lib64 from libc.so.6 binary path
    - f2fs: compress: fix to relocate check condition in
      f2fs_{release,reserve}_compress_blocks()
    - f2fs: compress: fix to relocate check condition in
      f2fs_ioc_{,de}compress_file()
    - f2fs: fix to relocate check condition in f2fs_fallocate()
    - f2fs: fix to check pinfile flag in f2fs_move_file_range()
    - iio: adc: stm32: Fixing err code to not indicate success
    - riscv: dts: starfive: visionfive 2: Remove non-existing TDM hardware
    - coresight: etm4x: Fix unbalanced pm_runtime_enable()
    - perf docs: Document bpf event modifier
    - perf test shell arm_coresight: Increase buffer size for Coresight basic
      tests
    - iio: pressure: dps310: support negative temperature values
    - iio: buffer-dmaengine: export buffer alloc and free functions
    - iio: add the IIO backend framework
    - [CONFIG] Update CONFIG_IIO_BACKEND
    - iio: adc: ad9467: convert to backend framework
    - [Config] Update CONFIG_AD9467
    - iio: adc: adi-axi-adc: move to backend framework
    - [Config] Update CONFIG_ADI_AXI_ADC
    - iio: adc: adi-axi-adc: only error out in major version mismatch
    - coresight: etm4x: Do not hardcode IOMEM access for register restore
    - coresight: etm4x: Do not save/restore Data trace control registers
    - coresight: etm4x: Safe access for TRCQCLTR
    - coresight: etm4x: Fix access to resource selector registers
    - vfio/pci: fix potential memory leak in vfio_intx_enable()
    - fpga: region: add owner module and take its refcount
    - udf: Remove GFP_NOFS allocation in udf_expand_file_adinicb()
    - udf: Convert udf_expand_file_adinicb() to use a folio
    - microblaze: Remove gcc flag for non existing early_printk.c file
    - microblaze: Remove early printk call from cpuinfo-static.c
    - PCI: Wait for Link Training==0 before starting Link retrain
    - perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer)
    - leds: pwm: Disable PWM when going to suspend
    - ovl: remove upper umask handling from ovl_create_upper()
    - PCI: of_property: Return error for int_map allocation failure
    - VMCI: Fix an error handling path in vmci_guest_probe_device()
    - dt-bindings: pinctrl: mediatek: mt7622: fix array properties
    - pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs
    - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
    - watchdog: bd9576: Drop "always-running" property
    - watchdog: sa1100: Fix PTR_ERR_OR_ZERO() vs NULL check in sa1100dog_probe()
    - dt-bindings: phy: qcom,sc8280xp-qmp-ufs-phy: fix msm899[68] power-domains
    - dt-bindings: phy: qcom,usb-snps-femto-v2: use correct fallback for sc8180x
    - dmaengine: idxd: Avoid unnecessary destruction of file_ida
    - usb: gadget: u_audio: Fix race condition use of controls after free during
      gadget unbind.
    - usb: gadget: u_audio: Clear uac pointer when freed.
    - stm class: Fix a double free in stm_register_device()
    - ppdev: Add an error check in register_device
    - i2c: cadence: Avoid fifo clear after start
    - i2c: synquacer: Fix an error handling path in synquacer_i2c_probe()
    - perf bench internals inject-build-id: Fix trap divide when collecting just
      one DSO
    - perf ui browser: Don't save pointer to stack memory
    - extcon: max8997: select IRQ_DOMAIN instead of depending on it
    - dt-bindings: spmi: hisilicon,hisi-spmi-controller: fix binding references
    - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3
    - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3
    - f2fs: support printk_ratelimited() in f2fs_printk()
    - f2fs: use BLKS_PER_SEG, BLKS_PER_SEC, and SEGS_PER_SEC
    - f2fs: separate f2fs_gc_range() to use GC for a range
    - f2fs: kill heap-based allocation
    - f2fs: support file pinning for zoned devices
    - f2fs: fix block migration when section is not aligned to pow2
    - perf ui browser: Avoid SEGV on title
    - perf report: Avoid SEGV in report__setup_sample_type()
    - perf thread: Fixes to thread__new() related to initializing comm
    - perf symbols: Fix ownership of string in dso__load_vmlinux()
    - f2fs: compress: fix to update i_compr_blocks correctly
    - f2fs: deprecate io_bits
    - f2fs: introduce get_available_block_count() for cleanup
    - f2fs: compress: fix error path of inc_valid_block_count()
    - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem
      lock
    - f2fs: fix to release node block count in error path of f2fs_new_node_page()
    - f2fs: compress: don't allow unaligned truncation on released compress inode
    - serial: sh-sci: protect invalidating RXDMA on shutdown
    - libsubcmd: Fix parse-options memory leak
    - perf daemon: Fix file leak in daemon_session__control
    - f2fs: fix to add missing iput() in gc_data_segment()
    - usb: fotg210: Add missing kernel doc description
    - perf stat: Don't display metric header for non-leader uncore events
    - perf tools: Use pmus to describe type from attribute
    - perf tools: Add/use PMU reverse lookup from config to name
    - perf pmu: Assume sysfs events are always the same case
    - perf pmu: Count sys and cpuid JSON events separately
    - LoongArch: Fix callchain parse error with kernel tracepoint events again
    - s390/vdso64: filter out munaligned-symbols flag for vdso
    - s390/vdso: Generate unwind information for C modules
    - s390/vdso: Create .build-id links for unstripped vdso files
    - s390/vdso: Use standard stack frame layout
    - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block
    - s390/ipl: Fix incorrect initialization of nvme dump block
    - s390/boot: Remove alt_stfle_fac_list from decompressor
    - dt-bindings: PCI: rockchip,rk3399-pcie: Add missing maxItems to ep-gpios
    - gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node
      match
    - eventfs: Do not differentiate the toplevel events directory
    - eventfs: Create eventfs_root_inode to store dentry
    - eventfs/tracing: Add callback for release of an eventfs_inode
    - eventfs: Free all of the eventfs_inode after RCU
    - eventfs: Have "events" directory get permissions from its parent
    - dt-bindings: adc: axi-adc: update bindings for backend framework
    - dt-bindings: adc: axi-adc: add clocks property
    - Input: ims-pcu - fix printf string overflow
    - mmc: sdhci_am654: Add tuning algorithm for delay chain
    - mmc: sdhci_am654: Write ITAPDLY for DDR52 timing
    - mmc: sdhci_am654: Add OTAP/ITAP delay enable
    - mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock
    - mmc: sdhci_am654: Fix ITAPDLY for HS400 timing
    - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
    - media: v4l: Don't turn on privacy LED if streamon fails
    - media: ov2680: Clear the 'ret' variable on success
    - media: ov2680: Allow probing if link-frequencies is absent
    - media: ov2680: Do not fail if data-lanes property is absent
    - drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk
    - drm/msm/dpu: Always flush the slave INTF on the CTL
    - drm/mediatek: dp: Fix mtk_dp_aux_transfer return value
    - drm/meson: gate px_clk when setting rate
    - um: Fix return value in ubd_init()
    - um: vector: fix bpfflash parameter evaluation
    - fs/ntfs3: Check 'folio' pointer for NULL
    - fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
    - fs/ntfs3: Use variable length array instead of fixed size
    - drm/msm/dpu: Add callback function pointer check before its call
    - drm/bridge: tc358775: fix support for jeida-18 and jeida-24
    - media: stk1160: fix bounds checking in stk1160_copy_video()
    - Input: cyapa - add missing input core locking to suspend/resume functions
    - drm/amdgpu: init microcode chip name from ip versions
    - drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and
      rlc_microcode()
    - media: mediatek: vcodec: fix possible unbalanced PM counter
    - tools/arch/x86/intel_sdsi: Fix maximum meter bundle length
    - tools/arch/x86/intel_sdsi: Fix meter_show display
    - tools/arch/x86/intel_sdsi: Fix meter_certificate decoding
    - platform/x86: thinkpad_acpi: Take hotkey_mutex during hotkey_exit()
    - media: flexcop-usb: fix sanity check of bNumEndpoints
    - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
    - um: Fix the -Wmissing-prototypes warning for __switch_mm
    - um: Fix the -Wmissing-prototypes warning for get_thread_reg
    - um: Fix the declaration of kasan_map_memory
    - cxl/trace: Correct DPA field masks for general_media & dram events
    - cxl/region: Fix cxlr_pmem leaks
    - media: sunxi: a83-mips-csi2: also select GENERIC_PHY
    - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
    - media: cec: cec-api: add locking in cec_release()
    - media: cec: core: avoid recursive cec_claim_log_addrs
    - media: cec: core: avoid confusing "transmit timed out" message
    - Revert "drm/bridge: ti-sn65dsi83: Fix enable error path"
    - drm: zynqmp_dpsub: Always register bridge
    - selftests/powerpc/dexcr: Add -no-pie to hashchk tests
    - drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
    - ASoC: tas2781: Fix a warning reported by robot kernel test
    - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
    - ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
    - ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
    - ASoC: mediatek: mt8192: fix register configuration for tdm
    - drm/nouveau: use tile_mode and pte_kind for VM_BIND bo allocations
    - blk-cgroup: fix list corruption from resetting io stat
    - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
    - blk-cgroup: Properly propagate the iostat update up the hierarchy
    - regulator: bd71828: Don't overwrite runtime voltages
    - xen/x86: add extra pages to unpopulated-alloc if available
    - perf/arm-dmc620: Fix lockdep assert in ->event_init()
    - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when
      UNWINDER_FRAME_POINTER=y
    - [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS
    - net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled
    - ipv6: sr: fix missing sk_buff release in seg6_input_core
    - selftests: net: kill smcrouted in the cleanup logic in amt.sh
    - nfc: nci: Fix uninit-value in nci_rx_work
    - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data
    - ASoC: tas2781: Fix wrong loading calibrated data sequence
    - NFSv4: Fixup smatch warning for ambiguous return
    - nfs: keep server info for remounts
    - sunrpc: fix NFSACL RPC retry on soft mount
    - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL
    - regulator: pickable ranges: don't always cache vsel
    - regulator: tps6287x: Force writing VSEL bit
    - af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
    - ipv6: sr: fix memleak in seg6_hmac_init_algo
    - regulator: tps6594-regulator: Correct multi-phase configuration
    - tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
    - pNFS/filelayout: fixup pNfs allocation modes
    - openvswitch: Set the skbuff pkt_type for proper pmtud support.
    - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
    - rv: Update rv_en(dis)able_monitor doc to match kernel-doc
    - net: lan966x: Remove ptp traps in case the ptp is not enabled.
    - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
    - i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame
    - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI"
    - net: fec: avoid lock evasion when reading pps_enable
    - tls: fix missing memory barrier in tls_init
    - net: relax socket state check at accept time.
    - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
    - drivers/xen: Improve the late XenStore init protocol
    - ice: Interpret .set_channels() input differently
    - kasan, fortify: properly rename memintrinsics
    - tracing/probes: fix error check in parse_btf_field()
    - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
    - netfilter: nfnetlink_queue: acquire rcu_read_lock() in
      instance_destroy_rcu()
    - netfilter: ipset: Add list flush to cancel_gc
    - netfilter: nft_payload: restore vlan q-in-q match support
    - spi: Don't mark message DMA mapped when no transfer in it is
    - dma-mapping: benchmark: fix up kthread-related error handling
    - dma-mapping: benchmark: fix node id validation
    - dma-mapping: benchmark: handle NUMA_NO_NODE correctly
    - nvme-multipath: fix io accounting on failover
    - nvmet: fix ns enable/disable possible hang
    - drm/amd/display: Enable colorspace property for MST connectors
    - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061
    - net/mlx5: Lag, do bond only if slaves agree on roce state
    - net/mlx5: Fix MTMP register capability offset in MCAM register
    - net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
    - net/mlx5e: Fix IPsec tunnel mode offload feature check
    - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer
      exhaustion
    - net/mlx5e: Fix UDP GSO for encapsulated packets
    - dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
    - bpf: Fix potential integer overflow in resolve_btfids
    - ALSA: jack: Use guard() for locking
    - ALSA: core: Remove debugfs at disconnection
    - ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp
    - enic: Validate length of nl attributes in enic_set_vf_port
    - af_unix: Annotate data-race around unix_sk(sk)->addr.
    - af_unix: Read sk->sk_hash under bindlock during bind().
    - Octeontx2-pf: Free send queue buffers incase of leaf to inner
    - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
    - ASoC: cs42l43: Only restrict 44.1kHz for the ASP
    - bpf: Allow delete from sockmap/sockhash only if update is allowed
    - net:fec: Add fec_enet_deinit()
    - net: micrel: Fix lan8841_config_intr after getting out of sleep mode
    - ice: fix accounting if a VLAN already exists
    - selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky
    - selftests: mptcp: add ms units for tc-netem delay
    - selftests: mptcp: join: mark 'fail' tests as flaky
    - ALSA: seq: Fix missing bank setup between MIDI1/MIDI2 UMP conversion
    - ALSA: seq: Don't clear bank selection at event -> UMP MIDI2 conversion
    - net: ti: icssg-prueth: Fix start counter for ft1 filter
    - netfilter: nft_payload: skbuff vlan metadata mangle support
    - netfilter: tproxy: bail out if IP has been disabled on the device
    - netfilter: nft_fib: allow from forward/input without iif selector
    - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
    - net/sched: taprio: extend minimum interval restriction to entire cycle too
    - kconfig: fix comparison to constant symbols, 'm', 'n'
    - drm/i915/guc: avoid FIELD_PREP warning
    - kheaders: use `command -v` to test for existence of `cpio`
    - spi: stm32: Don't warn about spurious interrupts
    - net: dsa: microchip: fix RGMII error in KSZ DSA driver
    - net: ena: Reduce lines with longer column width boundary
    - net: ena: Fix redundant device NUMA node override
    - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
    - ALSA: seq: Fix yet another spot for system message conversion
    - powerpc/pseries/lparcfg: drop error message from guest name lookup
    - drm/panel: sitronix-st7789v: fix timing for jt240mhqs_hwt_ek_e3 panel
    - drm/panel: sitronix-st7789v: tweak timing for jt240mhqs_hwt_ek_e3 panel
    - drm/panel: sitronix-st7789v: fix display size for jt240mhqs_hwt_ek_e3 panel
    - hwmon: (intel-m10-bmc-hwmon) Fix multiplier for N6000 board power sensor
    - hwmon: (shtc1) Fix property misspelling
    - ALSA: seq: ump: Fix swapped song position pointer data
    - ALSA: timer: Set lower bound of start tick time
    - x86/efistub: Omit physical KASLR when memory reservations exist
    - efi: libstub: only free priv.runtime_map when allocated
    - x86/pci: Skip early E820 check for ECAM region
    - KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID
    - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
    - platform/x86/intel/tpmi: Handle error from tpmi_process_info()
    - platform/x86/intel-uncore-freq: Don't present root domain on error
    - perf sched timehist: Fix -g/--call-graph option failure
    - f2fs: write missing last sum blk of file pinning section
    - f2fs: use f2fs_{err,info}_ratelimited() for cleanup
    - SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
    - riscv: prevent pt_regs corruption for secondary idle threads
    - riscv: stacktrace: fixed walk_stackframe()
    - perf build: Fix out of tree build related to installation of sysreg-defs
    - dt-bindings: pinctrl: qcom: update functions to match with driver
    - usb: typec: ucsi: allow non-partner GET_PDOS for Qualcomm devices
    - perf report: Fix PAI counter names for s390 virtual machines
    - PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host
    - perf map: Remove kernel map before updating start and end addresses
    - riscv: dts: starfive: visionfive 2: Remove non-existing I2S hardware
    - pinctrl: renesas: rzg2l: Limit 2.5V power supply to Ethernet interfaces
    - riscv: Flush the instruction cache during SMP bringup
    - usb: xhci: check if 'requested segments' exceeds ERST capacity
    - spmi: pmic-arb: Replace three IS_ERR() calls by null pointer checks in
      spmi_pmic_arb_probe()
    - perf symbols: Remove map from list before updating addresses
    - perf symbols: Update kcore map before merging in remaining symbols
    - s390/ftrace: Use unwinder instead of __builtin_return_address()
    - s390/stacktrace: Merge perf_callchain_user() and arch_stack_walk_user()
    - s390/stacktrace: Skip first user stack frame
    - s390/stacktrace: Improve detection of invalid instruction pointers
    - s390/vdso: Introduce and use struct stack_frame_vdso_wrapper
    - s390/stackstrace: Detect vdso stack frames
    - s390/ap: Fix bind complete udev event sent after each AP bus scan
    - ocfs2: correctly use ocfs2_find_next_zero_bit()
    - mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown
    - Input: ioc3kbd - add device table
    - phy: qcom: qmp-combo: fix sm8650 voltage swing table
    - media: ti: j721e-csi2rx: Fix races while restarting DMA
    - drm/msm/dpu: Allow configuring multiple active DSC blocks
    - drm: Make drivers depends on DRM_DW_HDMI
    - [Config] Drivers now depend on DRM_DW_HDMI
    - string: Prepare to merge strscpy_kunit.c into string_kunit.c
    - string: Prepare to merge strcat KUnit tests into string_kunit.c
    - drm/msm/adreno: fix CP cycles stat retrieval on a7xx
    - printk: Fix LOG_CPU_MAX_BUF_SHIFT when BASE_SMALL is enabled
    - powerpc/bpf/32: Fix failing test_bpf tests
    - KVM: PPC: Book3S HV nestedv2: Cancel pending DEC exception
    - KVM: PPC: Book3S HV nestedv2: Fix an error handling path in
      gs_msg_ops_kvmhv_nestedv2_config_fill_info()
    - KVM: arm64: Destroy mpidr_data for 'late' vCPU creation
    - Bluetooth: ISO: Handle PA sync when no BIGInfo reports are generated
    - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
    - ubsan: Restore dependency on ARCH_HAS_UBSAN
    - selftests: forwarding: Have RET track kselftest framework constants
    - selftests: forwarding: Convert log_test() to recognize RET values
    - selftests: net: Unify code of busywait() and slowwait()
    - selftests/net: use tc rule to filter the na packet
    - virtio_balloon: Give the balloon its own wakeup source
    - riscv: cpufeature: Fix thead vector hwcap removal
    - riscv: cpufeature: Fix extension subset checking
    - riscv: selftests: Add hwprobe binaries to .gitignore
    - idpf: Interpret .set_channels() input differently
    - null_blk: fix null-ptr-dereference while configuring 'power' and
      'submit_queues'
    - netfs: Fix setting of BDP_ASYNC from iocb flags
    - cifs: Set zero_point in the copy_file_range() and remap_file_range()
    - cifs: Fix missing set of remote_i_size
    - selftests: net: lib: set 'i' as local
    - nvme: fix multipath batched completion accounting
    - netkit: Fix setting mac address in l2 mode
    - netkit: Fix pkt_type override upon netkit pass verdict
    - null_blk: Fix return value of nullb_device_power_store()
    - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers
    - selftests: mptcp: join: mark 'fastclose' tests as flaky
    - drm/xe: Add dbg messages on the suspend resume functions.
    - drm/xe: check pcode init status only on root gt of root tile
    - drm/xe: Change pcode timeout to 50msec while polling again
    - drm/xe: Only use reserved BCS instances for usm migrate exec queue
    - sd: also set max_user_sectors when setting max_sectors
    - block: stack max_user_sectors
    - ipv6: introduce dst_rt6_info() helper
    - inet: introduce dst_rtable() helper
    - net: fix __dst_negative_advice() race
    - ice: fix 200G PHY types to link speed mapping
    - x86/topology/intel: Unlock CPUID before evaluating anything
    - Upstream stable to v6.6.33, v6.9.4
  * Reenable CONFIG_UBSAN for noble (LP: #2076650)
    - ubsan: Remove CONFIG_UBSAN_SANITIZE_ALL
    - [Config] Remove CONFIG_UBSAN_SANITIZE_ALL
  * Dangling symlink to linux-lib-rust when Rust is disabled (LP: #2072592)
    - [Packaging] Check do_lib_rust before linking Rust lib files
  * kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
    ARM64 (LP: #2033007)
    - [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG on arm64
  * net/sched: Fix conntrack use-after-free (LP: #2073092)
    - net/sched: Fix UAF when resolving a clash
  * No sound on Huawei Matebook D14  AMD since Linux 6.8.0-38 [regression]
    (LP: #2073049)
    - ASoC: amd: acp: fix for acp platform device creation failure
  * i915: Fixup regressions introduced with enabling single CCS engine
    (LP: #2072755)
    - drm/i915/gt: Fix CCS id's calculation for CCS mode setting
  * [Ubuntu 24.04] FW1060.00 (NH1060_026) sosreport is running to Kernel OOPS
    crash (LP: #2070358)
    - nfsd: initialise nfsd_info.mutex early.
  * 6.8 generic & amdpgu / polaris (LP: #2072428)
    - drm/amdgpu: Adjust logic in amdgpu_device_partner_bandwidth()
  * md: nvme over tcp with a striped underlying md raid device leads to data
    corruption (LP: #2075110)
    - md/md-bitmap: fix writing non bitmap pages
  * Linux 6.8 fails to boot on ARM64 if any param is more than 146 chars
    (LP: #2069534)
    - SAUCE: arm64: v6.8: cmdline param >= 146 chars kills kernel
  * CVE-2024-39484
    - mmc: davinci: Don't strip remove function when driver is builtin
  * CVE-2024-39292
    - um: Add winch to winch_handlers before registering winch IRQ
  * Miscellaneous upstream changes
    - bnx2x: Fix multiple UBSAN array-index-out-of-bounds

 -- Jacob Martin <jacob.martin@canonical.com>  Tue, 20 Aug 2024 12:10:37 -0500

linux-nvidia (6.8.0-1012.12) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1012.12 -proposed tracker (LP: #2075597)

  [ Ubuntu: 6.8.0-41.41 ]

  * noble/linux: 6.8.0-41.41 -proposed tracker (LP: #2075611)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/s2024.07.08)
  * md: nvme over tcp with a striped underlying md raid device leads to data
    corruption (LP: #2075110)
    - md/md-bitmap: fix writing non bitmap pages
  * Linux 6.8 fails to boot on ARM64 if any param is more than 146 chars
    (LP: #2069534)
    - SAUCE: arm64: v6.8: cmdline param >= 146 chars kills kernel
  * CVE-2024-39484
    - mmc: davinci: Don't strip remove function when driver is builtin
  * CVE-2024-39292
    - um: Add winch to winch_handlers before registering winch IRQ

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 09 Aug 2024 13:05:57 -0500

linux-nvidia (6.8.0-1011.11) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1011.11 -proposed tracker (LP: #2072186)

  * PR for:  "IB/mlx5: Use __iowrite64_copy() for write combining stores"
    (LP: #2071655)
    - x86: Stop using weak symbols for __iowrite32_copy()
    - s390: Implement __iowrite32_copy()
    - s390: Stop using weak symbols for __iowrite64_copy()
    - arm64/io: Provide a WC friendly __iowriteXX_copy()
    - net: hns3: Remove io_stop_wc() calls after __iowrite64_copy()

  * PR for:  "PCI: Clear Secondary Status errors after enumeration"
    (LP: #2071654)
    - PCI: Clear Secondary Status errors after enumeration

  * mlxbf_pmc: bring in latest 6.8 upstream commits (LP: #2069777)
    - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types
    - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up
    - platform/mellanox: mlxbf-pmc: mlxbf_pmc_event_list(): make size ptr optional
    - platform/mellanox: mlxbf-pmc: Ignore unsupported performance blocks
    - platform/mellanox: mlxbf-pmc: fix signedness bugs

  [ Ubuntu: 6.8.0-40.40 ]

  * noble/linux: 6.8.0-40.40 -proposed tracker (LP: #2072201)
  * FPS of glxgear with fullscreen is too low on MTL platform (LP: #2069380)
    - drm/i915: Bypass LMEMBAR/GTTMMADR for MTL stolen memory access
  * a critical typo in the code managing the ASPM  settings for PCI Express
    devices (LP: #2071889)
    - PCI/ASPM: Restore parent state to parent, child state to child
  * [UBUNTU 24.04] IOMMU DMA mode changed in kernel config causes massive
    throughput degradation for PCI-related network workloads (LP: #2071471)
    - [Config] Set IOMMU_DEFAULT_DMA_STRICT=n and IOMMU_DEFAULT_DMA_LAZY=yes for
      s390x
  * UBSAN: array-index-out-of-bounds in
    /build/linux-D15vQj/linux-6.5.0/drivers/md/bcache/bset.c:1098:3
    (LP: #2039368)
    - bcache: fix variable length array abuse in btree_iter
  * Mute/mic LEDs and speaker no function on EliteBook 645/665 G11
    (LP: #2071296)
    - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665
      G11.
  * failed to enable IPU6 camera sensor on kernel >= 6.8: ivsc_ace
    intel_vsc-5db76cf6-0a68-4ed6-9b78-0361635e2447: switch camera to host
    failed: -110 (LP: #2067364)
    - mei: vsc: Don't stop/restart mei device during system suspend/resume
    - SAUCE: media: ivsc: csi: don't count privacy on as error
    - SAUCE: media: ivsc: csi: add separate lock for v4l2 control handler
    - SAUCE: media: ivsc: csi: remove privacy status in struct mei_csi
    - SAUCE: mei: vsc: Enhance IVSC chipset stability during warm reboot
    - SAUCE: mei: vsc: Enhance SPI transfer of IVSC rom
    - SAUCE: mei: vsc: Utilize the appropriate byte order swap function
    - SAUCE: mei: vsc: Prevent timeout error with added delay post-firmware
      download
  * failed to probe camera sensor on Dell XPS 9315: ov01a10 i2c-OVTI01A0:00:
    failed to check hwcfg: -22 (LP: #2070251)
    - ACPI: utils: Make acpi_handle_path() not static
    - ACPI: property: Ignore bad graph port nodes on Dell XPS 9315
    - ACPI: property: Polish ignoring bad data nodes
    - ACPI: scan: Ignore camera graph port nodes on all Dell Tiger, Alder and
      Raptor Lake models
  * Update amd_sfh for AMD strix series (LP: #2058331)
    - HID: amd_sfh: Increase sensor command timeout
    - HID: amd_sfh: Improve boot time when SFH is available
    - HID: amd_sfh: Extend MP2 register access to SFH
    - HID: amd_sfh: Set the AMD SFH driver to depend on x86
  * RFIM and SAGV Linux Support for G10 models (LP: #2070158)
    - drm/i915/display: Add meaningful traces for QGV point info error handling
    - drm/i915/display: Extract code required to calculate max qgv/psf gv point
    - drm/i915/display: extract code to prepare qgv points mask
    - drm/i915/display: Disable SAGV on bw init, to force QGV point recalculation
    - drm/i915/display: handle systems with duplicate psf gv points
    - drm/i915/display: force qgv check after the hw state readout
  * Update amd-pmf for AMD strix series (LP: #2058330)
    - platform/x86/amd/pmf: Differentiate PMF ACPI versions
    - platform/x86/amd/pmf: Disable debugfs support for querying power thermals
    - platform/x86/amd/pmf: Add support to get sbios requests in PMF driver
    - platform/x86/amd/pmf: Add support to notify sbios heart beat event
    - platform/x86/amd/pmf: Add support to get APTS index numbers for static
      slider
    - platform/x86/amd/pmf: Add support to get sps default APTS index values
    - platform/x86/amd/pmf: Update sps power thermals according to the platform-
      profiles
  * noble:linux: ADT ubuntu-regression-suite misses fakeroot dependency
    (LP: #2070042)
    - [DEP-8] Add missing fakeroot dependency
  * Noble update: v6.8.12 upstream stable release (LP: #2071621)
    - sunrpc: use the struct net as the svc proc private
    - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
    - selftests/ftrace: Fix BTFARG testcase to check fprobe is enabled correctly
    - ftrace: Fix possible use-after-free issue in ftrace_location()
    - Revert "arm64: fpsimd: Implement lazy restore for kernel mode FPSIMD"
    - arm64/fpsimd: Avoid erroneous elide of user state reload
    - Reapply "arm64: fpsimd: Implement lazy restore for kernel mode FPSIMD"
    - tty: n_gsm: fix missing receive state reset after mode switch
    - speakup: Fix sizeof() vs ARRAY_SIZE() bug
    - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
    - serial: 8250_bcm7271: use default_mux_rate if possible
    - serial: 8520_mtk: Set RTS on shutdown for Rx in-band wakeup
    - Input: try trimming too long modalias strings
    - io_uring: fail NOP if non-zero op flags is passed in
    - Revert "r8169: don't try to disable interrupts if NAPI is, scheduled
      already"
    - r8169: Fix possible ring buffer corruption on fragmented Tx packets.
    - ring-buffer: Fix a race between readers and resize checks
    - net: mana: Fix the extra HZ in mana_hwc_send_request
    - tools/latency-collector: Fix -Wformat-security compile warns
    - tools/nolibc/stdlib: fix memory error in realloc()
    - net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
    - net: lan966x: remove debugfs directory in probe() error path
    - net: smc91x: Fix m68k kernel compilation for ColdFire CPU
    - nilfs2: fix use-after-free of timer for log writer thread
    - nilfs2: fix unexpected freezing of nilfs_segctor_sync()
    - nilfs2: fix potential hang in nilfs_detach_log_writer()
    - fs/ntfs3: Remove max link count info display during driver init
    - fs/ntfs3: Taking DOS names into account during link counting
    - fs/ntfs3: Fix case when index is reused during tree transformation
    - fs/ntfs3: Break dir enumeration if directory contents error
    - ksmbd: avoid to send duplicate oplock break notifications
    - ksmbd: ignore trailing slashes in share paths
    - ALSA: core: Fix NULL module pointer assignment at card init
    - ALSA: Fix deadlocks with kctl removals at disconnection
    - KEYS: asymmetric: Add missing dependency on CRYPTO_SIG
    - [Config] updateconfigs for CRYPTO_SIG
    - KEYS: asymmetric: Add missing dependencies of FIPS_SIGNATURE_SELFTEST
    - HID: nintendo: Fix N64 controller being identified as mouse
    - dmaengine: xilinx: xdma: Clarify kdoc in XDMA driver
    - wifi: mac80211: don't use rate mask for scanning
    - wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon
      timestamp field
    - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt
      class
    - dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node
    - HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled
    - net: usb: qmi_wwan: add Telit FN920C04 compositions
    - drm/amd/display: Set color_mgmt_changed to true on unsuspend
    - drm/amdgpu: Update BO eviction priorities
    - drm/amd/pm: Restore config space after reset
    - drm/amdkfd: Add VRAM accounting for SVM migration
    - drm/amdgpu: Fix the ring buffer size for queue VM flush
    - Revert "net: txgbe: fix i2c dev name cannot match clkdev"
    - Revert "net: txgbe: fix clk_name exceed MAX_DEV_ID limits"
    - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n
    - LoongArch: Lately init pmu after smp is online
    - drm/etnaviv: fix tx clock gating on some GC7000 variants
    - selftests: sud_test: return correct emulated syscall value on RISC-V
    - riscv: thead: Rename T-Head PBMT to MAE
    - [Config] updateconfigs for ERRATA_THEAD_MAE
    - riscv: T-Head: Test availability bit before enabling MAE errata
    - sched/isolation: Fix boot crash when maxcpus < first housekeeping CPU
    - ASoC: Intel: bytcr_rt5640: Apply Asus T100TA quirk to Asus T100TAM too
    - regulator: irq_helpers: duplicate IRQ name
    - ALSA: hda: cs35l56: Exit cache-only after cs35l56_wait_for_firmware_boot()
    - ASoC: SOF: ipc4-pcm: Use consistent name for snd_sof_pcm_stream pointer
    - ASoC: SOF: ipc4-pcm: Use consistent name for sof_ipc4_timestamp_info pointer
    - ASoC: SOF: ipc4-pcm: Introduce generic sof_ipc4_pcm_stream_priv
    - ASoC: SOF: pcm: Restrict DSP D0i3 during S0ix to IPC3
    - ASoC: acp: Support microphone from device Acer 315-24p
    - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
    - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
    - ASoC: rt722-sdca: modify channel number to support 4 channels
    - ASoC: rt722-sdca: add headset microphone vrefo setting
    - regulator: qcom-refgen: fix module autoloading
    - regulator: vqmmc-ipq4019: fix module autoloading
    - ASoC: cs35l41: Update DSP1RX5/6 Sources for DSP config
    - ASoC: rt715: add vendor clear control register
    - ASoC: rt715-sdca: volume step modification
    - KVM: selftests: Add test for uaccesses to non-existent vgic-v2 CPUIF
    - Input: xpad - add support for ASUS ROG RAIKIRI
    - btrfs: take the cleaner_mutex earlier in qgroup disable
    - EDAC/versal: Do not register for NOC errors
    - fpga: dfl-pci: add PCI subdevice ID for Intel D5005 card
    - bpf, x86: Fix PROBE_MEM runtime load check
    - ALSA: emu10k1: make E-MU FPGA writes potentially more reliable
    - softirq: Fix suspicious RCU usage in __do_softirq()
    - platform/x86: ISST: Add Grand Ridge to HPM CPU list
    - ASoC: da7219-aad: fix usage of device_get_named_child_node()
    - ASoC: cs35l56: fix usages of device_get_named_child_node()
    - ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection
    - Input: amimouse - mark driver struct with __refdata to prevent section
      mismatch
    - drm/amdgpu: Fix VRAM memory accounting
    - drm/amd/display: Ensure that dmcub support flag is set for DCN20
    - drm/amd/display: Add dtbclk access to dcn315
    - drm/amd/display: Allocate zero bw after bw alloc enable
    - drm/amd/display: Add VCO speed parameter for DCN31 FPU
    - drm/amd/display: Fix DC mode screen flickering on DCN321
    - drm/amd/display: Disable seamless boot on 128b/132b encoding
    - drm/amdkfd: Flush the process wq before creating a kfd_process
    - x86/mm: Remove broken vsyscall emulation code from the page fault code
    - nvme: find numa distance only if controller has valid numa id
    - nvmet-auth: return the error code to the nvmet_auth_host_hash() callers
    - nvmet-auth: replace pr_debug() with pr_err() to report an error.
    - nvme: cancel pending I/O if nvme controller is in terminal state
    - nvmet-tcp: fix possible memory leak when tearing down a controller
    - nvmet: fix nvme status code when namespace is disabled
    - nvme-tcp: strict pdu pacing to avoid send stalls on TLS
    - epoll: be better about file lifetimes
    - nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists()
    - openpromfs: finish conversion to the new mount API
    - crypto: bcm - Fix pointer arithmetic
    - firmware: qcom: qcm: fix unused qcom_scm_qseecom_allowlist
    - mm/slub, kunit: Use inverted data to corrupt kmem cache
    - firmware: raspberrypi: Use correct device for DMA mappings
    - ecryptfs: Fix buffer size for tag 66 packet
    - nilfs2: fix out-of-range warning
    - parisc: add missing export of __cmpxchg_u8()
    - crypto: ccp - drop platform ifdef checks
    - crypto: x86/nh-avx2 - add missing vzeroupper
    - crypto: x86/sha256-avx2 - add missing vzeroupper
    - crypto: x86/sha512-avx2 - add missing vzeroupper
    - s390/cio: fix tracepoint subchannel type field
    - io_uring: use the right type for work_llist empty check
    - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
    - rcu: Fix buffer overflow in print_cpu_stall_info()
    - ARM: configs: sunxi: Enable DRM_DW_HDMI
    - jffs2: prevent xattr node from overflowing the eraseblock
    - libfs: Re-arrange locking in offset_iterate_dir()
    - libfs: Define a minimum directory offset
    - libfs: Add simple_offset_empty()
    - maple_tree: Add mtree_alloc_cyclic()
    - libfs: Convert simple directory offsets to use a Maple Tree
    - libfs: Fix simple_offset_rename_exchange()
    - libfs: Add simple_offset_rename() API
    - shmem: Fix shmem_rename2()
    - io-wq: write next_work before dropping acct_lock
    - mm/userfaultfd: Do not place zeropages when zeropages are disallowed
    - s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests
    - crypto: octeontx2 - add missing check for dma_map_single
    - crypto: qat - improve error message in adf_get_arbiter_mapping()
    - crypto: qat - improve error logging to be consistent across features
    - soc: qcom: pmic_glink: don't traverse clients list without a lock
    - soc: qcom: pmic_glink: notify clients about the current state
    - firmware: qcom: scm: Fix __scm and waitq completion variable initialization
    - soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE
    - null_blk: Fix missing mutex_destroy() at module removal
    - crypto: qat - validate slices count returned by FW
    - hwrng: stm32 - use logical OR in conditional
    - hwrng: stm32 - put IP into RPM suspend on failure
    - hwrng: stm32 - repair clock handling
    - kunit/fortify: Fix mismatched kvalloc()/vfree() usage
    - io_uring/net: remove dependency on REQ_F_PARTIAL_IO for sr->done_io
    - io_uring/net: fix sendzc lazy wake polling
    - soc: qcom: pmic_glink: Make client-lock non-sleeping
    - lkdtm: Disable CFI checking for perms functions
    - md: fix resync softlockup when bitmap size is less than array size
    - crypto: qat - specify firmware files for 402xx
    - block: refine the EOF check in blkdev_iomap_begin
    - block: fix and simplify blkdevparts= cmdline parsing
    - block: support to account io_ticks precisely
    - wifi: ath10k: poll service ready message before failing
    - wifi: brcmfmac: pcie: handle randbuf allocation failure
    - wifi: ath11k: don't force enable power save on non-running vdevs
    - bpftool: Fix missing pids during link show
    - libbpf: Prevent null-pointer dereference when prog to load has no BTF
    - wifi: ath12k: use correct flag field for 320 MHz channels
    - wifi: mt76: mt7915: workaround too long expansion sparse warnings
    - x86/boot: Ignore relocations in .notes sections in walk_relocs() too
    - wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok()
    - wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete
    - wifi: iwlwifi: mvm: allocate STA links only for active links
    - wifi: mac80211: don't select link ID if not provided in scan request
    - wifi: iwlwifi: implement can_activate_links callback
    - wifi: iwlwifi: mvm: fix active link counting during recovery
    - wifi: iwlwifi: mvm: select STA mask only for active links
    - wifi: iwlwifi: reconfigure TLC during HW restart
    - wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask
    - sched/fair: Add EAS checks before updating root_domain::overutilized
    - ACPI: bus: Indicate support for _TFP thru _OSC
    - ACPI: bus: Indicate support for more than 16 p-states thru _OSC
    - ACPI: bus: Indicate support for the Generic Event Device thru _OSC
    - ACPI: Fix Generic Initiator Affinity _OSC bit
    - ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
    - enetc: avoid truncating error message
    - qed: avoid truncating work queue length
    - mlx5: avoid truncating error message
    - mlx5: stop warning for 64KB pages
    - bitops: add missing prototype check
    - dlm: fix user space lock decision to copy lvb
    - wifi: carl9170: re-fix fortified-memset warning
    - bpftool: Mount bpffs on provided dir instead of parent dir
    - bpf: Pack struct bpf_fib_lookup
    - bpf: prevent r10 register from being marked as precise
    - x86/microcode/AMD: Avoid -Wformat warning with clang-15
    - scsi: ufs: qcom: Perform read back after writing reset bit
    - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US
    - scsi: ufs: qcom: Perform read back after writing unipro mode
    - scsi: ufs: qcom: Perform read back after writing CGC enable
    - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
    - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H
    - scsi: ufs: core: Perform read back after disabling interrupts
    - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
    - ACPI: LPSS: Advertise number of chip selects via property
    - EDAC/skx_common: Allow decoding of SGX addresses
    - locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128()
    - irqchip/alpine-msi: Fix off-by-one in allocation error path
    - irqchip/loongson-pch-msi: Fix off-by-one on allocation error path
    - ACPI: disable -Wstringop-truncation
    - gfs2: Don't forget to complete delayed withdraw
    - gfs2: Fix "ignore unlock failures after withdraw"
    - arm64: Remove unnecessary irqflags alternative.h include
    - x86/boot/64: Clear most of CR4 in startup_64(), except PAE, MCE and LA57
    - selftests/bpf: Fix umount cgroup2 error in test_sockmap
    - tcp: increase the default TCP scaling ratio
    - cpufreq: exit() callback is optional
    - x86/pat: Introduce lookup_address_in_pgd_attr()
    - x86/pat: Restructure _lookup_address_cpa()
    - x86/pat: Fix W^X violation false-positives when running as Xen PV guest
    - udp: Avoid call to compute_score on multiple sites
    - openrisc: traps: Don't send signals to kernel mode threads
    - cppc_cpufreq: Fix possible null pointer dereference
    - wifi: iwlwifi: mvm: init vif works only once
    - scsi: libsas: Fix the failure of adding phy with zero-address to port
    - scsi: hpsa: Fix allocation size for Scsi_Host private data
    - x86/purgatory: Switch to the position-independent small code model
    - wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
    - thermal/drivers/mediatek/lvts_thermal: Add coeff for mt8192
    - thermal/drivers/tsens: Fix null pointer dereference
    - dt-bindings: thermal: loongson,ls2k-thermal: Add Loongson-2K0500 compatible
    - dt-bindings: thermal: loongson,ls2k-thermal: Fix incorrect compatible
      definition
    - wifi: ath10k: Fix an error code problem in
      ath10k_dbg_sta_write_peer_debug_trigger()
    - gfs2: Remove ill-placed consistency check
    - gfs2: Fix potential glock use-after-free on unmount
    - gfs2: finish_xmote cleanup
    - gfs2: do_xmote fixes
    - thermal/debugfs: Avoid excessive updates of trip point statistics
    - selftests/bpf: Fix a fd leak in error paths in open_netns
    - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search()
    - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations
    - wifi: ath10k: populate board data for WCN3990
    - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset
      handlers
    - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family
      switches
    - tcp: avoid premature drops in tcp_add_backlog()
    - thermal/debugfs: Create records for cdev states as they get used
    - thermal/debugfs: Pass cooling device state to thermal_debug_cdev_add()
    - pwm: sti: Prepare removing pwm_chip from driver data
    - pwm: sti: Simplify probe function using devm functions
    - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
    - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
    - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
    - net: give more chances to rcu in netdev_wait_allrefs_any()
    - macintosh/via-macii: Fix "BUG: sleeping function called from invalid
      context"
    - wifi: carl9170: add a proper sanity check for endpoints
    - bpf: Fix verifier assumptions about socket->sk
    - selftests/bpf: Run cgroup1_hierarchy test in own mount namespace
    - wifi: ar5523: enable proper endpoint verification
    - pwm: Drop useless member .of_pwm_n_cells of struct pwm_chip
    - pwm: Let the of_xlate callbacks accept references without period
    - pwm: Drop duplicate check against chip->npwm in of_pwm_xlate_with_flags()
    - pwm: Reorder symbols in core.c
    - pwm: Provide an inline function to get the parent device of a given chip
    - pwm: meson: Change prototype of a few helpers to prepare further changes
    - pwm: meson: Make use of pwmchip_parent() accessor
    - pwm: meson: Add check for error from clk_round_rate()
    - pwm: meson: Use mul_u64_u64_div_u64() for frequency calculating
    - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
    - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
    - Revert "sh: Handle calling csum_partial with misaligned data"
    - wifi: mt76: mt7603: fix tx queue of loopback packets
    - wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset
    - wifi: mt76: mt7996: fix size of txpower MCU command
    - wifi: mt76: mt7925: ensure 4-byte alignment for suspend & wow command
    - wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet()
    - wifi: mt76: mt7996: fix potential memory leakage when reading chip
      temperature
    - libbpf: Fix error message in attach_kprobe_multi
    - wifi: nl80211: Avoid address calculations via out of bounds array indexing
    - wifi: rtw89: wow: refine WoWLAN flows of HCI interrupts and low power mode
    - selftests/binderfs: use the Makefile's rules, not Make's implicit rules
    - selftests/resctrl: fix clang build failure: use LOCAL_HDRS
    - selftests: default to host arch for LLVM builds
    - kunit: Fix kthread reference
    - kunit: unregister the device on error
    - kunit: bail out early in __kunit_test_suites_init() if there are no suites
      to test
    - selftests/bpf: Fix pointer arithmetic in test_xdp_do_redirect
    - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
    - scsi: bfa: Ensure the copied buf is NUL terminated
    - scsi: qedf: Ensure the copied buf is NUL terminated
    - scsi: qla2xxx: Fix debugfs output for fw_resource_count
    - gpio: nuvoton: Fix sgpio irq handle error
    - x86/numa: Fix SRAT lookup of CFMWS ranges with numa_fill_memblks()
    - wifi: mwl8k: initialize cmd->addr[] properly
    - HID: amd_sfh: Handle "no sensors" in PM operations
    - usb: aqc111: stop lying about skb->truesize
    - net: usb: sr9700: stop lying about skb->truesize
    - m68k: Fix spinlock race in kernel thread creation
    - m68k: mac: Fix reboot hang on Mac IIci
    - dm-delay: fix workqueue delay_timer race
    - dm-delay: fix hung task introduced by kthread mode
    - dm-delay: fix max_delay calculations
    - ptp: ocp: fix DPLL functions
    - net: ipv6: fix wrong start position when receive hop-by-hop fragment
    - eth: sungem: remove .ndo_poll_controller to avoid deadlocks
    - selftests: net: add missing config for amt.sh
    - selftests: net: move amt to socat for better compatibility
    - net: ethernet: mediatek: split tx and rx fields in mtk_soc_data struct
    - net: ethernet: mediatek: use ADMAv1 instead of ADMAv2.0 on MT7981 and MT7986
    - ice: Fix package download algorithm
    - net: ethernet: cortina: Locking fixes
    - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
    - net: usb: smsc95xx: stop lying about skb->truesize
    - net: openvswitch: fix overwriting ct original tuple for ICMPv6
    - ipv6: sr: add missing seg6_local_exit
    - ipv6: sr: fix incorrect unregister order
    - ipv6: sr: fix invalid unregister error path
    - net/mlx5: Fix peer devlink set for SF representor devlink port
    - net/mlx5: Reload only IB representors upon lag disable/enable
    - net/mlx5: Add a timeout to acquire the command queue semaphore
    - net/mlx5: Discard command completions in internal error
    - s390/bpf: Emit a barrier for BPF_FETCH instructions
    - riscv, bpf: make some atomic operations fully ordered
    - ax25: Use kernel universal linked list to implement ax25_dev_list
    - ax25: Fix reference count leak issues of ax25_dev
    - ax25: Fix reference count leak issue of net_device
    - dpll: fix return value check for kmemdup
    - net: fec: remove .ndo_poll_controller to avoid deadlocks
    - mptcp: SO_KEEPALIVE: fix getsockopt support
    - mptcp: cleanup writer wake-up
    - mptcp: avoid some duplicate code in socket option handling
    - mptcp: implement TCP_NOTSENT_LOWAT support
    - mptcp: cleanup SOL_TCP handling
    - mptcp: fix full TCP keep-alive support
    - net: stmmac: Offload queueMaxSDU from tc-taprio
    - net: stmmac: est: Per Tx-queue error count for HLBF
    - net: stmmac: Report taprio offload status
    - net: stmmac: move the EST lock to struct stmmac_priv
    - net: micrel: Fix receiving the timestamp in the frame for lan8841
    - Bluetooth: compute LE flow credits based on recvbuf space
    - Bluetooth: qca: Fix error code in qca_read_fw_build_info()
    - Bluetooth: ISO: Add hcon for listening bis sk
    - Bluetooth: ISO: Clean up returns values in iso_connect_ind()
    - Bluetooth: ISO: Make iso_get_sock_listen generic
    - Bluetooth: Remove usage of the deprecated ida_simple_xx() API
    - Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS
    - Bluetooth: HCI: Remove HCI_AMP support
    - ice: make ice_vsi_cfg_rxq() static
    - ice: make ice_vsi_cfg_txq() static
    - overflow: Change DEFINE_FLEX to take __counted_by member
    - Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings
    - Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1
    - drm/bridge: Fix improper bridge init order with pre_enable_prev_first
    - drm/ci: update device type for volteer devices
    - drm/nouveau/dp: Fix incorrect return code in r535_dp_aux_xfer()
    - drm/omapdrm: Fix console by implementing fb_dirty
    - drm/omapdrm: Fix console with deferred ops
    - printk: Let no_printk() use _printk()
    - dev_printk: Add and use dev_no_printk()
    - drm/lcdif: Do not disable clocks on already suspended hardware
    - drm/dp: Don't attempt AUX transfers when eDP panels are not powered
    - drm/panel: atna33xc20: Fix unbalanced regulator in the case HPD doesn't
      assert
    - drm/amd/display: Fix potential index out of bounds in color transformation
      function
    - drm/amd/display: Remove redundant condition in dcn35_calc_blocks_to_gate()
    - ASoC: Intel: Disable route checks for Skylake boards
    - ASoC: Intel: avs: ssm4567: Do not ignore route checks
    - mtd: core: Report error if first mtd_otp_size() call fails in
      mtd_otp_nvmem_add()
    - mtd: rawnand: hynix: fixed typo
    - drm/imagination: avoid -Woverflow warning
    - ASoC: mediatek: Assign dummy when codec not specified for a DAI link
    - drm/panel: ltk050h3146w: add MIPI_DSI_MODE_VIDEO to LTK050H3148W flags
    - drm/panel: ltk050h3146w: drop duplicate commands from LTK050H3148W init
    - fbdev: shmobile: fix snprintf truncation
    - ASoC: kirkwood: Fix potential NULL dereference
    - drm/meson: vclk: fix calculation of 59.94 fractional rates
    - drm/mediatek: Add 0 size check to mtk_drm_gem_obj
    - drm/mediatek: Init `ddp_comp` with devm_kcalloc()
    - ASoC: SOF: Intel: hda-dai: fix channel map configuration for aggregated
      dailink
    - powerpc/fsl-soc: hide unused const variable
    - ASoC: SOF: Intel: mtl: Correct rom_status_reg
    - ASoC: SOF: Intel: lnl: Correct rom_status_reg
    - ASoC: SOF: Intel: mtl: Disable interrupts when firmware boot failed
    - ASoC: SOF: Intel: mtl: Implement firmware boot state check
    - fbdev: sisfb: hide unused variables
    - selftests: cgroup: skip test_cgcore_lesser_ns_open when cgroup2 mounted
      without nsdelegate
    - ASoC: Intel: avs: Restore stream decoupling on prepare
    - ASoC: Intel: avs: Fix ASRC module initialization
    - ASoC: Intel: avs: Fix potential integer overflow
    - ASoC: Intel: avs: Test result of avs_get_module_entry()
    - media: ngene: Add dvb_ca_en50221_init return value check
    - staging: media: starfive: Remove links when unregistering devices
    - media: rcar-vin: work around -Wenum-compare-conditional warning
    - media: radio-shark2: Avoid led_names truncations
    - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
    - platform/x86: xiaomi-wmi: Fix race condition when reporting key events
    - drm/msm/dp: allow voltage swing / pre emphasis of 3
    - drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected
    - media: ipu3-cio2: Request IRQ earlier
    - media: dt-bindings: ovti,ov2680: Fix the power supply names
    - media: i2c: et8ek8: Don't strip remove function when driver is builtin
    - media: v4l2-subdev: Fix stream handling for crop API
    - fbdev: sh7760fb: allow modular build
    - media: atomisp: ssh_css: Fix a null-pointer dereference in
      load_video_binaries
    - drm/arm/malidp: fix a possible null pointer dereference
    - drm: vc4: Fix possible null pointer dereference
    - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
    - drm/bridge: anx7625: Don't log an error when DSI host can't be found
    - drm/bridge: icn6211: Don't log an error when DSI host can't be found
    - drm/bridge: lt8912b: Don't log an error when DSI host can't be found
    - drm/bridge: lt9611: Don't log an error when DSI host can't be found
    - drm/bridge: lt9611uxc: Don't log an error when DSI host can't be found
    - drm/bridge: tc358775: Don't log an error when DSI host can't be found
    - drm/bridge: dpc3433: Don't log an error when DSI host can't be found
    - drm/panel: novatek-nt35950: Don't log an error when DSI host can't be found
    - drm/bridge: anx7625: Update audio status while detecting
    - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
    - ALSA: hda: cs35l41: Remove Speaker ID for Lenovo Legion slim 7 16ARHA7
    - drm/mipi-dsi: use correct return type for the DSC functions
    - media: uvcvideo: Add quirk for Logitech Rally Bar
    - drm/rockchip: vop2: Do not divide height twice for YUV
    - drm/edid: Parse topology block for all DispID structure v1.x
    - media: cadence: csi2rx: configure DPHY before starting source stream
    - clk: samsung: exynosautov9: fix wrong pll clock id value
    - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent
    - RDMA/mlx5: Change check for cacheable mkeys
    - RDMA/mlx5: Adding remote atomic access flag to updatable flags
    - clk: mediatek: pllfh: Don't log error for missing fhctl node
    - iommu: Undo pasid attachment only for the devices that have succeeded
    - RDMA/hns: Fix return value in hns_roce_map_mr_sg
    - RDMA/hns: Fix deadlock on SRQ async events.
    - RDMA/hns: Fix UAF for cq async event
    - RDMA/hns: Fix GMV table pagesize
    - RDMA/hns: Use complete parentheses in macros
    - RDMA/hns: Modify the print level of CQE error
    - clk: mediatek: mt8365-mm: fix DPI0 parent
    - clk: rs9: fix wrong default value for clock amplitude
    - clk: qcom: clk-alpha-pll: remove invalid Stromer register offset
    - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
    - RDMA/rxe: Allow good work requests to be executed
    - RDMA/rxe: Fix incorrect rxe_put in error path
    - IB/mlx5: Use __iowrite64_copy() for write combining stores
    - clk: renesas: r8a779a0: Fix CANFD parent clock
    - clk: renesas: r9a07g043: Add clock and reset entry for PLIC
    - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure
    - mm/ksm: fix ksm exec support for prctl
    - clk: qcom: dispcc-sm8450: fix DisplayPort clocks
    - clk: qcom: dispcc-sm6350: fix DisplayPort clocks
    - clk: qcom: dispcc-sm8550: fix DisplayPort clocks
    - clk: qcom: dispcc-sm8650: fix DisplayPort clocks
    - clk: qcom: mmcc-msm8998: fix venus clock issue
    - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
    - x86/insn: Add VEX versions of VPDPBUSD, VPDPBUSDS, VPDPWSSD and VPDPWSSDS
    - ext4: avoid excessive credit estimate in ext4_tmpfile()
    - RDMA/mana_ib: Introduce helpers to create and destroy mana queues
    - RDMA/mana_ib: Use struct mana_ib_queue for CQs
    - RDMA/mana_ib: boundary check before installing cq callbacks
    - virt: acrn: stop using follow_pfn
    - drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
    - sunrpc: removed redundant procp check
    - nfsd: don't create nfsv4recoverydir in nfsdfs when not used.
    - ext4: fix potential unnitialized variable
    - ext4: remove the redundant folio_wait_stable()
    - clk: qcom: Fix SC_CAMCC_8280XP dependencies
    - [Config] updateconfigs for SC_CAMCC_8280XP
    - clk: qcom: Fix SM_GPUCC_8650 dependencies
    - [Config] updateconfigs for SM_GPUCC_8650
    - clk: qcom: apss-ipq-pll: fix PLL rate for IPQ5018
    - of: module: add buffer overflow check in of_modalias()
    - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
    - SUNRPC: Fix gss_free_in_token_pages()
    - selftests/damon/_damon_sysfs: check errors from nr_schemes file reads
    - selftests/kcmp: remove unused open mode
    - RDMA/IPoIB: Fix format truncation compilation errors
    - RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use
      siw
    - samples/landlock: Fix incorrect free in populate_ruleset_net
    - tracing/user_events: Prepare find/delete for same name events
    - tracing/user_events: Fix non-spaced field matching
    - modules: Drop the .export_symbol section from the final modules
    - net: bridge: xmit: make sure we have at least eth header len bytes
    - selftests: net: bridge: increase IGMP/MLD exclude timeout membership
      interval
    - net: bridge: mst: fix vlan use-after-free
    - net: qrtr: ns: Fix module refcnt
    - selftests/net/lib: no need to record ns name if it already exist
    - idpf: don't skip over ethtool tcp-data-split setting
    - netrom: fix possible dead-lock in nr_rt_ioctl()
    - af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
    - sched/fair: Allow disabling sched_balance_newidle with
      sched_relax_domain_level
    - sched/core: Fix incorrect initialization of the 'burst' parameter in
      cpu_max_write()
    - net: wangxun: fix to change Rx features
    - net: wangxun: match VLAN CTAG and STAG features
    - net: txgbe: move interrupt codes to a separate file
    - net: txgbe: use irq_domain for interrupt controller
    - net: txgbe: fix to control VLAN strip
    - l2tp: fix ICMP error handling for UDP-encap sockets
    - io_uring/net: ensure async prep handlers always initialize ->done_io
    - pwm: Fix setting period with #pwm-cells = <1> and of_pwm_single_xlate()
    - net: txgbe: fix to clear interrupt status after handling IRQ
    - net: txgbe: fix GPIO interrupt blocking
    - Linux 6.8.12
  * Noble update: v6.8.11 upstream stable release (LP: #2070355)
    - drm/amd/display: Fix division by zero in setup_dsc_config
    - net: ks8851: Fix another TX stall caused by wrong ISR flag handling
    - ice: pass VSI pointer into ice_vc_isvalid_q_id
    - ice: remove unnecessary duplicate checks for VF VSI ID
    - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
    - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
    - KEYS: trusted: Fix memory leak in tpm2_key_encode()
    - erofs: get rid of erofs_fs_context
    - erofs: reliably distinguish block based and fscache mode
    - binder: fix max_thread type inconsistency
    - usb: dwc3: Wait unconditionally after issuing EndXfer command
    - net: usb: ax88179_178a: fix link status when link is set to down/up
    - usb: typec: ucsi: displayport: Fix potential deadlock
    - usb: typec: tipd: fix event checking for tps25750
    - usb: typec: tipd: fix event checking for tps6598x
    - serial: kgdboc: Fix NMI-safety problems from keyboard reset code
    - remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
    - KEYS: trusted: Do not use WARN when encode fails
    - admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
    - docs: kernel_include.py: Cope with docutils 0.21
    - Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching
      sysfs file
    - block: add a disk_has_partscan helper
    - block: add a partscan sysfs attribute for disks
    - Linux 6.8.11
  * Noble update: v6.8.10 upstream stable release (LP: #2070349)
    - rust: module: place generated init_module() function in .init.text
    - rust: macros: fix soundness issue in `module!` macro
    - wifi: nl80211: don't free NULL coalescing rule
    - pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
    - pinctrl/meson: fix typo in PDM's pin name
    - pinctrl: core: delete incorrect free in pinctrl_enable()
    - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
    - pinctrl: mediatek: paris: Rework support for
      PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
    - sunrpc: add a struct rpc_stats arg to rpc_create_args
    - nfs: expose /proc/net/sunrpc/nfs in net namespaces
    - nfs: make the rpc_stat per net namespace
    - nfs: Handle error of rpc_proc_register() in nfs_net_init().
    - pinctrl: baytrail: Fix selecting gpio pinctrl state
    - power: rt9455: hide unused rt9455_boost_voltage_values
    - power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
    - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
    - nfsd: rename NFSD_NET_* to NFSD_STATS_*
    - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces
    - nfsd: make all of the nfsd stats per-network namespace
    - NFSD: add support for CB_GETATTR callback
    - NFSD: Fix nfsd4_encode_fattr4() crasher
    - regulator: mt6360: De-capitalize devicetree regulator subnodes
    - regulator: change stubbed devm_regulator_get_enable to return Ok
    - regulator: change devm_regulator_get_enable_optional() stub to return Ok
    - bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
    - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
    - regmap: Add regmap_read_bypassed()
    - ASoC: SOF: Intel: add default firmware library path for LNL
    - nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH
    - bpf: Fix a verifier verbose message
    - spi: axi-spi-engine: use common AXI macros
    - spi: axi-spi-engine: fix version format string
    - spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
    - bpf, arm64: Fix incorrect runtime stats
    - riscv, bpf: Fix incorrect runtime stats
    - ASoC: Intel: avs: Set name of control as in topology
    - ASoC: codecs: wsa881x: set clk_stop_mode1 flag
    - s390/mm: Fix storage key clearing for guest huge pages
    - s390/mm: Fix clearing storage keys for huge pages
    - arm32, bpf: Reimplement sign-extension mov instruction
    - xdp: use flags field to disambiguate broadcast redirect
    - efi/unaccepted: touch soft lockup during memory accept
    - ice: ensure the copied buf is NUL terminated
    - bna: ensure the copied buf is NUL terminated
    - octeontx2-af: avoid off-by-one read from userspace
    - thermal/debugfs: Free all thermal zone debug memory on zone removal
    - thermal/debugfs: Fix two locking issues with thermal zone debug
    - nsh: Restore skb->{protocol,data,mac_header} for outer header in
      nsh_gso_segment().
    - net l2tp: drop flow hash on forward
    - thermal/debugfs: Prevent use-after-free from occurring after cdev removal
    - s390/vdso: Add CFI for RA register to asm macro vdso_func
    - Fix a potential infinite loop in extract_user_to_sg()
    - ALSA: emu10k1: fix E-MU card dock presence monitoring
    - ALSA: emu10k1: factor out snd_emu1010_load_dock_firmware()
    - ALSA: emu10k1: move the whole GPIO event handling to the workqueue
    - ALSA: emu10k1: fix E-MU dock initialization
    - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
    - net: qede: use return from qede_parse_flow_attr() for flower
    - net: qede: use return from qede_parse_flow_attr() for flow_spec
    - net: qede: use return from qede_parse_actions()
    - vxlan: Fix racy device stats updates.
    - vxlan: Add missing VNI filter counter update in arp_reduce().
    - ASoC: meson: axg-fifo: use FIELD helpers
    - ASoC: meson: axg-fifo: use threaded irq to check periods
    - ASoC: meson: axg-card: make links nonatomic
    - ASoC: meson: axg-tdm-interface: manage formatters in trigger
    - ASoC: meson: cards: select SND_DYNAMIC_MINORS
    - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
    - s390/cio: Ensure the copied buf is NUL terminated
    - cxgb4: Properly lock TX queue for the selftest.
    - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
    - drm/amdgpu: fix doorbell regression
    - spi: fix null pointer dereference within spi_sync
    - net: bridge: fix multicast-to-unicast with fraglist GSO
    - net: core: reject skb_copy(_expand) for fraglist GSO skbs
    - rxrpc: Clients must accept conn from any address
    - tipc: fix a possible memleak in tipc_buf_append
    - vxlan: Pull inner IP header in vxlan_rcv().
    - s390/qeth: Fix kernel panic after setting hsuid
    - drm/panel: ili9341: Correct use of device property APIs
    - [Config] updateconfigs for DRM_PANEL_ILITEK_ILI9341
    - drm/panel: ili9341: Respect deferred probe
    - drm/panel: ili9341: Use predefined error codes
    - ipv4: Fix uninit-value access in __ip_make_skb()
    - net: gro: fix udp bad offset in socket lookup by adding
      {inner_}network_offset to napi_gro_cb
    - net: gro: add flush check in udp_gro_receive_segment
    - drm/xe/display: Fix ADL-N detection
    - clk: qcom: smd-rpm: Restore msm8976 num_clk
    - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
    - powerpc/pseries: make max polling consistent for longer H_CALLs
    - powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
    - EDAC/versal: Do not log total error counts
    - swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y
    - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
    - exfat: fix timing of synchronizing bitmap and inode
    - firmware: microchip: don't unconditionally print validation success
    - scsi: ufs: core: Fix MCQ MAC configuration
    - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
    - scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling
    - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
    - scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
    - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
    - scsi: lpfc: Use a dedicated lock for ras_fwlog state
    - gfs2: Fix invalid metadata access in punch_hole
    - fs/9p: fix uninitialized values during inode evict
    - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
    - wifi: cfg80211: fix rdev_dump_mpp() arguments order
    - wifi: mac80211: fix prep_connection error path
    - wifi: iwlwifi: read txq->read_ptr under lock
    - wifi: iwlwifi: mvm: guard against invalid STA ID on removal
    - net: mark racy access on sk->sk_rcvbuf
    - drm/xe: Fix END redefinition
    - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
    - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
    - btrfs: return accurate error code on open failure in open_fs_devices()
    - drm/amdkfd: Check cgroup when returning DMABuf info
    - drm/amdkfd: range check cp bad op exception interrupts
    - bpf: Check bloom filter map value size
    - selftests/ftrace: Fix event filter target_func selection
    - kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
    - ASoC: SOF: Intel: hda-dsp: Skip IMR boot on ACE platforms in case of S3
      suspend
    - regulator: tps65132: Add of_match table
    - OSS: dmasound/paula: Mark driver struct with __refdata to prevent section
      mismatch
    - scsi: ufs: core: WLUN suspend dev/link state error recovery
    - scsi: libsas: Align SMP request allocation to ARCH_DMA_MINALIGN
    - scsi: ufs: core: Fix MCQ mode dev command timeout
    - ALSA: line6: Zero-initialize message buffers
    - block: fix overflow in blk_ioctl_discard()
    - ASoC: codecs: ES8326: Solve error interruption issue
    - ASoC: codecs: ES8326: modify clock table
    - net: bcmgenet: Reset RBUF on first open
    - vboxsf: explicitly deny setlease attempts
    - ata: sata_gemini: Check clk_enable() result
    - firewire: ohci: mask bus reset interrupts between ISR and bottom half
    - tools/power turbostat: Fix added raw MSR output
    - tools/power turbostat: Increase the limit for fd opened
    - tools/power turbostat: Fix Bzy_MHz documentation typo
    - tools/power turbostat: Do not print negative LPI residency
    - tools/power turbostat: Expand probe_intel_uncore_frequency()
    - tools/power turbostat: Print ucode revision only if valid
    - tools/power turbostat: Fix warning upon failed /dev/cpu_dma_latency read
    - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
    - btrfs: always clear PERTRANS metadata during commit
    - memblock tests: fix undefined reference to `early_pfn_to_nid'
    - memblock tests: fix undefined reference to `panic'
    - memblock tests: fix undefined reference to `BIT'
    - nouveau/gsp: Avoid addressing beyond end of rpc->entries
    - scsi: target: Fix SELinux error when systemd-modules loads the target module
    - scsi: hisi_sas: Handle the NCQ error returned by D2H frame
    - blk-iocost: avoid out of bounds shift
    - accel/ivpu: Remove d3hot_after_power_off WA
    - accel/ivpu: Improve clarity of MMU error messages
    - accel/ivpu: Fix missed error message after VPU rename
    - platform/x86: acer-wmi: Add support for Acer PH18-71
    - gpu: host1x: Do not setup DMA for virtual devices
    - MIPS: scall: Save thread_info.syscall unconditionally on entry
    - tools/power/turbostat: Fix uncore frequency file string
    - net: add copy_safe_from_sockptr() helper
    - nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
    - drm/amdgpu: Refine IB schedule error logging
    - drm/amd/display: add DCN 351 version for microcode load
    - drm/amdgpu: add smu 14.0.1 discovery support
    - drm/amdgpu: implement IRQ_STATE_ENABLE for SDMA v4.4.2
    - drm/amd/display: Skip on writeback when it's not applicable
    - drm/amd/pm: fix the high voltage issue after unload
    - drm/amdgpu: Fix VCN allocation in CPX partition
    - amd/amdkfd: sync all devices to wait all processes being evicted
    - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
    - Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
    - Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
    - hv_netvsc: Don't free decrypted memory
    - uio_hv_generic: Don't free decrypted memory
    - Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
    - drm/xe/xe_migrate: Cast to output precision before multiplying operands
    - drm/xe: Label RING_CONTEXT_CONTROL as masked
    - smb3: fix broken reconnect when password changing on the server by allowing
      password rotation
    - iommu: mtk: fix module autoloading
    - fs/9p: only translate RWX permissions for plain 9P2000
    - fs/9p: translate O_TRUNC into OTRUNC
    - fs/9p: fix the cache always being enabled on files with qid flags
    - 9p: explicitly deny setlease attempts
    - powerpc/crypto/chacha-p10: Fix failure on non Power10
    - gpio: wcove: Use -ENOTSUPP consistently
    - gpio: crystalcove: Use -ENOTSUPP consistently
    - clk: Don't hold prepare_lock when calling kref_put()
    - fs/9p: remove erroneous nlink init from legacy stat2inode
    - fs/9p: drop inodes immediately on non-.L too
    - gpio: lpc32xx: fix module autoloading
    - drm/nouveau/dp: Don't probe eDP ports twice harder
    - platform/x86/amd: pmf: Decrease error message to debug
    - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
    - drm/radeon: silence UBSAN warning (v3)
    - net:usb:qmi_wwan: support Rolling modules
    - blk-iocost: do not WARN if iocg was already offlined
    - SUNRPC: add a missing rpc_stat for TCP TLS
    - qibfs: fix dentry leak
    - xfrm: Preserve vlan tags for transport mode software GRO
    - ARM: 9381/1: kasan: clear stale stack poison
    - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
    - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
    - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
    - Bluetooth: msft: fix slab-use-after-free in msft_do_close()
    - arm64: dts: mediatek: mt8183-pico6: Fix bluetooth node
    - Bluetooth: HCI: Fix potential null-ptr-deref
    - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
    - net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs
    - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
    - hwmon: (corsair-cpro) Use a separate buffer for sending commands
    - hwmon: (corsair-cpro) Use complete_all() instead of complete() in
      ccp_raw_event()
    - hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
    - phonet: fix rtm_phonet_notify() skb allocation
    - netlink: specs: Add missing bridge linkinfo attrs
    - nfc: nci: Fix kcov check in nci_rx_work()
    - net: bridge: fix corrupted ethernet header on multicast-to-unicast
    - ipv6: Fix potential uninit-value access in __ip6_make_skb()
    - selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC
    - rxrpc: Fix the names of the fields in the ACK trailer struct
    - rxrpc: Fix congestion control algorithm
    - rxrpc: Only transmit one ACK per jumbo packet received
    - dt-bindings: net: mediatek: remove wrongly added clocks and SerDes
    - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
    - net-sysfs: convert dev->operstate reads to lockless ones
    - hsr: Simplify code for announcing HSR nodes timer setup
    - ipv6: annotate data-races around cnf.disable_ipv6
    - ipv6: prevent NULL dereference in ip6_output()
    - net/smc: fix neighbour and rtable leak in smc_ib_find_route()
    - net: hns3: using user configure after hardware reset
    - net: hns3: direct return when receive a unknown mailbox message
    - net: hns3: change type of numa_node_mask as nodemask_t
    - net: hns3: release PTP resources if pf initialization failed
    - net: hns3: use appropriate barrier function after setting a bit value
    - net: hns3: fix port vlan filter not disabled issue
    - net: hns3: fix kernel crash when devlink reload during initialization
    - net: dsa: mv88e6xxx: add phylink_get_caps for the mv88e6320/21 family
    - drm/meson: dw-hdmi: power up phy on device init
    - drm/meson: dw-hdmi: add bandgap setting for g12
    - drm/connector: Add \n to message about demoting connector force-probes
    - dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11
      users
    - gpiolib: cdev: Fix use after free in lineinfo_changed_notify
    - gpiolib: cdev: fix uninitialised kfifo
    - drm/amdgpu: Fix comparison in amdgpu_res_cpu_visible
    - drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
    - firewire: nosy: ensure user_length is taken into account when fetching
      packet contents
    - Reapply "drm/qxl: simplify qxl_fence_wait"
    - usb: typec: ucsi: Check for notifications after init
    - usb: typec: ucsi: Fix connector check on init
    - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed
      device
    - usb: ohci: Prevent missed ohci interrupts
    - USB: core: Fix access violation during port device removal
    - usb: gadget: composite: fix OS descriptors w_value logic
    - usb: gadget: uvc: use correct buffer size when parsing configfs lists
    - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
    - usb: gadget: f_fs: Fix a race condition when processing setup packets.
    - usb: xhci-plat: Don't include xhci.h
    - usb: dwc3: core: Prevent phy suspend during init
    - usb: typec: tcpm: clear pd_event queue in PORT_RESET
    - usb: typec: tcpm: unregister existing source caps before re-registration
    - usb: typec: tcpm: Check for port partner validity before consuming it
    - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
    - ALSA: hda/realtek: Fix conflicting PCI SSID 17aa:386f for Lenovo Legion
      models
    - firewire: ohci: fulfill timestamp for some local asynchronous transaction
    - mm/slub: avoid zeroing outside-object freepointer for single free
    - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
    - btrfs: set correct ram_bytes when splitting ordered extent
    - btrfs: qgroup: do not check qgroup inherit if qgroup is disabled
    - btrfs: make sure that WRITTEN is set on all metadata blocks
    - maple_tree: fix mas_empty_area_rev() null pointer dereference
    - mm/slab: make __free(kfree) accept error pointers
    - mptcp: ensure snd_nxt is properly initialized on connect
    - mptcp: only allow set existing scheduler for net.mptcp.scheduler
    - workqueue: Fix selection of wake_cpu in kick_pool()
    - dt-bindings: iio: health: maxim,max30102: fix compatible check
    - iio:imu: adis16475: Fix sync mode setting
    - iio: pressure: Fixes BME280 SPI driver data
    - iio: pressure: Fixes SPI support for BMP3xx devices
    - iio: accel: mxc4005: Interrupt handling fixes
    - iio: accel: mxc4005: Reset chip on probe() and resume()
    - kmsan: compiler_types: declare __no_sanitize_or_inline
    - e1000e: change usleep_range to udelay in PHY mdic access
    - tipc: fix UAF in error path
    - xtensa: fix MAKE_PC_FROM_RA second argument
    - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
    - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
    - net: bcmgenet: synchronize UMAC_CMD access
    - ASoC: tegra: Fix DSPK 16-bit playback
    - ASoC: ti: davinci-mcasp: Fix race condition during probe
    - dyndbg: fix old BUG_ON in >control parser
    - slimbus: qcom-ngd-ctrl: Add timeout for wait operation
    - clk: samsung: Revert "clk: Use device_get_match_data()"
    - clk: sunxi-ng: common: Support minimum and maximum rate
    - clk: sunxi-ng: a64: Set minimum and maximum rate for PLL-MIPI
    - mei: me: add lunar lake point M DID
    - drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()
    - Revert "drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()"
    - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
    - drm/ttm: Print the memory decryption status just once
    - drm/vmwgfx: Fix Legacy Display Unit
    - drm/vmwgfx: Fix invalid reads in fence signaled events
    - drm/imagination: Ensure PVR_MIPS_PT_PAGE_COUNT is never zero
    - drm/amd/display: Fix idle optimization checks for multi-display and dual eDP
    - drm/nouveau/gsp: Use the sg allocator for level 2 of radix3
    - drm/i915/gt: Automate CCS Mode setting during engine resets
    - drm/i915/bios: Fix parsing backlight BDB data
    - drm/amd/display: Handle Y carry-over in VCP X.Y calculation
    - drm/amd/display: Fix incorrect DSC instance for MST
    - arm64: dts: qcom: sa8155p-adp: fix SDHC2 CD pin configuration
    - iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
    - net: fix out-of-bounds access in ops_init
    - hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
    - misc/pvpanic-pci: register attributes via pci_driver
    - x86/apic: Don't access the APIC when disabling x2APIC
    - selftests/mm: fix powerpc ARCH check
    - mm: use memalloc_nofs_save() in page_cache_ra_order()
    - mm/userfaultfd: reset ptes when close() for wr-protected ones
    - iommu/amd: Enhance def_domain_type to handle untrusted device
    - fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan
    - fs/proc/task_mmu: fix uffd-wp confusion in pagemap_scan_pmd_entry()
    - nvme-pci: Add quirk for broken MSIs
    - regulator: core: fix debugfs creation regression
    - spi: microchip-core-qspi: fix setting spi bus clock rate
    - ksmbd: off ipv6only for both ipv4/ipv6 binding
    - ksmbd: avoid to send duplicate lease break notifications
    - ksmbd: do not grant v2 lease if parent lease key and epoch are not set
    - tracefs: Reset permissions on remount if permissions are options
    - tracefs: Still use mount point as default permissions for instances
    - eventfs: Do not treat events directory different than other directories
    - Bluetooth: qca: fix invalid device address check
    - Bluetooth: qca: fix wcn3991 device address check
    - Bluetooth: qca: add missing firmware sanity checks
    - Bluetooth: qca: fix NVM configuration parsing
    - Bluetooth: qca: generalise device address check
    - Bluetooth: qca: fix info leak when fetching board id
    - Bluetooth: qca: fix info leak when fetching fw build id
    - Bluetooth: qca: fix firmware check error path
    - keys: Fix overwrite of key expiration on instantiation
    - Linux 6.8.10
  * Noble update: v6.8.9 upstream stable release (LP: #2070337)
    - cifs: Fix reacquisition of volume cookie on still-live connection
    - smb: client: fix rename(2) regression against samba
    - cifs: reinstate original behavior again for forceuid/forcegid
    - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
    - HID: logitech-dj: allow mice to use all types of reports
    - arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f
    - arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
    - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
    - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
    - arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi CM5
    - arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
    - arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
    - arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex
    - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys
    - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex
    - arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex1
    - arm64: dts: mediatek: cherry: Describe CPU supplies
    - arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for
      MT6315
    - arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for
      MT6315
    - arm64: dts: mediatek: mt8183-kukui: Use default min voltage for MT6358
    - arm64: dts: mediatek: mt7622: fix clock controllers
    - arm64: dts: mediatek: mt7622: fix IR nodename
    - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
    - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
    - arm64: dts: mediatek: mt7986: reorder properties
    - arm64: dts: mediatek: mt7986: drop invalid properties from ethsys
    - arm64: dts: mediatek: mt7986: drop "#reset-cells" from Ethernet controller
    - arm64: dts: mediatek: mt7986: reorder nodes
    - arm64: dts: mediatek: mt7986: drop invalid thermal block clock
    - arm64: dts: mediatek: mt7986: prefix BPI-R3 cooling maps with "map-"
    - arm64: dts: mediatek: mt2712: fix validation errors
    - arm64: dts: rockchip: mark system power controller and fix typo on
      orangepi-5-plus
    - arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro
    - block: fix module reference leakage from bdev_open_by_dev error path
    - arm64: dts: qcom: Fix type of "wdog" IRQs for remoteprocs
    - arm64: dts: qcom: x1e80100: Fix the compatible for cluster idle states
    - arm64: dts: qcom: sc8180x: Fix ss_phy_irq for secondary USB controller
    - gpio: tangier: Use correct type for the IRQ chip data
    - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
    - wifi: mac80211: clean up assignments to pointer cache.
    - wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded
    - wifi: iwlwifi: mvm: remove old PASN station when adding a new one
    - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
    - drm/gma500: Remove lid code
    - wifi: mac80211_hwsim: init peer measurement result
    - wifi: mac80211: remove link before AP
    - wifi: mac80211: fix unaligned le16 access
    - net: libwx: fix alloc msix vectors failed
    - vxlan: drop packets from invalid src-address
    - net: bcmasp: fix memory leak when bringing down interface
    - mlxsw: core: Unregister EMAD trap using FORWARD action
    - mlxsw: core_env: Fix driver initialization with old firmware
    - mlxsw: pci: Fix driver initialization with old firmware
    - ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with
      the valid property
    - icmp: prevent possible NULL dereferences from icmp_build_probe()
    - bridge/br_netlink.c: no need to return void function
    - bnxt_en: refactor reset close code
    - bnxt_en: Fix the PCI-AER routines
    - bnxt_en: Fix error recovery for 5760X (P7) chips
    - cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()
    - net: dsa: mv88e6xx: fix supported_interfaces setup in
      mv88e6250_phylink_get_caps()
    - NFC: trf7970a: disable all regulators on removal
    - netfs: Fix writethrough-mode error handling
    - ax25: Fix netdev refcount issue
    - soc: mediatek: mtk-svs: Append "-thermal" to thermal zone names
    - tools: ynl: don't ignore errors in NLMSG_DONE messages
    - net: usb: ax88179_178a: stop lying about skb->truesize
    - tcp: Fix Use-After-Free in tcp_ao_connect_init
    - net: gtp: Fix Use-After-Free in gtp_dellink
    - net: phy: mediatek-ge-soc: follow netdev LED trigger semantics
    - gpio: tegra186: Fix tegra186_gpio_is_accessible() check
    - drm/xe: Remove sysfs only once on action add failure
    - drm/xe: call free_gsc_pkt only once on action add failure
    - Bluetooth: hci_event: Use HCI error defines instead of magic values
    - Bluetooth: hci_conn: Only do ACL connections sequentially
    - Bluetooth: Remove pending ACL connection attempts
    - Bluetooth: hci_conn: Always use sk_timeo as conn_timeout
    - Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
    - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
    - Bluetooth: hci_sync: Attempt to dequeue connection attempt
    - Bluetooth: ISO: Reassemble PA data for bcast sink
    - Bluetooth: hci_sync: Use advertised PHYs on hci_le_ext_create_conn_sync
    - Bluetooth: btusb: Fix triggering coredump implementation for QCA
    - Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE
    - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
    - Bluetooth: btusb: mediatek: Fix double free of skb in coredump
    - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
    - Bluetooth: qca: set power_ctrl_enabled on NULL returned by
      gpiod_get_optional()
    - ipvs: Fix checksumming on GSO of SCTP packets
    - net: openvswitch: Fix Use-After-Free in ovs_ct_exit
    - mlxsw: Use refcount_t for reference counting
    - mlxsw: spectrum_acl_tcam: Fix race in region ID allocation
    - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
    - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
    - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
    - mlxsw: spectrum_acl_tcam: Rate limit error message
    - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
    - mlxsw: spectrum_acl_tcam: Fix warning during rehash
    - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
    - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
    - eth: bnxt: fix counting packets discarded due to OOM and netpoll
    - ARM: dts: imx6ull-tarragon: fix USB over-current polarity
    - netfilter: nf_tables: honor table dormant flag from netdev release event
      path
    - net: phy: dp83869: Fix MII mode failure
    - net: ti: icssg-prueth: Fix signedness bug in prueth_init_rx_chns()
    - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
    - i40e: Report MFS in decimal base instead of hex
    - iavf: Fix TC config comparison with existing adapter TC config
    - ice: fix LAG and VF lock dependency in ice_reset_vf()
    - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
    - octeontx2-af: fix the double free in rvu_npc_freemem()
    - dpll: check that pin is registered in __dpll_pin_unregister()
    - dpll: fix dpll_pin_on_pin_register() for multiple parent pins
    - tls: fix lockless read of strp->msg_ready in ->poll
    - af_unix: Suppress false-positive lockdep splat for spin_lock() in
      __unix_gc().
    - netfs: Fix the pre-flush when appending to a file in writethrough mode
    - drm/amd/display: Check DP Alt mode DPCS state via DMUB
    - Revert "drm/amd/display: fix USB-C flag update after enc10 feature init"
    - xhci: move event processing for one interrupter to a separate function
    - usb: xhci: correct return value in case of STS_HCE
    - KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled
    - KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET"
    - drm: add drm_gem_object_is_shared_for_memory_stats() helper
    - drm/amdgpu: add shared fdinfo stats
    - drm/amdgpu: fix visible VRAM handling during faults
    - Revert "UBUNTU: SAUCE: selftests/seccomp: fix check of fds being assigned"
    - selftests/seccomp: user_notification_addfd check nextfd is available
    - selftests/seccomp: Change the syscall used in KILL_THREAD test
    - selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)
    - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
    - x86/cpu: Fix check for RDPKRU in __show_regs()
    - rust: phy: implement `Send` for `Registration`
    - rust: kernel: require `Send` for `Module` implementations
    - rust: don't select CONSTRUCTORS
    - [Config] updateconfigs to drop CONSTRUCTORS for rust
    - rust: init: remove impl Zeroable for Infallible
    - rust: make mutually exclusive with CFI_CLANG
    - kbuild: rust: remove unneeded `@rustc_cfg` to avoid ICE
    - kbuild: rust: force `alloc` extern to allow "empty" Rust files
    - rust: remove `params` from `module` macro example
    - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
    - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
    - Bluetooth: qca: fix NULL-deref on non-serdev suspend
    - Bluetooth: qca: fix NULL-deref on non-serdev setup
    - mtd: rawnand: qcom: Fix broken OP_RESET_DEVICE command in
      qcom_misc_cmd_type_exec()
    - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
    - mmc: sdhci-msm: pervent access to suspended controller
    - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128
    - mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros
    - mm: support page_mapcount() on page_has_type() pages
    - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()
    - smb: client: Fix struct_group() usage in __packed structs
    - smb3: missing lock when picking channel
    - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
    - btrfs: fallback if compressed IO fails for ENOSPC
    - btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
    - btrfs: scrub: run relocation repair when/only needed
    - btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
    - x86/tdx: Preserve shared bit on mprotect()
    - cpu: Re-enable CPU mitigations by default for !X86 architectures
    - [Config] updateconfigs for CPU_MITIGATIONS
    - eeprom: at24: fix memory corruption race condition
    - LoongArch: Fix callchain parse error with kernel tracepoint events
    - LoongArch: Fix access error when read fault on a write-only VMA
    - arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
    - arm64: dts: qcom: sm8450: Fix the msi-map entries
    - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
    - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
    - dmaengine: xilinx: xdma: Fix wrong offsets in the buffers addresses in dma
      descriptor
    - dmaengine: xilinx: xdma: Fix synchronization issue
    - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
    - drm/amdgpu: Assign correct bits for SDMA HDP flush
    - drm/atomic-helper: fix parameter order in drm_format_conv_state_copy() call
    - drm/amdgpu/pm: Remove gpu_od if it's an empty directory
    - drm/amdgpu/umsch: don't execute umsch test when GPU is in reset/suspend
    - drm/amdgpu: Fix leak when GPU memory allocation fails
    - drm/amdkfd: Fix rescheduling of restore worker
    - drm/amdkfd: Fix eviction fence handling
    - irqchip/gic-v3-its: Prevent double free on error
    - ACPI: CPPC: Use access_width over bit_width for system memory accesses
    - ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
    - ACPI: CPPC: Fix access width used for PCC registers
    - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec
    - ethernet: Add helper for assigning packet type when dest address does not
      match device address
    - net: b44: set pause params only when interface is up
    - macsec: Enable devices to advertise whether they update sk_buff md_dst
      during offloads
    - macsec: Detect if Rx skb is macsec-related for offloading devices that
      update md_dst
    - stackdepot: respect __GFP_NOLOCKDEP allocation flag
    - fbdev: fix incorrect address computation in deferred IO
    - udp: preserve the connected status if only UDP cmsg
    - mtd: limit OTP NVMEM cell parse to non-NAND devices
    - mtd: diskonchip: work around ubsan link failure
    - firmware: qcom: uefisecapp: Fix memory related IO errors and crashes
    - phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE
    - phy: qcom: qmp-combo: Fix VCO div offset on v3
    - mm: turn folio_test_hugetlb into a PageType
    - mm: zswap: fix shrinker NULL crash with cgroup_disable=memory
    - dmaengine: owl: fix register access functions
    - dmaengine: tegra186: Fix residual calculation
    - idma64: Don't try to serve interrupts when device is powered off
    - soundwire: amd: fix for wake interrupt handling for clockstop mode
    - phy: marvell: a3700-comphy: Fix hardcoded array size
    - phy: freescale: imx8m-pcie: fix pcie link-up instability
    - phy: rockchip-snps-pcie3: fix bifurcation on rk3588
    - phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
    - phy: rockchip: naneng-combphy: Fix mux on rk3588
    - phy: qcom: m31: match requested regulator name with dt schema
    - dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue
    - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
    - riscv: Fix TASK_SIZE on 64-bit NOMMU
    - riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
    - phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
    - dt-bindings: eeprom: at24: Fix ST M24C64-D compatible schema
    - sched/eevdf: Always update V if se->on_rq when reweighting
    - sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr
    - riscv: hwprobe: fix invalid sign extension for RISCV_HWPROBE_EXT_ZVFHMIN
    - RISC-V: selftests: cbo: Ensure asm operands match constraints, take 2
    - phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6
    - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
    - Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
    - Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
    - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
    - Linux 6.8.9
  * amdgpu hangs on DCN 3.5 at bootup: RIP:
    0010:dcn35_clk_mgr_construct+0x183/0x2210 [amdgpu] (LP: #2066233)
    - drm/amd/display: Atom Integrated System Info v2_2 for DCN35
  * [MTL] ACPI: PM: s2idle: Backport Linux ACPI s2idle patches to fix
    suspend/resume issue (LP: #2069231)
    - ACPI: PM: s2idle: Enable Low-Power S0 Idle MSFT UUID for non-AMD systems
    - ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions
  * Removing legacy virtio-pci devices causes kernel panic (LP: #2067862)
    - virtio-pci: Check if is_avq is NULL
  * Mute/mic LEDs no function on ProBook 445/465 G11 (LP: #2069664)
    - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11.
  * Mute/mic LEDs no function on  ProBook 440/460 G11 (LP: #2067669)
    - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 440/460 G11.
  * rtw89_8852ce - Lost WIFI connection after suspend  (LP: #2065128)
    - wifi: rtw89: reset AFEDIG register in power off sequence
    - wifi: rtw89: 8852c: refine power sequence to imporve power consumption
  * CVE-2024-25742
    - x86/sev: Harden #VC instruction emulation somewhat
    - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35984
    - i2c: smbus: fix NULL function pointer dereference
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35990
    - dma: xilinx_dpdma: Fix locking
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35997
    - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  * CVE-2024-36016
    - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  * CVE-2024-36008
    - ipv4: check for NULL idev in ip_route_use_hint()
  * CVE-2024-35992
    - phy: marvell: a3700-comphy: Fix out of bounds read

 -- Jacob Martin <jacob.martin@canonical.com>  Wed, 17 Jul 2024 11:21:58 -0500

linux-nvidia (6.8.0-1010.10) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1010.10 -proposed tracker (LP: #2071967)

  [ Ubuntu: 6.8.0-39.39 ]

  * noble/linux: 6.8.0-39.39 -proposed tracker (LP: #2071983)
  * CVE-2024-25742
    - x86/sev: Harden #VC instruction emulation somewhat
    - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35984
    - i2c: smbus: fix NULL function pointer dereference
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35990
    - dma: xilinx_dpdma: Fix locking
  * Noble update: v6.8.9 upstream stable release (LP: #2070337) //
    CVE-2024-35997
    - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  * CVE-2024-36016
    - tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  * CVE-2024-36008
    - ipv4: check for NULL idev in ip_route_use_hint()
  * CVE-2024-35992
    - phy: marvell: a3700-comphy: Fix out of bounds read

 -- Jacob Martin <jacob.martin@canonical.com>  Mon, 15 Jul 2024 08:37:49 -0500

linux-nvidia (6.8.0-1009.9) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1009.9 -proposed tracker (LP: #2068306)

  * mlxbf_gige: bring in latest 6.x upstream commits (LP: #2068067)
    - mlxbf_gige: add support to display pause frame counters

  * Export kernel symbols required for NVIDIA GDS (LP: #2068544)
    - NVIDIA: SAUCE: NFS: Export nvfs register and unregister functions as GPL
    - NVIDIA: SAUCE: NVMe/NVMeoF: Export nvfs register and unregister functions as
      GPL

  [ Ubuntu: 6.8.0-38.38 ]

  * noble/linux: 6.8.0-38.38 -proposed tracker (LP: #2068318)
  * race_sched in ubuntu_stress_smoke_test will cause kernel panic on 6.8 with
    Azure Standard_A2_v2 instance (LP: #2068024)
    - sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
  * Noble: btrfs: re-introduce 'norecovery' mount option (LP: #2068591)
    - btrfs: re-introduce 'norecovery' mount option
  * Fix system hang while entering suspend with AMD Navi3x graphics
    (LP: #2063417)
    - drm/amdgpu/mes: fix use-after-free issue
  * Noble update: v6.8.8 upstream stable release (LP: #2068087)
    - io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64()
      failure
    - drm/i915/cdclk: Fix voltage_level programming edge case
    - Revert "vmgenid: emit uevent when VMGENID updates"
    - SUNRPC: Fix rpcgss_context trace event acceptor field
    - selftests/ftrace: Limit length in subsystem-enable tests
    - random: handle creditable entropy from atomic process context
    - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING
    - net: usb: ax88179_178a: avoid writing the mac address before first reading
    - btrfs: do not wait for short bulk allocation
    - btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer
    - r8169: fix LED-related deadlock on module removal
    - r8169: add missing conditional compiling for call to r8169_remove_leds
    - scsi: ufs: qcom: Add missing interconnect bandwidth values for Gear 5
    - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
    - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
    - netfilter: br_netfilter: skip conntrack input hook for promisc packets
    - netfilter: nft_set_pipapo: constify lookup fn args where possible
    - netfilter: nft_set_pipapo: walk over current view on netlink dump
    - netfilter: flowtable: validate pppoe header
    - netfilter: flowtable: incorrect pppoe tuple
    - af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
    - af_unix: Don't peek OOB data without MSG_OOB.
    - net: sparx5: flower: fix fragment flags handling
    - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation
    - net/mlx5: Restore mistakenly dropped parts in register devlink flow
    - net/mlx5e: Prevent deadlock while disabling aRFS
    - net: change maximum number of UDP segments to 128
    - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation
    - selftests/tcp_ao: Make RST tests less flaky
    - selftests/tcp_ao: Zero-init tcp_ao_info_opt
    - selftests/tcp_ao: Fix fscanf() call for format-security
    - selftests/tcp_ao: Printing fixes to confirm with format-security
    - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only
    - net: stmmac: Fix max-speed being ignored on queue re-init
    - net: stmmac: Fix IP-cores specific MAC capabilities
    - ice: tc: check src_vsi in case of traffic from VF
    - ice: tc: allow zero flags in parsing tc flower
    - ice: Fix checking for unsupported keys on non-tunnel device
    - tun: limit printing rate when illegal packet received by tun dev
    - net: dsa: mt7530: fix mirroring frames received on local port
    - net: dsa: mt7530: fix port mirroring for MT7988 SoC switch
    - s390/ism: Properly fix receive message buffer allocation
    - netfilter: nf_tables: missing iterator type in lookup walk
    - netfilter: nf_tables: restore set elements when delete set fails
    - gpiolib: swnode: Remove wrong header inclusion
    - netfilter: nf_tables: fix memleak in map from abort path
    - net/sched: Fix mirred deadlock on device recursion
    - net: ethernet: mtk_eth_soc: fix WED + wifi reset
    - ravb: Group descriptor types used in Rx ring
    - net: ravb: Count packets instead of descriptors in R-Car RX path
    - net: ravb: Allow RX loop to move past DMA mapping errors
    - net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
    - NFSD: fix endianness issue in nfsd4_encode_fattr4
    - RDMA/rxe: Fix the problem "mutex_destroy missing"
    - RDMA/cm: Print the old state when cm_destroy_id gets timeout
    - RDMA/mlx5: Fix port number for counter query in multi-port configuration
    - perf annotate: Make sure to call symbol__annotate2() in TUI
    - perf lock contention: Add a missing NULL check
    - s390/qdio: handle deferred cc1
    - s390/cio: fix race condition during online processing
    - iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest
    - iommufd: Add config needed for iommufd_fail_nth
    - drm: nv04: Fix out of bounds access
    - drm/v3d: Don't increment `enabled_ns` twice
    - userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
    - thunderbolt: Introduce tb_port_reset()
    - thunderbolt: Introduce tb_path_deactivate_hop()
    - thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4
      routers
    - thunderbolt: Reset topology created by the boot firmware
    - drm/panel: visionox-rm69299: don't unregister DSI device
    - drm/radeon: make -fstrict-flex-arrays=3 happy
    - ALSA: hda/realtek: Fix volumn control of ThinkBook 16P Gen4
    - thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up()
    - platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes
    - interconnect: qcom: x1e80100: Remove inexistent ACV_PERF BCM
    - interconnect: Don't access req_list while it's being manipulated
    - clk: Remove prepare_lock hold assertion in __clk_release()
    - clk: Initialize struct clk_core kref earlier
    - clk: Get runtime PM before walking tree during disable_unused
    - clk: Get runtime PM before walking tree for clk_summary
    - clk: mediatek: Do a runtime PM get on controllers during probe
    - clk: mediatek: mt7988-infracfg: fix clocks for 2nd PCIe port
    - selftests/powerpc/papr-vpd: Fix missing variable initialization
    - x86/bugs: Fix BHI retpoline check
    - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
    - block: propagate partition scanning errors to the BLKRRPART ioctl
    - net/mlx5: E-switch, store eswitch pointer before registering devlink_param
    - ALSA: seq: ump: Fix conversion from MIDI2 to MIDI1 UMP messages
    - ALSA: hda/tas2781: correct the register for pow calibrated data
    - ALSA: hda/realtek: Add quirks for Huawei Matebook D14 NBLB-WAX9N
    - ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
    - usb: misc: onboard_usb_hub: Disable the USB hub clock on failure
    - misc: rtsx: Fix rts5264 driver status incorrect when card removed
    - thunderbolt: Avoid notify PM core about runtime PM resume
    - thunderbolt: Fix wake configurations after device unplug
    - thunderbolt: Do not create DisplayPort tunnels on adapters of the same
      router
    - comedi: vmk80xx: fix incomplete endpoint checking
    - serial: mxs-auart: add spinlock around changing cts state
    - serial/pmac_zilog: Remove flawed mitigation for rx irq flood
    - serial: 8250_dw: Revert: Do not reclock if already at correct rate
    - serial: stm32: Return IRQ_NONE in the ISR if no handling happend
    - serial: stm32: Reset .throttled state in .startup()
    - serial: core: Fix regression when runtime PM is not enabled
    - serial: core: Clearing the circular buffer before NULLifying it
    - serial: core: Fix missing shutdown and startup for serial base port
    - USB: serial: option: add Fibocom FM135-GL variants
    - USB: serial: option: add support for Fibocom FM650/FG650
    - USB: serial: option: add Lonsung U8300/U9300 product
    - USB: serial: option: support Quectel EM060K sub-models
    - USB: serial: option: add Rolling RW101-GL and RW135-GL support
    - USB: serial: option: add Telit FN920C04 rmnet compositions
    - Revert "usb: cdc-wdm: close race between read and workqueue"
    - usb: dwc2: host: Fix dereference issue in DDMA completion flow.
    - usb: Disable USB3 LPM at shutdown
    - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport
      error
    - usb: typec: tcpm: Correct the PDO counting in pd_set
    - mei: me: disable RPL-S on SPS and IGN firmwares
    - speakup: Avoid crash on very long word
    - fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    - sched: Add missing memory barrier in switch_mm_cid
    - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
    - KVM: x86/pmu: Disable support for adaptive PEBS
    - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
    - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
    - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
    - arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H
    - arm64: hibernate: Fix level3 translation fault in swsusp_save()
    - init/main.c: Fix potential static_command_line memory overflow
    - mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly
    - mm/userfaultfd: allow hugetlb change protection upon poison entry
    - mm,swapops: update check in is_pfn_swap_entry for hwpoison entries
    - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
    - mm/shmem: inline shmem_is_huge() for disabled transparent hugepages
    - fuse: fix leaked ENOSYS error on first statx call
    - drm/amdkfd: Fix memory leak in create_process failure
    - drm/amdgpu: remove invalid resource->start check v2
    - drm/ttm: stop pooling cached NUMA pages v2
    - drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init
    - drm/vmwgfx: Fix prime import/export
    - drm/vmwgfx: Sort primary plane formats by order of preference
    - drm/vmwgfx: Fix crtc's atomic check conditional
    - nouveau: fix instmem race condition around ptr stores
    - bootconfig: use memblock_free_late to free xbc memory to buddy
    - Squashfs: check the inode number is not the invalid value of zero
    - nilfs2: fix OOB in nilfs_set_de_type
    - fork: defer linking file vma until vma is fully initialized
    - net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
    - net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
    - ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
    - ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
    - ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
    - ksmbd: common: use struct_group_attr instead of struct_group for
      network_open_info
    - thunderbolt: Reset only non-USB4 host routers in resume
    - Linux 6.8.8
  * Fix inaudible HDMI/DP audio on USB-C MST dock (LP: #2064689)
    - drm/i915/audio: Fix audio time stamp programming for DP
  * Add Cirrus Logic CS35L56 amplifier support (LP: #2062135)
    - ALSA: hda: realtek: Re-work CS35L41 fixups to re-use for other amps
    - ALSA: hda/realtek: Add quirks for HP G11 Laptops using CS35L56
  * net:fib_rule_tests.sh in ubuntu_kselftests_net fails on Noble (LP: #2066332)
    - Revert "UBUNTU: SAUCE: selftests: net: fix "from" match test in
      fib_rule_tests.sh"
  * mtk_t7xx WWAN module fails to probe with: Invalid device status 0x1
    (LP: #2049358)
    - Revert "UBUNTU: SAUCE: net: wwan: t7xx: PCIe reset rescan"
    - Revert "UBUNTU: SAUCE: net: wwan: t7xx: Add AP CLDMA"
    - net: wwan: t7xx: Add AP CLDMA
    - wwan: core: Add WWAN fastboot port type
    - net: wwan: t7xx: Add sysfs attribute for device state machine
    - net: wwan: t7xx: Infrastructure for early port configuration
    - net: wwan: t7xx: Add fastboot WWAN port
  * Pull-request to address TPM bypass issue (LP: #2037688)
    - [Config]: Configure TPM drivers as builtins for arm64 in annotations
  * re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
    - SAUCE: fan: add VXLAN implementation
    - SAUCE: fan: Fix NULL pointer dereference
    - SAUCE: fan: support vxlan strict length validation
  * update for V3 kernel bits and improved multiple fan slice support
    (LP: #1470091) // re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
    - SAUCE: fan: tunnel multiple mapping mode (v3)
  * TCP memory  leak, slow network (arm64) (LP: #2045560)
    - net: make SK_MEMORY_PCPU_RESERV tunable
    - net: fix sk_memory_allocated_{add|sub} vs softirqs
  * panel flickering after the i915.psr2 is enabled (LP: #2046315)
    - drm/i915/alpm: Add ALPM register definitions
    - drm/i915/psr: Add alpm_parameters struct
    - drm/i915/alpm: Calculate ALPM Entry check
    - drm/i915/alpm: Alpm aux wake configuration for lnl
    - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code
    - drm/i915/psr: Improve fast and IO wake lines calculation
    - drm/i915/psr: Calculate IO wake and fast wake lines for DISPLAY_VER < 12
    - drm/i915/display: Increase number of fast wake precharge pulses
  * I2C HID device sometimes fails to initialize causing touchpad to not work
    (LP: #2061040)
    - HID: i2c-hid: Revert to await reset ACK before reading report descriptor
  * Fix the RTL8852CE BT FW Crash based on SER false alarm (LP: #2060904)
    - wifi: rtw89: disable txptctrl IMR to avoid flase alarm
    - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of
      firmware command
  * [X13s] Fingerprint reader is not working (LP: #2065376)
    - SAUCE: arm64: dts: qcom: sc8280xp: Add USB DWC3 Multiport controller
    - SAUCE: arm64: dts: qcom: sc8280xp-x13s: enable USB MP and fingerprint reader
  * Fix random HuC/GuC initialization failure of Intel i915 driver
    (LP: #2061049)
    - drm/i915/huc: Allow for very slow HuC loading
  * Add support of TAS2781 amp of audio (LP: #2064064)
    - ALSA: hda/tas2781: Add new vendor_id and subsystem_id to support ThinkPad
      ICE-1
  * Noble update: v6.8.7 upstream stable release (LP: #2065912)
    - smb3: fix Open files on server counter going negative
    - ata: libata-core: Allow command duration limits detection for ACS-4 drives
    - ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
    - drm/amdgpu/vpe: power on vpe when hw_init
    - batman-adv: Avoid infinite loop trying to resize local TT
    - ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE
    - ceph: switch to use cap_delay_lock for the unlink delay list
    - virtio_net: Do not send RSS key if it is not supported
    - arm64: tlb: Fix TLBI RANGE operand
    - ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
    - raid1: fix use-after-free for original bio in raid1_write_request()
    - ring-buffer: Only update pages_touched when a new page is touched
    - Bluetooth: Fix memory leak in hci_req_sync_complete()
    - drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
    - platform/chrome: cros_ec_uart: properly fix race condition
    - ACPI: scan: Do not increase dep_unmet for already met dependencies
    - PM: s2idle: Make sure CPUs will wakeup directly on resume
    - media: cec: core: remove length check of Timer Status
    - btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
    - ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
    - ARM: OMAP2+: fix N810 MMC gpiod table
    - mmc: omap: fix broken slot switch lookup
    - mmc: omap: fix deferred probe
    - mmc: omap: restore original power up/down steps
    - ARM: OMAP2+: fix USB regression on Nokia N8x0
    - firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get()
    - firmware: arm_scmi: Make raw debugfs entries non-seekable
    - cxl/mem: Fix for the index of Clear Event Record Handle
    - cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before
      assigned
    - arm64: dts: freescale: imx8mp-venice-gw72xx-2x: fix USB vbus regulator
    - arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix USB vbus regulator
    - drm/msm: Add newlines to some debug prints
    - drm/msm/dpu: don't allow overriding data from catalog
    - drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more
      sensible
    - dt-bindings: display/msm: sm8150-mdss: add DP node
    - arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
    - cxl/core: Fix initialization of mbox_cmd.size_out in get event
    - Revert "drm/qxl: simplify qxl_fence_wait"
    - nouveau: fix function cast warning
    - drm/msm/adreno: Set highest_bank_bit for A619
    - scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
    - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
    - net: openvswitch: fix unwanted error log on timeout policy probing
    - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
    - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
    - octeontx2-pf: Fix transmit scheduler resource leak
    - block: fix q->blkg_list corruption during disk rebind
    - lib: checksum: hide unused expected_csum_ipv6_magic[]
    - geneve: fix header validation in geneve[6]_xmit_skb
    - s390/ism: fix receive message buffer allocation
    - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
    - bnxt_en: Fix error recovery for RoCE ulp client
    - bnxt_en: Reset PTP tx_avail after possible firmware reset
    - ACPI: bus: allow _UID matching for integer zero
    - base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
    - ACPI: HMAT: Introduce 2 levels of generic port access class
    - ACPI: HMAT / cxl: Add retrieval of generic port coordinates for both access
      classes
    - cxl: Split out combine_coordinates() for common shared usage
    - cxl: Split out host bridge access coordinates
    - cxl: Remove checking of iter in cxl_endpoint_get_perf_coordinates()
    - cxl: Fix retrieving of access_coordinates in PCIe path
    - net: ks8851: Inline ks8851_rx_skb()
    - net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
    - af_unix: Clear stale u->oob_skb.
    - octeontx2-af: Fix NIX SQ mode and BP config
    - ipv6: fib: hide unused 'pn' variable
    - ipv4/route: avoid unused-but-set-variable warning
    - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
    - pds_core: use pci_reset_function for health reset
    - pds_core: Fix pdsc_check_pci_health function to use work thread
    - Bluetooth: ISO: Align broadcast sync_timeout with connection timeout
    - Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
    - Bluetooth: hci_sync: Use QoS to determine which PHY to scan
    - Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY
    - Bluetooth: SCO: Fix not validating setsockopt user input
    - Bluetooth: RFCOMM: Fix not validating setsockopt user input
    - Bluetooth: L2CAP: Fix not validating setsockopt user input
    - Bluetooth: ISO: Fix not validating setsockopt user input
    - Bluetooth: hci_sock: Fix not validating setsockopt user input
    - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit
    - netfilter: complete validation of user input
    - net/mlx5: SF, Stop waiting for FW as teardown was called
    - net/mlx5: Register devlink first under devlink lock
    - net/mlx5: offset comp irq index in name by one
    - net/mlx5: Properly link new fs rules into the tree
    - net/mlx5: Correctly compare pkt reformat ids
    - net/mlx5e: RSS, Block changing channels number when RXFH is configured
    - net/mlx5e: Fix mlx5e_priv_init() cleanup flow
    - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
    - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit
    - net: sparx5: fix wrong config being used when reconfiguring PCS
    - Revert "s390/ism: fix receive message buffer allocation"
    - net: dsa: mt7530: trap link-local frames regardless of ST Port State
    - af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
    - af_unix: Fix garbage collector racing against connect()
    - net: ena: Fix potential sign extension issue
    - net: ena: Wrong missing IO completions check order
    - net: ena: Fix incorrect descriptor free behavior
    - net: ena: Set tx_info->xdpf value to NULL
    - drm/xe/display: Fix double mutex initialization
    - drm/xe/hwmon: Cast result to output precision on left shift of operand
    - tracing: hide unused ftrace_event_id_fops
    - iommu/vt-d: Fix wrong use of pasid config
    - iommu/vt-d: Allocate local memory for page request queue
    - iommu/vt-d: Fix WARN_ON in iommu probe path
    - io_uring: refactor DEFER_TASKRUN multishot checks
    - io_uring: disable io-wq execution of multishot NOWAIT requests
    - btrfs: qgroup: correctly model root qgroup rsv in convert
    - btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
    - btrfs: record delayed inode root in transaction
    - btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
    - io_uring/net: restore msg_control on sendzc retry
    - kprobes: Fix possible use-after-free issue on kprobe registration
    - fs/proc: remove redundant comments from /proc/bootconfig
    - fs/proc: Skip bootloader comment if no embedded kernel parameters
    - scsi: sg: Avoid sg device teardown race
    - scsi: sg: Avoid race in error handling & drop bogus warn
    - accel/ivpu: Check return code of ipc->lock init
    - accel/ivpu: Fix PCI D0 state entry in resume
    - accel/ivpu: Put NPU back to D3hot after failed resume
    - accel/ivpu: Return max freq for DRM_IVPU_PARAM_CORE_CLOCK_RATE
    - accel/ivpu: Fix deadlock in context_xa
    - drm/vmwgfx: Enable DMA mappings with SEV
    - drm/i915/vrr: Disable VRR when using bigjoiner
    - drm/amdkfd: Reset GPU on queue preemption failure
    - drm/ast: Fix soft lockup
    - drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
    - drm/client: Fully protect modes[] with dev->mode_config.mutex
    - drm/msm/dp: fix runtime PM leak on disconnect
    - drm/msm/dp: fix runtime PM leak on connect failure
    - drm/amdgpu/umsch: reinitialize write pointer in hw init
    - arm64: dts: imx8qm-ss-dma: fix can lpcg indices
    - arm64: dts: imx8-ss-dma: fix can lpcg indices
    - arm64: dts: imx8-ss-dma: fix adc lpcg indices
    - arm64: dts: imx8-ss-conn: fix usb lpcg indices
    - arm64: dts: imx8-ss-dma: fix pwm lpcg indices
    - arm64: dts: imx8-ss-lsio: fix pwm lpcg indices
    - arm64: dts: imx8-ss-dma: fix spi lpcg indices
    - vhost: Add smp_rmb() in vhost_vq_avail_empty()
    - vhost: Add smp_rmb() in vhost_enable_notify()
    - perf/x86: Fix out of range data
    - x86/cpu: Actually turn off mitigations by default for
      SPECULATION_MITIGATIONS=n
    - selftests/timers/posix_timers: Reimplement check_timer_distribution()
    - selftests: timers: Fix posix_timers ksft_print_msg() warning
    - selftests: timers: Fix abs() warning in posix_timers test
    - selftests: kselftest: Mark functions that unconditionally call exit() as
      __noreturn
    - x86/apic: Force native_apic_mem_read() to use the MOV instruction
    - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
    - selftests: kselftest: Fix build failure with NOLIBC
    - kernfs: annotate different lockdep class for of->mutex of writable files
    - x86/bugs: Fix return type of spectre_bhi_state()
    - x86/bugs: Fix BHI documentation
    - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
    - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
    - x86/bugs: Fix BHI handling of RRSBA
    - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
    - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
    - [Config] updateconfigs to remove obsolete SPECTRE_BHI_AUTO
    - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
      CONFIG_MITIGATION_SPECTRE_BHI
    - [Config] updateconfigs to enable new MITIGATION_SPECTRE_BHI
    - drm/i915/cdclk: Fix CDCLK programming order when pipes are active
    - drm/i915/psr: Disable PSR when bigjoiner is used
    - drm/i915: Disable port sync when bigjoiner is used
    - drm/i915: Disable live M/N updates when using bigjoiner
    - drm/amdgpu: Reset dGPU if suspend got aborted
    - drm/amdgpu: always force full reset for SOC21
    - drm/amdgpu: fix incorrect number of active RBs for gfx11
    - drm/amdgpu: differentiate external rev id for gfx 11.5.0
    - drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4
    - drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST
    - drm/amd/display: Do not recursively call manual trigger programming
    - drm/amd/display: Return max resolution supported by DWB
    - drm/amd/display: always reset ODM mode in context when adding first plane
    - drm/amd/display: fix disable otg wa logic in DCN316
    - Linux 6.8.7
  * Noble update: v6.8.6 upstream stable release (LP: #2065899)
    - amdkfd: use calloc instead of kzalloc to avoid integer overflow
    - wifi: ath9k: fix LNA selection in ath_ant_try_scan()
    - wifi: rtw89: fix null pointer access when abort scan
    - bnx2x: Fix firmware version string character counts
    - net: stmmac: dwmac-starfive: Add support for JH7100 SoC
    - net: phy: phy_device: Prevent nullptr exceptions on ISR
    - wifi: rtw89: pci: validate RX tag for RXQ and RPQ
    - wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
    - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
    - wifi: iwlwifi: pcie: Add the PCI device id for new hardware
    - arm64: dts: qcom: qcm6490-idp: Add definition for three LEDs
    - net: dsa: qca8k: put MDIO controller OF node if unavailable
    - arm64: dts: qcom: qrb2210-rb1: disable cluster power domains
    - printk: For @suppress_panic_printk check for other CPU in panic
    - panic: Flush kernel log buffer at the end
    - dump_stack: Do not get cpu_sync for panic CPU
    - wifi: iwlwifi: pcie: Add new PCI device id and CNVI
    - cpuidle: Avoid potential overflow in integer multiplication
    - ARM: dts: rockchip: fix rk3288 hdmi ports node
    - ARM: dts: rockchip: fix rk322x hdmi ports node
    - arm64: dts: rockchip: fix rk3328 hdmi ports node
    - arm64: dts: rockchip: fix rk3399 hdmi ports node
    - net: add netdev_lockdep_set_classes() to virtual drivers
    - arm64: dts: qcom: qcs6490-rb3gen2: Declare GCC clocks protected
    - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
    - pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
    - ACPI: resource: Add IRQ override quirk for ASUS ExpertBook B2502FBA
    - ionic: set adminq irq affinity
    - net: skbuff: add overflow debug check to pull/push helpers
    - firmware: tegra: bpmp: Return directly after a failed kzalloc() in
      get_filename()
    - wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
    - wifi: mt76: mt7915: add locking for accessing mapped registers
    - wifi: mt76: mt7996: disable AMSDU for non-data frames
    - wifi: mt76: mt7996: add locking for accessing mapped registers
    - ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of
      CONFIG_X86_ANDROID_TABLETS
    - ACPI: x86: Add DELL0501 handling to acpi_quirk_skip_serdev_enumeration()
    - pstore/zone: Add a null pointer check to the psz_kmsg_read
    - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
    - net: pcs: xpcs: Return EINVAL in the internal methods
    - dma-direct: Leak pages on dma_set_decrypted() failure
    - wifi: ath11k: decrease MHI channel buffer length to 8KB
    - iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev
    - cpufreq: Don't unregister cpufreq cooling on CPU hotplug
    - overflow: Allow non-type arg to type_max() and type_min()
    - wifi: iwlwifi: Add missing MODULE_FIRMWARE() for *.pnvm
    - wifi: cfg80211: check A-MSDU format more carefully
    - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
    - btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
    - btrfs: send: handle path ref underflow in header iterate_inode_ref()
    - ice: use relative VSI index for VFs instead of PF VSI number
    - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
    - netdev: let netlink core handle -EMSGSIZE errors
    - Bluetooth: btintel: Fix null ptr deref in btintel_read_version
    - Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
    - Bluetooth: Add new quirk for broken read key length on ATS2851
    - drm/vc4: don't check if plane->state->fb == state->fb
    - drm/ci: uprev mesa version: fix kdl commit fetch
    - drm/amdgpu: Skip do PCI error slot reset during RAS recovery
    - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
    - drm: panel-orientation-quirks: Add quirk for GPD Win Mini
    - ASoC: SOF: amd: Optimize quirk for Valve Galileo
    - drm/ttm: return ENOSPC from ttm_bo_mem_space v3
    - scsi: ufs: qcom: Avoid re-init quirk when gears match
    - drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz
    - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
    - sysv: don't call sb_bread() with pointers_lock held
    - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
    - drm/amd/display: Disable idle reallow as part of command/gpint execution
    - isofs: handle CDs with bad root inode but good Joliet root directory
    - ASoC: Intel: sof_rt5682: dmi quirk cleanup for mtl boards
    - ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710)
      laptops
    - rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
    - rcu-tasks: Repair RCU Tasks Trace quiescence check
    - Julia Lawall reported this null pointer dereference, this should fix it.
    - media: sta2x11: fix irq handler cast
    - ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block
      counter
    - drm/panel: simple: Add BOE BP082WX1-100 8.2" panel
    - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o
    - ASoC: Intel: avs: Populate board selection with new I2S entries
    - ext4: add a hint for block bitmap corrupt state in mb_groups
    - ext4: forbid commit inconsistent quota data when errors=remount-ro
    - drm/amd/display: Fix nanosec stat overflow
    - accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings
    - i2c: designware: Fix RX FIFO depth define on Wangxun 10Gb NIC
    - HID: input: avoid polling stylus battery on Chromebook Pompom
    - drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()
    - drm: Check output polling initialized before disabling
    - drm: Check polling initialized before enabling in
      drm_helper_probe_single_connector_modes
    - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned
      int
    - PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge
    - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
    - libperf evlist: Avoid out-of-bounds access
    - crypto: iaa - Fix async_disable descriptor leak
    - input/touchscreen: imagis: Correct the maximum touch area value
    - drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09
    - block: prevent division by zero in blk_rq_stat_sum()
    - RDMA/cm: add timeout to cm_destroy_id wait
    - Input: imagis - use FIELD_GET where applicable
    - Input: allocate keycode for Display refresh rate toggle
    - platform/x86: acer-wmi: Add support for Acer PH16-71
    - platform/x86: acer-wmi: Add predator_v4 module parameter
    - platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi
      Vi8 tablet
    - perf/x86/amd/lbr: Discard erroneous branch entries
    - ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
    - ktest: force $buildonly = 1 for 'make_warnings_file' test type
    - Input: xpad - add support for Snakebyte GAMEPADs
    - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent
      environment
    - tools: iio: replace seekdir() in iio_generic_buffer
    - bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
    - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in
      kernfs_find_and_get_node_by_id()
    - usb: typec: ucsi: Add qcm6490-pmic-glink as needing PDOS quirk
    - thunderbolt: Calculate DisplayPort tunnel bandwidth after DPRX capabilities
      read
    - usb: gadget: uvc: refactor the check for a valid buffer in the pump worker
    - usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
    - usb: typec: ucsi: Limit read size on v1.2
    - serial: 8250_of: Drop quirk fot NPCM from 8250_port
    - thunderbolt: Keep the domain powered when USB4 port is in redrive mode
    - usb: typec: tcpci: add generic tcpci fallback compatible
    - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
    - ASoC: amd: yc: Fix non-functional mic on ASUS M7600RE
    - thermal/of: Assume polling-delay(-passive) 0 when absent
    - ASoC: soc-core.c: Skip dummy codec when adding platforms
    - x86/xen: attempt to inflate the memory balloon on PVH
    - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
    - io_uring: clear opcode specific data for an early failure
    - modpost: fix null pointer dereference
    - drivers/nvme: Add quirks for device 126f:2262
    - fbmon: prevent division by zero in fb_videomode_from_videomode()
    - ALSA: hda/realtek: Add quirks for some Clevo laptops
    - drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
    - gcc-plugins/stackleak: Avoid .head.text section
    - media: mediatek: vcodec: Fix oops when HEVC init fails
    - media: mediatek: vcodec: adding lock to protect decoder context list
    - media: mediatek: vcodec: adding lock to protect encoder context list
    - randomize_kstack: Improve entropy diffusion
    - platform/x86/intel/hid: Don't wake on 5-button releases
    - platform/x86: intel-vbtn: Update tablet mode switch at end of probe
    - nouveau: fix devinit paths to only handle display on GSP.
    - Bluetooth: btintel: Fixe build regression
    - net: mpls: error out if inner headers are not set
    - VMCI: Fix possible memcpy() run-time warning in
      vmci_datagram_invoke_guest_handler()
    - x86/vdso: Fix rethunk patching for vdso-image-x32.o too
    - Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in
      amdgpu_device_init()"
    - Linux 6.8.6
  * Noble update: v6.8.5 upstream stable release (LP: #2065400)
    - scripts/bpf_doc: Use silent mode when exec make cmd
    - xsk: Don't assume metadata is always requested in TX completion
    - s390/bpf: Fix bpf_plt pointer arithmetic
    - bpf, arm64: fix bug in BPF_LDX_MEMSX
    - dma-buf: Fix NULL pointer dereference in sanitycheck()
    - arm64: bpf: fix 32bit unconditional bswap
    - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
    - nfsd: Fix error cleanup path in nfsd_rename()
    - tools: ynl: fix setting presence bits in simple nests
    - mlxbf_gige: stop PHY during open() error paths
    - wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF
    - wifi: iwlwifi: mvm: rfi: fix potential response leaks
    - wifi: iwlwifi: mvm: include link ID when releasing frames
    - ALSA: hda: cs35l56: Set the init_done flag before component_add()
    - ice: Refactor FW data type and fix bitmap casting issue
    - ice: fix memory corruption bug with suspend and rebuild
    - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
    - igc: Remove stale comment about Tx timestamping
    - drm/xe: Remove unused xe_bo->props struct
    - drm/xe: Add exec_queue.sched_props.job_timeout_ms
    - drm/xe/guc_submit: use jiffies for job timeout
    - drm/xe/queue: fix engine_class bounds check
    - drm/xe/device: fix XE_MAX_GT_PER_TILE check
    - drm/xe/device: fix XE_MAX_TILES_PER_DEVICE check
    - dpll: indent DPLL option type by a tab
    - s390/qeth: handle deferred cc1
    - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
    - tcp: properly terminate timers for kernel sockets
    - net: wwan: t7xx: Split 64bit accesses to fix alignment issues
    - drm/rockchip: vop2: Remove AR30 and AB30 format support
    - selftests: vxlan_mdb: Fix failures with old libnet
    - gpiolib: Fix debug messaging in gpiod_find_and_request()
    - ACPICA: debugger: check status of acpi_evaluate_object() in
      acpi_db_walk_for_fields()
    - net: hns3: fix index limit to support all queue stats
    - net: hns3: fix kernel crash when devlink reload during pf initialization
    - net: hns3: mark unexcuted loopback test result as UNEXECUTED
    - tls: recv: process_rx_list shouldn't use an offset with kvec
    - tls: adjust recv return with async crypto and failed copy to userspace
    - tls: get psock ref after taking rxlock to avoid leak
    - mlxbf_gige: call request_irq() after NAPI initialized
    - drm/amd/display: Update P010 scaling cap
    - drm/amd/display: Send DTBCLK disable message on first commit
    - bpf: Protect against int overflow for stack access size
    - cifs: Fix duplicate fscache cookie warnings
    - netfilter: nf_tables: reject destroy command to remove basechain hooks
    - netfilter: nf_tables: reject table flag and netdev basechain updates
    - netfilter: nf_tables: skip netdev hook unregistration if table is dormant
    - iommu: Validate the PASID in iommu_attach_device_pasid()
    - net: bcmasp: Bring up unimac after PHY link up
    - net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
    - Octeontx2-af: fix pause frame configuration in GMP mode
    - inet: inet_defrag: prevent sk release while still in use
    - drm/i915: Stop doing double audio enable/disable on SDVO and g4x+ DP
    - drm/i915/display: Disable AuxCCS framebuffers if built for Xe
    - drm/i915/xelpg: Extend some workarounds/tuning to gfx version 12.74
    - drm/i915/mtl: Update workaround 14018575942
    - drm/i915: Do not print 'pxp init failed with 0' when it succeed
    - dm integrity: fix out-of-range warning
    - modpost: do not make find_tosym() return NULL
    - kbuild: make -Woverride-init warnings more consistent
    - mm/treewide: replace pud_large() with pud_leaf()
    - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be
      mapped."
    - gpio: cdev: sanitize the label before requesting the interrupt
    - RISC-V: KVM: Fix APLIC setipnum_le/be write emulation
    - RISC-V: KVM: Fix APLIC in_clrip[x] read emulation
    - KVM: arm64: Fix host-programmed guest events in nVHE
    - KVM: arm64: Fix out-of-IPA space translation fault handling
    - selinux: avoid dereference of garbage after mount failure
    - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
    - x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
    - x86/bpf: Fix IP after emitting call depth accounting
    - Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
    - arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
    - Bluetooth: qca: fix device-address endianness
    - Bluetooth: add quirk for broken address properties
    - Bluetooth: hci_event: set the conn encrypted before conn establishes
    - Bluetooth: Fix TOCTOU in HCI debugfs implementation
    - netfilter: nf_tables: release batch on table validation from abort path
    - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
    - selftests: mptcp: join: fix dev in check_endpoint
    - net/rds: fix possible cp null dereference
    - net: usb: ax88179_178a: avoid the interface always configured as random
      address
    - net: mana: Fix Rx DMA datasize and skb_over_panic
    - vsock/virtio: fix packet delivery to tap device
    - netfilter: nf_tables: reject new basechain after table flag update
    - netfilter: nf_tables: flush pending destroy work before exit_net release
    - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
    - netfilter: nf_tables: discard table flag update with pending basechain
      deletion
    - netfilter: validate user input for expected length
    - vboxsf: Avoid an spurious warning if load_nls_xxx() fails
    - bpf, sockmap: Prevent lock inversion deadlock in map delete elem
    - mptcp: prevent BPF accessing lowat from a subflow socket.
    - x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for
      !SRSO
    - KVM: arm64: Use TLBI_TTL_UNKNOWN in __kvm_tlb_flush_vmid_range()
    - KVM: arm64: Ensure target address is granule-aligned for range TLBI
    - net/sched: act_skbmod: prevent kernel-infoleak
    - net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45()
    - net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
    - net: stmmac: fix rx queue priority assignment
    - net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
    - net: txgbe: fix i2c dev name cannot match clkdev
    - net: fec: Set mac_managed_pm during probe
    - net: phy: micrel: Fix potential null pointer dereference
    - net: dsa: mv88e6xxx: fix usable ports on 88e6020
    - selftests: net: gro fwd: update vxlan GRO test expectations
    - gro: fix ownership transfer
    - idpf: fix kernel panic on unknown packet types
    - ice: fix enabling RX VLAN filtering
    - i40e: Fix VF MAC filter removal
    - tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-
      wildcard addresses.
    - erspan: make sure erspan_base_hdr is present in skb->head
    - selftests: reuseaddr_conflict: add missing new line at the end of the output
    - tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-
      wildcard addresses.
    - ax25: fix use-after-free bugs caused by ax25_ds_del_timer
    - e1000e: Workaround for sporadic MDI error on Meteor Lake systems
    - ipv6: Fix infinite recursion in fib6_dump_done().
    - mlxbf_gige: stop interface during shutdown
    - r8169: skip DASH fw status checks when DASH is disabled
    - udp: do not accept non-tunnel GSO skbs landing in a tunnel
    - udp: do not transition UDP GRO fraglist partial checksums to unnecessary
    - udp: prevent local UDP tunnel packets from being GROed
    - octeontx2-af: Fix issue with loading coalesced KPU profiles
    - octeontx2-pf: check negative error code in otx2_open()
    - octeontx2-af: Add array index check
    - i40e: fix i40e_count_filters() to count only active/new filters
    - i40e: fix vf may be used uninitialized in this function warning
    - i40e: Enforce software interrupt during busy-poll exit
    - drm/amd: Flush GFXOFF requests in prepare stage
    - e1000e: Minor flow correction in e1000_shutdown function
    - e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue
    - mean_and_variance: Drop always failing tests
    - net: ravb: Let IP-specific receive function to interrogate descriptors
    - net: ravb: Always process TX descriptor ring
    - net: ravb: Always update error counters
    - KVM: SVM: Use unsigned integers when dealing with ASIDs
    - KVM: SVM: Add support for allowing zero SEV ASIDs
    - selftests: mptcp: connect: fix shellcheck warnings
    - selftests: mptcp: use += operator to append strings
    - mptcp: don't account accept() of non-MPC client as fallback to TCP
    - 9p: Fix read/write debug statements to report server reply
    - ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl()
    - ASoC: cs42l43: Correct extraction of data pointer in suspend/resume
    - riscv: mm: Fix prototype to avoid discarding const
    - riscv: hwprobe: do not produce frtace relocation
    - drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
    - block: count BLK_OPEN_RESTRICT_WRITES openers
    - RISC-V: Update AT_VECTOR_SIZE_ARCH for new AT_MINSIGSTKSZ
    - ASoC: amd: acp: fix for acp pdm configuration check
    - regmap: maple: Fix cache corruption in regcache_maple_drop()
    - ALSA: hda: cs35l56: Add ACPI device match tables
    - drm/panfrost: fix power transition timeout warnings
    - nouveau/uvmm: fix addr/range calcs for remap operations
    - drm/prime: Unbreak virtgpu dma-buf export
    - ASoC: rt5682-sdw: fix locking sequence
    - ASoC: rt711-sdca: fix locking sequence
    - ASoC: rt711-sdw: fix locking sequence
    - ASoC: rt712-sdca-sdw: fix locking sequence
    - ASoC: rt722-sdca-sdw: fix locking sequence
    - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
    - spi: s3c64xx: Extract FIFO depth calculation to a dedicated macro
    - spi: s3c64xx: sort headers alphabetically
    - spi: s3c64xx: explicitly include <linux/bits.h>
    - spi: s3c64xx: remove else after return
    - spi: s3c64xx: define a magic value
    - spi: s3c64xx: allow full FIFO masks
    - spi: s3c64xx: determine the fifo depth only once
    - spi: s3c64xx: Use DMA mode from fifo size
    - ASoC: amd: acp: fix for acp_init function error handling
    - regmap: maple: Fix uninitialized symbol 'ret' warnings
    - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
    - scsi: mylex: Fix sysfs buffer lengths
    - scsi: sd: Unregister device if device_add_disk() failed in sd_probe()
    - Revert "ALSA: emu10k1: fix synthesizer sample playback position and caching"
    - drm/i915/dp: Fix DSC state HW readout for SST connectors
    - cifs: Fix caching to try to do open O_WRONLY as rdwr on server
    - spi: mchp-pci1xxx: Fix a possible null pointer dereference in
      pci1xxx_spi_probe
    - s390/pai: fix sampling event removal for PMU device driver
    - thermal: gov_power_allocator: Allow binding without cooling devices
    - thermal: gov_power_allocator: Allow binding without trip points
    - drm/i915/gt: Limit the reserved VM space to only the platforms that need it
    - ata: sata_mv: Fix PCI device ID table declaration compilation warning
    - ASoC: SOF: amd: fix for false dsp interrupts
    - SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
    - riscv: use KERN_INFO in do_trap
    - riscv: Fix warning by declaring arch_cpu_idle() as noinstr
    - riscv: Disable preemption when using patch_map()
    - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
    - lib/stackdepot: move stack_record struct definition into the header
    - stackdepot: rename pool_index to pool_index_plus_1
    - x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
    - Revert "drm/amd/display: Send DTBCLK disable message on first commit"
    - gpio: cdev: check for NULL labels when sanitizing them for irqs
    - gpio: cdev: fix missed label sanitizing in debounce_setup()
    - ksmbd: don't send oplock break if rename fails
    - ksmbd: validate payload size in ipc response
    - ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
    - ALSA: hda: Add pplcllpl/u members to hdac_ext_stream
    - ALSA: hda/realtek - Fix inactive headset mic jack
    - ALSA: hda/realtek: Add sound quirks for Lenovo Legion slim 7 16ARHA7 models
    - ALSA: hda/realtek: cs35l41: Support ASUS ROG G634JYR
    - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with
      microphone
    - io_uring/kbuf: get rid of lower BGID lists
    - io_uring/kbuf: get rid of bl->is_ready
    - io_uring/kbuf: protect io_buffer_list teardown with a reference
    - io_uring/rw: don't allow multishot reads without NOWAIT support
    - io_uring: use private workqueue for exit work
    - io_uring/kbuf: hold io_buffer_list reference over mmap
    - ASoC: SOF: Add dsp_max_burst_size_in_ms member to snd_sof_pcm_stream
    - ASoC: SOF: ipc4-topology: Save the DMA maximum burst size for PCMs
    - ASoC: SOF: Intel: hda-pcm: Use dsp_max_burst_size_in_ms to place constraint
    - ASoC: SOF: Intel: hda: Implement get_stream_position (Linear Link Position)
    - ASoC: SOF: Intel: mtl/lnl: Use the generic get_stream_position callback
    - ASoC: SOF: Introduce a new callback pair to be used for PCM delay reporting
    - ASoC: SOF: Intel: Set the dai/host get frame/byte counter callbacks
    - ASoC: SOF: Intel: hda-common-ops: Do not set the get_stream_position
      callback
    - ASoC: SOF: ipc4-pcm: Use the snd_sof_pcm_get_dai_frame_counter() for
      pcm_delay
    - ASoC: SOF: Remove the get_stream_position callback
    - ASoC: SOF: ipc4-pcm: Move struct sof_ipc4_timestamp_info definition locally
    - ASoC: SOF: ipc4-pcm: Combine the SOF_IPC4_PIPE_PAUSED cases in pcm_trigger
    - ASoC: SOF: ipc4-pcm: Invalidate the stream_start_offset in PAUSED state
    - ASoC: SOF: sof-pcm: Add pointer callback to sof_ipc_pcm_ops
    - ASoC: SOF: ipc4-pcm: Correct the delay calculation
    - ASoC: SOF: Intel: hda: Compensate LLP in case it is not reset
    - driver core: Introduce device_link_wait_removal()
    - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
    - of: module: prevent NULL pointer dereference in vsnprintf()
    - x86/mm/pat: fix VM_PAT handling in COW mappings
    - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
    - x86/coco: Require seeding RNG with RDRAND on CoCo systems
    - perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event
    - riscv: Fix vector state restore in rt_sigreturn()
    - arm64/ptrace: Use saved floating point state type to determine SVE layout
    - mm/secretmem: fix GUP-fast succeeding on secretmem folios
    - selftests/mm: include strings.h for ffsl
    - s390/entry: align system call table on 8 bytes
    - riscv: Fix spurious errors from __get/put_kernel_nofault
    - riscv: process: Fix kernel gp leakage
    - smb: client: fix UAF in smb2_reconnect_server()
    - smb: client: guarantee refcounted children from parent session
    - smb: client: refresh referral without acquiring refpath_lock
    - smb: client: handle DFS tcons in cifs_construct_tcon()
    - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
    - smb3: retrying on failed server close
    - smb: client: fix potential UAF in cifs_debug_files_proc_show()
    - smb: client: fix potential UAF in cifs_stats_proc_write()
    - smb: client: fix potential UAF in cifs_stats_proc_show()
    - smb: client: fix potential UAF in cifs_dump_full_key()
    - smb: client: fix potential UAF in smb2_is_valid_oplock_break()
    - smb: client: fix potential UAF in smb2_is_valid_lease_break()
    - smb: client: fix potential UAF in is_valid_oplock_break()
    - smb: client: fix potential UAF in smb2_is_network_name_deleted()
    - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
    - drm/i915/mst: Limit MST+DSC to TGL+
    - drm/i915/mst: Reject FEC+MST on ICL
    - drm/i915/dp: Fix the computation for compressed_bpp for DISPLAY < 13
    - drm/i915/gt: Disable HW load balancing for CCS
    - drm/i915/gt: Do not generate the command streamer for all the CCS
    - drm/i915/gt: Enable only one CCS for compute workload
    - drm/xe: Use ring ops TLB invalidation for rebinds
    - drm/xe: Rework rebinding
    - Revert "x86/mpparse: Register APIC address only once"
    - bpf: put uprobe link's path and task in release callback
    - bpf: support deferring bpf_link dealloc to after RCU grace period
    - efi/libstub: Add generic support for parsing mem_encrypt=
    - x86/boot: Move mem_encrypt= parsing to the decompressor
    - x86/sme: Move early SME kernel encryption handling into .head.text
    - x86/sev: Move early startup code into .head.text section
    - Linux 6.8.5
  * CVE-2024-26926
    - binder: check offset alignment in binder_get_object()
  * CVE-2024-26922
    - drm/amdgpu: validate the parameters of bo mapping operations more clearly
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element

 -- Jacob Martin <jacob.martin@canonical.com>  Fri, 21 Jun 2024 14:23:55 -0500

linux-nvidia (6.8.0-1008.8) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1008.8 -proposed tracker (LP: #2068141)

  [ Ubuntu: 6.8.0-36.36 ]

  * noble/linux: 6.8.0-36.36 -proposed tracker (LP: #2068150)
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 13 Jun 2024 15:07:47 -0500

linux-nvidia (6.8.0-1007.7) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1007.7 -proposed tracker (LP: #2064335)

  * Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/2024.04.29)

  * Add Real-time Linux Analysis tool (rtla) to linux-tools (LP: #2059080)
    - [Packaging] add Real-time Linux Analysis tool (rtla) to linux-tools
    - [Packaging] update dependencies for rtla

  * Provide python perf module (LP: #2051560)
    - [Packaging] enable perf python module

  * Address out-of-bounds issue when using TPM SPI interface (LP: #2067429)
    - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer

  * linux-nvidia-6.5_6.5.0-1014.14 breaks with earlier BIOS release, and
    modeset/resolutions are wrong (LP: #2061930) // Blacklist coresight_etm4x
    (LP: #2067106)
    - [Packaging] blacklist coresight_etm4x

  * Update the pre-built nvidia-fs driver to the 2.20.5 version (LP: #2066955)
    - NVIDIA: [Packaging] update nvidia-fs driver to latest version

  * backport arm64 THP improvements from 6.9 (LP: #2059316)
    - arm64/mm: make set_ptes() robust when OAs cross 48-bit boundary
    - arm/pgtable: define PFN_PTE_SHIFT
    - nios2/pgtable: define PFN_PTE_SHIFT
    - powerpc/pgtable: define PFN_PTE_SHIFT
    - riscv/pgtable: define PFN_PTE_SHIFT
    - s390/pgtable: define PFN_PTE_SHIFT
    - sparc/pgtable: define PFN_PTE_SHIFT
    - mm/pgtable: make pte_next_pfn() independent of set_ptes()
    - arm/mm: use pte_next_pfn() in set_ptes()
    - powerpc/mm: use pte_next_pfn() in set_ptes()
    - mm/memory: factor out copying the actual PTE in copy_present_pte()
    - mm/memory: pass PTE to copy_present_pte()
    - mm/memory: optimize fork() with PTE-mapped THP
    - mm/memory: ignore dirty/accessed/soft-dirty bits in folio_pte_batch()
    - mm/memory: ignore writable bit in folio_pte_batch()
    - mm: clarify the spec for set_ptes()
    - mm: thp: batch-collapse PMD with set_ptes()
    - mm: introduce pte_advance_pfn() and use for pte_next_pfn()
    - arm64/mm: convert pte_next_pfn() to pte_advance_pfn()
    - x86/mm: convert pte_next_pfn() to pte_advance_pfn()
    - mm: tidy up pte_next_pfn() definition
    - arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep)
    - arm64/mm: convert set_pte_at() to set_ptes(..., 1)
    - arm64/mm: convert ptep_clear() to ptep_get_and_clear()
    - arm64/mm: new ptep layer to manage contig bit
    - arm64/mm: dplit __flush_tlb_range() to elide trailing DSB
    - NVIDIA: [Config] arm64: ARM64_CONTPTE=y
    - arm64/mm: wire up PTE_CONT for user mappings
    - arm64/mm: implement new wrprotect_ptes() batch API
    - arm64/mm: implement new [get_and_]clear_full_ptes() batch APIs
    - mm: add pte_batch_hint() to reduce scanning in folio_pte_batch()
    - arm64/mm: implement pte_batch_hint()
    - arm64/mm: __always_inline to improve fork() perf
    - arm64/mm: automatically fold contpte mappings
    - arm64/mm: export contpte symbols only to GPL users
    - arm64/mm: improve comment in contpte_ptep_get_lockless()

  * pull-request: Fixes: b2b56a163230 ("gpio: tegra186: Check GPIO pin
    permission before access.") (LP: #2064549)
    - gpio: tegra186: Fix tegra186_gpio_is_accessible() check

  [ Ubuntu: 6.8.0-35.35 ]

  * noble/linux: 6.8.0-35.35 -proposed tracker (LP: #2065886)
  * CVE-2024-21823
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

  [ Ubuntu: 6.8.0-34.34 ]

  * noble/linux: 6.8.0-34.34 -proposed tracker (LP: #2065167)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.04.29)

  [ Ubuntu: 6.8.0-32.32 ]

  * noble/linux: 6.8.0-32.32 -proposed tracker (LP: #2064344)
  * Packaging resync (LP: #1786013)
    - [Packaging] drop getabis data
    - [Packaging] update variants
    - [Packaging] update annotations scripts
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.04.29)
  * Enable Nezha board (LP: #1975592)
    - [Config] Enable CONFIG_REGULATOR_FIXED_VOLTAGE on riscv64
  * Enable Nezha board (LP: #1975592) // Enable StarFive VisionFive 2 board
    (LP: #2013232)
    - [Config] Enable CONFIG_SERIAL_8250_DW on riscv64
  * RISC-V kernel config is out of sync with other archs (LP: #1981437)
    - [Config] Sync riscv64 config with other architectures
  * obsolete out-of-tree ivsc dkms in favor of in-tree one (LP: #2061747)
    - ACPI: scan: Defer enumeration of devices with a _DEP pointing to IVSC device
    - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler"
    - mei: vsc: Unregister interrupt handler for system suspend
    - media: ipu-bridge: Add ov01a10 in Dell XPS 9315
    - SAUCE: media: ipu-bridge: Support more sensors
  * Fix after-suspend-mediacard/sdhc-insert test failed (LP: #2042500)
    - PCI/ASPM: Move pci_configure_ltr() to aspm.c
    - PCI/ASPM: Always build aspm.c
    - PCI/ASPM: Move pci_save_ltr_state() to aspm.c
    - PCI/ASPM: Save L1 PM Substates Capability for suspend/resume
    - PCI/ASPM: Call pci_save_ltr_state() from pci_save_pcie_state()
    - PCI/ASPM: Disable L1 before configuring L1 Substates
    - PCI/ASPM: Update save_state when configuration changes
  * RTL8852BE fw security fail then lost WIFI function during suspend/resume
    cycle (LP: #2063096)
    - wifi: rtw89: download firmware with five times retry
  * intel_rapl_common: Add support for ARL and LNL (LP: #2061953)
    - powercap: intel_rapl: Add support for Lunar Lake-M paltform
    - powercap: intel_rapl: Add support for Arrow Lake
  * Kernel panic during checkbox stress_ng_test on Grace running noble 6.8
    (arm64+largemem) kernel (LP: #2058557)
    - aio: Fix null ptr deref in aio_complete() wakeup
  * Avoid creating non-working backlight sysfs knob from ASUS board
    (LP: #2060422)
    - platform/x86: asus-wmi: Consider device is absent when the read is ~0
  * Include cifs.ko in linux-modules package (LP: #2042546)
    - [Packaging] Replace fs/cifs with fs/smb/client in inclusion list
  * Add Real-time Linux Analysis tool (rtla) to linux-tools (LP: #2059080)
    - SAUCE: rtla: fix deb build
    - [Packaging] add Real-time Linux Analysis tool (rtla) to linux-tools
    - [Packaging] update dependencies for rtla
  * Noble update: v6.8.4 upstream stable release (LP: #2060533)
    - Revert "workqueue: Shorten events_freezable_power_efficient name"
    - Revert "workqueue: Don't call cpumask_test_cpu() with -1 CPU in
      wq_update_node_max_active()"
    - Revert "workqueue: Implement system-wide nr_active enforcement for unbound
      workqueues"
    - Revert "workqueue: Introduce struct wq_node_nr_active"
    - Revert "workqueue: RCU protect wq->dfl_pwq and implement accessors for it"
    - Revert "workqueue: Make wq_adjust_max_active() round-robin pwqs while
      activating"
    - Revert "workqueue: Move nr_active handling into helpers"
    - Revert "workqueue: Replace pwq_activate_inactive_work() with
      [__]pwq_activate_work()"
    - Revert "workqueue: Factor out pwq_is_empty()"
    - Revert "workqueue: Move pwq->max_active to wq->max_active"
    - Revert "workqueue.c: Increase workqueue name length"
    - Linux 6.8.4
  * Noble update: v6.8.3 upstream stable release (LP: #2060531)
    - drm/vmwgfx: Unmap the surface before resetting it on a plane state
    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
    - wifi: brcmfmac: avoid invalid list operation when vendor attach fails
    - media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
    - arm64: dts: qcom: sc7280: Add additional MSI interrupts
    - remoteproc: virtio: Fix wdg cannot recovery remote processor
    - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
    - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
    - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
    - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
    - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
    - arm64: dts: qcom: sm8450-hdk: correct AMIC4 and AMIC5 microphones
    - serial: max310x: fix NULL pointer dereference in I2C instantiation
    - drm/vmwgfx: Fix the lifetime of the bo cursor memory
    - pci_iounmap(): Fix MMIO mapping leak
    - media: xc4000: Fix atomicity violation in xc4000_get_frequency
    - media: mc: Add local pad to pipeline regardless of the link state
    - media: mc: Fix flags handling when creating pad links
    - media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
    - media: mc: Add num_links flag to media_pad
    - media: mc: Rename pad variable to clarify intent
    - media: mc: Expand MUST_CONNECT flag to always require an enabled link
    - media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT
    - md: use RCU lock to protect traversal in md_spares_need_change()
    - KVM: Always flush async #PF workqueue when vCPU is being destroyed
    - arm64: dts: qcom: sm8550-qrd: correct WCD9385 TX port mapping
    - arm64: dts: qcom: sm8550-mtp: correct WCD9385 TX port mapping
    - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf()
    - thermal/intel: Fix intel_tcc_get_temp() to support negative CPU temperature
    - powercap: intel_rapl: Fix a NULL pointer dereference
    - powercap: intel_rapl: Fix locking in TPMI RAPL
    - powercap: intel_rapl_tpmi: Fix a register bug
    - powercap: intel_rapl_tpmi: Fix System Domain probing
    - powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core
    - powerpc/smp: Increase nr_cpu_ids to include the boot CPU
    - sparc64: NMI watchdog: fix return value of __setup handler
    - sparc: vDSO: fix return value of __setup handler
    - selftests/mqueue: Set timeout to 180 seconds
    - pinctrl: qcom: sm8650-lpass-lpi: correct Kconfig name
    - ext4: correct best extent lstart adjustment logic
    - drm/amdgpu/display: Address kdoc for 'is_psr_su' in 'fill_dc_dirty_rects'
    - block: Clear zone limits for a non-zoned stacked queue
    - kasan/test: avoid gcc warning for intentional overflow
    - bounds: support non-power-of-two CONFIG_NR_CPUS
    - fat: fix uninitialized field in nostale filehandles
    - fuse: fix VM_MAYSHARE and direct_io_allow_mmap
    - mfd: twl: Select MFD_CORE
    - ubifs: Set page uptodate in the correct place
    - ubi: Check for too small LEB size in VTBL code
    - ubi: correct the calculation of fastmap size
    - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
    - mtd: rawnand: meson: fix scrambling mode value in command macro
    - md/md-bitmap: fix incorrect usage for sb_index
    - x86/nmi: Fix the inverse "in NMI handler" check
    - parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
    - parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt
      macros
    - parisc: Fix ip_fast_csum
    - parisc: Fix csum_ipv6_magic on 32-bit systems
    - parisc: Fix csum_ipv6_magic on 64-bit systems
    - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
    - md/raid5: fix atomicity violation in raid5_cache_count
    - iio: adc: rockchip_saradc: fix bitmask for channels on SARADCv2
    - iio: adc: rockchip_saradc: use mask for write_enable bitfield
    - docs: Restore "smart quotes" for quotes
    - cpufreq: Limit resolving a frequency to policy min/max
    - PM: suspend: Set mem_sleep_current during kernel command line setup
    - vfio/pds: Always clear the save/restore FDs on reset
    - clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
    - clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
    - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
    - clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
    - clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays
    - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
    - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
    - usb: xhci: Add error handling in xhci_map_urb_for_dma
    - powerpc/fsl: Fix mfpmr build errors with newer binutils
    - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
    - USB: serial: add device ID for VeriFone adapter
    - USB: serial: cp210x: add ID for MGP Instruments PDS100
    - wifi: mac80211: track capability/opmode NSS separately
    - USB: serial: option: add MeiG Smart SLM320 product
    - KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled
    - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
    - PM: sleep: wakeirq: fix wake irq warning in system suspend
    - mmc: tmio: avoid concurrent runs of mmc_request_done()
    - fuse: replace remaining make_bad_inode() with fuse_make_bad()
    - fuse: fix root lookup with nonzero generation
    - fuse: don't unhash root
    - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
    - usb: dwc3-am62: fix module unload/reload behavior
    - usb: dwc3-am62: Disable wakeup at remove
    - serial: core: only stop transmit when HW fifo is empty
    - serial: Lock console when calling into driver before registration
    - btrfs: qgroup: always free reserved space for extent records
    - btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
    - wifi: rtw88: Add missing VID/PIDs for 8811CU and 8821CU
    - docs: Makefile: Add dependency to $(YNL_INDEX) for targets other than
      htmldocs
    - PCI/PM: Drain runtime-idle callbacks before driver removal
    - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
    - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
    - md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume
    - md: export helpers to stop sync_thread
    - md: export helper md_is_rdwr()
    - md: add a new helper reshape_interrupted()
    - dm-raid: really frozen sync_thread during suspend
    - md/dm-raid: don't call md_reap_sync_thread() directly
    - dm-raid: add a new helper prepare_suspend() in md_personality
    - dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent
      with reshape
    - dm-raid: fix lockdep waring in "pers->hot_add_disk"
    - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
    - mac802154: fix llsec key resources release in mac802154_llsec_key_del
    - mm: swap: fix race between free_swap_and_cache() and swapoff()
    - mmc: core: Fix switch on gp3 partition
    - Bluetooth: btnxpuart: Fix btnxpuart_close
    - leds: trigger: netdev: Fix kernel panic on interface rename trig notify
    - drm/etnaviv: Restore some id values
    - landlock: Warn once if a Landlock action is requested while disabled
    - io_uring: fix mshot read defer taskrun cqe posting
    - hwmon: (amc6821) add of_match table
    - io_uring: fix io_queue_proc modifying req->flags
    - ext4: fix corruption during on-line resize
    - nvmem: meson-efuse: fix function pointer type mismatch
    - slimbus: core: Remove usage of the deprecated ida_simple_xx() API
    - phy: tegra: xusb: Add API to retrieve the port number of phy
    - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
    - speakup: Fix 8bit characters from direct synth
    - debugfs: fix wait/cancellation handling during remove
    - PCI/AER: Block runtime suspend when handling errors
    - io_uring/net: correctly handle multishot recvmsg retry setup
    - io_uring: fix mshot io-wq checks
    - PCI: qcom: Disable ASPM L0s for sc8280xp, sa8540p and sa8295p
    - sparc32: Fix parport build with sparc32
    - nfs: fix UAF in direct writes
    - NFS: Read unlock folio on nfs_page_create_from_folio() error
    - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
    - PCI: qcom: Enable BDF to SID translation properly
    - PCI: dwc: endpoint: Fix advertised resizable BAR size
    - PCI: hv: Fix ring buffer size calculation
    - cifs: prevent updating file size from server if we have a read/write lease
    - cifs: allow changing password during remount
    - thermal/drivers/mediatek: Fix control buffer enablement on MT7896
    - vfio/pci: Disable auto-enable of exclusive INTx IRQ
    - vfio/pci: Lock external INTx masking ops
    - vfio/platform: Disable virqfds on cleanup
    - vfio/platform: Create persistent IRQ handlers
    - vfio/fsl-mc: Block calling interrupt handler without trigger
    - tpm,tpm_tis: Avoid warning splat at shutdown
    - ksmbd: replace generic_fillattr with vfs_getattr
    - ksmbd: retrieve number of blocks using vfs_getattr in
      set_file_allocation_info
    - platform/x86/intel/tpmi: Change vsec offset to u64
    - io_uring/rw: return IOU_ISSUE_SKIP_COMPLETE for multishot retry
    - io_uring: clean rings on NO_MMAP alloc fail
    - ring-buffer: Do not set shortest_full when full target is hit
    - ring-buffer: Fix full_waiters_pending in poll
    - ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
    - tracing/ring-buffer: Fix wait_on_pipe() race
    - dlm: fix user space lkb refcounting
    - soc: fsl: qbman: Always disable interrupts when taking cgr_lock
    - soc: fsl: qbman: Use raw spinlock for cgr_lock
    - s390/zcrypt: fix reference counting on zcrypt card objects
    - drm/probe-helper: warn about negative .get_modes()
    - drm/panel: do not return negative error codes from drm_panel_get_modes()
    - drm/exynos: do not return negative values from .get_modes()
    - drm/imx/ipuv3: do not return negative values from .get_modes()
    - drm/vc4: hdmi: do not return negative values from .get_modes()
    - clocksource/drivers/timer-riscv: Clear timer interrupt on timer
      initialization
    - memtest: use {READ,WRITE}_ONCE in memory scanning
    - Revert "block/mq-deadline: use correct way to throttling write requests"
    - lsm: use 32-bit compatible data types in LSM syscalls
    - lsm: handle the NULL buffer case in lsm_fill_user_ctx()
    - f2fs: mark inode dirty for FI_ATOMIC_COMMITTED flag
    - f2fs: truncate page cache before clearing flags when aborting atomic write
    - nilfs2: fix failure to detect DAT corruption in btree and direct mappings
    - nilfs2: prevent kernel bug at submit_bh_wbc()
    - cifs: make sure server interfaces are requested only for SMB3+
    - cifs: reduce warning log level for server not advertising interfaces
    - cifs: open_cached_dir(): add FILE_READ_EA to desired access
    - mtd: rawnand: Fix and simplify again the continuous read derivations
    - mtd: rawnand: Add a helper for calculating a page index
    - mtd: rawnand: Ensure all continuous terms are always in sync
    - mtd: rawnand: Constrain even more when continuous reads are enabled
    - cpufreq: dt: always allocate zeroed cpumask
    - io_uring/futex: always remove futex entry for cancel all
    - io_uring/waitid: always remove waitid entry for cancel all
    - x86/CPU/AMD: Update the Zenbleed microcode revisions
    - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
    - net: esp: fix bad handling of pages from page_pool
    - NFSD: Fix nfsd_clid_class use of __string_len() macro
    - drm/i915: Add missing ; to __assign_str() macros in tracepoint code
    - net: hns3: tracing: fix hclgevf trace event strings
    - cxl/trace: Properly initialize cxl_poison region name
    - ksmbd: fix potencial out-of-bounds when buffer offset is invalid
    - virtio: reenable config if freezing device failed
    - LoongArch: Change __my_cpu_offset definition to avoid mis-optimization
    - LoongArch: Define the __io_aw() hook as mmiowb()
    - LoongArch/crypto: Clean up useless assignment operations
    - wireguard: netlink: check for dangling peer via is_dead instead of empty
      list
    - wireguard: netlink: access device through ctx instead of peer
    - wireguard: selftests: set RISCV_ISA_FALLBACK on riscv{32,64}
    - ahci: asm1064: asm1166: don't limit reported ports
    - drm/amd/display: Change default size for dummy plane in DML2
    - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
    - drm/amdgpu/pm: Fix NULL pointer dereference when get power limit
    - drm/amdgpu/pm: Check the validity of overdiver power limit
    - drm/amd/display: Override min required DCFCLK in dml1_validate
    - drm/amd/display: Allow dirty rects to be sent to dmub when abm is active
    - drm/amd/display: Init DPPCLK from SMU on dcn32
    - drm/amd/display: Update odm when ODM combine is changed on an otg master
      pipe with no plane
    - drm/amd/display: Fix idle check for shared firmware state
    - drm/amd/display: Amend coasting vtotal for replay low hz
    - drm/amd/display: Lock all enabled otg pipes even with no planes
    - drm/amd/display: Implement wait_for_odm_update_pending_complete
    - drm/amd/display: Return the correct HDCP error code
    - drm/amd/display: Add a dc_state NULL check in dc_state_release
    - drm/amd/display: Fix noise issue on HDMI AV mute
    - dm snapshot: fix lockup in dm_exception_table_exit
    - x86/pm: Work around false positive kmemleak report in msr_build_context()
    - wifi: brcmfmac: add per-vendor feature detection callback
    - wifi: brcmfmac: cfg80211: Use WSEC to set SAE password
    - wifi: brcmfmac: Demote vendor-specific attach/detach messages to info
    - drm/ttm: Make sure the mapped tt pages are decrypted when needed
    - drm/amd/display: Unify optimize_required flags and VRR adjustments
    - drm/amd/display: Add more checks for exiting idle in DC
    - btrfs: add set_folio_extent_mapped() helper
    - btrfs: replace sb::s_blocksize by fs_info::sectorsize
    - btrfs: add helpers to get inode from page/folio pointers
    - btrfs: add helpers to get fs_info from page/folio pointers
    - btrfs: add helper to get fs_info from struct inode pointer
    - btrfs: qgroup: validate btrfs_qgroup_inherit parameter
    - vfio: Introduce interface to flush virqfd inject workqueue
    - vfio/pci: Create persistent INTx handler
    - drm/bridge: add ->edid_read hook and drm_bridge_edid_read()
    - drm/bridge: lt8912b: use drm_bridge_edid_read()
    - drm/bridge: lt8912b: clear the EDID property on failures
    - drm/bridge: lt8912b: do not return negative values from .get_modes()
    - drm/amd/display: Remove pixle rate limit for subvp
    - drm/amd/display: Revert Remove pixle rate limit for subvp
    - workqueue: Shorten events_freezable_power_efficient name
    - drm/amd/display: Use freesync when `DRM_EDID_FEATURE_CONTINUOUS_FREQ` found
    - netfilter: nf_tables: reject constant set with timeout
    - Revert "crypto: pkcs7 - remove sha1 support"
    - x86/efistub: Call mixed mode boot services on the firmware's stack
    - ASoC: amd: yc: Revert "Fix non-functional mic on Lenovo 21J2"
    - ASoC: amd: yc: Revert "add new YC platform variant (0x63) support"
    - Fix memory leak in posix_clock_open()
    - wifi: rtw88: 8821cu: Fix connection failure
    - x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
    - x86/sev: Fix position dependent variable references in startup code
    - clocksource/drivers/arm_global_timer: Fix maximum prescaler value
    - ARM: 9352/1: iwmmxt: Remove support for PJ4/PJ4B cores
    - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
    - entry: Respect changes to system call number by trace_sys_enter()
    - swiotlb: Fix double-allocation of slots due to broken alignment handling
    - swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc()
    - swiotlb: Fix alignment checks when both allocation and DMA masks are present
    - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
    - printk: Update @console_may_schedule in console_trylock_spinning()
    - irqchip/renesas-rzg2l: Flush posted write in irq_eoi()
    - irqchip/renesas-rzg2l: Rename rzg2l_tint_eoi()
    - irqchip/renesas-rzg2l: Rename rzg2l_irq_eoi()
    - irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type
    - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
    - efi/libstub: fix efi_random_alloc() to allocate memory at alloc_min or
      higher address
    - x86/mpparse: Register APIC address only once
    - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
    - efi: fix panic in kdump kernel
    - pwm: img: fix pwm clock lookup
    - selftests/mm: Fix build with _FORTIFY_SOURCE
    - btrfs: handle errors returned from unpin_extent_cache()
    - btrfs: fix warning messages not printing interval at unpin_extent_range()
    - btrfs: do not skip re-registration for the mounted device
    - mfd: intel-lpss: Switch to generalized quirk table
    - mfd: intel-lpss: Introduce QUIRK_CLOCK_DIVIDER_UNITY for XPS 9530
    - drm/i915: Replace a memset() with zero initialization
    - drm/i915: Try to preserve the current shared_dpll for fastset on type-c
      ports
    - drm/i915: Include the PLL name in the debug messages
    - drm/i915: Suppress old PLL pipe_mask checks for MG/TC/TBT PLLs
    - crypto: iaa - Fix nr_cpus < nr_iaa case
    - drm/amd/display: Prevent crash when disable stream
    - ALSA: hda/tas2781: remove digital gain kcontrol
    - ALSA: hda/tas2781: add locks to kcontrols
    - mm: zswap: fix writeback shinker GFP_NOIO/GFP_NOFS recursion
    - init: open /initrd.image with O_LARGEFILE
    - x86/efistub: Add missing boot_params for mixed mode compat entry
    - efi/libstub: Cast away type warning in use of max()
    - x86/efistub: Reinstate soft limit for initrd loading
    - prctl: generalize PR_SET_MDWE support check to be per-arch
    - ARM: prctl: reject PR_SET_MDWE on pre-ARMv6
    - tmpfs: fix race on handling dquot rbtree
    - btrfs: validate device maj:min during open
    - btrfs: fix race in read_extent_buffer_pages()
    - btrfs: zoned: don't skip block groups with 100% zone unusable
    - btrfs: zoned: use zone aware sb location for scrub
    - btrfs: zoned: fix use-after-free in do_zone_finish()
    - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
    - wifi: cfg80211: add a flag to disable wireless extensions
    - wifi: iwlwifi: mvm: disable MLO for the time being
    - wifi: iwlwifi: fw: don't always use FW dump trig
    - wifi: iwlwifi: mvm: handle debugfs names more carefully
    - Revert "drm/amd/display: Fix sending VSC (+ colorimetry) packets for DP/eDP
      displays without PSR"
    - fbdev: Select I/O-memory framebuffer ops for SBus
    - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
    - hexagon: vmlinux.lds.S: handle attributes section
    - mm: cachestat: fix two shmem bugs
    - selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM
    - selftests/mm: fix ARM related issue with fork after pthread_create
    - mmc: sdhci-omap: re-tuning is needed after a pm transition to support emmc
      HS200 mode
    - mmc: core: Initialize mmc_blk_ioc_data
    - mmc: core: Avoid negative index with array access
    - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove()
    - block: Do not force full zone append completion in req_bio_endio()
    - thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
    - Revert "thermal: core: Don't update trip points inside the hysteresis range"
    - nouveau/dmem: handle kcalloc() allocation failure
    - net: ll_temac: platform_get_resource replaced by wrong function
    - net: wan: framer: Add missing static inline qualifiers
    - net: phy: qcom: at803x: fix kernel panic with at8031_probe
    - drm/xe/query: fix gt_id bounds check
    - drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau
    - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed
    - drm/amdkfd: fix TLB flush after unmap for GFX9.4.2
    - drm/amdgpu: fix deadlock while reading mqd from debugfs
    - drm/amd/display: Remove MPC rate control logic from DCN30 and above
    - drm/amd/display: Set DCN351 BB and IP the same as DCN35
    - drm/i915/hwmon: Fix locking inversion in sysfs getter
    - drm/i915/vma: Fix UAF on destroy against retire race
    - drm/i915/bios: Tolerate devdata==NULL in
      intel_bios_encoder_supports_dp_dual_mode()
    - drm/i915/vrr: Generate VRR "safe window" for DSB
    - drm/i915/dsi: Go back to the previous INIT_OTP/DISPLAY_ON order, mostly
    - drm/i915/dsb: Fix DSB vblank waits when using VRR
    - drm/i915: Do not match JSL in ehl_combo_pll_div_frac_wa_needed()
    - drm/i915: Pre-populate the cursor physical dma address
    - drm/i915/gt: Reset queue_priority_hint on parking
    - drm/amd/display: Fix bounds check for dcn35 DcfClocks
    - Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync
    - mtd: spinand: Add support for 5-byte IDs
    - Revert "usb: phy: generic: Get the vbus supply"
    - usb: cdc-wdm: close race between read and workqueue
    - usb: misc: ljca: Fix double free in error handling path
    - USB: UAS: return ENODEV when submit urbs fail with device not attached
    - vfio/pds: Make sure migration file isn't accessed after reset
    - ring-buffer: Make wake once of ring_buffer_wait() more robust
    - btrfs: fix extent map leak in unexpected scenario at unpin_extent_cache()
    - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
    - scsi: ufs: qcom: Provide default cycles_in_1us value
    - scsi: sd: Fix TCG OPAL unlock on system resume
    - scsi: core: Fix unremoved procfs host directory regression
    - staging: vc04_services: changen strncpy() to strscpy_pad()
    - staging: vc04_services: fix information leak in create_component()
    - genirq: Introduce IRQF_COND_ONESHOT and use it in pinctrl-amd
    - usb: dwc3: Properly set system wakeup
    - USB: core: Fix deadlock in usb_deauthorize_interface()
    - USB: core: Add hub_get() and hub_put() routines
    - USB: core: Fix deadlock in port "disable" sysfs attribute
    - usb: dwc2: host: Fix remote wakeup from hibernation
    - usb: dwc2: host: Fix hibernation flow
    - usb: dwc2: host: Fix ISOC flow in DDMA mode
    - usb: dwc2: gadget: Fix exiting from clock gating
    - usb: dwc2: gadget: LPM flow fix
    - usb: udc: remove warning when queue disabled ep
    - usb: typec: ucsi: Fix race between typec_switch and role_switch
    - usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()
    - usb: typec: tcpm: Correct port source pdo array in pd_set callback
    - usb: typec: tcpm: Update PD of Type-C port upon pd_set
    - usb: typec: Return size of buffer if pd_set operation succeeds
    - usb: typec: ucsi: Clear EVENT_PENDING under PPM lock
    - usb: typec: ucsi: Ack unsupported commands
    - usb: typec: ucsi_acpi: Refactor and fix DELL quirk
    - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
    - scsi: qla2xxx: Prevent command send on chip reset
    - scsi: qla2xxx: Fix N2N stuck connection
    - scsi: qla2xxx: Split FCE|EFT trace control
    - scsi: qla2xxx: Update manufacturer detail
    - scsi: qla2xxx: NVME|FCP prefer flag not being honored
    - scsi: qla2xxx: Fix command flush on cable pull
    - scsi: qla2xxx: Fix double free of the ha->vp_map pointer
    - scsi: qla2xxx: Fix double free of fcport
    - scsi: qla2xxx: Change debug message during driver unload
    - scsi: qla2xxx: Delay I/O Abort on PCI error
    - x86/bugs: Fix the SRSO mitigation on Zen3/4
    - crash: use macro to add crashk_res into iomem early for specific arch
    - drm/amd/display: fix IPX enablement
    - x86/bugs: Use fixed addressing for VERW operand
    - Revert "x86/bugs: Use fixed addressing for VERW operand"
    - usb: dwc3: pci: Drop duplicate ID
    - scsi: lpfc: Correct size for cmdwqe/rspwqe for memset()
    - scsi: lpfc: Correct size for wqe for memset()
    - scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
    - scsi: libsas: Fix disk not being scanned in after being removed
    - perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and
      later
    - x86/sev: Skip ROM range scans and validation for SEV-SNP guests
    - tools/resolve_btfids: fix build with musl libc
    - drm/amdgpu: fix use-after-free bug
    - drm/sched: fix null-ptr-deref in init entity
    - Linux 6.8.3
    - [Config] updateconfigs following v6.8.3 import
  * Noble update: v6.8.3 upstream stable release (LP: #2060531) //
    [Ubuntu-24.04] Hugepage memory is not getting released even after destroying
    the guest! (LP: #2062556)
    - block: Fix page refcounts for unaligned buffers in __bio_release_pages()
  *  [SPR][EMR][GNR] TDX: efi: TD Measurement support for kernel cmdline/initrd
    sections from EFI stub  (LP: #2060130)
    - efi/libstub: Use TPM event typedefs from the TCG PC Client spec
    - efi/tpm: Use symbolic GUID name from spec for final events table
    - efi/libstub: Add Confidential Computing (CC) measurement typedefs
    - efi/libstub: Measure into CC protocol if TCG2 protocol is absent
    - efi/libstub: Add get_event_log() support for CC platforms
    - x86/efistub: Remap kernel text read-only before dropping NX attribute
  * Fix acpi_power_meter accessing IPMI region before it's ready (LP: #2059263)
    - ACPI: IPMI: Add helper to wait for when SMI is selected
    - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
  * Drop fips-checks script from trees (LP: #2055083)
    - [Packaging] Remove fips-checks script
  * alsa/realtek: adjust max output valume for headphone on 2 LG machines
    (LP: #2058573)
    - ALSA: hda/realtek: fix the hp playback volume issue for LG machines
  * Noble update: v6.8.2 upstream stable release (LP: #2060097)
    - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    - workqueue.c: Increase workqueue name length
    - workqueue: Move pwq->max_active to wq->max_active
    - workqueue: Factor out pwq_is_empty()
    - workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()
    - workqueue: Move nr_active handling into helpers
    - workqueue: Make wq_adjust_max_active() round-robin pwqs while activating
    - workqueue: RCU protect wq->dfl_pwq and implement accessors for it
    - workqueue: Introduce struct wq_node_nr_active
    - workqueue: Implement system-wide nr_active enforcement for unbound
      workqueues
    - workqueue: Don't call cpumask_test_cpu() with -1 CPU in
      wq_update_node_max_active()
    - iomap: clear the per-folio dirty bits on all writeback failures
    - fs: Fix rw_hint validation
    - io_uring: remove looping around handling traditional task_work
    - io_uring: remove unconditional looping in local task_work handling
    - s390/dasd: Use dev_*() for device log messages
    - s390/dasd: fix double module refcount decrement
    - fs/hfsplus: use better @opf description
    - md: fix kmemleak of rdev->serial
    - rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure
      recovery
    - rcu/exp: Handle RCU expedited grace period kworker allocation failure
    - fs/select: rework stack allocation hack for clang
    - block: fix deadlock between bd_link_disk_holder and partition scan
    - md: Don't clear MD_CLOSING when the raid is about to stop
    - kunit: Setup DMA masks on the kunit device
    - ovl: Always reject mounting over case-insensitive directories
    - kunit: test: Log the correct filter string in executor_test
    - lib/cmdline: Fix an invalid format specifier in an assertion msg
    - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg
    - time: test: Fix incorrect format specifier
    - rtc: test: Fix invalid format specifier.
    - net: test: Fix printf format specifier in skb_segment kunit test
    - drm/xe/tests: Fix printf format specifiers in xe_migrate test
    - drm: tests: Fix invalid printf format specifiers in KUnit tests
    - md/raid1: factor out helpers to add rdev to conf
    - md/raid1: record nonrot rdevs while adding/removing rdevs to conf
    - md/raid1: fix choose next idle in read_balance()
    - io_uring/net: unify how recvmsg and sendmsg copy in the msghdr
    - io_uring/net: move receive multishot out of the generic msghdr path
    - io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
    - nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse()
    - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
    - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
    - x86/resctrl: Remove hard-coded memory bandwidth limit
    - x86/resctrl: Read supported bandwidth sources from CPUID
    - x86/resctrl: Implement new mba_MBps throttling heuristic
    - x86/sme: Fix memory encryption setting if enabled by default and not
      overridden
    - timekeeping: Fix cross-timestamp interpolation on counter wrap
    - timekeeping: Fix cross-timestamp interpolation corner case decision
    - timekeeping: Fix cross-timestamp interpolation for non-x86
    - x86/asm: Remove the __iomem annotation of movdir64b()'s dst argument
    - sched/fair: Take the scheduling domain into account in select_idle_smt()
    - sched/fair: Take the scheduling domain into account in select_idle_core()
    - wifi: ath10k: fix NULL pointer dereference in
      ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
    - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
    - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
    - wifi: b43: Stop correct queue in DMA worker when QoS is disabled
    - wifi: b43: Disable QoS for bcm4331
    - wifi: wilc1000: fix declarations ordering
    - wifi: wilc1000: fix RCU usage in connect path
    - wifi: ath11k: add support to select 6 GHz regulatory type
    - wifi: ath11k: store cur_regulatory_info for each radio
    - wifi: ath11k: fix a possible dead lock caused by ab->base_lock
    - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
    - wifi: wilc1000: do not realloc workqueue everytime an interface is added
    - wifi: wilc1000: fix multi-vif management when deleting a vif
    - wifi: mwifiex: debugfs: Drop unnecessary error check for
      debugfs_create_dir()
    - ARM: dts: renesas: r8a73a4: Fix external clocks and clock rate
    - arm64: dts: qcom: x1e80100: drop qcom,drv-count
    - arm64: dts: qcom: sc8180x: Hook up VDD_CX as GCC parent domain
    - arm64: dts: qcom: sc8180x: Fix up big CPU idle state entry latency
    - arm64: dts: qcom: sc8180x: Add missing CPU off state
    - arm64: dts: qcom: sc8180x: Fix eDP PHY power-domains
    - arm64: dts: qcom: sc8180x: Don't hold MDP core clock at FMAX
    - arm64: dts: qcom: sc8180x: Require LOW_SVS vote for MMCX if DISPCC is on
    - arm64: dts: qcom: sc8180x: Add missing CPU<->MDP_CFG path
    - arm64: dts: qcom: sc8180x: Shrink aoss_qmp register space size
    - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
    - cpufreq: mediatek-hw: Wait for CPU supplies before probing
    - sock_diag: annotate data-races around sock_diag_handlers[family]
    - inet_diag: annotate data-races around inet_diag_table[]
    - bpftool: Silence build warning about calloc()
    - selftests/bpf: Fix potential premature unload in bpf_testmod
    - libbpf: Apply map_set_def_max_entries() for inner_maps on creation
    - selftest/bpf: Add map_in_maps with BPF_MAP_TYPE_PERF_EVENT_ARRAY values
    - bpftool: Fix wrong free call in do_show_link
    - wifi: ath12k: Fix issues in channel list update
    - selftests/bpf: Fix the flaky tc_redirect_dtime test
    - selftests/bpf: Wait for the netstamp_needed_key static key to be turned on
    - wifi: cfg80211: add RNR with reporting AP information
    - wifi: mac80211: use deflink and fix typo in link ID check
    - wifi: iwlwifi: change link id in time event to s8
    - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
    - arm64: dts: qcom: sm8450: Add missing interconnects to serial
    - soc: qcom: socinfo: rename PM2250 to PM4125
    - arm64: dts: qcom: sc7280: Add static properties to cryptobam
    - arm64: dts: qcom: qcm6490-fairphone-fp5: Add missing reserved-memory
    - arm64: dts: qcom: sdm845-oneplus-common: improve DAI node naming
    - arm64: dts: qcom: rename PM2250 to PM4125
    - cpufreq: mediatek-hw: Don't error out if supply is not found
    - libbpf: Fix faccessat() usage on Android
    - libbpf: fix __arg_ctx type enforcement for perf_event programs
    - pmdomain: qcom: rpmhpd: Drop SA8540P gfx.lvl
    - arm64: dts: qcom: sa8540p: Drop gfx.lvl as power-domain for gpucc
    - arm64: dts: renesas: r8a779g0: Restore sort order
    - arm64: dts: renesas: r8a779g0: Add missing SCIF_CLK2
    - selftests/bpf: Disable IPv6 for lwt_redirect test
    - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S i.MX8MM
    - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
    - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL
      OSM-S board
    - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL
      board
    - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL
      OSM-S board
    - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL
      board
    - arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM module
    - arm64: dts: imx8qm: Align edma3 power-domains resources indentation
    - arm64: dts: imx8qm: Correct edma3 power-domains and interrupt numbers
    - libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API
    - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
    - wifi: ath11k: change to move WMI_VDEV_PARAM_SET_HEMU_MODE before
      WMI_PEER_ASSOC_CMDID
    - wifi: ath12k: fix fetching MCBC flag for QCN9274
    - wifi: iwlwifi: mvm: report beacon protection failures
    - wifi: iwlwifi: dbg-tlv: ensure NUL termination
    - wifi: iwlwifi: acpi: fix WPFC reading
    - wifi: iwlwifi: mvm: initialize rates in FW earlier
    - wifi: iwlwifi: fix EWRD table validity check
    - wifi: iwlwifi: mvm: d3: fix IPN byte order
    - wifi: iwlwifi: always have 'uats_enabled'
    - wifi: iwlwifi: mvm: fix the TLC command after ADD_STA
    - wifi: iwlwifi: read BIOS PNVM only for non-Intel SKU
    - gpio: vf610: allow disabling the vf610 driver
    - selftests/bpf: trace_helpers.c: do not use poisoned type
    - bpf: make sure scalar args don't accept __arg_nonnull tag
    - bpf: don't emit warnings intended for global subprogs for static subprogs
    - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
    - pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
    - net: blackhole_dev: fix build warning for ethh set but not used
    - spi: consolidate setting message->spi
    - spi: move split xfers for CS_WORD emulation
    - arm64: dts: ti: k3-am62p5-sk: Enable CPSW MDIO node
    - arm64: dts: ti: k3-j721s2: Fix power domain for VTM node
    - arm64: dts: ti: k3-j784s4: Fix power domain for VTM node
    - wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use
    - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
    - arm64: dts: ti: k3-am69-sk: remove assigned-clock-parents for unused VP
    - libbpf: fix return value for PERF_EVENT __arg_ctx type fix up check
    - arm64: dts: ti: k3-am62p-mcu/wakeup: Disable MCU and wakeup R5FSS nodes
    - arm64: dts: qcom: x1e80100-qcp: Fix supplies for LDOs 3E and 2J
    - libbpf: Use OPTS_SET() macro in bpf_xdp_query()
    - wifi: wfx: fix memory leak when starting AP
    - arm64: dts: qcom: qcm2290: declare VLS CLAMP register for USB3 PHY
    - arm64: dts: qcom: sm6115: declare VLS CLAMP register for USB3 PHY
    - arm64: dts: qcom: sm8650: Fix UFS PHY clocks
    - wifi: ath12k: fix incorrect logic of calculating vdev_stats_id
    - printk: nbcon: Relocate 32bit seq macros
    - printk: ringbuffer: Do not skip non-finalized records with prb_next_seq()
    - printk: Wait for all reserved records with pr_flush()
    - printk: Add this_cpu_in_panic()
    - printk: ringbuffer: Cleanup reader terminology
    - printk: ringbuffer: Skip non-finalized records in panic
    - printk: Disable passing console lock owner completely during panic()
    - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
    - tools/resolve_btfids: Refactor set sorting with types from btf_ids.h
    - tools/resolve_btfids: Fix cross-compilation to non-host endianness
    - wifi: iwlwifi: support EHT for WH
    - wifi: iwlwifi: properly check if link is active
    - wifi: iwlwifi: mvm: fix erroneous queue index mask
    - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
    - wifi: iwlwifi: mvm: don't set replay counters to 0xff
    - s390/pai: fix attr_event_free upper limit for pai device drivers
    - s390/vdso: drop '-fPIC' from LDFLAGS
    - arm64: dts: qcom: qcm6490-idp: Correct the voltage setting for vph_pwr
    - arm64: dts: qcom: qcs6490-rb3gen2: Correct the voltage setting for vph_pwr
    - selftests: forwarding: Add missing config entries
    - selftests: forwarding: Add missing multicast routing config entries
    - arm64: dts: qcom: sm6115: drop pipe clock selection
    - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
    - arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
    - arm64: dts: mediatek: mt7986: fix reference to PWM in fan node
    - arm64: dts: mediatek: mt7986: drop crypto's unneeded/invalid clock name
    - arm64: dts: mediatek: mt7986: fix SPI bus width properties
    - arm64: dts: mediatek: mt7986: fix SPI nodename
    - arm64: dts: mediatek: mt7986: drop "#clock-cells" from PWM
    - arm64: dts: mediatek: mt7986: add "#reset-cells" to infracfg
    - arm64: dts: mediatek: mt8192-asurada: Remove CrosEC base detection node
    - arm64: dts: mediatek: mt8192: fix vencoder clock name
    - arm64: dts: mediatek: mt8186: fix VENC power domain clocks
    - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
    - can: m_can: Start/Cancel polling timer together with interrupts
    - wifi: iwlwifi: mvm: Fix the listener MAC filter flags
    - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
    - arm64: dts: qcom: sdm845: Use the Low Power Island CX/MX for SLPI
    - soc: qcom: llcc: Check return value on Broadcast_OR reg read
    - ARM: dts: qcom: msm8974: correct qfprom node size
    - arm64: dts: mediatek: mt8186: Add missing clocks to ssusb power domains
    - arm64: dts: mediatek: mt8186: Add missing xhci clock to usb controllers
    - arm64: dts: ti: am65x: Fix dtbs_install for Rocktech OLDI overlay
    - cpufreq: qcom-hw: add CONFIG_COMMON_CLK dependency
    - wifi: wilc1000: prevent use-after-free on vif when cleaning up all
      interfaces
    - pwm: dwc: use pm_sleep_ptr() macro
    - arm64: dts: ti: k3-am69-sk: fix PMIC interrupt number
    - arm64: dts: ti: k3-j721e-sk: fix PMIC interrupt number
    - arm64: dts: ti: k3-am62-main: disable usb lpm
    - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
    - bus: tegra-aconnect: Update dependency to ARCH_TEGRA
    - iommu/amd: Mark interrupt as managed
    - wifi: brcmsmac: avoid function pointer casts
    - arm64: dts: qcom: sdm845-db845c: correct PCIe wake-gpios
    - arm64: dts: qcom: sm8150: correct PCIe wake-gpios
    - powercap: dtpm_cpu: Fix error check against freq_qos_add_request()
    - net: ena: Remove ena_select_queue
    - arm64: dts: ti: k3-j7200-common-proc-board: Modify Pinmux for wkup_uart0 and
      mcu_uart0
    - arm64: dts: ti: k3-j7200-common-proc-board: Remove clock-frequency from
      mcu_uart0
    - arm64: dts: ti: k3-j721s2-common-proc-board: Remove Pinmux for CTS and RTS
      in wkup_uart0
    - arm64: dts: ti: k3-j784s4-evm: Remove Pinmux for CTS and RTS in wkup_uart0
    - arm64: dts: ti: k3-am64-main: Fix ITAP/OTAP values for MMC
    - arm64: dts: mt8195-cherry-tomato: change watchdog reset boot flow
    - arm64: dts: ti: Add common1 register space for AM65x SoC
    - arm64: dts: ti: Add common1 register space for AM62x SoC
    - firmware: arm_scmi: Fix double free in SMC transport cleanup path
    - wifi: cfg80211: set correct param change count in ML element
    - arm64: dts: ti: k3-j721e: Fix mux-reg-masks in hbmc_mux
    - arm64: dts: ti: k3-j784s4-main: Fix mux-reg-masks in serdes_ln_ctrl
    - arm64: dts: ti: k3-am62p: Fix memory ranges for DMSS
    - wifi: wilc1000: revert reset line logic flip
    - ARM: dts: arm: realview: Fix development chip ROM compatible value
    - memory: tegra: Correct DLA client names
    - wifi: mt76: mt7996: fix fw loading timeout
    - wifi: mt76: mt7925: fix connect to 80211b mode fail in 2Ghz band
    - wifi: mt76: mt7925: fix SAP no beacon issue in 5Ghz and 6Ghz band
    - wifi: mt76: mt7925: fix mcu query command fail
    - wifi: mt76: mt7925: fix wmm queue mapping
    - wifi: mt76: mt7925: fix fw download fail
    - wifi: mt76: mt7925: fix WoW failed in encrypted mode
    - wifi: mt76: mt7925: fix the wrong header translation config
    - wifi: mt76: mt7925: add flow to avoid chip bt function fail
    - wifi: mt76: mt7925: add support to set ifs time by mcu command
    - wifi: mt76: mt7925: update PCIe DMA settings
    - wifi: mt76: mt7996: check txs format before getting skb by pid
    - wifi: mt76: mt7996: fix TWT issues
    - wifi: mt76: mt7996: fix incorrect interpretation of EHT MCS caps
    - wifi: mt76: mt7996: fix HE beamformer phy cap for station vif
    - wifi: mt76: mt7996: fix efuse reading issue
    - wifi: mt76: mt7996: fix HIF_TXD_V2_1 value
    - wifi: mt76: mt792x: fix ethtool warning
    - wifi: mt76: mt7921e: fix use-after-free in free_irq()
    - wifi: mt76: mt7925e: fix use-after-free in free_irq()
    - wifi: mt76: mt7921: fix incorrect type conversion for CLC command
    - wifi: mt76: mt792x: fix a potential loading failure of the 6Ghz channel
      config from ACPI
    - wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177
    - arm64: dts: renesas: rzg2l: Add missing interrupts to IRQC nodes
    - arm64: dts: renesas: r9a08g045: Add missing interrupts to IRQC node
    - arm64: dts: renesas: rzg3s-smarc-som: Guard Ethernet IRQ GPIO hogs
    - arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
    - arm64: dts: renesas: r8a779g0: Correct avb[01] reg sizes
    - net: mctp: copy skb ext data when fragmenting
    - pstore: inode: Only d_invalidate() is needed
    - arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF
    - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
    - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
    - arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M Plus eDM
      SBC
    - arm64: dts: imx8mp-evk: Fix hdmi@3d node
    - regulator: userspace-consumer: add module device table
    - gpiolib: Pass consumer device through to core in
      devm_fwnode_gpiod_get_index()
    - arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
    - ACPI: resource: Do IRQ override on Lunnen Ground laptops
    - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
    - ACPI: scan: Fix device check notification handling
    - arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu
    - arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller
    - arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s
    - objtool: Fix UNWIND_HINT_{SAVE,RESTORE} across basic blocks
    - x86, relocs: Ignore relocations in .notes section
    - SUNRPC: fix a memleak in gss_import_v2_context
    - SUNRPC: fix some memleaks in gssx_dec_option_array
    - arm64: dts: qcom: sm8550: Fix SPMI channels size
    - arm64: dts: qcom: sm8650: Fix SPMI channels size
    - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove
      function
    - ACPI: CPPC: enable AMD CPPC V2 support for family 17h processors
    - btrfs: fix race when detecting delalloc ranges during fiemap
    - wifi: rtw88: 8821cu: Fix firmware upload fail
    - wifi: rtw88: 8821c: Fix beacon loss and disconnect
    - wifi: rtw88: 8821c: Fix false alarm count
    - wifi: brcm80211: handle pmk_op allocation failure
    - riscv: dts: starfive: jh7100: fix root clock names
    - PCI: Make pci_dev_is_disconnected() helper public for other drivers
    - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
    - iommu/vt-d: Use rbtree to track iommu probed devices
    - iommu/vt-d: Improve ITE fault handling if target device isn't present
    - iommu/vt-d: Use device rbtree in iopf reporting path
    - iommu: Add static iommu_ops->release_domain
    - iommu/vt-d: Fix NULL domain on device release
    - igc: Fix missing time sync events
    - igb: Fix missing time sync events
    - ice: fix stats being updated by way too large values
    - Bluetooth: Remove HCI_POWER_OFF_TIMEOUT
    - Bluetooth: mgmt: Remove leftover queuing of power_off work
    - Bluetooth: Remove superfluous call to hci_conn_check_pending()
    - Bluetooth: Remove BT_HS
    - Bluetooth: hci_event: Fix not indicating new connection for BIG Sync
    - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
    - Bluetooth: hci_core: Cancel request on command timeout
    - Bluetooth: hci_sync: Fix overwriting request callback
    - Bluetooth: hci_h5: Add ability to allocate memory for private data
    - Bluetooth: btrtl: fix out of bounds memory access
    - Bluetooth: hci_core: Fix possible buffer overflow
    - Bluetooth: msft: Fix memory leak
    - Bluetooth: btusb: Fix memory leak
    - Bluetooth: af_bluetooth: Fix deadlock
    - Bluetooth: fix use-after-free in accessing skb after sending it
    - sr9800: Add check for usbnet_get_endpoints
    - s390/cache: prevent rebuild of shared_cpu_list
    - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
    - bpf: Fix hashtab overflow check on 32-bit arches
    - bpf: Fix stackmap overflow check on 32-bit arches
    - net: dsa: microchip: make sure drive strength configuration is not lost by
      soft reset
    - dpll: spec: use proper enum for pin capabilities attribute
    - iommu: Fix compilation without CONFIG_IOMMU_INTEL
    - ipv6: fib6_rules: flush route cache when rule is changed
    - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
    - octeontx2-af: Fix devlink params
    - net: phy: fix phy_get_internal_delay accessing an empty array
    - dpll: fix dpll_xa_ref_*_del() for multiple registrations
    - net: hns3: fix wrong judgment condition issue
    - net: hns3: fix kernel crash when 1588 is received on HIP08 devices
    - net: hns3: fix port duplex configure error in IMP reset
    - Bluetooth: Fix eir name length
    - net: phy: dp83822: Fix RGMII TX delay configuration
    - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
    - OPP: debugfs: Fix warning around icc_get_name()
    - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
    - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt()
      function
    - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt()
      function
    - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
    - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
    - net/x25: fix incorrect parameter validation in the x25_getsockopt() function
    - devlink: Fix length of eswitch inline-mode
    - r8152: fix unknown device for choose_configuration
    - nfp: flower: handle acti_netdevs allocation failure
    - bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes()
    - dm raid: fix false positive for requeue needed during reshape
    - dm: call the resume method on internal suspend
    - fbdev/simplefb: change loglevel when the power domains cannot be parsed
    - drm/tegra: dsi: Add missing check for of_find_device_by_node
    - drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
    - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
    - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path
      of tegra_dsi_probe()
    - drm/tegra: hdmi: Fix some error handling paths in tegra_hdmi_probe()
    - drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
    - drm/tegra: rgb: Fix missing clk_put() in the error handling paths of
      tegra_dc_rgb_probe()
    - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths
      of tegra_output_probe()
    - drm/rockchip: inno_hdmi: Fix video timing
    - drm: Don't treat 0 as -1 in drm_fixp2int_ceil
    - drm/vkms: Avoid reading beyond LUT array
    - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
    - drm/rockchip: lvds: do not overwrite error code
    - drm/rockchip: lvds: do not print scary message when probing defer
    - drm/panel-edp: use put_sync in unprepare
    - drm/lima: fix a memleak in lima_heap_alloc
    - ASoC: amd: acp: Add missing error handling in sof-mach
    - ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
    - ASoC: SOF: core: Skip firmware test for custom loaders
    - ASoC: SOF: amd: Compute file paths on firmware load
    - soundwire: stream: add missing const to Documentation
    - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
    - media: tc358743: register v4l2 async device only after successful setup
    - media: cadence: csi2rx: use match fwnode for media link
    - PCI/DPC: Print all TLP Prefixes, not just the first
    - perf record: Fix possible incorrect free in record__switch_output()
    - perf record: Check conflict between '--timestamp-filename' option and pipe
      mode before recording
    - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
    - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
    - perf pmu: Treat the msr pmu as software
    - crypto: qat - avoid memcpy() overflow warning
    - ALSA: hda: cs35l41: Set Channel Index correctly when system is missing _DSD
    - drm/amd/display: Fix potential NULL pointer dereferences in
      'dcn10_set_output_transfer_func()'
    - ASoC: sh: rz-ssi: Fix error message print
    - drm/vmwgfx: Fix vmw_du_get_cursor_mob fencing of newly-created MOBs
    - clk: renesas: r8a779g0: Fix PCIe clock name
    - pinctrl: renesas: rzg2l: Fix locking in rzg2l_dt_subnode_to_map()
    - pinctrl: renesas: r8a779g0: Add missing SCIF_CLK2 pin group/function
    - clk: samsung: exynos850: Propagate SPI IPCLK rate change
    - media: v4l2: cci: print leading 0 on error
    - perf evsel: Fix duplicate initialization of data->id in
      evsel__parse_sample()
    - perf bpf: Clean up the generated/copied vmlinux.h
    - clk: meson: Add missing clocks to axg_clk_regmaps
    - media: em28xx: annotate unchecked call to media_device_register()
    - media: v4l2-tpg: fix some memleaks in tpg_alloc
    - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
    - media: dt-bindings: techwell,tw9900: Fix port schema ref
    - mtd: spinand: esmt: Extend IDs to 5 bytes
    - media: edia: dvbdev: fix a use-after-free
    - pinctrl: mediatek: Drop bogus slew rate register range for MT8186
    - pinctrl: mediatek: Drop bogus slew rate register range for MT8192
    - drm/amdgpu: Fix potential out-of-bounds access in
      'amdgpu_discovery_reg_base_init()'
    - clk: qcom: reset: Commonize the de/assert functions
    - clk: qcom: reset: Ensure write completion on reset de/assertion
    - quota: Fix potential NULL pointer dereference
    - quota: Fix rcu annotations of inode dquot pointers
    - quota: Properly annotate i_dquot arrays with __rcu
    - ASoC: Intel: ssp-common: Add stub for sof_ssp_get_codec_name
    - PCI/P2PDMA: Fix a sleeping issue in a RCU read section
    - PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
    - crypto: xilinx - call finalize with bh disabled
    - drivers/ps3: select VIDEO to provide cmdline functions
    - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
    - perf srcline: Add missed addr2line closes
    - dt-bindings: msm: qcom, mdss: Include ommited fam-b compatible
    - drm/msm/dpu: fix the programming of INTF_CFG2_DATA_HCTL_EN
    - drm/msm/dpu: Only enable DSC_MODE_MULTIPLEX if dsc_merge is enabled
    - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
    - drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()
    - clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks
    - clk: renesas: r8a779f0: Correct PFC/GPIO parent clock
    - clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1
      mux
    - ALSA: seq: fix function cast warnings
    - perf expr: Fix "has_event" function for metric style events
    - perf stat: Avoid metric-only segv
    - perf metric: Don't remove scale from counts
    - ASoC: meson: aiu: fix function pointer type mismatch
    - ASoC: meson: t9015: fix function pointer type mismatch
    - powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
    - ASoC: SOF: Add some bounds checking to firmware data
    - drm: ci: use clk_ignore_unused for apq8016
    - NTB: fix possible name leak in ntb_register_device()
    - media: cedrus: h265: Fix configuring bitstream size
    - media: sun8i-di: Fix coefficient writes
    - media: sun8i-di: Fix power on/off sequences
    - media: sun8i-di: Fix chroma difference threshold
    - staging: media: starfive: Set 16 bpp for capture_raw device
    - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
    - media: go7007: add check of return value of go7007_read_addr()
    - media: pvrusb2: remove redundant NULL check
    - media: videobuf2: Add missing doc comment for waiting_in_dqbuf
    - media: pvrusb2: fix pvr2_stream_callback casts
    - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
    - drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'
    - drm/panel: boe-tv101wum-nl6: make use of prepare_prev_first
    - drm/msm/dpu: finalise global state object
    - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
    - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
    - drm/bridge: adv7511: fix crash on irq during probe
    - pinctrl: renesas: Allow the compiler to optimize away sh_pfc_pm
    - clk: hisilicon: hi3519: Release the correct number of gates in
      hi3519_clk_unregister()
    - clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
    - clk: mediatek: mt8135: Fix an error handling path in
      clk_mt8135_apmixed_probe()
    - clk: mediatek: mt7622-apmixedsys: Fix an error handling path in
      clk_mt8135_apmixed_probe()
    - clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF
    - clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical
    - drm/tegra: put drm_gem_object ref on error in tegra_fb_create
    - tty: mips_ejtag_fdc: Fix passing incompatible pointer type warning
    - media: ivsc: csi: Swap SINK and SOURCE pads
    - media: i2c: imx290: Fix IMX920 typo
    - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
    - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a
      ref
    - perf print-events: make is_event_supported() more robust
    - crypto: arm/sha - fix function cast warnings
    - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
    - crypto: qat - remove unused macros in qat_comp_alg.c
    - crypto: qat - removed unused macro in adf_cnv_dbgfs.c
    - crypto: qat - avoid division by zero
    - crypto: qat - remove double initialization of value
    - crypto: qat - fix ring to service map for dcc in 4xxx
    - crypto: qat - fix ring to service map for dcc in 420xx
    - crypto: jitter - fix CRYPTO_JITTERENTROPY help text
    - drm/tidss: Fix initial plane zpos values
    - drm/tidss: Fix sync-lost issue with two displays
    - clk: imx: imx8mp: Fix SAI_MCLK_SEL definition
    - mtd: maps: physmap-core: fix flash size larger than 32-bit
    - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
    - mtd: rawnand: brcmnand: exec_op helper functions return type fixes
    - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
    - ASoC: meson: axg-tdm-interface: add frame rate constraint
    - drm/msm/a6xx: specify UBWC config for sc7180
    - drm/msm/a7xx: Fix LLC typo
    - dt-bindings: arm-smmu: fix SM8[45]50 GPU SMMU if condition
    - perf pmu: Fix a potential memory leak in perf_pmu__lookup()
    - HID: amd_sfh: Update HPD sensor structure elements
    - HID: amd_sfh: Avoid disabling the interrupt
    - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
    - media: pvrusb2: fix uaf in pvr2_context_set_notify
    - media: dvb-frontends: avoid stack overflow warnings with clang
    - media: go7007: fix a memleak in go7007_load_encoder
    - media: ttpci: fix two memleaks in budget_av_attach
    - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
    - arm64: ftrace: Don't forbid CALL_OPS+CC_OPTIMIZE_FOR_SIZE with Clang
    - drm/tests: helpers: Include missing drm_drv header
    - drm/amd/pm: Fix esm reg mask use to get pcie speed
    - gpio: nomadik: fix offset bug in nmk_pmx_set()
    - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
    - mfd: cs42l43: Fix wrong register defaults
    - powerpc/32: fix ADB_CUDA kconfig warning
    - powerpc/pseries: Fix potential memleak in papr_get_attr()
    - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
    - clk: qcom: gcc-ipq5018: fix 'enable_reg' offset of 'gcc_gmac0_sys_clk'
    - clk: qcom: gcc-ipq5018: fix 'halt_reg' offset of 'gcc_pcie1_pipe_clk'
    - clk: qcom: gcc-ipq5018: fix register offset for GCC_UBI0_AXI_ARES reset
    - perf vendor events amd: Fix Zen 4 cache latency events
    - drm/msm/dpu: allow certain formats for CDM for DP
    - drm/msm/dpu: add division of drm_display_mode's hskew parameter
    - media: usbtv: Remove useless locks in usbtv_video_free()
    - drm/xe: Fix ref counting leak on page fault
    - drm/xe: Replace 'grouped target' in Makefile with pattern rule
    - lib/stackdepot: fix first entry having a 0-handle
    - lib/stackdepot: off by one in depot_fetch_stack()
    - modules: wait do_free_init correctly
    - mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults
    - power: supply: mm8013: fix "not charging" detection
    - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
    - powerpc/4xx: Fix warp_gpio_leds build failure
    - RISC-V: KVM: Forward SEED CSR access to user space
    - leds: aw2013: Unlock mutex before destroying it
    - leds: sgm3140: Add missing timer cleanup and flash gpio control
    - backlight: hx8357: Fix potential NULL pointer dereference
    - backlight: ktz8866: Correct the check for of_property_read_u32
    - backlight: lm3630a: Initialize backlight_properties on init
    - backlight: lm3630a: Don't set bl->props.brightness in get_brightness
    - backlight: da9052: Fully initialize backlight_properties during probe
    - backlight: lm3639: Fully initialize backlight_properties during probe
    - backlight: lp8788: Fully initialize backlight_properties during probe
    - sparc32: Use generic cmpdi2/ucmpdi2 variants
    - mtd: maps: sun_uflash: Declare uflash_devinit static
    - sparc32: Do not select GENERIC_ISA_DMA
    - sparc32: Fix section mismatch in leon_pci_grpci
    - clk: Fix clk_core_get NULL dereference
    - clk: zynq: Prevent null pointer dereference caused by kmalloc failure
    - PCI: brcmstb: Fix broken brcm_pcie_mdio_write() polling
    - cifs: Fix writeback data corruption
    - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
    - ALSA: hda/tas2781: use dev_dbg in system_resume
    - ALSA: hda/tas2781: add lock to system_suspend
    - ALSA: hda/tas2781: do not reset cur_* values in runtime_suspend
    - ALSA: hda/tas2781: do not call pm_runtime_force_* in system_resume/suspend
    - ALSA: hda/tas2781: restore power state after system_resume
    - ALSA: scarlett2: Fix Scarlett 4th Gen 4i4 low-voltage detection
    - ALSA: scarlett2: Fix Scarlett 4th Gen autogain status values
    - ALSA: scarlett2: Fix Scarlett 4th Gen input gain range
    - ALSA: scarlett2: Fix Scarlett 4th Gen input gain range again
    - mips: cm: Convert __mips_cm_l2sync_phys_base() to weak function
    - platform/x86/intel/pmc/lnl: Remove SSRAM support
    - platform/x86/intel/pmc/arl: Put GNA device in D3
    - platform/x86/amd/pmf: Do not use readl() for policy buffer access
    - ALSA: usb-audio: Stop parsing channels bits when all channels are found.
    - phy: qcom: qmp-usb: split USB-C PHY driver
    - phy: qcom: qmp-usbc: add support for the Type-C handling
    - phy: qcom: qmp-usbc: handle CLAMP register in a correct way
    - scsi: hisi_sas: Fix a deadlock issue related to automatic dump
    - RDMA/irdma: Remove duplicate assignment
    - RDMA/srpt: Do not register event handler until srpt device is fully setup
    - f2fs: compress: fix to guarantee persisting compressed blocks by CP
    - f2fs: compress: fix to cover normal cluster write with cp_rwsem
    - f2fs: compress: fix to check unreleased compressed cluster
    - f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode
    - f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic
    - f2fs: zone: fix to wait completion of last bio in zone correctly
    - f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
    - f2fs: compress: fix to cover f2fs_disable_compressed_file() w/ i_sem
    - f2fs: fix to avoid potential panic during recovery
    - scsi: csiostor: Avoid function pointer casts
    - i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling
    - RDMA/hns: Fix mis-modifying default congestion control algorithm
    - RDMA/device: Fix a race between mad_client and cm_client init
    - RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
    - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
    - f2fs: fix to create selinux label during whiteout initialization
    - f2fs: compress: fix to check zstd compress level correctly in mount option
    - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
    - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
    - NFSv4.2: fix listxattr maximum XDR buffer size
    - f2fs: compress: fix to check compress flag w/ .i_sem lock
    - f2fs: check number of blocks in a current section
    - watchdog: starfive: Check pm_runtime_enabled() before decrementing usage
      counter
    - watchdog: stm32_iwdg: initialize default timeout
    - f2fs: fix to use correct segment type in f2fs_allocate_data_block()
    - f2fs: ro: compress: fix to avoid caching unaligned extent
    - RDMA/mana_ib: Fix bug in creation of dma regions
    - RDMA/mana_ib: Introduce mdev_to_gc helper function
    - RDMA/mana_ib: Introduce mana_ib_get_netdev helper function
    - RDMA/mana_ib: Introduce mana_ib_install_cq_cb helper function
    - RDMA/mana_ib: Use virtual address in dma regions for MRs
    - Input: iqs7222 - add support for IQS7222D v1.1 and v1.2
    - NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt
    - NFS: Fix an off by one in root_nfs_cat()
    - NFSv4.1/pnfs: fix NFS with TLS in pnfs
    - ACPI: HMAT: Remove register of memory node for generic target
    - f2fs: compress: relocate some judgments in f2fs_reserve_compress_blocks
    - f2fs: compress: fix reserve_cblocks counting error when out of space
    - f2fs: fix to truncate meta inode pages forcely
    - f2fs: zone: fix to remove pow2 check condition for zoned block device
    - cxl: Fix the incorrect assignment of SSLBIS entry pointer initial location
    - perf/x86/amd/core: Avoid register reset when CPU is dead
    - afs: Revert "afs: Hide silly-rename files from userspace"
    - afs: Don't cache preferred address
    - afs: Fix occasional rmdir-then-VNOVNODE with generic/011
    - f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
    - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
    - ovl: relax WARN_ON in ovl_verify_area()
    - io_uring/net: correct the type of variable
    - remoteproc: stm32: Fix incorrect type in assignment for va
    - remoteproc: stm32: Fix incorrect type assignment returned by
      stm32_rproc_get_loaded_rsc_tablef
    - iio: pressure: mprls0025pa fix off-by-one enum
    - usb: phy: generic: Get the vbus supply
    - tty: vt: fix 20 vs 0x20 typo in EScsiignore
    - serial: max310x: fix syntax error in IRQ error message
    - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
    - arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
    - coresight: Fix issue where a source device's helpers aren't disabled
    - coresight: etm4x: Set skip_power_up in etm4_init_arch_data function
    - xhci: Add interrupt pending autoclear flag to each interrupter
    - xhci: make isoc_bei_interval variable interrupter specific.
    - xhci: remove unnecessary event_ring_deq parameter from xhci_handle_event()
    - xhci: update event ring dequeue pointer position to controller correctly
    - coccinelle: device_attr_show: Remove useless expression STR
    - kconfig: fix infinite loop when expanding a macro at the end of file
    - iio: gts-helper: Fix division loop
    - bus: mhi: ep: check the correct variable in mhi_ep_register_controller()
    - hwtracing: hisi_ptt: Move type check to the beginning of
      hisi_ptt_pmu_event_init()
    - rtc: mt6397: select IRQ_DOMAIN instead of depending on it
    - rtc: max31335: fix interrupt status reg
    - serial: 8250_exar: Don't remove GPIO device on suspend
    - staging: greybus: fix get_channel_from_mode() failure path
    - mei: vsc: Call wake_up() in the threaded IRQ handler
    - mei: vsc: Don't use sleeping condition in wait_event_timeout()
    - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
    - char: xilinx_hwicap: Fix NULL vs IS_ERR() bug
    - x86/hyperv: Use per cpu initial stack for vtl context
    - ASoC: tlv320adc3xxx: Don't strip remove function when driver is builtin
    - thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error
      handling path
    - thermal/drivers/qoriq: Fix getting tmu range
    - io_uring: don't save/restore iowait state
    - spi: lpspi: Avoid potential use-after-free in probe()
    - spi: Restore delays for non-GPIO chip select
    - ASoC: rockchip: i2s-tdm: Fix inaccurate sampling rates
    - nouveau: reset the bo resource bus info after an eviction
    - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
    - rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
    - octeontx2-af: Use matching wake_up API variant in CGX command interface
    - s390/vtime: fix average steal time calculation
    - net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
    - devlink: Fix devlink parallel commands processing
    - riscv: Only check online cpus for emulated accesses
    - soc: fsl: dpio: fix kcalloc() argument order
    - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
    - io_uring: Fix release of pinned pages when __io_uaddr_map fails
    - tcp: Fix refcnt handling in __inet_hash_connect().
    - vmxnet3: Fix missing reserved tailroom
    - hsr: Fix uninit-value access in hsr_get_node()
    - net: txgbe: fix clk_name exceed MAX_DEV_ID limits
    - spi: spi-mem: add statistics support to ->exec_op() calls
    - spi: Fix error code checking in spi_mem_exec_op()
    - nvme: fix reconnection fail due to reserved tag allocation
    - drm/xe: Invalidate userptr VMA on page pin fault
    - drm/xe: Skip VMAs pin when requesting signal to the last XE_EXEC
    - net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
    - net: ethernet: mtk_eth_soc: fix PPE hanging issue
    - io_uring: fix poll_remove stalled req completion
    - ASoC: SOF: amd: Move signed_fw_image to struct acp_quirk_entry
    - ASoC: SOF: amd: Skip IRAM/DRAM size modification for Steam Deck OLED
    - riscv: Fix compilation error with FAST_GUP and rv32
    - xen/evtchn: avoid WARN() when unbinding an event channel
    - xen/events: increment refcnt only if event channel is refcounted
    - packet: annotate data-races around ignore_outgoing
    - xfrm: Allow UDP encapsulation only in offload modes
    - net: veth: do not manipulate GRO when using XDP
    - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
    - spi: spi-imx: fix off-by-one in mx51 CPU mode burst length
    - drm: Fix drm_fixp2int_round() making it add 0.5
    - virtio: uapi: Drop __packed attribute in linux/virtio_pci.h
    - vdpa_sim: reset must not run
    - vdpa/mlx5: Allow CVQ size changes
    - virtio: packed: fix unmap leak for indirect desc table
    - net: move dev->state into net_device_read_txrx group
    - wireguard: receive: annotate data-race around receiving_counter.counter
    - rds: introduce acquire/release ordering in acquire/release_in_xmit()
    - hsr: Handle failures in module init
    - ipv4: raw: Fix sending packets from raw sockets via IPsec tunnels
    - nouveau/gsp: don't check devinit disable on GSP.
    - ceph: stop copying to iter at EOF on sync reads
    - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
    - dm-integrity: fix a memory leak when rechecking the data
    - net/bnx2x: Prevent access to a freed page in page_pool
    - devlink: fix port new reply cmd type
    - octeontx2: Detect the mbox up or down message via register
    - octeontx2-pf: Wait till detach_resources msg is complete
    - octeontx2-pf: Use default max_active works instead of one
    - octeontx2-pf: Send UP messages to VF only when VF is up.
    - octeontx2-af: Use separate handlers for interrupts
    - drm/amdgpu: add MMHUB 3.3.1 support
    - drm/amdgpu: fix mmhub client id out-of-bounds access
    - drm/amdgpu: drop setting buffer funcs in sdma442
    - netfilter: nft_set_pipapo: release elements in clone only from destroy path
    - netfilter: nf_tables: do not compare internal table flags on updates
    - rcu: add a helper to report consolidated flavor QS
    - net: report RCU QS on threaded NAPI repolling
    - bpf: report RCU QS in cpumap kthread
    - net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
    - net: dsa: mt7530: fix handling of all link-local frames
    - netfilter: nf_tables: Fix a memory leak in nf_tables_updchain
    - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
    - selftests: forwarding: Fix ping failure due to short timeout
    - dm io: Support IO priority
    - dm-integrity: align the outgoing bio in integrity_recheck
    - x86/efistub: Clear decompressor BSS in native EFI entrypoint
    - x86/efistub: Don't clear BSS twice in mixed mode
    - printk: Adjust mapping for 32bit seq macros
    - printk: Use prb_first_seq() as base for 32bit seq macros
    - Linux 6.8.2
    - [Config] updateconfig following v6.8.2 import
  * Provide python perf module (LP: #2051560)
    - [Packaging] enable perf python module
    - [Packaging] provide a wrapper module for python-perf
  * To support AMD Adaptive Backlight Management (ABM) for power profiles daemon
    >= 2.0 (LP: #2056716)
    - drm/amd/display: add panel_power_savings sysfs entry to eDP connectors
    - drm/amdgpu: respect the abmlevel module parameter value if it is set
  * Miscellaneous Ubuntu changes
    - [Config] Disable StarFive JH7100 support
    - [Config] Disable Renesas RZ/Five support
    - [Config] Disable BINFMT_FLAT for riscv64

 -- Jacob Martin <jacob.martin@canonical.com>  Thu, 30 May 2024 12:23:36 -0500

linux-nvidia (6.8.0-1006.6) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1006.6 -proposed tracker (LP: #2060232)

  * Packaging resync (LP: #1786013)
    - [Packaging] drop getabis data
    - [Packaging] Replace fs/cifs with fs/smb in inclusion list
    - [Packaging] debian.nvidia/dkms-versions -- update from kernel-versions
      (main/d2024.04.04)

  * Enable GDS in the 6.8 based linux-nvidia kernel (LP: #2059814)
    - NVIDIA: SAUCE: Patch NFS driver to support GDS with 6.8 Kernel
    - NVIDIA: SAUCE: NVMe/MVMEeOF: Patch NVMe/NVMeOF driver to support GDS on
      Linux 6.8 Kernel
    - NVIDIA: [Config] Add nvidia-fs build dependencies

  * Reapply the linux-nvidia kernel config options from the 5.15 and 6.5 kernels
    (LP: #2060327)
    - NVIDIA: [Config]: Grouping AAEON config options together, under a comment
    - NVIDIA: [Config]: Disable the NOUVEAU driver which is not used with -nvidia
      kernels
    - NVIDIA: [Config]: Adding CORESIGHT and ARM64_ERRATUM configs to annotations

  [ Ubuntu: 6.8.0-31.31 ]

  * noble/linux: 6.8.0-31.31 -proposed tracker (LP: #2062933)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.04.04)

  [ Ubuntu: 6.8.0-30.30 ]

  * noble/linux: 6.8.0-30.30 -proposed tracker (LP: #2061893)
  * System unstable, kernel ring buffer flooded with "BUG: Bad page state in
    process swapper/0" (LP: #2056706)
    - xen-netfront: Add missing skb_mark_for_recycle

  [ Ubuntu: 6.8.0-29.29 ]

  * noble/linux: 6.8.0-29.29 -proposed tracker (LP: #2061888)
  * [24.04 FEAT] [SEC2353] zcrypt: extend error recovery to deal with device
    scans (LP: #2050019)
    - s390/zcrypt: harmonize debug feature calls and defines
    - s390/zcrypt: introduce dynamic debugging for AP and zcrypt code
    - s390/pkey: harmonize pkey s390 debug feature calls
    - s390/pkey: introduce dynamic debugging for pkey
    - s390/ap: add debug possibility for AP messages
    - s390/zcrypt: add debug possibility for CCA and EP11 messages
    - s390/ap: rearm APQNs bindings complete completion
    - s390/ap: clarify AP scan bus related functions and variables
    - s390/ap: rework ap_scan_bus() to return true on config change
    - s390/ap: introduce mutex to lock the AP bus scan
    - s390/zcrypt: introduce retries on in-kernel send CPRB functions
    - s390/zcrypt: improve zcrypt retry behavior
    - s390/pkey: improve pkey retry behavior
  * [24.04 FEAT] Memory hotplug vmem pages (s390x) (LP: #2051835)
    - mm/memory_hotplug: introduce MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers
    - s390/mm: allocate vmemmap pages from self-contained memory range
    - s390/sclp: remove unhandled memory notifier type
    - s390/mm: implement MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers
    - s390: enable MHP_MEMMAP_ON_MEMORY
    - [Config] enable CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE and
      CONFIG_MHP_MEMMAP_ON_MEMORY for s390x

  [ Ubuntu: 6.8.0-28.28 ]

  * noble/linux: 6.8.0-28.28 -proposed tracker (LP: #2061867)
  * linux-gcp 6.8.0-1005.5 (+ others) Noble kernel regression iwth new apparmor
    profiles/features (LP: #2061851)
    - SAUCE: apparmor4.0.0 [92/90]: fix address mapping for recvfrom

  [ Ubuntu: 6.8.0-25.25 ]

  * noble/linux: 6.8.0-25.25 -proposed tracker (LP: #2061083)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.04.04)
  * Apply mitigations for the native BHI hardware vulnerabilty (LP: #2060909)
    - x86/cpufeatures: Add new word for scattered features
    - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
    - x86/syscall: Don't force use of indirect calls for system calls
    - x86/bhi: Add support for clearing branch history at syscall entry
    - x86/bhi: Define SPEC_CTRL_BHI_DIS_S
    - x86/bhi: Enumerate Branch History Injection (BHI) bug
    - x86/bhi: Add BHI mitigation knob
    - x86/bhi: Mitigate KVM by default
    - KVM: x86: Add BHI_NO
    - x86: set SPECTRE_BHI_ON as default
    - [Config] enable spectre_bhi=auto by default
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/90]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/90]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/90]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/90]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/90]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/90]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/90]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/90]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/90]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/90]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/90]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/90]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/90]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/90]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/90]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/90]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/90]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/90]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/90]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/90]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/90]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/90]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/90]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/90]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/90]: LSM stacking v39: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [26/90]: LSM stacking v39: Audit: Add record for
      multiple object contexts
    - SAUCE: apparmor4.0.0 [27/90]: LSM stacking v39: LSM: Remove unused
      lsmcontext_init()
    - SAUCE: apparmor4.0.0 [28/90]: LSM stacking v39: LSM: Improve logic in
      security_getprocattr
    - SAUCE: apparmor4.0.0 [29/90]: LSM stacking v39: LSM: secctx provider check
      on release
    - SAUCE: apparmor4.0.0 [31/90]: LSM stacking v39: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [32/90]: LSM stacking v39: LSM: Identify which LSM
      handles the context string
    - SAUCE: apparmor4.0.0 [33/90]: LSM stacking v39: AppArmor: Remove the
      exclusive flag
    - SAUCE: apparmor4.0.0 [34/90]: LSM stacking v39: LSM: Add mount opts blob
      size tracking
    - SAUCE: apparmor4.0.0 [35/90]: LSM stacking v39: LSM: allocate mnt_opts blobs
      instead of module specific data
    - SAUCE: apparmor4.0.0 [36/90]: LSM stacking v39: LSM: Infrastructure
      management of the key security blob
    - SAUCE: apparmor4.0.0 [37/90]: LSM stacking v39: LSM: Infrastructure
      management of the mnt_opts security blob
    - SAUCE: apparmor4.0.0 [38/90]: LSM stacking v39: LSM: Correct handling of
      ENOSYS in inode_setxattr
    - SAUCE: apparmor4.0.0 [39/90]: LSM stacking v39: LSM: Remove lsmblob
      scaffolding
    - SAUCE: apparmor4.0.0 [40/90]: LSM stacking v39: LSM: Allow reservation of
      netlabel
    - SAUCE: apparmor4.0.0 [41/90]: LSM stacking v39: LSM: restrict
      security_cred_getsecid() to a single LSM
    - SAUCE: apparmor4.0.0 [42/90]: LSM stacking v39: Smack: Remove
      LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [43/90]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [12/95]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [44/90]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [45/90]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [46/90]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [47/90]: af_unix mediation
    - SAUCE: apparmor4.0.0 [48/90]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/90]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/90]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/90]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/90]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/90]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/90]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/90]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/90]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/90]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/90]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/90]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/90]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/90]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/90]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/90]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/90]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [65/90] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [69/90]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [70/90]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [71/90]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [72/90]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [73/90]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [74/90]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/90]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/90]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/90]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/90]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/90]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/90]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/90]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/90]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/90]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/90]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/90]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/90]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/90]: fixup notify
    - SAUCE: apparmor4.0.0 [88/90]: apparmor: add fine grained ipv4/ipv6 mediation
    - SAUCE: apparmor4.0.0 [89/90]:apparmor: disable tailglob responses for now
    - SAUCE: apparmor4.0.0 [90/90]: apparmor: Fix notify build warnings
    - SAUCE: apparmor4.0.0: fix reserved mem for when we save ipv6 addresses
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/90]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/90]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/90]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * [MTL] x86: Fix Cache info sysfs is not populated (LP: #2049793)
    - SAUCE: cacheinfo: Check for null last-level cache info
    - SAUCE: cacheinfo: Allocate memory for memory if not done from the primary
      CPU
    - SAUCE: x86/cacheinfo: Delete global num_cache_leaves
    - SAUCE: x86/cacheinfo: Clean out init_cache_level()
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0: LSM stacking v39: fix build error with
      CONFIG_SECURITY=n
    - [Config] toolchain version update

  [ Ubuntu: 6.8.0-22.22 ]

  * noble/linux: 6.8.0-22.22 -proposed tracker (LP: #2060238)

  [ Ubuntu: 6.8.0-21.21 ]

  * noble/linux: 6.8.0-21.21 -proposed tracker (LP: #2060225)
  * Miscellaneous Ubuntu changes
    - [Config] update toolchain version in annotations

 -- Ian May <ian.may@canonical.com>  Mon, 22 Apr 2024 12:15:07 -0500

linux-nvidia (6.8.0-1002.2) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1002.2 -proposed tracker (LP: #2058266)

  [ Ubuntu: 6.8.0-20.20 ]

  * noble/linux: 6.8.0-20.20 -proposed tracker (LP: #2058221)
  * Noble update: v6.8.1 upstream stable release (LP: #2058224)
    - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set
    - Documentation/hw-vuln: Add documentation for RFDS
    - x86/rfds: Mitigate Register File Data Sampling (RFDS)
    - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests
    - Linux 6.8.1
  * Autopkgtest failures on amd64 (LP: #2048768)
    - [Packaging] update to clang-18
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0: LSM stacking v39: fix build error with
      CONFIG_SECURITY=n
    - [Config] amd64: MITIGATION_RFDS=y

  [ Ubuntu: 6.8.0-19.19 ]

  * noble/linux: 6.8.0-19.19 -proposed tracker (LP: #2057910)
  * Miscellaneous Ubuntu changes
    - [Packaging] re-introduce linux-doc as an empty package

  [ Ubuntu: 6.8.0-18.18 ]

  * noble/linux: 6.8.0-18.18 -proposed tracker (LP: #2057456)
  * Miscellaneous Ubuntu changes
    - [Packaging] drop dependency on libclang-17

  [ Ubuntu: 6.8.0-17.17 ]

  * noble/linux: 6.8.0-17.17 -proposed tracker (LP: #2056745)
  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] Add debian/control sanity check"

  [ Ubuntu: 6.8.0-16.16 ]

  * noble/linux: 6.8.0-16.16 -proposed tracker (LP: #2056738)
  * left-over ceph debugging printks (LP: #2056616)
    - Revert "UBUNTU: SAUCE: ceph: make sure all the files successfully put before
      unmounting"
  * qat: Improve error recovery flows (LP: #2056354)
    - crypto: qat - add heartbeat error simulator
    - crypto: qat - disable arbitration before reset
    - crypto: qat - update PFVF protocol for recovery
    - crypto: qat - re-enable sriov after pf reset
    - crypto: qat - add fatal error notification
    - crypto: qat - add auto reset on error
    - crypto: qat - limit heartbeat notifications
    - crypto: qat - improve aer error reset handling
    - crypto: qat - change SLAs cleanup flow at shutdown
    - crypto: qat - resolve race condition during AER recovery
    - Documentation: qat: fix auto_reset section
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
      multiple object contexts
    - SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
      lsmcontext_init()
    - SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
      security_getprocattr
    - SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
      on release
    - SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
      handles the context string
    - SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
      exclusive flag
    - SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
      size tracking
    - SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
      instead of module specific data
    - SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
      management of the key security blob
    - SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
      management of the mnt_opts security blob
    - SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
      ENOSYS in inode_setxattr
    - SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
      scaffolding
    - SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
      netlabel
    - SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
      security_cred_getsecid() to a single LSM
    - SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
      LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [12/95]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
    - SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/87]: fixup notify
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * Enable lowlatency settings in the generic kernel (LP: #2051342)
    - [Config] enable low-latency settings
  * hwmon: (coretemp) Fix core count limitation (LP: #2056126)
    - hwmon: (coretemp) Introduce enum for attr index
    - hwmon: (coretemp) Remove unnecessary dependency of array index
    - hwmon: (coretemp) Replace sensor_device_attribute with device_attribute
    - hwmon: (coretemp) Remove redundant pdata->cpu_map[]
    - hwmon: (coretemp) Abstract core_temp helpers
    - hwmon: (coretemp) Split package temp_data and core temp_data
    - hwmon: (coretemp) Remove redundant temp_data->is_pkg_data
    - hwmon: (coretemp) Use dynamic allocated memory for core temp_data
  * Miscellaneous Ubuntu changes
    - [Config] Disable CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION
    - [Packaging] remove debian/scripts/misc/arch-has-odm-enabled.sh
    - rebase on v6.8
    - [Config] toolchain version update
  * Miscellaneous upstream changes
    - crypto: qat - add fatal error notify method
  * Rebase on v6.8

  [ Ubuntu: 6.8.0-15.15 ]

  * noble/linux: 6.8.0-15.15 -proposed tracker (LP: #2055871)
  * Miscellaneous Ubuntu changes
    - rebase on v6.8-rc7
  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] Transition laptop-23.10 to generic"
  * Rebase on v6.8-rc7

  [ Ubuntu: 6.8.0-14.14 ]

  * noble/linux: 6.8.0-14.14 -proposed tracker (LP: #2055551)
  * Please change CONFIG_CONSOLE_LOGLEVEL_QUIET to 3 (LP: #2049390)
    - [Config] reduce verbosity when booting in quiet mode
  * linux: please move erofs.ko (CONFIG_EROFS for EROFS support) from linux-
    modules-extra to linux-modules (LP: #2054809)
    - UBUNTU [Packaging]: Include erofs in linux-modules instead of linux-modules-
      extra
  * linux: please move dmi-sysfs.ko (CONFIG_DMI_SYSFS for SMBIOS support) from
    linux-modules-extra to linux-modules (LP: #2045561)
    - [Packaging] Move dmi-sysfs.ko into linux-modules
  * Enable CONFIG_INTEL_IOMMU_DEFAULT_ON and
    CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON (LP: #1951440)
    - [Config] enable Intel DMA remapping by default
  * disable Intel DMA remapping by default (LP: #1971699)
    - [Config] update tracking bug for CONFIG_INTEL_IOMMU_DEFAULT_ON
  * Packaging resync (LP: #1786013)
    - debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.02.29)
  * Miscellaneous Ubuntu changes
    - SAUCE: modpost: Replace 0-length array with flex-array member
    - [packaging] do not include debian/ directory in a binary package
    - [packaging] remove debian/stamps/keep-dir

  [ Ubuntu: 6.8.0-13.13 ]

  * noble/linux: 6.8.0-13.13 -proposed tracker (LP: #2055421)
  * Packaging resync (LP: #1786013)
    - debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.02.29)
  * Miscellaneous Ubuntu changes
    - rebase on v6.8-rc6
    - [Config] updateconfifs following v6.8-rc6 rebase
  * Rebase on v6.8-rc6

  [ Ubuntu: 6.8.0-12.12 ]

  * linux-tools-common: man page of usbip[d] is misplaced (LP: #2054094)
    - [Packaging] rules: Put usbip manpages in the correct directory
  * Validate connection interval to pass Bluetooth Test Suite (LP: #2052005)
    - Bluetooth: Enforce validation on max value of connection interval
  * Turning COMPAT_32BIT_TIME off on s390x (LP: #2038583)
    - [Config] Turn off 31-bit COMPAT on s390x
  * Don't produce linux-source binary package (LP: #2043994)
    - [Packaging] Add debian/control sanity check
  * Don't produce linux-*-source-<version> package (LP: #2052439)
    - [Packaging] Move linux-source package stub to debian/control.d
    - [Packaging] Build linux-source package only for the main kernel
  * Don't produce linux-*-cloud-tools-common, linux-*-tools-common and
    linux-*-tools-host binary packages (LP: #2048183)
    - [Packaging] Move indep tools package stubs to debian/control.d
    - [Packaging] Build indep tools packages only for the main kernel
  * Enable CONFIG_INTEL_IOMMU_DEFAULT_ON and
    CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON (LP: #1951440)
    - [Config] enable Intel DMA remapping by default
  * disable Intel DMA remapping by default (LP: #1971699)
    - [Config] update tracking bug for CONFIG_INTEL_IOMMU_DEFAULT_ON
  * Miscellaneous Ubuntu changes
    - [Packaging] Transition laptop-23.10 to generic

 -- Ian May <ian.may@canonical.com>  Mon, 18 Mar 2024 13:42:39 -0500

linux-nvidia (6.8.0-1001.1) noble; urgency=medium

  * noble/linux-nvidia: 6.8.0-1001.1 -proposed tracker (LP: #2055128)

  * Packaging resync (LP: #1786013)
    - debian.nvidia/dkms-versions -- update from kernel-versions
      (main/d2024.02.07)

  * Miscellaneous Ubuntu changes
    - [Packaging] add Rust build dependencies
    - [Config] update annotations after rebase to v6.8

  [ Ubuntu: 6.8.0-11.11 ]

  * noble/linux: 6.8.0-11.11 -proposed tracker (LP: #2053094)
  * Miscellaneous Ubuntu changes
    - [Packaging] riscv64: disable building unnecessary binary debs

  [ Ubuntu: 6.8.0-10.10 ]

  * noble/linux: 6.8.0-10.10 -proposed tracker (LP: #2053015)
  * Miscellaneous Ubuntu changes
    - [Packaging] add Rust build-deps for riscv64
  * Miscellaneous upstream changes
    - Revert "Revert "UBUNTU: [Packaging] temporarily disable Rust dependencies on
      riscv64""

  [ Ubuntu: 6.8.0-9.9 ]

  * noble/linux: 6.8.0-9.9 -proposed tracker (LP: #2052945)
  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] temporarily disable Rust dependencies on
      riscv64"

  [ Ubuntu: 6.8.0-8.8 ]

  * noble/linux: 6.8.0-8.8 -proposed tracker (LP: #2052918)
  * Miscellaneous Ubuntu changes
    - [Packaging] riscv64: enable linux-libc-dev build
    - v6.8-rc4 rebase
  * Rebase on v6.8-rc4

  [ Ubuntu: 6.8.0-7.7 ]

  * noble/linux: 6.8.0-7.7 -proposed tracker (LP: #2052691)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
      multiple object contexts
    - SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
      lsmcontext_init()
    - SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
      security_getprocattr
    - SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
      on release
    - SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
      handles the context string
    - SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
      exclusive flag
    - SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
      size tracking
    - SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
      instead of module specific data
    - SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
      management of the key security blob
    - SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
      management of the mnt_opts security blob
    - SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
      ENOSYS in inode_setxattr
    - SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
      scaffolding
    - SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
      netlabel
    - SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
      security_cred_getsecid() to a single LSM
    - SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
      LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [12/95]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
    - SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/87]: fixup notify
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
      profiles can mediate user namespaces

  [ Ubuntu: 6.8.0-6.6 ]

  * noble/linux: 6.8.0-6.6 -proposed tracker (LP: #2052592)
  * Packaging resync (LP: #1786013)
    - debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.02.07)
    - [Packaging] update variants
  * FIPS kernels should default to fips mode (LP: #2049082)
    - SAUCE: Enable fips mode by default, in FIPS kernels only
  * Fix snapcraftyaml.yaml for jammy:linux-raspi (LP: #2051468)
    - [Packaging] Remove old snapcraft.yaml
  * Azure: Fix regression introduced in LP: #2045069 (LP: #2052453)
    - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  * Miscellaneous Ubuntu changes
    - [Packaging] Remove in-tree abi checks
    - [Packaging] drop abi files with clean
    - [Packaging] Remove do_full_source variable (fixup)
    - [Packaging] Remove update-dkms-versions and move dkms-versions
    - [Config] updateconfigs following v6.8-rc3 rebase
    - [packaging] rename to linux
    - [packaging] rebase on v6.8-rc3
    - [packaging] disable signing for ppc64el
  * Rebase on v6.8-rc3

  [ Ubuntu: 6.8.0-5.5 ]

  * noble/linux-unstable: 6.8.0-5.5 -proposed tracker (LP: #2052136)
  * Miscellaneous upstream changes
    - Revert "mm/sparsemem: fix race in accessing memory_section->usage"

  [ Ubuntu: 6.8.0-4.4 ]

  * noble/linux-unstable: 6.8.0-4.4 -proposed tracker (LP: #2051502)
  * Migrate from fbdev drivers to simpledrm and DRM fbdev emulation layer
    (LP: #1965303)
    - [Config] enable simpledrm and DRM fbdev emulation layer
  * Miscellaneous Ubuntu changes
    - [Config] toolchain update
  * Miscellaneous upstream changes
    - rust: upgrade to Rust 1.75.0

  [ Ubuntu: 6.8.0-3.3 ]

  * noble/linux-unstable: 6.8.0-3.3 -proposed tracker (LP: #2051488)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [12/95]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
    - SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
      reply that denies all access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
      notification
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
      multiple object contexts
    - SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
      lsmcontext_init()
    - SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
      security_getprocattr
    - SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
      on release
    - SAUCE: apparmor4.0.0 [30/87]: LSM stacking v39: LSM: Single calls in
      socket_getpeersec hooks
    - SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
      handles the context string
    - SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
      exclusive flag
    - SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
      size tracking
    - SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
      instead of module specific data
    - SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
      management of the key security blob
    - SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
      management of the mnt_opts security blob
    - SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
      ENOSYS in inode_setxattr
    - SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
      scaffolding
    - SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
      netlabel
    - SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
      security_cred_getsecid() to a single LSM
    - SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
      LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/87]: fixup notify
    - [Config] updateconfigs following v6.8-rc2 rebase

  [ Ubuntu: 6.8.0-2.2 ]

  * noble/linux-unstable: 6.8.0-2.2 -proposed tracker (LP: #2051110)
  * Miscellaneous Ubuntu changes
    - [Config] toolchain update
    - [Config] enable Rust

  [ Ubuntu: 6.8.0-1.1 ]

  * noble/linux-unstable: 6.8.0-1.1 -proposed tracker (LP: #2051102)
  * Miscellaneous Ubuntu changes
    - [packaging] move to v6.8-rc1
    - [Config] updateconfigs following v6.8-rc1 rebase
    - SAUCE: export file_close_fd() instead of close_fd_get_file()
    - SAUCE: cpufreq: s/strlcpy/strscpy/
    - debian/dkms-versions -- temporarily disable zfs dkms
    - debian/dkms-versions -- temporarily disable ipu6 and isvsc dkms
    - debian/dkms-versions -- temporarily disable v4l2loopback

  [ Ubuntu: 6.8.0-0.0 ]

  * Empty entry.

  [ Ubuntu: 6.7.0-7.7 ]

  * noble/linux-unstable: 6.7.0-7.7 -proposed tracker (LP: #2049357)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable signing for s390x and ppc64el

  [ Ubuntu: 6.7.0-6.6 ]

  * Empty entry.

  [ Ubuntu: 6.7.0-2.2 ]

  * noble/linux: 6.7.0-2.2 -proposed tracker (LP: #2049182)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
  * Enforce RETPOLINE and SLS mitigrations (LP: #2046440)
    - SAUCE: objtool: Make objtool check actually fatal upon fatal errors
    - SAUCE: objtool: make objtool SLS validation fatal when building with
      CONFIG_SLS=y
    - SAUCE: objtool: make objtool RETPOLINE validation fatal when building with
      CONFIG_RETPOLINE=y
    - SAUCE: scripts: remove generating .o-ur objects
    - [Packaging] Remove all custom retpoline-extract code
    - Revert "UBUNTU: SAUCE: vga_set_mode -- avoid jump tables"
    - Revert "UBUNTU: SAUCE: early/late -- annotate indirect calls in early/late
      initialisation code"
    - Revert "UBUNTU: SAUCE: apm -- annotate indirect calls within
      firmware_restrict_branch_speculation_{start,end}"
  * Miscellaneous Ubuntu changes
    - [Packaging] temporarily disable riscv64 builds
    - [Packaging] temporarily disable Rust dependencies on riscv64

  [ Ubuntu: 6.7.0-1.1 ]

  * noble/linux: 6.7.0-1.1 -proposed tracker (LP: #2048859)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
  * [UBUNTU 23.04] Regression: Ubuntu 23.04/23.10 do not include uvdevice
    anymore (LP: #2048919)
    - [Config] Enable S390_UV_UAPI (built-in)
  * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor
      Lake
    - SAUCE: platform/x86: int3472: Add handshake GPIO function
  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * [Mediatek] mt8195-demo: enable CONFIG_MTK_IOMMU as module for multimedia and
    PCIE peripherals (LP: #2036587)
    - [Config] Enable CONFIG_MTK_IOMMU on arm64
  * linux-*: please enable dm-verity kconfigs to allow MoK/db verified root
    images (LP: #2019040)
    - [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y
  * kexec enable to load/kdump zstd compressed zimg (LP: #2037398)
    - [Packaging] Revert arm64 image format to Image.gz
  * Mantic minimized/minimal cloud images do not receive IP address during
    provisioning; systemd regression with wait-online (LP: #2036968)
    - [Config] Enable virtio-net as built-in to avoid race
  * Make backlight module auto detect dell_uart_backlight (LP: #2008882)
    - SAUCE: ACPI: video: Dell AIO UART backlight detection
  * Linux 6.2 fails to reboot with current u-boot-nezha (LP: #2021364)
    - [Config] Default to performance CPUFreq governor on riscv64
  * Enable Nezha board (LP: #1975592)
    - [Config] Build in D1 clock drivers on riscv64
    - [Config] Enable CONFIG_SUN6I_RTC_CCU on riscv64
    - [Config] Enable CONFIG_SUNXI_WATCHDOG on riscv64
    - [Config] Disable SUN50I_DE2_BUS on riscv64
    - [Config] Disable unneeded sunxi pinctrl drivers on riscv64
  * Enable StarFive VisionFive 2 board (LP: #2013232)
    - [Config] Enable CONFIG_PINCTRL_STARFIVE_JH7110_SYS on riscv64
    - [Config] Enable CONFIG_STARFIVE_WATCHDOG on riscv64
  * rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
    - [Config] Enable virtually mapped stacks on riscv64
  * Check for changes relevant for security certifications (LP: #1945989)
    - [Packaging] Add a new fips-checks script
  * Installation support for SMARC RZ/G2L platform (LP: #2030525)
    - [Config] build Renesas RZ/G2L USBPHY control driver statically
  * Add support for kernels compiled with CONFIG_EFI_ZBOOT (LP: #2002226)
    - [Config]: Turn on CONFIG_EFI_ZBOOT on ARM64
  * Default module signing algo should be accelerated (LP: #2034061)
    - [Config] Default module signing algo should be accelerated
  * Miscellaneous Ubuntu changes
    - [Config] annotations clean-up
  [ Upstream Kernel Changes ]
  * Rebase to v6.7

  [ Ubuntu: 6.7.0-0.0 ]

  * Empty entry

  [ Ubuntu: 6.7.0-5.5 ]

  * noble/linux-unstable: 6.7.0-5.5 -proposed tracker (LP: #2048118)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable Rust support
    - [Packaging] temporarily disable riscv64 builds

  [ Ubuntu: 6.7.0-4.4 ]

  * noble/linux-unstable: 6.7.0-4.4 -proposed tracker (LP: #2047807)
  * unconfined profile denies userns_create for chromium based processes
    (LP: #1990064)
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor4.0.0 [69/69]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor4.0.0 [68/69]: apparmor: fix request field from a prompt
      reply that denies all access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor4.0.0 [67/69]: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor4.0.0 [66/69]: apparmor: fix oops when racing to retrieve
      notification
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/69]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [02/69]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [03/69]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [04/69]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [05/69]: af_unix mediation
    - SAUCE: apparmor4.0.0 [06/69]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [07/69]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor4.0.0 [08/69]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor4.0.0 [09/69]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor4.0.0 [10/69]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor4.0.0 [11/69]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor4.0.0 [12/69]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [13/69]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor4.0.0 [14/69]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [15/69]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor4.0.0 [16/69]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor4.0.0 [17/69]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [18/69]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor4.0.0 [19/69]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor4.0.0 [20/69]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [21/69]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [22/69]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [23/69]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [24/69]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor4.0.0 [25/69]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor4.0.0 [27/69]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [28/69]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [29/69]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [30/69]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [31/69]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor4.0.0 [32/69]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor4.0.0 [33/69]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor4.0.0 [34/69]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor4.0.0 [35/69]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor4.0.0 [36/69]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [37/69]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor4.0.0 [38/69]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor4.0.0 [39/69]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor4.0.0 [40/69]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [41/69]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor4.0.0 [42/69]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor4.0.0 [43/69]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor4.0.0 [44/69]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor4.0.0 [45/69]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [46/69]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [47/69]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [48/69]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [49/69]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [50/69]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [51/69]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [52/69]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [53/69]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [54/69]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [55/69]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [56/69]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [57/69]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [58/69]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [59/69]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [60/69]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [64/69]: advertise disconnected.path is available
    - SAUCE: apparmor4.0.0 [65/69]: add io_uring mediation
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [61/69]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [62/69]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [63/69]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor4.0.0 [26/69]: Stacking v38: Fix prctl() syscall with
      apparmor=0
  * Fix RPL-U CPU C-state always keep at C3 when system run PHM with idle screen
    on (LP: #2042385)
    - SAUCE: r8169: Add quirks to enable ASPM on Dell platforms
  * [Debian] autoreconstruct - Do not generate chmod -x for deleted  files
    (LP: #2045562)
    - [Debian] autoreconstruct - Do not generate chmod -x for deleted files
  * Disable Legacy TIOCSTI (LP: #2046192)
    - [Config]: disable CONFIG_LEGACY_TIOCSTI
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] remove helper scripts
    - [Packaging] update annotations scripts
  * Miscellaneous Ubuntu changes
    - [Packaging] rules: Remove unused dkms make variables
    - [Config] update annotations after rebase to v6.7-rc8
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc8

  [ Ubuntu: 6.7.0-3.3 ]

  * noble/linux-unstable: 6.7.0-3.3 -proposed tracker (LP: #2046060)
  * enable CONFIG_INTEL_TDX_HOST in linux >= 6.7 for noble (LP: #2046040)
    - [Config] enable CONFIG_INTEL_TDX_HOST
  * linux tools packages for derived kernels refuse to install simultaneously
    due to libcpupower name collision (LP: #2035971)
    - [Packaging] Statically link libcpupower into cpupower tool
  * make lazy RCU a boot time option (LP: #2045492)
    - SAUCE: rcu: Provide a boot time parameter to control lazy RCU
  * Build failure if run in a console (LP: #2044512)
    - [Packaging] Fix kernel module compression failures
  * Turning COMPAT_32BIT_TIME off on arm64 (64k & derivatives) (LP: #2038582)
    - [Config] y2038: Turn off COMPAT and COMPAT_32BIT_TIME on arm64 64k
  * Turning COMPAT_32BIT_TIME off on riscv64 (LP: #2038584)
    - [Config] y2038: Disable COMPAT_32BIT_TIME on riscv64
  * Turning COMPAT_32BIT_TIME off on ppc64el (LP: #2038587)
    - [Config] y2038: Disable COMPAT and COMPAT_32BIT_TIME on ppc64le
  * [UBUNTU 23.04] Kernel config option missing for s390x PCI passthrough
    (LP: #2042853)
    - [Config] CONFIG_VFIO_PCI_ZDEV_KVM=y
  * back-out zstd module compression automatic for backports (LP: #2045593)
    - [Packaging] make ZSTD module compression conditional
  * Miscellaneous Ubuntu changes
    - [Packaging] Remove do_full_source variable
    - [Packaging] Remove obsolete config handling
    - [Packaging] Remove support for sub-flavors
    - [Packaging] Remove old linux-libc-dev version hack
    - [Packaging] Remove obsolete scripts
    - [Packaging] Remove README.inclusion-list
    - [Packaging] make $(stampdir)/stamp-build-perarch depend on build-arch
    - [Packaging] Enable rootless builds
    - [Packaging] Allow to run debian/rules without (fake)root
    - [Packaging] remove unneeded trailing slash for INSTALL_MOD_PATH
    - [Packaging] override KERNELRELEASE instead of KERNELVERSION
    - [Config] update toolchain versions in annotations
    - [Packaging] drop useless linux-doc
    - [Packaging] scripts: Rewrite insert-ubuntu-changes in Python
    - [Packaging] enable riscv64 builds
    - [Packaging] remove the last sub-flavours bit
    - [Packaging] check debian.env to determine do_libc_dev_package
    - [Packaging] remove debian.*/variants
    - [Packaging] remove do_libc_dev_package variable
    - [Packaging] move linux-libc-dev.stub to debian/control.d/
    - [Packaging] Update check to build linux-libc-dev to the source package name
    - [Packaging] rules: Remove startnewrelease target
    - [Packaging] Remove debian/commit-templates
    - [Config] update annotations after rebase to v6.7-rc4
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc4

  [ Ubuntu: 6.7.0-2.2 ]

  * noble/linux-unstable: 6.7.0-2.2 -proposed tracker (LP: #2045107)
  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable Rust
    - [Config] enable Rust in annotations
    - [Packaging] Remove do_enforce_all variable
    - [Config] disable Softlogic 6x10 capture card driver on armhf
    - [Packaging] disable Rust support
    - [Config] update annotations after rebase to v6.7-rc3
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc3

  [ Ubuntu: 6.7.0-1.1 ]

  * noble/linux-unstable: 6.7.0-1.1 -proposed tracker (LP: #2044069)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] update helper scripts
  * Miscellaneous Ubuntu changes
    - [Config] update annotations after rebase to v6.7-rc2
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc2

  [ Ubuntu: 6.7.0-0.0 ]

  * Empty entry

  [ Ubuntu: 6.6.0-12.12 ]

  * noble/linux-unstable: 6.6.0-12.12 -proposed tracker (LP: #2043664)
  * Miscellaneous Ubuntu changes
    - [Packaging] temporarily disable zfs dkms

  [ Ubuntu: 6.6.0-11.11 ]

  * noble/linux-unstable: 6.6.0-11.11 -proposed tracker (LP: #2043480)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync update-dkms-versions helper
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/d2023.11.14)
  * Miscellaneous Ubuntu changes
    - [Packaging] move to Noble
    - [Config] toolchain version update

  [ Ubuntu: 6.6.0-10.10 ]

  * mantic/linux-unstable: 6.6.0-10.10 -proposed tracker (LP: #2043088)
  * Bump arm64's CONFIG_NR_CPUS to 512 (LP: #2042897)
    - [Config] Bump CONFIG_NR_CPUS to 512 for arm64
  * Miscellaneous Ubuntu changes
    - [Config] Include a note for the NR_CPUS setting on riscv64
    - SAUCE: apparmor4.0.0 [83/83]: Fix inode_init for changed prototype

  [ Ubuntu: 6.6.0-9.9 ]

  * mantic/linux-unstable: 6.6.0-9.9 -proposed tracker (LP: #2041852)
  * Switch IMA default hash to sha256 (LP: #2041735)
    - [Config] Switch IMA_DEFAULT_HASH from sha1 to sha256
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor4.0.0 [82/82]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor4.0.0 [81/82]: apparmor: fix request field from a prompt
      reply that denies all access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor4.0.0 [80/82]: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor4.0.0 [79/82]: apparmor: fix oops when racing to retrieve
      notification
  * Disable restricting unprivileged change_profile by default, due to LXD
    latest/stable not yet compatible with this new apparmor feature
    (LP: #2038567)
    - SAUCE: apparmor4.0.0 [78/82]: apparmor: Make
      apparmor_restrict_unprivileged_unconfined opt-in
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/82]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [02/82]: rename SK_CTX() to aa_sock and make it an
      inline fn
    - SAUCE: apparmor4.0.0 [03/82]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [04/82]: add user namespace creation mediation
    - SAUCE: apparmor4.0.0 [05/82]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [06/82]: af_unix mediation
    - SAUCE: apparmor4.0.0 [07/82]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [08/82]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor4.0.0 [09/82]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor4.0.0 [10/82]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor4.0.0 [11/82]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor4.0.0 [12/82]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor4.0.0 [13/82]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [14/82]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor4.0.0 [15/82]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [16/82]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor4.0.0 [17/82]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor4.0.0 [18/82]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [19/82]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor4.0.0 [20/82]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor4.0.0 [21/82]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [22/82]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [23/82]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [24/82]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [25/82]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor4.0.0 [26/82]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor4.0.0 [28/82]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [29/82]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [30/82]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [31/82]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [32/82]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor4.0.0 [33/82]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor4.0.0 [34/82]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor4.0.0 [35/82]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor4.0.0 [36/82]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor4.0.0 [37/82]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [38/82]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor4.0.0 [39/82]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor4.0.0 [40/82]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor4.0.0 [41/82]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [42/82]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor4.0.0 [43/82]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor4.0.0 [44/82]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor4.0.0 [45/82]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor4.0.0 [46/82]: combine common_audit_data and
      apparmor_audit_data
    - SAUCE: apparmor4.0.0 [47/82]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [48/82]: rename audit_data->label to
      audit_data->subj_label
    - SAUCE: apparmor4.0.0 [49/82]: pass cred through to audit info.
    - SAUCE: apparmor4.0.0 [50/82]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/82]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/82]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/82]: cache buffers on percpu list if there is lock
      contention
    - SAUCE: apparmor4.0.0 [54/82]: advertise availability of exended perms
    - SAUCE: apparmor4.0.0 [56/82]: cleanup: provide separate audit messages for
      file and policy checks
    - SAUCE: apparmor4.0.0 [57/82]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [58/82]: prompt - ref count pdb
    - SAUCE: apparmor4.0.0 [59/82]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [60/82]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [61/82]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [62/82]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [63/82]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [64/82]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [65/82]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [66/82]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [67/82]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [68/82]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [69/82]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [74/82]: advertise disconnected.path is available
    - SAUCE: apparmor4.0.0 [75/82]: fix invalid reference on profile->disconnected
    - SAUCE: apparmor4.0.0 [76/82]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [77/82]: apparmor: Fix regression in mount mediation
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [70/82]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [71/82]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [72/82]: userns - make it so special unconfined
      profiles can mediate user namespaces
    - SAUCE: apparmor4.0.0 [73/82]: userns - allow restricting unprivileged
      change_profile
  * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update
    apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [55/82]: fix profile verification and enable it
  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor4.0.0 [27/82]: Stacking v38: Fix prctl() syscall with
      apparmor=0
  * Miscellaneous Ubuntu changes
    - [Config] SECURITY_APPARMOR_RESTRICT_USERNS=y

  [ Ubuntu: 6.6.0-8.8 ]

  * mantic/linux-unstable: 6.6.0-8.8 -proposed tracker (LP: #2040243)
  * Miscellaneous Ubuntu changes
    - abi: gc reference to phy-rtk-usb2/phy-rtk-usb3

  [ Ubuntu: 6.6.0-7.7 ]

  * mantic/linux-unstable: 6.6.0-7.7 -proposed tracker (LP: #2040147)
  * test_021_aslr_dapper_libs from ubuntu_qrt_kernel_security failed on K-5.19 /
    J-OEM-6.1 / J-6.2 AMD64 (LP: #1983357)
    - [Config]: set ARCH_MMAP_RND_{COMPAT_, }BITS to the maximum
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.6-rc7 rebase

  [ Ubuntu: 6.6.0-6.6 ]

  * mantic/linux-unstable: 6.6.0-6.6 -proposed tracker (LP: #2039780)
  * Miscellaneous Ubuntu changes
    - rebase on v6.6-rc6
    - [Config] updateconfigs following v6.6-rc6 rebase
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc6

  [ Ubuntu: 6.6.0-5.5 ]

  * mantic/linux-unstable: 6.6.0-5.5 -proposed tracker (LP: #2038899)
  * Miscellaneous Ubuntu changes
    - rebase on v6.6-rc5
    - [Config] updateconfigs following v6.6-rc5 rebase
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc5

  [ Ubuntu: 6.6.0-4.4 ]

  * mantic/linux-unstable: 6.6.0-4.4 -proposed tracker (LP: #2038423)
  * Miscellaneous Ubuntu changes
    - rebase on v6.6-rc4
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc4

  [ Ubuntu: 6.6.0-3.3 ]

  * mantic/linux-unstable: 6.6.0-3.3 -proposed tracker (LP: #2037622)
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.6-rc3 rebase
  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: enforce rust availability only on x86_64"
    - arm64: rust: Enable Rust support for AArch64
    - arm64: rust: Enable PAC support for Rust.
    - arm64: Restrict Rust support to little endian only.

  [ Ubuntu: 6.6.0-2.2 ]

  * Miscellaneous upstream changes
    - UBUBNTU: [Config] build all COMEDI drivers as modules

  [ Ubuntu: 6.6.0-1.1 ]

  * Miscellaneous Ubuntu changes
    - [Packaging] move linux to linux-unstable
    - [Packaging] rebase on v6.6-rc1
    - [Config] updateconfigs following v6.6-rc1 rebase
    - [packaging] skip ABI, modules and retpoline checks
    - update dropped.txt
    - [Config] SHIFT_FS FTBFS with Linux 6.6, disable it
    - [Config] DELL_UART_BACKLIGHT FTBFS with Linux 6.6, disable it
    - [Packaging] debian/dkms-versions: temporarily disable dkms
    - [Packaging] temporarily disable signing for s390x
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc1

  [ Ubuntu: 6.6.0-0.0 ]

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 27 Feb 2024 10:54:15 +0100

linux-nvidia (6.8.0-1000.0) noble; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 27 Feb 2024 10:40:55 +0100

linux-nvidia (6.6.0-1001.1) noble; urgency=medium

  * noble/linux-nvidia: 6.6.0-1001.1 -proposed tracker (LP: #2046137)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] remove helper scripts
    - [Packaging] update update.conf

  * Pull-request to address ARM SMMU issue (LP: #2031320)
    - NVIDIA: SAUCE: iommu/arm-smmu-v3: Allow default substream bypass with a
      pasid support

  * Miscellaneous Ubuntu changes
    - rename debian.nvidia-6.6 to debian.nvidia
    - rebase on Ubuntu-6.6.0-14.14
    - [Config] updateconfigs following Ubuntu-6.6.0-14.14 rebase

  * Miscellaneous upstream changes
    - NVIDIA: [Packaging] debian/dkms-versions: adding in the support for mstflint
      and nvidia-fs
    - XXX: update-dkms

  * Rebase on Ubuntu-6.6.0-14.14

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 11 Dec 2023 10:37:37 +0100

linux-nvidia (6.6.0-1000.0) noble; urgency=medium

  * Empty entry.

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 11 Dec 2023 09:03:17 +0100

linux-nvidia-6.5 (6.5.0-1004.4) jammy; urgency=medium

  * jammy/linux-nvidia-6.5: 6.5.0-1004.4 -proposed tracker (LP: #2038972)

  [ Ubuntu: 6.5.0-9.9 ]

  * mantic/linux: 6.5.0-9.9 -proposed tracker (LP: #2038687)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - re-apply apparmor 4.0.0
  * Disable restricting unprivileged change_profile by default, due to LXD
    latest/stable not yet compatible with this new apparmor feature
    (LP: #2038567)
    - SAUCE: apparmor: Make apparmor_restrict_unprivileged_unconfined opt-in

  [ Ubuntu: 6.5.0-8.8 ]

  * mantic/linux: 6.5.0-8.8 -proposed tracker (LP: #2038577)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor3.2.0 [02/60]: rename SK_CTX() to aa_sock and make it an
      inline fn
    - SAUCE: apparmor3.2.0 [05/60]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor3.2.0 [08/60]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor3.2.0 [09/60]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor3.2.0 [10/60]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor3.2.0 [11/60]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor3.2.0 [12/60]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor3.2.0 [13/60]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor3.2.0 [14/60]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor3.2.0 [15/60]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor3.2.0 [16/60]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor3.2.0 [17/60]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor3.2.0 [18/60]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor3.2.0 [19/60]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor3.2.0 [20/60]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor3.2.0 [21/60]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor3.2.0 [22/60]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor3.2.0 [23/60]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor3.2.0 [24/60]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor3.2.0 [25/60]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor3.2.0 [26/60]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor3.2.0 [28/60]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor3.2.0 [29/60]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor3.2.0 [30/60]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor3.2.0 [31/60]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor3.2.0 [32/60]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor3.2.0 [33/60]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor3.2.0 [34/60]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor3.2.0 [35/60]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor3.2.0 [36/60]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor3.2.0 [37/60]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor3.2.0 [38/60]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor3.2.0 [39/60]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor3.2.0 [40/60]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor3.2.0 [41/60]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor3.2.0 [42/60]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor3.2.0 [43/60]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor3.2.0 [44/60]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor3.2.0 [45/60]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor3.2.0 [46/60]: combine common_audit_data and
      apparmor_audit_data
    - SAUCE: apparmor3.2.0 [47/60]: setup slab cache for audit data
    - SAUCE: apparmor3.2.0 [48/60]: rename audit_data->label to
      audit_data->subj_label
    - SAUCE: apparmor3.2.0 [49/60]: pass cred through to audit info.
    - SAUCE: apparmor3.2.0 [50/60]: Improve debug print infrastructure
    - SAUCE: apparmor3.2.0 [51/60]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor3.2.0 [52/60]: enable userspace upcall for mediation
    - SAUCE: apparmor3.2.0 [53/60]: cache buffers on percpu list if there is lock
      contention
    - SAUCE: apparmor3.2.0 [55/60]: advertise availability of exended perms
    - SAUCE: apparmor3.2.0 [60/60]: [Config] enable
      CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update
    apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor3.2.0 [57/60]: fix profile verification and enable it
  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor3.2.0 [27/60]: Stacking v38: Fix prctl() syscall with
      apparmor=0
  * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) //
    update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor3.2.0 [01/60]: add/use fns to print hash string hex value
    - SAUCE: apparmor3.2.0 [03/60]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor3.2.0 [04/60]: add user namespace creation mediation
    - SAUCE: apparmor3.2.0 [06/60]: af_unix mediation
    - SAUCE: apparmor3.2.0 [07/60]: Add fine grained mediation of posix mqueues

 -- Ian May <ian.may@canonical.com>  Thu, 12 Oct 2023 15:30:35 -0500

linux-nvidia-6.5 (6.5.0-1001.1) jammy; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update Ubuntu.md

  * Miscellaneous Ubuntu changes
    - [Packaging] Initialize linux-nvidia-6.5
    - [Config] nvidia-6.5: update annotations

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: modpost: support arbitrary symbol length in
      modversion"
    - Revert "UBUNTU: [Packaging] ZSTD compress modules"

 -- Ian May <ian.may@canonical.com>  Wed, 04 Oct 2023 00:20:42 -0500

linux-nvidia-6.5 (6.5.0-1000.0) jammy; urgency=medium

  * Empty entry

 -- Ian May <ian.may@canonical.com>  Tue, 03 Oct 2023 08:41:29 -0500

linux (6.5.0-7.7) mantic; urgency=medium

  * mantic/linux: 6.5.0-7.7 -proposed tracker (LP: #2037611)

  * kexec enable to load/kdump zstd compressed zimg (LP: #2037398)
    - [Packaging] Revert arm64 image format to Image.gz

  * Mantic minimized/minimal cloud images do not receive IP address during
    provisioning (LP: #2036968)
    - [Config] Enable virtio-net as built-in to avoid race

  * Miscellaneous Ubuntu changes
    - SAUCE: Add mdev_set_iommu_device() kABI
    - [Config] update gcc version in annotations

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 28 Sep 2023 10:19:24 +0200

linux (6.5.0-6.6) mantic; urgency=medium

  * mantic/linux: 6.5.0-6.6 -proposed tracker (LP: #2035595)

  * Mantic update: v6.5.3 upstream stable release (LP: #2035588)
    - drm/amd/display: ensure async flips are only accepted for fast updates
    - cpufreq: intel_pstate: set stale CPU frequency to minimum
    - tpm: Enable hwrng only for Pluton on AMD CPUs
    - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN
    - Revert "fuse: in fuse_flush only wait if someone wants the return code"
    - Revert "f2fs: clean up w/ sbi->log_sectors_per_block"
    - Revert "PCI: tegra194: Enable support for 256 Byte payload"
    - Revert "net: macsec: preserve ingress frame ordering"
    - reiserfs: Check the return value from __getblk()
    - splice: always fsnotify_access(in), fsnotify_modify(out) on success
    - splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice
    - splice: fsnotify_access(in), fsnotify_modify(out) on success in tee
    - eventfd: prevent underflow for eventfd semaphores
    - fs: Fix error checking for d_hash_and_lookup()
    - iomap: Remove large folio handling in iomap_invalidate_folio()
    - tmpfs: verify {g,u}id mount options correctly
    - selftests/harness: Actually report SKIP for signal tests
    - vfs, security: Fix automount superblock LSM init problem, preventing NFS sb
      sharing
    - ARM: ptrace: Restore syscall restart tracing
    - ARM: ptrace: Restore syscall skipping for tracers
    - btrfs: zoned: skip splitting and logical rewriting on pre-alloc write
    - erofs: release ztailpacking pclusters properly
    - locking/arch: Avoid variable shadowing in local_try_cmpxchg()
    - refscale: Fix uninitalized use of wait_queue_head_t
    - clocksource: Handle negative skews in "skew is too large" messages
    - powercap: arm_scmi: Remove recursion while parsing zones
    - OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate()
    - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
    - selftests/resctrl: Add resctrl.h into build deps
    - selftests/resctrl: Don't leak buffer in fill_cache()
    - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark
    - selftests/resctrl: Close perf value read fd on errors
    - sched/fair: remove util_est boosting
    - arm64/ptrace: Clean up error handling path in sve_set_common()
    - sched/psi: Select KERNFS as needed
    - cpuidle: teo: Update idle duration estimate when choosing shallower state
    - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
    - arm64/fpsimd: Only provide the length to cpufeature for xCR registers
    - sched/rt: Fix sysctl_sched_rr_timeslice intial value
    - perf/imx_ddr: don't enable counter0 if none of 4 counters are used
    - selftests/futex: Order calls to futex_lock_pi
    - irqchip/loongson-eiointc: Fix return value checking of eiointc_index
    - ACPI: x86: s2idle: Post-increment variables when getting constraints
    - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table
    - thermal/of: Fix potential uninitialized value access
    - cpufreq: amd-pstate-ut: Remove module parameter access
    - cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver
    - tools/nolibc: arch-*.h: add missing space after ','
    - tools/nolibc: fix up startup failures for -O0 under gcc < 11.1.0
    - x86/efistub: Fix PCI ROM preservation in mixed mode
    - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
    - cpufreq: tegra194: add online/offline hooks
    - cpufreq: tegra194: remove opp table in exit hook
    - selftests/bpf: Fix bpf_nf failure upon test rerun
    - libbpf: only reset sec_def handler when necessary
    - bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie
    - bpftool: Define a local bpf_perf_link to fix accessing its fields
    - bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c
    - bpftool: Use a local bpf_perf_event_value to fix accessing its fields
    - libbpf: Fix realloc API handling in zero-sized edge cases
    - bpf: Clear the probe_addr for uprobe
    - bpf: Fix an error around PTR_UNTRUSTED
    - bpf: Fix an error in verifying a field in a union
    - crypto: qat - change value of default idle filter
    - tcp: tcp_enter_quickack_mode() should be static
    - hwrng: nomadik - keep clock enabled while hwrng is registered
    - hwrng: pic32 - use devm_clk_get_enabled
    - regmap: maple: Use alloc_flags for memory allocations
    - regmap: rbtree: Use alloc_flags for memory allocations
    - wifi: mt76: mt7996: fix header translation logic
    - wifi: mt76: mt7915: fix background radar event being blocked
    - wifi: mt76: mt7915: rework tx packets counting when WED is active
    - wifi: mt76: mt7915: rework tx bytes counting when WED is active
    - wifi: mt76: mt7921: fix non-PSC channel scan fail
    - wifi: mt76: mt7996: fix bss wlan_idx when sending bss_info command
    - wifi: mt76: mt7996: use correct phy for background radar event
    - wifi: mt76: mt7996: fix WA event ring size
    - udp: re-score reuseport groups when connected sockets are present
    - bpf: reject unhashed sockets in bpf_sk_assign
    - wifi: mt76: mt7915: fix command timeout in AP stop period
    - wifi: mt76: mt7915: fix capabilities in non-AP mode
    - wifi: mt76: mt7915: remove VHT160 capability on MT7915
    - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
    - spi: tegra20-sflash: fix to check return value of platform_get_irq() in
      tegra_sflash_probe()
    - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
      in case of OOM
    - can: tcan4x5x: Remove reserved register 0x814 from writable table
    - wifi: mt76: mt7915: fix tlv length of mt7915_mcu_get_chan_mib_info
    - wifi: mt76: mt7915: fix power-limits while chan_switch
    - wifi: rtw89: Fix loading of compressed firmware
    - wifi: mwifiex: Fix OOB and integer underflow when rx packets
    - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
    - wifi: ath11k: fix band selection for ppdu received in channel 177 of 5 GHz
    - wifi: ath12k: fix memcpy array overflow in ath12k_peer_assoc_h_he()
    - selftests/bpf: fix static assert compilation issue for test_cls_*.c
    - power: supply: qcom_pmi8998_charger: fix uninitialized variable
    - spi: mpc5xxx-psc: Fix unsigned expression compared with zero
    - crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390
    - bpf: fix bpf_dynptr_slice() to stop return an ERR_PTR.
    - kbuild: rust_is_available: remove -v option
    - kbuild: rust_is_available: fix version check when CC has multiple arguments
    - kbuild: rust_is_available: add check for `bindgen` invocation
    - kbuild: rust_is_available: fix confusion when a version appears in the path
    - crypto: stm32 - Properly handle pm_runtime_get failing
    - crypto: api - Use work queue in crypto_destroy_instance
    - Bluetooth: ISO: Add support for connecting multiple BISes
    - Bluetooth: ISO: do not emit new LE Create CIS if previous is pending
    - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
    - Bluetooth: ISO: Fix not checking for valid CIG/CIS IDs
    - Bluetooth: hci_conn: Fix not allowing valid CIS ID
    - Bluetooth: hci_conn: Fix hci_le_set_cig_params
    - Bluetooth: Fix potential use-after-free when clear keys
    - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor
    - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
    - Bluetooth: hci_conn: Always allocate unique handles
    - Bluetooth: hci_event: drop only unbound CIS if Set CIG Parameters fails
    - net: tcp: fix unexcepted socket die when snd_wnd is 0
    - net: pcs: lynx: fix lynx_pcs_link_up_sgmii() not doing anything in fixed-
      link mode
    - libbpf: Set close-on-exec flag on gzopen
    - selftests/bpf: Fix repeat option when kfunc_call verification fails
    - selftests/bpf: Clean up fmod_ret in bench_rename test script
    - net: hns3: move dump regs function to a separate file
    - net: hns3: Support tlv in regs data for HNS3 PF driver
    - net: hns3: fix wrong rpu tln reg issue
    - net-memcg: Fix scope of sockmem pressure indicators
    - ice: ice_aq_check_events: fix off-by-one check when filling buffer
    - crypto: caam - fix unchecked return value error
    - hwrng: iproc-rng200 - Implement suspend and resume calls
    - lwt: Fix return values of BPF xmit ops
    - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
    - usb: typec: tcpm: set initial svdm version based on pd revision
    - usb: typec: bus: verify partner exists in typec_altmode_attention
    - USB: core: Unite old scheme and new scheme descriptor reads
    - USB: core: Change usb_get_device_descriptor() API
    - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
    - scripts/gdb: fix 'lx-lsmod' show the wrong size
    - nmi_backtrace: allow excluding an arbitrary CPU
    - watchdog/hardlockup: avoid large stack frames in watchdog_hardlockup_check()
    - fs: ocfs2: namei: check return value of ocfs2_add_entry()
    - net: lan966x: Fix return value check for vcap_get_rule()
    - net: annotate data-races around sk->sk_lingertime
    - hwmon: (asus-ec-sensosrs) fix mutex path for X670E Hero
    - wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
    - wifi: mwifiex: Fix missed return in oob checks failed path
    - wifi: rtw89: 8852b: rfk: fine tune IQK parameters to improve performance on
      2GHz band
    - selftests: memfd: error out test process when child test fails
    - samples/bpf: fix bio latency check with tracepoint
    - samples/bpf: fix broken map lookup probe
    - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
    - wifi: ath9k: protect WMI command response buffer replacement with a lock
    - bpf: Fix a bpf_kptr_xchg() issue with local kptr
    - wifi: mac80211: fix puncturing bitmap handling in CSA
    - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute
    - mac80211: make ieee80211_tx_info padding explicit
    - bpf: Fix check_func_arg_reg_off bug for graph root/node
    - wifi: mwifiex: avoid possible NULL skb pointer dereference
    - Bluetooth: hci_conn: Consolidate code for aborting connections
    - Bluetooth: ISO: Notify user space about failed bis connections
    - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
    - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync
    - Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
    - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
    - arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush()
    - net/mlx5: Dynamic cyclecounter shift calculation for PTP free running clock
    - wifi: ath9k: use IS_ERR() with debugfs_create_dir()
    - ice: avoid executing commands on other ports when driving sync
    - octeontx2-pf: fix page_pool creation fail for rings > 32k
    - net: arcnet: Do not call kfree_skb() under local_irq_disable()
    - kunit: Fix checksum tests on big endian CPUs
    - mlxsw: i2c: Fix chunk size setting in output mailbox buffer
    - mlxsw: i2c: Limit single transaction buffer size
    - mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter
    - crypto: qat - fix crypto capability detection for 4xxx
    - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
    - octeontx2-pf: Fix PFC TX scheduler free
    - octeontx2-af: CN10KB: fix PFC configuration
    - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work
      simultaneously
    - sfc: Check firmware supports Ethernet PTP filter
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
    - pds_core: protect devlink callbacks from fw_down state
    - pds_core: no health reporter in VF
    - pds_core: no reset command for VF
    - pds_core: check for work queue before use
    - pds_core: pass opcode to devcmd_wait
    - netrom: Deny concurrent connect().
    - drm/bridge: tc358764: Fix debug print parameter order
    - ASoC: soc-compress: Fix deadlock in soc_compr_open_fe
    - ASoC: cs43130: Fix numerator/denominator mixup
    - drm: bridge: dw-mipi-dsi: Fix enable/disable of DSI controller
    - quota: factor out dquot_write_dquot()
    - quota: rename dquot_active() to inode_quota_active()
    - quota: add new helper dquot_active()
    - quota: fix dqput() to follow the guarantees dquot_srcu should provide
    - drm/amd/display: Do not set drr on pipe commit
    - drm/hyperv: Fix a compilation issue because of not including screen_info.h
    - ASoC: stac9766: fix build errors with REGMAP_AC97
    - soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros
    - arm64: defconfig: enable Qualcomm MSM8996 Global Clock Controller as built-
      in
    - arm64: dts: qcom: sm8150: use proper DSI PHY compatible
    - arm64: dts: qcom: sm6350: Fix ZAP region
    - Revert "arm64: dts: qcom: msm8996: rename labels for HDMI nodes"
    - arm64: dts: qcom: sm8250: correct dynamic power coefficients
    - arm64: dts: qcom: sm8450: correct crypto unit address
    - arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply
    - arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM
    - arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs
    - arm64: dts: qcom: sm8250-edo: Rectify gpio-keys
    - arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO
    - arm64: dts: qcom: sc8280xp: Add missing SCM interconnect
    - arm64: dts: qcom: msm8939: Drop "qcom,idle-state-spc" compatible
    - arm64: dts: qcom: msm8939: Add missing 'cache-unified' to L2
    - arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller
    - arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path
    - arm64: dts: qcom: sm8350: Fix CPU idle state residency times
    - arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq
    - arm64: dts: qcom: sc8180x: Fix cluster PSCI suspend param
    - arm64: dts: qcom: sm8350: Use proper CPU compatibles
    - arm64: dts: qcom: pm8350: fix thermal zone name
    - arm64: dts: qcom: pm8350b: fix thermal zone name
    - arm64: dts: qcom: pmr735b: fix thermal zone name
    - arm64: dts: qcom: pmk8350: fix ADC-TM compatible string
    - arm64: dts: qcom: sm8450-hdk: remove pmr735b PMIC inclusion
    - arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent
    - arm64: dts: qcom: minor whitespace cleanup around '='
    - arm64: dts: qcom: sm8250: Mark SMMUs as DMA coherent
    - ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon
    - ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM
    - ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM
    - ARM: dts: stm32: Add missing detach mailbox for DHCOR SoM
    - firmware: ti_sci: Use system_state to determine polling
    - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
    - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
    - ARM: dts: BCM53573: Drop nonexistent #usb-cells
    - ARM: dts: BCM53573: Add cells sizes to PCIe node
    - ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
    - arm64: tegra: Add missing alias for NVIDIA IGX Orin
    - arm64: tegra: Fix HSUART for Jetson AGX Orin
    - arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again
    - arm64: dts: qcom: pm6150l: Add missing short interrupt
    - arm64: dts: qcom: pm660l: Add missing short interrupt
    - arm64: dts: qcom: pmi8950: Add missing OVP interrupt
    - arm64: dts: qcom: pmi8994: Add missing OVP interrupt
    - arm64: dts: qcom: sc8180x: Add missing 'cache-unified' to L3
    - arm64: tegra: Fix HSUART for Smaug
    - drm/etnaviv: fix dumping of active MMU context
    - block: cleanup queue_wc_store
    - block: don't allow enabling a cache on devices that don't support it
    - blk-flush: fix rq->flush.seq for post-flush requests
    - x86/mm: Fix PAT bit missing from page protection modify mask
    - drm/bridge: anx7625: Use common macros for DP power sequencing commands
    - drm/bridge: anx7625: Use common macros for HDCP capabilities
    - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
    - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
    - drm: adv7511: Fix low refresh rate register for ADV7533/5
    - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
    - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
    - arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
    - arm64: dts: qcom: sc8180x: Fix LLCC reg property
    - arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply
    - arm64: dts: qcom: sc8180x-pmics: add missing qcom,spmi-gpio fallbacks
    - arm64: dts: qcom: sc8180x-pmics: add missing gpio-ranges
    - arm64: dts: qcom: sc8180x-pmics: align SPMI PMIC Power-on node name with
      dtschema
    - arm64: dts: qcom: sc8180x-pmics: align LPG node name with dtschema
    - dt-bindings: arm: msm: kpss-acc: Make the optional reg truly optional
    - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
    - drm/amdgpu: Use seq_puts() instead of seq_printf()
    - arm64: dts: rockchip: Fix PCIe regulators on Radxa E25
    - arm64: dts: rockchip: Enable SATA on Radxa E25
    - ASoC: loongson: drop of_match_ptr for OF device id
    - ASoC: fsl: fsl_qmc_audio: Fix snd_pcm_format_t values handling
    - md: restore 'noio_flag' for the last mddev_resume()
    - md/raid10: factor out dereference_rdev_and_rrdev()
    - md/raid10: use dereference_rdev_and_rrdev() to get devices
    - md/md-bitmap: remove unnecessary local variable in backlog_store()
    - md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
    - drm/msm: Update dev core dump to not print backwards
    - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
    - of: unittest: fix null pointer dereferencing in
      of_unittest_find_node_by_name()
    - arm64: dts: qcom: sm8150: Fix the I2C7 interrupt
    - drm/ast: report connection status on Display Port.
    - ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port
    - drm/armada: Fix off-by-one error in armada_overlay_get_property()
    - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
    - drm/panel: simple: Add missing connector type and pixel format for AUO
      T215HVN01
    - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
    - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
    - drm/msm/dpu: increase memtype count to 16 for sm8550
    - drm/msm/dpu: inline DSC_BLK and DSC_BLK_1_2 macros
    - drm/msm/dpu: fix DSC 1.2 block lengths
    - drm/msm/dpu1: Rename sm8150_dspp_blk to sdm845_dspp_blk
    - drm/msm/dpu: Define names for unnamed sblks
    - drm/msm/dpu: fix DSC 1.2 enc subblock length
    - arm64: dts: qcom: sm8550-mtp: Add missing supply for L1B regulator
    - soc: qcom: smem: Fix incompatible types in comparison
    - drm/msm/mdp5: Don't leak some plane state
    - firmware: meson_sm: fix to avoid potential NULL pointer dereference
    - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done
    - arm64: dts: ti: k3-j784s4-evm: Correct Pin mux offset for ospi
    - arm64: dts: ti: k3-j721s2: correct pinmux offset for ospi
    - smackfs: Prevent underflow in smk_set_cipso()
    - drm/amdgpu: Sort the includes in amdgpu/amdgpu_drv.c
    - drm/amdgpu: Move vram, gtt & flash defines to amdgpu_ ttm & _psp.h
    - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
    - drm/msm/a2xx: Call adreno_gpu_init() earlier
    - drm/msm/a6xx: Fix GMU lockdep splat
    - ASoC: SOF: Intel: hda-mlink: fix off-by-one error
    - ASoC: SOF: Intel: fix u16/32 confusion in LSDIID
    - drm/mediatek: Fix uninitialized symbol
    - audit: fix possible soft lockup in __audit_inode_child()
    - block/mq-deadline: use correct way to throttling write requests
    - io_uring: fix drain stalls by invalid SQE
    - block: move the BIO_CLONED checks out of __bio_try_merge_page
    - block: move the bi_vcnt check out of __bio_try_merge_page
    - block: move the bi_size overflow check in __bio_try_merge_page
    - block: move the bi_size update out of __bio_try_merge_page
    - block: don't pass a bio to bio_try_merge_hw_seg
    - block: make bvec_try_merge_hw_page() non-static
    - bio-integrity: create multi-page bvecs in bio_integrity_add_page()
    - drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities
    - arm64: dts: ti: k3-j784s4-evm: Correct Pin mux offset for ADC
    - arm64: dts: ti: k3-j784s4: Fix interrupt ranges for wkup & main gpio
    - bus: ti-sysc: Fix build warning for 64-bit build
    - drm/mediatek: Remove freeing not dynamic allocated memory
    - drm/mediatek: Add cnt checking for coverity issue
    - arm64: dts: imx8mp-debix: remove unused fec pinctrl node
    - ARM: dts: qcom: ipq4019: correct SDHCI XO clock
    - arm64: dts: ti: k3-am62x-sk-common: Update main-i2c1 frequency
    - drm/mediatek: Fix potential memory leak if vmap() fail
    - drm/mediatek: Fix void-pointer-to-enum-cast warning
    - arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names
    - arm64: dts: qcom: apq8016-sbc: Rename ov5640 enable-gpios to powerdown-gpios
    - arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU
    - arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU
    - ARM: dts: qcom: sdx65-mtp: Update the pmic used in sdx65
    - arm64: dts: qcom: msm8996: Fix dsi1 interrupts
    - arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins
    - drm/msm/a690: Switch to a660_gmu.bin
    - bus: ti-sysc: Fix cast to enum warning
    - block: uapi: Fix compilation errors using ioprio.h with C++
    - md/raid5-cache: fix a deadlock in r5l_exit_log()
    - md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid()
    - firmware: cs_dsp: Fix new control name check
    - blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before
      init
    - md/raid0: Factor out helper for mapping and submitting a bio
    - md/raid0: Fix performance regression for large sequential writes
    - md: raid0: account for split bio in iostat accounting
    - ASoC: SOF: amd: clear dsp to host interrupt status
    - of: overlay: Call of_changeset_init() early
    - of: unittest: Fix overlay type in apply/revert check
    - ALSA: ac97: Fix possible error value of *rac97
    - ALSA: usb-audio: Attach legacy rawmidi after probing all UMP EPs
    - ALSA: ump: Fill group names for legacy rawmidi substreams
    - ALSA: ump: Don't create unused substreams for static blocks
    - ALSA: ump: Fix -Wformat-truncation warnings
    - ipmi:ssif: Add check for kstrdup
    - ipmi:ssif: Fix a memory leak when scanning for an adapter
    - clk: qcom: gpucc-sm6350: Introduce index-based clk lookup
    - clk: qcom: gpucc-sm6350: Fix clock source names
    - clk: qcom: gcc-sc8280xp: Add missing GDSC flags
    - dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs
    - clk: qcom: gcc-sc8280xp: Add missing GDSCs
    - clk: qcom: gcc-sm7150: Add CLK_OPS_PARENT_ENABLE to sdcc2 rcg
    - clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz
    - PCI: apple: Initialize pcie->nvecs before use
    - PCI: qcom-ep: Switch MHI bus master clock off during L1SS
    - clk: qcom: gcc-sc8280xp: fix runtime PM imbalance on probe errors
    - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
    - iommufd: Fix locking around hwpt allocation
    - PCI/DOE: Fix destroy_work_on_stack() race
    - clk: qcom: dispcc-sc8280xp: Use ret registers on GDSCs
    - clk: sunxi-ng: Modify mismatched function name
    - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
    - EDAC/igen6: Fix the issue of no error events
    - ext4: correct grp validation in ext4_mb_good_group
    - ext4: avoid potential data overflow in next_linear_group
    - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
    - clk: qcom: fix some Kconfig corner cases
    - kvm/vfio: Prepare for accepting vfio device fd
    - kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add()
    - clk: qcom: reset: Use the correct type of sleep/delay based on length
    - clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src
    - PCI: microchip: Correct the DED and SEC interrupt bit offsets
    - PCI: Mark NVIDIA T4 GPUs to avoid bus reset
    - pinctrl: mcp23s08: check return value of devm_kasprintf()
    - PCI: Add locking to RMW PCI Express Capability Register accessors
    - PCI: Make link retraining use RMW accessors for changing LNKCTL
    - PCI: pciehp: Use RMW accessors for changing LNKCTL
    - PCI/ASPM: Use RMW accessors for changing LNKCTL
    - clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs
    - clk: qcom: gcc-qdu1000: Fix gcc_pcie_0_pipe_clk_src clock handling
    - clk: qcom: gcc-qdu1000: Fix clkref clocks handling
    - clk: imx: pllv4: Fix SPLL2 MULT range
    - clk: imx: imx8ulp: update SPLL2 type
    - clk: imx8mp: fix sai4 clock
    - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
    - powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE
    - vfio/type1: fix cap_migration information leak
    - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu()
    - nvdimm: Fix dereference after free in register_nvdimm_pmu()
    - powerpc/fadump: reset dump area size if fadump memory reserve fails
    - powerpc/perf: Convert fsl_emb notifier to state machine callbacks
    - pinctrl: mediatek: fix pull_type data for MT7981
    - pinctrl: mediatek: assign functions to configure pin bias on MT7986
    - drm/amdgpu: Use RMW accessors for changing LNKCTL
    - drm/radeon: Use RMW accessors for changing LNKCTL
    - net/mlx5: Use RMW accessors for changing LNKCTL
    - wifi: ath11k: Use RMW accessors for changing LNKCTL
    - wifi: ath12k: Use RMW accessors for changing LNKCTL
    - wifi: ath10k: Use RMW accessors for changing LNKCTL
    - NFSv4.2: Fix READ_PLUS smatch warnings
    - NFSv4.2: Fix READ_PLUS size calculations
    - NFSv4.2: Rework scratch handling for READ_PLUS (again)
    - PCI: layerscape: Add workaround for lost link capabilities during reset
    - powerpc: Don't include lppaca.h in paca.h
    - powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
    - nfs/blocklayout: Use the passed in gfp flags
    - powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n
    - powerpc/mpc5xxx: Add missing fwnode_handle_put()
    - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
    - ext4: fix unttached inode after power cut with orphan file feature enabled
    - jfs: validate max amount of blocks before allocation.
    - SUNRPC: Fix the recent bv_offset fix
    - fs: lockd: avoid possible wrong NULL parameter
    - NFSD: da_addr_body field missing in some GETDEVICEINFO replies
    - clk: qcom: Fix SM_GPUCC_8450 dependencies
    - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
    - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
    - pNFS: Fix assignment of xprtdata.cred
    - cgroup/cpuset: Inherit parent's load balance state in v2
    - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah()
    - media: ov5640: fix low resolution image abnormal issue
    - media: i2c: imx290: drop format param from imx290_ctrl_update
    - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
    - media: i2c: tvp5150: check return value of devm_kasprintf()
    - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
    - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid
      unbind
    - iommu: rockchip: Fix directory table address encoding
    - drivers: usb: smsusb: fix error handling code in smsusb_init_device
    - media: dib7000p: Fix potential division by zero
    - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
    - media: cx24120: Add retval check for cx24120_message_send()
    - RDMA/siw: Fabricate a GID on tun and loopback devices
    - scsi: hisi_sas: Fix normally completed I/O analysed as failed
    - dt-bindings: extcon: maxim,max77843: restrict connector properties
    - media: amphion: reinit vpu if reqbufs output 0
    - media: amphion: add helper function to get id name
    - media: verisilicon: Fix TRY_FMT on encoder OUTPUT
    - media: mtk-jpeg: Fix use after free bug due to uncanceled work
    - media: amphion: decoder support display delay for all formats
    - media: rkvdec: increase max supported height for H.264
    - media: amphion: fix CHECKED_RETURN issues reported by coverity
    - media: amphion: fix REVERSE_INULL issues reported by coverity
    - media: amphion: fix UNINIT issues reported by coverity
    - media: amphion: fix UNUSED_VALUE issue reported by coverity
    - media: amphion: ensure the bitops don't cross boundaries
    - media: mediatek: vcodec: fix AV1 decode fail for 36bit iova
    - media: mediatek: vcodec: Return NULL if no vdec_fb is found
    - media: mediatek: vcodec: fix potential double free
    - media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()
    - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
    - scsi: RDMA/srp: Fix residual handling
    - scsi: ufs: Fix residual handling
    - scsi: iscsi: Add length check for nlattr payload
    - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
    - scsi: be2iscsi: Add length check when parsing nlattrs
    - scsi: qla4xxx: Add length check when parsing nlattrs
    - iio: accel: adxl313: Fix adxl313_i2c_id[] table
    - serial: sprd: Assign sprd_port after initialized to avoid wrong access
    - serial: sprd: Fix DMA buffer leak issue
    - x86/APM: drop the duplicate APM_MINOR_DEV macro
    - RDMA/rxe: Move work queue code to subroutines
    - RDMA/rxe: Fix unsafe drain work queue code
    - RDMA/rxe: Fix rxe_modify_srq
    - RDMA/rxe: Fix incomplete state save in rxe_requester
    - scsi: qedf: Do not touch __user pointer in
      qedf_dbg_stop_io_on_error_cmd_read() directly
    - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
      directly
    - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
      directly
    - RDMA/irdma: Replace one-element array with flexible-array member
    - coresight: tmc: Explicit type conversions to prevent integer overflow
    - interconnect: qcom: qcm2290: Enable sync state
    - dma-buf/sync_file: Fix docs syntax
    - driver core: test_async: fix an error code
    - driver core: Call dma_cleanup() on the test_remove path
    - kernfs: add stub helper for kernfs_generic_poll()
    - extcon: cht_wc: add POWER_SUPPLY dependency
    - iommu/mediatek: Fix two IOMMU share pagetable issue
    - iommu/sprd: Add missing force_aperture
    - iommu: Remove kernel-doc warnings
    - bnxt_en: Update HW interface headers
    - bnxt_en: Share the bar0 address with the RoCE driver
    - RDMA/bnxt_re: Initialize Doorbell pacing feature
    - RDMA/bnxt_re: Fix max_qp count for virtual functions
    - RDMA/bnxt_re: Remove a redundant flag
    - RDMA/hns: Fix port active speed
    - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
    - RDMA/hns: Fix inaccurate error label name in init instance
    - RDMA/hns: Fix CQ and QP cache affinity
    - IB/uverbs: Fix an potential error pointer dereference
    - fsi: aspeed: Reset master errors after CFAM reset
    - iommu/qcom: Disable and reset context bank before programming
    - tty: serial: qcom-geni-serial: Poll primary sequencer irq status after
      cancel_tx
    - iommu/vt-d: Fix to flush cache of PASID directory table
    - platform/x86: dell-sysman: Fix reference leak
    - media: cec: core: add adap_nb_transmit_canceled() callback
    - media: cec: core: add adap_unconfigured() callback
    - media: go7007: Remove redundant if statement
    - media: venus: hfi_venus: Only consider sys_idle_indicator on V1
    - arm64: defconfig: Drop CONFIG_VIDEO_IMX_MEDIA
    - media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings
    - media: ipu3-cio2: rename cio2 bridge to ipu bridge and move out of ipu3
    - media: ipu-bridge: Do not use on stack memory for software_node.name field
    - docs: ABI: fix spelling/grammar in SBEFIFO timeout interface
    - USB: gadget: core: Add missing kerneldoc for vbus_work
    - USB: gadget: f_mass_storage: Fix unused variable warning
    - drivers: base: Free devm resources when unregistering a device
    - HID: input: Support devices sending Eraser without Invert
    - HID: nvidia-shield: Remove led_classdev_unregister in thunderstrike_create
    - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
    - media: ov5640: Fix initial RESETB state and annotate timings
    - media: Documentation: Fix [GS]_ROUTING documentation
    - media: ov2680: Remove auto-gain and auto-exposure controls
    - media: ov2680: Fix ov2680_bayer_order()
    - media: ov2680: Fix vflip / hflip set functions
    - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s
    - media: ov2680: Don't take the lock for try_fmt calls
    - media: ov2680: Add ov2680_fill_format() helper function
    - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not
      working
    - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
    - media: i2c: rdacm21: Fix uninitialized value
    - f2fs: fix spelling in ABI documentation
    - f2fs: fix to avoid mmap vs set_compress_option case
    - f2fs: don't reopen the main block device in f2fs_scan_devices
    - f2fs: check zone type before sending async reset zone command
    - f2fs: Only lfs mode is allowed with zoned block device feature
    - Revert "f2fs: fix to do sanity check on extent cache correctly"
    - f2fs: fix to account gc stats correctly
    - f2fs: fix to account cp stats correctly
    - cgroup:namespace: Remove unused cgroup_namespaces_init()
    - coresight: trbe: Allocate platform data per device
    - coresight: platform: acpi: Ignore the absence of graph
    - coresight: Fix memory leak in acpi_buffer->pointer
    - coresight: trbe: Fix TRBE potential sleep in atomic context
    - Revert "f2fs: do not issue small discard commands during checkpoint"
    - RDMA/irdma: Prevent zero-length STAG registration
    - scsi: core: Use 32-bit hostnum in scsi_host_lookup()
    - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
    - interconnect: qcom: sm8450: Enable sync_state
    - interconnect: qcom: bcm-voter: Improve enable_mask handling
    - interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting
    - dt-bindings: usb: samsung,exynos-dwc3: fix order of clocks on Exynos5433
    - dt-bindings: usb: samsung,exynos-dwc3: Fix Exynos5433 compatible
    - serial: tegra: handle clk prepare error in tegra_uart_hw_init()
    - Documentation: devices.txt: Remove ttyIOC*
    - Documentation: devices.txt: Remove ttySIOC*
    - Documentation: devices.txt: Fix minors for ttyCPM*
    - amba: bus: fix refcount leak
    - Revert "IB/isert: Fix incorrect release of isert connection"
    - RDMA/siw: Balance the reference of cep->kref in the error path
    - RDMA/siw: Correct wrong debug message
    - RDMA/efa: Fix wrong resources deallocation order
    - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
    - nvmem: core: Return NULL when no nvmem layout is found
    - riscv: Require FRAME_POINTER for some configurations
    - f2fs: compress: fix to assign compress_level for lz4 correctly
    - HID: uclogic: Correct devm device reference for hidinput input_dev name
    - HID: multitouch: Correct devm device reference for hidinput input_dev name
    - HID: nvidia-shield: Reference hid_device devm allocation of input_dev name
    - platform/x86/amd/pmf: Fix a missing cleanup path
    - workqueue: fix data race with the pwq->stats[] increment
    - tick/rcu: Fix false positive "softirq work is pending" messages
    - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
    - tracing: Remove extra space at the end of hwlat_detector/mode
    - tracing: Fix race issue between cpu buffer write and swap
    - mm/pagewalk: fix bootstopping regression from extra pte_unmap()
    - mtd: rawnand: brcmnand: Fix mtd oobsize
    - dmaengine: idxd: Modify the dependence of attribute pasid_enabled
    - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
    - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
    - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
    - rpmsg: glink: Add check for kstrdup
    - leds: aw200xx: Fix error code in probe()
    - leds: simatic-ipc-leds-gpio: Restore LEDS_CLASS dependency
    - leds: pwm: Fix error code in led_pwm_create_fwnode()
    - thermal/drivers/mediatek/lvts_thermal: Handle IRQ on all controllers
    - thermal/drivers/mediatek/lvts_thermal: Honor sensors in immediate mode
    - thermal/drivers/mediatek/lvts_thermal: Use offset threshold for IRQ
    - thermal/drivers/mediatek/lvts_thermal: Disable undesired interrupts
    - thermal/drivers/mediatek/lvts_thermal: Don't leave threshold zeroed
    - thermal/drivers/mediatek/lvts_thermal: Manage threshold between sensors
    - thermal/drivers/imx8mm: Suppress log message on probe deferral
    - leds: multicolor: Use rounded division when calculating color components
    - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false
    - leds: trigger: tty: Do not use LED_ON/OFF constants, use
      led_blink_set_oneshot instead
    - mtd: spi-nor: Check bus width while setting QE bit
    - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
    - mfd: rk808: Make MFD_RK8XX tristate
    - mfd: rz-mtu3: Link time dependencies
    - um: Fix hostaudio build errors
    - dmaengine: ste_dma40: Add missing IRQ check in d40_probe
    - dmaengine: idxd: Simplify WQ attribute visibility checks
    - dmaengine: idxd: Expose ATS disable knob only when WQ ATS is supported
    - dmaengine: idxd: Allow ATS disable update only for configurable devices
    - dmaengine: idxd: Fix issues with PRS disable sysfs knob
    - remoteproc: stm32: fix incorrect optional pointers
    - Drivers: hv: vmbus: Don't dereference ACPI root object handle
    - um: virt-pci: fix missing declaration warning
    - cpufreq: Fix the race condition while updating the transition_task of policy
    - virtio_vdpa: build affinity masks conditionally
    - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
    - net: deal with integer overflows in kmalloc_reserve()
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c
    - netfilter: nft_exthdr: Fix non-linear header modification
    - netfilter: xt_u32: validate user space input
    - netfilter: xt_sctp: validate the flag_info count
    - skbuff: skb_segment, Call zero copy functions before using skbuff frags
    - drbd: swap bvec_set_page len and offset
    - gpio: zynq: restore zynq_gpio_irq_reqres/zynq_gpio_irq_relres callbacks
    - igb: set max size RX buffer when store bad packet is enabled
    - parisc: ccio-dma: Create private runway procfs root entry
    - PM / devfreq: Fix leak in devfreq_dev_release()
    - Multi-gen LRU: fix per-zone reclaim
    - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
    - virtio_pmem: add the missing REQ_OP_WRITE for flush bio
    - rcu: dump vmalloc memory info safely
    - printk: ringbuffer: Fix truncating buffer size min_t cast
    - scsi: core: Fix the scsi_set_resid() documentation
    - mm/vmalloc: add a safer version of find_vm_area() for debug
    - cpu/hotplug: Prevent self deadlock on CPU hot-unplug
    - media: i2c: ccs: Check rules is non-NULL
    - media: i2c: Add a camera sensor top level menu
    - PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address
    - ipmi_si: fix a memleak in try_smi_init()
    - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
    - riscv: Move create_tmp_mapping() to init sections
    - riscv: Mark KASAN tmp* page tables variables as static
    - XArray: Do not return sibling entries from xa_load()
    - io_uring: fix false positive KASAN warnings
    - io_uring: break iopolling on signal
    - io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
    - io_uring/net: don't overflow multishot recv
    - io_uring/net: don't overflow multishot accept
    - io_uring: break out of iowq iopoll on teardown
    - backlight/gpio_backlight: Compare against struct fb_info.device
    - backlight/bd6107: Compare against struct fb_info.device
    - backlight/lv5207lp: Compare against struct fb_info.device
    - drm/amd/display: register edp_backlight_control() for DCN301
    - xtensa: PMU: fix base address for the newer hardware
    - LoongArch: mm: Add p?d_leaf() definitions
    - powercap: intel_rapl: Fix invalid setting of Power Limit 4
    - powerpc/ftrace: Fix dropping weak symbols with older toolchains
    - i3c: master: svc: fix probe failure when no i3c device exist
    - io_uring: Don't set affinity on a dying sqpoll thread
    - arm64: csum: Fix OoB access in IP checksum code for negative lengths
    - ALSA: usb-audio: Fix potential memory leaks at error path for UMP open
    - ALSA: seq: Fix snd_seq_expand_var_event() call to user-space
    - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs.
    - selftests/landlock: Fix a resource leak
    - media: dvb: symbol fixup for dvb_attach()
    - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts
    - media: nxp: Fix wrong return pointer check in mxc_isi_crossbar_init()
    - Revert "scsi: qla2xxx: Fix buffer overrun"
    - scsi: mpt3sas: Perform additional retries if doorbell read returns 0
    - PCI: Free released resource after coalescing
    - PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation
    - PCI/PM: Only read PCI_PM_CTRL register when available
    - dt-bindings: PCI: qcom: Fix SDX65 compatible
    - ntb: Drop packets when qp link is down
    - ntb: Clean up tx tail index on link down
    - ntb: Fix calculation ntb_transport_tx_free_entry()
    - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
    - block: fix pin count management when merging same-page segments
    - block: don't add or resize partition on the disk with GENHD_FL_NO_PART
    - procfs: block chmod on /proc/thread-self/comm
    - parisc: Fix /proc/cpuinfo output for lscpu
    - misc: fastrpc: Pass proper scm arguments for static process init
    - drm/amd/display: Add smu write msg id fail retry process
    - bpf: Fix issue in verifying allow_ptr_leaks
    - dlm: fix plock lookup when using multiple lockspaces
    - dccp: Fix out of bounds access in DCCP error handler
    - x86/sev: Make enc_dec_hypercall() accept a size instead of npages
    - r8169: fix ASPM-related issues on a number of systems with NIC version from
      RTL8168h
    - X.509: if signature is unsupported skip validation
    - net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
    - fsverity: skip PKCS#7 parser when keyring is empty
    - x86/MCE: Always save CS register on AMD Zen IF Poison errors
    - crypto: af_alg - Decrement struct key.usage in alg_set_by_key_serial()
    - platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER
    - mmc: renesas_sdhi: register irqs before registering controller
    - pstore/ram: Check start of empty przs during init
    - arm64: sdei: abort running SDEI handlers during crash
    - regulator: dt-bindings: qcom,rpm: fix pattern for children
    - iov_iter: Fix iov_iter_extract_pages() with zero-sized entries
    - RISC-V: Add ptrace support for vectors
    - s390/dcssblk: fix kernel crash with list_add corruption
    - s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
    - s390/dasd: fix string length handling
    - HID: logitech-hidpp: rework one more time the retries attempts
    - crypto: stm32 - fix loop iterating through scatterlist for DMA
    - crypto: stm32 - fix MDMAT condition
    - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
    - of: property: fw_devlink: Add a devlink for panel followers
    - USB: core: Fix oversight in SuperSpeed initialization
    - x86/smp: Don't send INIT to non-present and non-booted CPUs
    - x86/sgx: Break up long non-preemptible delays in sgx_vepc_release()
    - x86/build: Fix linker fill bytes quirk/incompatibility for ld.lld
    - perf/x86/uncore: Correct the number of CHAs on EMR
    - media: ipu3-cio2: allow ipu_bridge to be a module again
    - Bluetooth: msft: Extended monitor tracking by address filter
    - Bluetooth: HCI: Introduce HCI_QUIRK_BROKEN_LE_CODED
    - serial: sc16is7xx: remove obsolete out_thread label
    - serial: sc16is7xx: fix regression with GPIO configuration
    - mm/memfd: sysctl: fix MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED
    - selftests/memfd: sysctl: fix MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED
    - memfd: do not -EACCES old memfd_create() users with vm.memfd_noexec=2
    - memfd: replace ratcheting feature from vm.memfd_noexec with hierarchy
    - memfd: improve userspace warnings for missing exec-related flags
    - revert "memfd: improve userspace warnings for missing exec-related flags".
    - drm/amd/display: Block optimize on consecutive FAMS enables
    - Linux 6.5.3

  * Mantic update: v6.5.2 upstream stable release (LP: #2035583)
    - drm/amdgpu: correct vmhub index in GMC v10/11
    - erofs: ensure that the post-EOF tails are all zeroed
    - ksmbd: fix wrong DataOffset validation of create context
    - ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
    - ksmbd: replace one-element array with flex-array member in struct
      smb2_ea_info
    - ksmbd: reduce descriptor size if remaining bytes is less than request size
    - ARM: pxa: remove use of symbol_get()
    - mmc: au1xmmc: force non-modular build and remove symbol_get usage
    - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
    - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
    - USB: serial: option: add Quectel EM05G variant (0x030e)
    - USB: serial: option: add FOXCONN T99W368/T99W373 product
    - ALSA: usb-audio: Fix init call orders for UAC1
    - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
    - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
    - HID: wacom: remove the battery when the EKR is off
    - staging: rtl8712: fix race condition
    - wifi: mt76: mt7921: do not support one stream on secondary antenna only
    - wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
    - wifi: rtw88: usb: kill and free rx urbs on probe failure
    - wifi: ath11k: Don't drop tx_status when peer cannot be found
    - wifi: ath11k: Cleanup mac80211 references on failure during tx_complete
    - serial: qcom-geni: fix opp vote on shutdown
    - serial: sc16is7xx: fix broken port 0 uart init
    - serial: sc16is7xx: fix bug when first setting GPIO direction
    - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
    - fsi: master-ast-cf: Add MODULE_FIRMWARE macro
    - tcpm: Avoid soft reset when partner does not support get_status
    - dt-bindings: sc16is7xx: Add property to change GPIO function
    - tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
    - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
    - usb: typec: tcpci: clear the fault status bit
    - pinctrl: amd: Don't show `Invalid config param` errors
    - Linux 6.5.2

  * Mantic update: v6.5.1 upstream stable release (LP: #2035581)
    - ACPI: thermal: Drop nocrt parameter
    - module: Expose module_init_layout_section()
    - arm64: module: Use module_init_layout_section() to spot init sections
    - ARM: module: Use module_init_layout_section() to spot init sections
    - ipv6: remove hard coded limitation on ipv6_pinfo
    - lockdep: fix static memory detection even more
    - kallsyms: Fix kallsyms_selftest failure
    - Linux 6.5.1

  * [23.10 FEAT] [SEC2352] pkey: support EP11 API ordinal 6 for secure guests
    (LP: #2029390)
    - s390/zcrypt_ep11misc: support API ordinal 6 with empty pin-blob

  * [23.10 FEAT] [SEC2341] pkey: support generation of keys of type
    PKEY_TYPE_EP11_AES (LP: #2028937)
    - s390/pkey: fix/harmonize internal keyblob headers
    - s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL
    - s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL
    - s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_KBLOB2PROTK[23]
    - s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_VERIFYKEY2 IOCTL
    - s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes
    - s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs

  * [23.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - kernel part
    (LP: #2003674)
    - KVM: s390: interrupt: Fix single-stepping into interrupt handlers
    - KVM: s390: interrupt: Fix single-stepping into program interrupt handlers
    - KVM: s390: interrupt: Fix single-stepping kernel-emulated instructions
    - KVM: s390: interrupt: Fix single-stepping userspace-emulated instructions
    - KVM: s390: interrupt: Fix single-stepping keyless mode exits
    - KVM: s390: selftests: Add selftest for single-stepping
    - s390/vfio-ap: no need to check the 'E' and 'I' bits in APQSW after TAPQ
    - s390/vfio-ap: clean up irq resources if possible
    - s390/vfio-ap: wait for response code 05 to clear on queue reset
    - s390/vfio-ap: allow deconfigured queue to be passed through to a guest
    - s390/vfio-ap: remove upper limit on wait for queue reset to complete
    - s390/vfio-ap: store entire AP queue status word with the queue object
    - s390/vfio-ap: use work struct to verify queue reset
    - s390/vfio-ap: handle queue state change in progress on reset
    - s390/vfio-ap: check for TAPQ response codes 0x35 and 0x36
    - s390/uv: export uv_pin_shared for direct usage
    - KVM: s390: export kvm_s390_pv*_is_protected functions
    - s390/vfio-ap: make sure nib is shared
    - KVM: s390: pv: relax WARN_ONCE condition for destroy fast
    - s390/uv: UV feature check utility
    - KVM: s390: Add UV feature negotiation
    - KVM: s390: pv: Allow AP-instructions for pv-guests

  * Make backlight module auto detect dell_uart_backlight (LP: #2008882)
    - SAUCE: ACPI: video: Dell AIO UART backlight detection

  * Avoid address overwrite in kernel_connect (LP: #2035163)
    - net: annotate data-races around sock->ops
    - net: Avoid address overwrite in kernel_connect

  * Include QCA WWAN 5G Qualcomm SDX62/DW5932e support (LP: #2035306)
    - bus: mhi: host: pci_generic: Add support for Dell DW5932e

  * NULL pointer dereference on CS35L41 HDA AMP (LP: #2029199)
    - ALSA: cs35l41: Use mbox command to enable speaker output for external boost
    - ALSA: cs35l41: Poll for Power Up/Down rather than waiting a fixed delay
    - ALSA: hda: cs35l41: Check mailbox status of pause command after firmware
      load
    - ALSA: hda: cs35l41: Ensure we correctly re-sync regmap before system
      suspending.
    - ALSA: hda: cs35l41: Ensure we pass up any errors during system suspend.
    - ALSA: hda: cs35l41: Move Play and Pause into separate functions
    - ALSA: hda: hda_component: Add pre and post playback hooks to hda_component
    - ALSA: hda: cs35l41: Use pre and post playback hooks
    - ALSA: hda: cs35l41: Rework System Suspend to ensure correct call separation
    - ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda
    - ALSA: hda: cs35l41: Ensure amp is only unmuted during playback

  * Enable ASPM for NVMe behind VMD (LP: #2034504)
    - Revert "UBUNTU: SAUCE: vmd: fixup bridge ASPM by driver name instead"
    - Revert "UBUNTU: SAUCE: PCI/ASPM: Enable LTR for endpoints behind VMD"
    - Revert "UBUNTU: SAUCE: PCI/ASPM: Enable ASPM for links under VMD domain"
    - SAUCE: PCI/ASPM: Allow ASPM override over FADT default
    - SAUCE: PCI: vmd: Mark ASPM override for device behind VMD bridge

  * Linux 6.2 fails to reboot with current u-boot-nezha (LP: #2021364)
    - [Config] Default to performance CPUFreq governor on riscv64

  * Enable Nezha board (LP: #1975592)
    - [Config] Enable CONFIG_REGULATOR_FIXED_VOLTAGE on riscv64
    - [Config] Build in D1 clock drivers on riscv64
    - [Config] Enable CONFIG_SUN6I_RTC_CCU on riscv64
    - [Config] Enable CONFIG_SUNXI_WATCHDOG on riscv64
    - [Config] Disable SUN50I_DE2_BUS on riscv64
    - [Config] Disable unneeded sunxi pinctrl drivers on riscv64

  * Enable Nezha board (LP: #1975592) // Enable StarFive VisionFive 2 board
    (LP: #2013232)
    - [Config] Enable CONFIG_SERIAL_8250_DW on riscv64

  * Enable StarFive VisionFive 2 board (LP: #2013232)
    - [Config] Enable CONFIG_PINCTRL_STARFIVE_JH7110_SYS on riscv64
    - [Config] Enable CONFIG_STARFIVE_WATCHDOG on riscv64

  * rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
    - [Config] Enable virtually mapped stacks on riscv64

  * RISC-V kernel config is out of sync with other archs (LP: #1981437)
    - [Config] Sync riscv64 config with other architectures

  * Support for Intel Discrete Gale Peak2/BE200 (LP: #2028065)
    - Bluetooth: btintel: Add support for Gale Peak
    - Bluetooth: Add support for Gale Peak (8087:0036)

  * Missing BT IDs for support for Intel Discrete Misty Peak2/BE202
    (LP: #2033455)
    - SAUCE: Bluetooth: btusb: Add support for Intel Misty Peak - 8087:0038

  * Audio device fails to function randomly on Intel MTL platform: No CPC match
    in the firmware file's manifest (LP: #2034506)
    - ASoC: SOF: ipc4-topology: Add module parameter to ignore the CPC value

  * Check for changes relevant for security certifications (LP: #1945989)
    - [Packaging] Add a new fips-checks script

  * Installation support for SMARC RZ/G2L platform (LP: #2030525)
    - [Config] build Renesas RZ/G2L USBPHY control driver statically

  * Add support for kernels compiled with CONFIG_EFI_ZBOOT (LP: #2002226)
    - [Config]: Turn on CONFIG_EFI_ZBOOT on ARM64

  * Default module signing algo should be accelerated (LP: #2034061)
    - [Config] Default module signing algo should be accelerated

  * NEW SRU rustc linux kernel requirements (LP: #1993183)
    - [Packaging] re-enable Rust support

  * FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)
    (LP: #2017980)
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS

  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/76]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [02/76]: rename SK_CTX() to aa_sock and make it an
      inline fn
    - SAUCE: apparmor4.0.0 [03/76]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [04/76]: add user namespace creation mediation
    - SAUCE: apparmor4.0.0 [05/76]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [06/76]: af_unix mediation
    - SAUCE: apparmor4.0.0 [07/76]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [08/76]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor4.0.0 [09/76]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor4.0.0 [10/76]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor4.0.0 [11/76]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor4.0.0 [12/76]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor4.0.0 [13/76]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [14/76]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor4.0.0 [15/76]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [16/76]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor4.0.0 [17/76]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor4.0.0 [18/76]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [19/76]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor4.0.0 [20/76]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor4.0.0 [21/76]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [22/76]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [23/76]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [24/70]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [25/76]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor4.0.0 [26/76]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor4.0.0 [28/76]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [29/76]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [30/76]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [31/76]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [32/76]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor4.0.0 [33/76]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor4.0.0 [34/76]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor4.0.0 [35/76]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor4.0.0 [36/76]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor4.0.0 [37/76]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [38/76]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor4.0.0 [39/76]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor4.0.0 [40/76]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor4.0.0 [41/76]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [42/76]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor4.0.0 [43/76]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor4.0.0 [44/76]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor4.0.0 [45/76]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor4.0.0 [46/76]: combine common_audit_data and
      apparmor_audit_data
    - SAUCE: apparmor4.0.0 [47/76]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [48/76]: rename audit_data->label to
      audit_data->subj_label
    - SAUCE: apparmor4.0.0 [49/76]: pass cred through to audit info.
    - SAUCE: apparmor4.0.0 [50/76]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/76]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/76]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/76]: cache buffers on percpu list if there is lock
      contention
    - SAUCE: apparmor4.0.0 [54/76]: advertise availability of exended perms
    - SAUCE: apparmor4.0.0 [56/76]: cleanup: provide separate audit messages for
      file and policy checks
    - SAUCE: apparmor4.0.0 [57/76]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [58/76]: prompt - ref count pdb
    - SAUCE: apparmor4.0.0 [59/76]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [60/76]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [61/76]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [62/76]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [63/76]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [64/76]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [65/76]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [66/76]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [67/76]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [68/76]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [69/76]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [74/76]: advertise disconnected.path is available
    - SAUCE: apparmor4.0.0 [75/76]: fix invalid reference on profile->disconnected
    - SAUCE: apparmor4.0.0 [76/76]: add io_uring mediation
    - SAUCE: apparmor4.0.0: apparmor: Fix regression in mount mediation

  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [70/76]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [71/76]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [72/76]: userns - make it so special unconfined
      profiles can mediate user namespaces
    - SAUCE: apparmor4.0.0 [73/76]: userns - allow restricting unprivileged
      change_profile

  * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update
    apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [55/76]: fix profile verification and enable it

  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor4.0.0 [27/76]: Stacking v38: Fix prctl() syscall with
      apparmor=0

  * Miscellaneous Ubuntu changes
    - SAUCE: fan: relax strict length validation in vxlan policy
    - [Config] update gcc version in annotations
    - [Config] update annotations after apply 6.5 stable updates

  * Miscellaneous upstream changes
    - fs/address_space: add alignment padding for i_map and i_mmap_rwsem to
      mitigate a false sharing.
    - mm/mmap: move vma operations to mm_struct out of the critical section of
      file mapping lock

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 14 Sep 2023 15:14:55 +0200

linux (6.5.0-5.5) mantic; urgency=medium

  * mantic/linux: 6.5.0-5.5 -proposed tracker (LP: #2034546)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/d2023.08.23)

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 06 Sep 2023 15:51:04 +0200

linux (6.5.0-4.4) mantic; urgency=medium

  * mantic/linux: 6.5.0-4.4 -proposed tracker (LP: #2034042)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/d2023.08.23)

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 04 Sep 2023 16:55:44 +0200

linux (6.5.0-3.3) mantic; urgency=medium

  * mantic/linux: 6.5.0-3.3 -proposed tracker (LP: #2033904)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/d2023.08.23)

  * [23.10] Please test secure-boot and lockdown on the early 6.5 kernel (s390x)
    (LP: #2026833)
    - [Packaging] re-enable signing for s390x

  * Miscellaneous upstream changes
    - module/decompress: use vmalloc() for zstd decompression workspace

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 01 Sep 2023 16:15:33 +0200

linux (6.5.0-2.2) mantic; urgency=medium

  * mantic/linux: 6.5.0-2.2 -proposed tracker (LP: #2033240)

  * Soundwire support for Dell SKU0C87 devices (LP: #2029281)
    - SAUCE: ASoC: Intel: soc-acpi: add support for Dell SKU0C87 devices

  * Fix numerous AER related issues (LP: #2033025)
    - SAUCE: PCI/AER: Disable AER service during suspend, again
    - SAUCE: PCI/DPC: Disable DPC service during suspend, again

  * Support Realtek RTL8852CE WiFi 6E/BT Combo (LP: #2025672)
    - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set()
    - Bluetooth: btrtl: Load FW v2 otherwise FW v1 for RTL8852C

  [ Upstream Kernel Changes ]

  * Rebase to v6.5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 28 Aug 2023 08:53:19 +0200

linux (6.5.0-1.1) mantic; urgency=medium

  * mantic/linux: 6.5.0-1.1 -proposed tracker (LP: #2032750)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/d2023.07.26)

  * ceph: support idmapped mounts (LP: #2032959)
    - SAUCE: libceph: add spinlock around osd->o_requests
    - SAUCE: libceph: define struct ceph_sparse_extent and add some helpers
    - SAUCE: libceph: new sparse_read op, support sparse reads on msgr2 crc
      codepath
    - SAUCE: libceph: support sparse reads on msgr2 secure codepath
    - SAUCE: libceph: add sparse read support to msgr1
    - SAUCE: libceph: add sparse read support to OSD client
    - SAUCE: ceph: add new mount option to enable sparse reads
    - SAUCE: ceph: preallocate inode for ops that may create one
    - SAUCE: ceph: make ceph_msdc_build_path use ref-walk
    - SAUCE: libceph: add new iov_iter-based ceph_msg_data_type and
      ceph_osd_data_type
    - SAUCE: ceph: use osd_req_op_extent_osd_iter for netfs reads
    - SAUCE: ceph: fscrypt_auth handling for ceph
    - SAUCE: ceph: implement -o test_dummy_encryption mount option
    - SAUCE: ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr
    - SAUCE: ceph: make ioctl cmds more readable in debug log
    - SAUCE: ceph: add base64 endcoding routines for encrypted names
    - SAUCE: ceph: encode encrypted name in ceph_mdsc_build_path and dentry
      release
    - SAUCE: ceph: send alternate_name in MClientRequest
    - SAUCE: ceph: decode alternate_name in lease info
    - SAUCE: ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open()
    - SAUCE: ceph: make d_revalidate call fscrypt revalidator for encrypted
      dentries
    - SAUCE: ceph: add helpers for converting names for userland presentation
    - SAUCE: ceph: make ceph_fill_trace and ceph_get_name decrypt names
    - SAUCE: ceph: pass the request to parse_reply_info_readdir()
    - SAUCE: ceph: add support to readdir for encrypted names
    - SAUCE: ceph: create symlinks with encrypted and base64-encoded targets
    - SAUCE: ceph: add some fscrypt guardrails
    - SAUCE: ceph: allow encrypting a directory while not having Ax caps
    - SAUCE: ceph: mark directory as non-complete after loading key
    - SAUCE: ceph: size handling in MClientRequest, cap updates and inode traces
    - SAUCE: ceph: handle fscrypt fields in cap messages from MDS
    - SAUCE: ceph: add infrastructure for file encryption and decryption
    - SAUCE: libceph: add CEPH_OSD_OP_ASSERT_VER support
    - SAUCE: libceph: allow ceph_osdc_new_request to accept a multi-op read
    - SAUCE: ceph: add object version support for sync read
    - SAUCE: ceph: add truncate size handling support for fscrypt
    - SAUCE: ceph: don't use special DIO path for encrypted inodes
    - SAUCE: ceph: align data in pages in ceph_sync_write
    - SAUCE: ceph: add read/modify/write to ceph_sync_write
    - SAUCE: ceph: add encryption support to writepage and writepages
    - SAUCE: ceph: plumb in decryption during reads
    - SAUCE: ceph: invalidate pages when doing direct/sync writes
    - SAUCE: ceph: add support for encrypted snapshot names
    - SAUCE: ceph: prevent snapshot creation in encrypted locked directories
    - SAUCE: ceph: update documentation regarding snapshot naming limitations
    - SAUCE: ceph: drop messages from MDS when unmounting
    - SAUCE: ceph: wait for OSD requests' callbacks to finish when unmounting
    - SAUCE: ceph: fix updating i_truncate_pagecache_size for fscrypt
    - SAUCE: ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper
    - SAUCE: libceph: do not include crypto/algapi.h
    - SAUCE: rbd: bump RBD_MAX_PARENT_CHAIN_LEN to 128
    - SAUCE: ceph: dump info about cap flushes when we're waiting too long for
      them
    - SAUCE: mm: BUG if filemap_alloc_folio gives us a folio with a non-NULL
      ->private
    - SAUCE: ceph: make sure all the files successfully put before unmounting
    - SAUCE: ceph: BUG if MDS changed truncate_seq with client caps still
      outstanding
    - SAUCE: ceph: add the *_client debug macros support
    - SAUCE: ceph: pass the mdsc to several helpers
    - SAUCE: ceph: rename _to_client() to _to_fs_client()
    - SAUCE: ceph: move mdsmap.h to fs/ceph/
    - SAUCE: ceph: add ceph_inode_to_client() helper support
    - SAUCE: ceph: print the client global_id in all the debug logs
    - SAUCE: ceph: make the members in struct ceph_mds_request_args_ext an union
    - SAUCE: ceph: make num_fwd and num_retry to __u32
    - SAUCE: fs: export mnt_idmap_get/mnt_idmap_put
    - SAUCE: ceph: stash idmapping in mdsc request
    - SAUCE: ceph: handle idmapped mounts in create_request_message()
    - SAUCE: ceph: add enable_unsafe_idmap module parameter
    - SAUCE: ceph: pass an idmapping to mknod/symlink/mkdir
    - SAUCE: ceph: allow idmapped getattr inode op
    - SAUCE: ceph: allow idmapped permission inode op
    - SAUCE: ceph: pass idmap to __ceph_setattr
    - SAUCE: ceph: allow idmapped setattr inode op
    - SAUCE: ceph/acl: allow idmapped set_acl inode op
    - SAUCE: ceph/file: allow idmapped atomic_open inode op
    - SAUCE: ceph: allow idmapped mounts

  * Got soft lockup CPU if dell_uart_backlight is probed (LP: #2032174)
    - SAUCE: platform/x86: dell-uart-backlight: replace chars_in_buffer() with
      flush_chars()

  * Fix ACPI TAD  on some Intel based systems (LP: #2032767)
    - ACPI: TAD: Install SystemCMOS address space handler for ACPI000E

  * Fix unreliable ethernet cable detection on I219 NIC (LP: #2028122)
    - e1000e: Use PME poll to circumvent unreliable ACPI wake

  * Fix panel brightness issues on HP laptops (LP: #2032704)
    - ACPI: video: Put ACPI video and its child devices into D0 on boot

  * FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)
    (LP: #2017980)
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS

  * Support initrdless boot on default qemu virt models and openstack
    (LP: #2030745)
    - [Config] set VIRTIO_BLK=y for default qemu/openstack boot

  * Miscellaneous Ubuntu changes
    - [Packaging] rust: use Rust 1.68.2
    - [Packaging] depend on clang/libclang-15 for Rust
    - [Config] update toolchain versions in annotations
    - [Config] update annotations after rebase to v6.5-rc6
    - [Config] update toolchain version in annotations
    - [Packaging] temporarily disable Rust support
    - [Packaging] temporarily disable signing for ppc64el
    - [Packaging] temporarily disable signing for s390x

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 24 Aug 2023 17:47:10 +0200

linux (6.5.0-0.0) mantic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 23 Aug 2023 08:14:48 +0200

linux-unstable (6.5.0-4.4) mantic; urgency=medium

  * mantic/linux-unstable: 6.5.0-4.4 -proposed tracker (LP: #2029086)

  * Miscellaneous Ubuntu changes
    - [Packaging] Add .NOTPARALLEL
    - [Packaging] Remove meaningless $(header_arch)
    - [Packaging] Fix File exists error in install-arch-headers
    - [Packaging] clean debian/linux-* directories
    - [Packaging] remove hmake
    - [Packaging] install headers to debian/linux-libc-dev directly
    - [Config] define CONFIG options for arm64 instead of arm64-generic
    - [Config] update annotations after rebase to v6.5-rc4
    - [Packaging] temporarily disable Rust support

  [ Upstream Kernel Changes ]

  * Rebase to v6.5-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 31 Jul 2023 08:41:59 +0200

linux-unstable (6.5.0-3.3) mantic; urgency=medium

  * mantic/linux-unstable: 6.5.0-3.3 -proposed tracker (LP: #2028779)

  * enable Rust support in the kernel (LP: #2007654)
    - SAUCE: rust: support rustc-1.69.0
    - [Packaging] depend on rustc-1.69.0

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - [Packaging] resync getabis

  * Fix UBSAN in Intel EDAC driver (LP: #2028746)
    - EDAC/i10nm: Skip the absent memory controllers

  * Ship kernel modules Zstd compressed (LP: #2028568)
    - SAUCE: Support but do not require compressed modules
    - [Config] Enable support for ZSTD compressed modules
    - [Packaging] ZSTD compress modules

  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor3.2.0 [02/60]: rename SK_CTX() to aa_sock and make it an
      inline fn
    - SAUCE: apparmor3.2.0 [05/60]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor3.2.0 [08/60]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor3.2.0 [09/60]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor3.2.0 [10/60]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor3.2.0 [11/60]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor3.2.0 [12/60]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor3.2.0 [13/60]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor3.2.0 [14/60]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor3.2.0 [15/60]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor3.2.0 [16/60]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor3.2.0 [17/60]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor3.2.0 [18/60]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor3.2.0 [19/60]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor3.2.0 [20/60]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor3.2.0 [21/60]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor3.2.0 [22/60]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor3.2.0 [23/60]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor3.2.0 [24/60]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor3.2.0 [25/60]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor3.2.0 [26/60]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor3.2.0 [28/60]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor3.2.0 [29/60]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor3.2.0 [30/60]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor3.2.0 [31/60]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor3.2.0 [32/60]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor3.2.0 [33/60]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor3.2.0 [34/60]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor3.2.0 [35/60]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor3.2.0 [36/60]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor3.2.0 [37/60]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor3.2.0 [38/60]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor3.2.0 [39/60]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor3.2.0 [40/60]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor3.2.0 [41/60]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor3.2.0 [42/60]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor3.2.0 [43/60]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor3.2.0 [44/60]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor3.2.0 [45/60]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor3.2.0 [46/60]: combine common_audit_data and
      apparmor_audit_data
    - SAUCE: apparmor3.2.0 [47/60]: setup slab cache for audit data
    - SAUCE: apparmor3.2.0 [48/60]: rename audit_data->label to
      audit_data->subj_label
    - SAUCE: apparmor3.2.0 [49/60]: pass cred through to audit info.
    - SAUCE: apparmor3.2.0 [50/60]: Improve debug print infrastructure
    - SAUCE: apparmor3.2.0 [51/60]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor3.2.0 [52/60]: enable userspace upcall for mediation
    - SAUCE: apparmor3.2.0 [53/60]: cache buffers on percpu list if there is lock
      contention
    - SAUCE: apparmor3.2.0 [55/60]: advertise availability of exended perms
    - SAUCE: apparmor3.2.0 [60/60]: [Config] enable
      CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS

  * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update
    apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor3.2.0 [57/60]: fix profile verification and enable it

  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor3.2.0 [27/60]: Stacking v38: Fix prctl() syscall with
      apparmor=0

  * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) //
    update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor3.2.0 [01/60]: add/use fns to print hash string hex value
    - SAUCE: apparmor3.2.0 [03/60]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor3.2.0 [04/60]: add user namespace creation mediation
    - SAUCE: apparmor3.2.0 [06/60]: af_unix mediation
    - SAUCE: apparmor3.2.0 [07/60]: Add fine grained mediation of posix mqueues

  * Miscellaneous Ubuntu changes
    - [Packaging] Use consistent llvm/clang for rust

  [ Upstream Kernel Changes ]

  * Rebase to v6.5-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 28 Jul 2023 07:44:20 +0200

linux-unstable (6.5.0-2.2) mantic; urgency=medium

  * mantic/linux-unstable: 6.5.0-2.2 -proposed tracker (LP: #2027953)

  * Remove non-LPAE kernel flavor (LP: #2025265)
    - [Packaging] Rename armhf generic-lpae flavor to generic

  * Please enable Renesas RZ platform serial installer (LP: #2022361)
    - [Config] enable hihope RZ/G2M serial console

  * Miscellaneous Ubuntu changes
    - [Packaging] snap: Remove old configs handling
    - [Packaging] checks/final-checks: Remove old configs handling
    - [Packaging] checks/final-checks: check existance of Makefile first
    - [Packaging] checks/final-checks: Fix shellcheck issues
    - [Packaging] add libstdc++-dev to the build dependencies
    - [Config] update annotations after rebase to v6.5-rc2

  * Miscellaneous upstream changes
    - kbuild: rust: avoid creating temporary files
    - rust: fix bindgen build error with UBSAN_BOUNDS_STRICT

  [ Upstream Kernel Changes ]

  * Rebase to v6.5-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 18 Jul 2023 10:14:14 +0200

linux-unstable (6.5.0-1.1) mantic; urgency=medium

  * mantic/linux-unstable: 6.5.0-1.1 -proposed tracker (LP: #2026689)

  * CVE-2023-31248
    - netfilter: nf_tables: do not ignore genmask when looking up chain by id

  * CVE-2023-35001
    - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval

  * HDMI output with More than one child device for port B in VBT error
    (LP: #2025195)
    - SAUCE: drm/i915/quirks: Add multiple VBT quirk for HP ZBook Power G10

  * CVE-2023-2640 // CVE-2023-32629
    - SAUCE: overlayfs: default to userxattr when mounted from non initial user
      namespace

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

  * enable Rust support in the kernel (LP: #2007654)
    - SAUCE: btf, scripts: rust: drop is_rust_module.sh
    - [Packaging] add rust dependencies

  * CVE-2023-2612
    - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()

  * Miscellaneous Ubuntu changes
    - SAUCE: shiftfs: support linux 6.5
    - [Config] update annotations after rebase to v6.5-rc1
    - [Config] temporarily disable Rust

  [ Upstream Kernel Changes ]

  * Rebase to v6.5-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 10 Jul 2023 09:15:26 +0200

linux-unstable (6.5.0-0.0) mantic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 05 Jul 2023 12:48:39 +0200

linux-unstable (6.4.0-8.8) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-8.8 -proposed tracker (LP: #2025018)

  * Miscellaneous Ubuntu changes
    - [Config] update toolchain version (gcc) in annotations

  [ Upstream Kernel Changes ]

  * Rebase to v6.4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 26 Jun 2023 09:14:02 +0200

linux-unstable (6.4.0-7.7) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-7.7 -proposed tracker (LP: #2024338)

  [ Upstream Kernel Changes ]

  * Rebase to v6.4-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 19 Jun 2023 08:51:27 +0200

linux-unstable (6.4.0-6.6) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-6.6 -proposed tracker (LP: #2023966)

  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

  * enable multi-gen LRU by default (LP: #2023629)
    - [Config] enable multi-gen LRU by default

  * Fix Monitor lost after replug WD19TBS to SUT port with VGA/DVI to type-C
    dongle (LP: #2021949)
    - thunderbolt: Do not touch CL state configuration during discovery
    - thunderbolt: Increase DisplayPort Connection Manager handshake timeout

  * Neuter signing tarballs (LP: #2012776)
    - [Packaging] remove the signing tarball support

  * Enable Tracing Configs for OSNOISE and TIMERLAT (LP: #2018591)
    - [Config] Enable OSNOISE_TRACER and TIMERLAT_TRACER configs

  * Miscellaneous Ubuntu changes
    - [Config] Add CONFIG_AS_HAS_NON_CONST_LEB128 on riscv64
    - [Packaging] introduce do_lib_rust and enable it only on generic amd64
    - [Config] update annotations after rebase to v6.4-rc6

  [ Upstream Kernel Changes ]

  * Rebase to v6.4-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 15 Jun 2023 20:11:07 +0200

linux-unstable (6.4.0-5.5) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-5.5 -proposed tracker (LP: #2022886)

  * Miscellaneous Ubuntu changes
    - [Packaging] update getabis to support linux-unstable
    - UBUNTU [Config]: disable hibernation on riscv64

  [ Upstream Kernel Changes ]

  * Rebase to v6.4-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 06 Jun 2023 08:18:01 +0200

linux-unstable (6.4.0-4.4) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-4.4 -proposed tracker (LP: #2021597)

  * Miscellaneous Ubuntu changes
    - [Config] udpate annotations after rebase to v6.4-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 30 May 2023 11:55:41 +0200

linux-unstable (6.4.0-3.3) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-3.3 -proposed tracker (LP: #2021497)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync getabis

  * support python < 3.9 with annotations (LP: #2020531)
    - [Packaging] kconfig/annotations.py: support older way of merging dicts

  * generate linux-lib-rust only on amd64 (LP: #2020356)
    - [Packaging] generate linux-lib-rust only on amd64

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: never drop configs that have notes different than
      the parent
    - [Config] drop CONFIG_SMBFS_COMMON from annotations
    - [Packaging] perf: build without libtraceevent

  [ Upstream Kernel Changes ]

  * Rebase to v6.4-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 30 May 2023 08:38:10 +0200

linux-unstable (6.4.0-2.2) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-2.2 -proposed tracker (LP: #2020330)

  * Computer with Intel Atom CPU will  not boot with Kernel 6.2.0-20
    (LP: #2017444)
    - [Config]: Disable CONFIG_INTEL_ATOMISP

  * Fix NVME storage with RAID ON disappeared under Dell factory WINPE
    environment (LP: #2011768)
    - SAUCE: PCI: vmd: Reset VMD config register between soft reboots

  * Miscellaneous Ubuntu changes
    - [Packaging] Drop support of old config handling
    - [Config] update annotations after rebase to v6.4-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v6.4-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 22 May 2023 11:22:14 +0200

linux-unstable (6.4.0-1.1) mantic; urgency=medium

  * mantic/linux-unstable: 6.4.0-1.1 -proposed tracker (LP: #2019965)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update helper scripts

  * Kernel 6.1 bumped the disk consumption on default images by 15%
    (LP: #2015867)
    - [Packaging] introduce a separate linux-lib-rust package

  * Miscellaneous Ubuntu changes
    - [Config] enable CONFIG_BLK_DEV_UBLK on amd64
    - [Packaging] annotations: use python3 in the shebang
    - SAUCE: blk-throttle: Fix io statistics for cgroup v1
    - [Packaging] move to v6.4 and rename to linux-unstable
    - [Config] update annotations after rebase to v6.4-rc1
    - [Packaging] temporarily disable perf
    - [Packaging] temporarily disable bpftool
    - [Config] ppc64el: reduce CONFIG_ARCH_FORCE_MAX_ORDER from 9 to 8
    - SAUCE: perf: explicitly disable libtraceevent

  [ Upstream Kernel Changes ]

  * Rebase to v6.4-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 18 May 2023 07:34:09 +0200

linux-unstable (6.4.0-0.0) mantic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 17 May 2023 15:29:25 +0200

linux-unstable (6.3.0-2.2) lunar; urgency=medium

  * lunar/linux-unstable: 6.3.0-2.2 -proposed tracker (LP: #2017788)

  * Miscellaneous Ubuntu changes
    - [Packaging] move python3-dev to build-depends

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 26 Apr 2023 21:52:12 +0200

linux-unstable (6.3.0-1.1) lunar; urgency=medium

  * lunar/linux-unstable: 6.3.0-1.1 -proposed tracker (LP: #2017776)

  * RFC: virtio and virtio-scsi should be built in (LP: #1685291)
    - [Config] Mark CONFIG_SCSI_VIRTIO built-in

  * Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
    - [Debian] autoreconstruct - fix restoration of execute permissions

  * [SRU][Jammy] CONFIG_PCI_MESON is not enabled (LP: #2007745)
    - [Config] arm64: Enable PCI_MESON module

  * vmd may fail to create sysfs entry while `pci_rescan_bus()` called in some
    other drivers like wwan (LP: #2011389)
    - SAUCE: PCI: vmd: guard device addition and removal

  * Lunar update: v6.2.9 upstream stable release (LP: #2016877)
    - [Config] ppc64: updateconfigs following v6.2.9 stable updates

  * Lunar update: v6.2.8 upstream stable release (LP: #2016876)
    - [Config] ppc64: updateconfigs following v6.2.8 stable updates

  * Miscellaneous Ubuntu changes
    - [Packaging] Move final-checks script to debian/scripts/checks
    - [Packaging] checks/final-checks: Honor 'do_skip_checks'
    - [Packaging] Drop wireguard DKMS
    - [Packaging] Remove update-version-dkms
    - [Packaging] debian/rules: Add DKMS info to 'printenv' output
    - [Packaging] ignore KBUILD_VERBOSE in arch-has-odm-enabled.sh
    - SAUCE: shiftfs: support linux 6.3
    - [Packaging] move to v6.3 and rename to linux-unstable
    - [Config] latency-related optimizations
    - [Config] update annotations after rebase to v6.3
    - [Packaging] temporarily disable dkms

  [ Upstream Kernel Changes ]

  * Rebase to v6.3

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 26 Apr 2023 14:53:52 +0200

linux-unstable (6.3.0-0.0) lunar; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 25 Apr 2023 10:24:12 +0200

linux (6.2.0-21.21) lunar; urgency=medium

  * lunar/linux: 6.2.0-21.21 -proposed tracker (LP: #2016249)

  * efivarfs:efivarfs.sh in ubuntu_kernel_selftests crash L-6.2 ARM64 node
    dazzle (rcu_preempt detected stalls) (LP: #2015741)
    - efi/libstub: smbios: Use length member instead of record struct size
    - arm64: efi: Use SMBIOS processor version to key off Ampere quirk
    - efi/libstub: smbios: Drop unused 'recsize' parameter

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests/bpf: ignore pointer types check with clang
    - SAUCE: selftests/bpf: avoid conflicting data types in profiler.inc.h
    - [Packaging] get rid of unnecessary artifacts in linux-headers

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: Revert "efi: random: refresh non-volatile random seed
      when RNG is initialized""
    - Revert "UBUNTU: SAUCE: Revert "efi: random: fix NULL-deref when refreshing
      seed""

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 14 Apr 2023 12:11:49 +0200

linux (6.2.0-20.20) lunar; urgency=medium

  * lunar/linux: 6.2.0-20.20 -proposed tracker (LP: #2015429)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * FTBFS with different dkms or when makeflags are set (LP: #2015361)
    - [Packaging] FTBFS with different dkms or when makeflags are set

  * expoline.o is packaged unconditionally for s390x (LP: #2013209)
    - [Packaging] Copy expoline.o only when produced by the build

  * net:l2tp.sh failure with lunar:linux 6.2 (LP: #2013014)
    - SAUCE: l2tp: generate correct module alias strings

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: prevent duplicate include lines

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 06 Apr 2023 08:33:14 +0200

linux (6.2.0-19.19) lunar; urgency=medium

  * lunar/linux: 6.2.0-19.19 -proposed tracker (LP: #2012488)

  * Neuter signing tarballs (LP: #2012776)
    - [Packaging] neuter the signing tarball

  * LSM stacking and AppArmor refresh for 6.2 kernel (LP: #2012136)
    - Revert "UBUNTU: [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS"
    - Revert "UBUNTU: SAUCE: apparmor: add user namespace creation mediation"
    - Revert "UBUNTU: SAUCE: apparmor: Add fine grained mediation of posix
      mqueues"
    - Revert "UBUNTU: SAUCE: Revert "apparmor: make __aa_path_perm() static""
    - Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display (using struct cred
      as input)"
    - Revert "UBUNTU: SAUCE: apparmor: Fix build error, make sk parameter const"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in smk_netlbl_mls()"
    - Revert "UBUNTU: SAUCE: LSM: change ima_read_file() to use lsmblob"
    - Revert "UBUNTU: SAUCE: apparmor: rename kzfree() to kfree_sensitive()"
    - Revert "UBUNTU: SAUCE: AppArmor: Remove the exclusive flag"
    - Revert "UBUNTU: SAUCE: LSM: Add /proc attr entry for full LSM context"
    - Revert "UBUNTU: SAUCE: Audit: Fix incorrect static inline function
      declration."
    - Revert "UBUNTU: SAUCE: Audit: Fix for missing NULL check"
    - Revert "UBUNTU: SAUCE: Audit: Add a new record for multiple object LSM
      attributes"
    - Revert "UBUNTU: SAUCE: Audit: Add new record for multiple process LSM
      attributes"
    - Revert "UBUNTU: SAUCE: NET: Store LSM netlabel data in a lsmblob"
    - Revert "UBUNTU: SAUCE: LSM: security_secid_to_secctx in netlink netfilter"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_inode_getsecctx"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmcontext in security_secid_to_secctx"
    - Revert "UBUNTU: SAUCE: LSM: Ensure the correct LSM context releaser"
    - Revert "UBUNTU: SAUCE: LSM: Specify which LSM to display"
    - Revert "UBUNTU: SAUCE: IMA: Change internal interfaces to use lsmblobs"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_cred_getsecid"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_inode_getsecid"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_task_getsecid"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_ipc_getsecid"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secid_to_secctx"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_secctx_to_secid"
    - Revert "UBUNTU: SAUCE: net: Prepare UDS for security module stacking"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_kernel_act_as"
    - Revert "UBUNTU: SAUCE: LSM: Use lsmblob in security_audit_rule_match"
    - Revert "UBUNTU: SAUCE: LSM: Create and manage the lsmblob data structure."
    - Revert "UBUNTU: SAUCE: LSM: Infrastructure management of the sock security"
    - Revert "UBUNTU: SAUCE: apparmor: LSM stacking: switch from SK_CTX() to
      aa_sock()"
    - Revert "UBUNTU: SAUCE: apparmor: rename aa_sock() to aa_unix_sk()"
    - Revert "UBUNTU: SAUCE: apparmor: disable showing the mode as part of a secid
      to secctx"
    - Revert "UBUNTU: SAUCE: apparmor: fix use after free in sk_peer_label"
    - Revert "UBUNTU: SAUCE: apparmor: af_unix mediation"
    - Revert "UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x
      net rules"
    - Revert "UBUNTU: SAUCE: apparmor: add/use fns to print hash string hex value"
    - SAUCE: apparmor: rename SK_CTX() to aa_sock and make it an inline fn
    - SAUCE: apparmor: Add sysctls for additional controls of unpriv userns
      restrictions
    - SAUCE: Stacking v38: LSM: Identify modules by more than name
    - SAUCE: Stacking v38: LSM: Add an LSM identifier for external use
    - SAUCE: Stacking v38: LSM: Identify the process attributes for each module
    - SAUCE: Stacking v38: LSM: Maintain a table of LSM attribute data
    - SAUCE: Stacking v38: proc: Use lsmids instead of lsm names for attrs
    - SAUCE: Stacking v38: integrity: disassociate ima_filter_rule from
      security_audit_rule
    - SAUCE: Stacking v38: LSM: Infrastructure management of the sock security
    - SAUCE: Stacking v38: LSM: Add the lsmblob data structure.
    - SAUCE: Stacking v38: LSM: provide lsm name and id slot mappings
    - SAUCE: Stacking v38: IMA: avoid label collisions with stacked LSMs
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_kernel_act_as
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_secctx_to_secid
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_secid_to_secctx
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_current_getsecid
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: Stacking v38: LSM: Use lsmblob in security_cred_getsecid
    - SAUCE: Stacking v38: LSM: Specify which LSM to display
    - SAUCE: Stacking v38: LSM: Ensure the correct LSM context releaser
    - SAUCE: Stacking v38: LSM: Use lsmcontext in security_secid_to_secctx
    - SAUCE: Stacking v38: LSM: Use lsmcontext in security_inode_getsecctx
    - SAUCE: Stacking v38: Use lsmcontext in security_dentry_init_security
    - SAUCE: Stacking v38: LSM: security_secid_to_secctx in netlink netfilter
    - SAUCE: Stacking v38: NET: Store LSM netlabel data in a lsmblob
    - SAUCE: Stacking v38: binder: Pass LSM identifier for confirmation
    - SAUCE: Stacking v38: LSM: security_secid_to_secctx module selection
    - SAUCE: Stacking v38: Audit: Keep multiple LSM data in audit_names
    - SAUCE: Stacking v38: Audit: Create audit_stamp structure
    - SAUCE: Stacking v38: LSM: Add a function to report multiple LSMs
    - SAUCE: Stacking v38: Audit: Allow multiple records in an audit_buffer
    - SAUCE: Stacking v38: Audit: Add record for multiple task security contexts
    - SAUCE: Stacking v38: audit: multiple subject lsm values for netlabel
    - SAUCE: Stacking v38: Audit: Add record for multiple object contexts
    - SAUCE: Stacking v38: netlabel: Use a struct lsmblob in audit data
    - SAUCE: Stacking v38: LSM: Removed scaffolding function lsmcontext_init
    - SAUCE: Stacking v38: AppArmor: Remove the exclusive flag
    - SAUCE: apparmor: combine common_audit_data and apparmor_audit_data
    - SAUCE: apparmor: setup slab cache for audit data
    - SAUCE: apparmor: rename audit_data->label to audit_data->subj_label
    - SAUCE: apparmor: pass cred through to audit info.
    - SAUCE: apparmor: Improve debug print infrastructure
    - SAUCE: apparmor: add the ability for profiles to have a learning cache
    - SAUCE: apparmor: enable userspace upcall for mediation
    - SAUCE: apparmor: cache buffers on percpu list if there is lock contention
    - SAUCE: apparmor: fix policy_compat permission remap with extended
      permissions
    - SAUCE: apparmor: advertise availability of exended perms
    - [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS

  * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) // LSM
    stacking and AppArmor refresh for 6.2 kernel (LP: #2012136)
    - SAUCE: apparmor: add/use fns to print hash string hex value
    - SAUCE: apparmor: patch to provide compatibility with v2.x net rules
    - SAUCE: apparmor: add user namespace creation mediation
    - SAUCE: apparmor: af_unix mediation
    - SAUCE: apparmor: Add fine grained mediation of posix mqueues

  * devlink_port_split from ubuntu_kernel_selftests.net fails on hirsute
    (KeyError: 'flavour') (LP: #1937133)
    - selftests: net: devlink_port_split.py: skip test if no suitable device
      available

  * NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
    - NFS: Correct timing for assigning access cache timestamp

 -- Andrea Righi <andrea.righi@canonical.com>  Sat, 25 Mar 2023 07:37:30 +0100

linux (6.2.0-18.18) lunar; urgency=medium

  * lunar/linux: 6.2.0-18.18 -proposed tracker (LP: #2011750)

  * lunar/linux 6.2 fails to boot on arm64 (LP: #2011748)
    - SAUCE: Revert "efi: random: fix NULL-deref when refreshing seed"
    - SAUCE: Revert "efi: random: refresh non-volatile random seed when RNG is
      initialized"

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 15 Mar 2023 23:54:18 +0100

linux (6.2.0-17.17) lunar; urgency=medium

  * lunar/linux: 6.2.0-17.17 -proposed tracker (LP: #2011593)

  * lunar/linux 6.2 fails to boot on ppc64el (LP: #2011413)
    - SAUCE: Revert "powerpc: remove STACK_FRAME_OVERHEAD"
    - SAUCE: Revert "powerpc/pseries: hvcall stack frame overhead"

  * Speaker / Audio/Mic mute LED don't work on a HP platform (LP: #2011379)
    - SAUCE: ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP
      platform

  * Some QHD panels fail to refresh when PSR2 enabled (LP: #2009014)
    - SAUCE: drm/i915/psr: Use calculated io and fast wake lines

  * Lunar update: v6.2.6 upstream stable release (LP: #2011431)
    - tpm: disable hwrng for fTPM on some AMD designs
    - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
    - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
    - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
    - Linux 6.2.6

  * Lunar update: v6.2.5 upstream stable release (LP: #2011430)
    - net/sched: Retire tcindex classifier
    - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()
    - fs/jfs: fix shift exponent db_agl2size negative
    - driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()
    - f2fs: don't rely on F2FS_MAP_* in f2fs_iomap_begin
    - f2fs: fix to avoid potential deadlock
    - objtool: Fix memory leak in create_static_call_sections()
    - soc: mediatek: mtk-pm-domains: Allow mt8186 ADSP default power on
    - soc: qcom: socinfo: Fix soc_id order
    - memory: renesas-rpc-if: Split-off private data from struct rpcif
    - memory: renesas-rpc-if: Move resource acquisition to .probe()
    - soc: mediatek: mtk-svs: Enable the IRQ later
    - pwm: sifive: Always let the first pwm_apply_state succeed
    - pwm: stm32-lp: fix the check on arr and cmp registers update
    - f2fs: introduce trace_f2fs_replace_atomic_write_block
    - f2fs: clear atomic_write_task in f2fs_abort_atomic_write()
    - soc: mediatek: mtk-svs: restore default voltages when svs_init02() fail
    - soc: mediatek: mtk-svs: reset svs when svs_resume() fail
    - soc: mediatek: mtk-svs: Use pm_runtime_resume_and_get() in svs_init01()
    - f2fs: fix to do sanity check on extent cache correctly
    - fs: f2fs: initialize fsdata in pagecache_write()
    - f2fs: allow set compression option of files without blocks
    - f2fs: fix to abort atomic write only during do_exist()
    - um: vector: Fix memory leak in vector_config
    - ubi: ensure that VID header offset + VID header size <= alloc, size
    - ubifs: Fix build errors as symbol undefined
    - ubifs: Fix memory leak in ubifs_sysfs_init()
    - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
    - ubifs: Rectify space budget for ubifs_xrename()
    - ubifs: Fix wrong dirty space budget for dirty inode
    - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
    - ubifs: Reserve one leb for each journal head while doing budget
    - ubi: Fix use-after-free when volume resizing failed
    - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
    - ubifs: Fix memory leak in alloc_wbufs()
    - ubi: Fix possible null-ptr-deref in ubi_free_volume()
    - ubifs: Re-statistic cleaned znode count if commit failed
    - ubifs: dirty_cow_znode: Fix memleak in error handling path
    - ubifs: ubifs_writepage: Mark page dirty after writing inode failed
    - ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process
    - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling
      fastmap
    - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
    - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
    - f2fs: fix to handle F2FS_IOC_START_ATOMIC_REPLACE in f2fs_compat_ioctl()
    - f2fs: fix to avoid potential memory corruption in __update_iostat_latency()
    - f2fs: fix to update age extent correctly during truncation
    - f2fs: fix to update age extent in f2fs_do_zero_range()
    - soc: qcom: stats: Populate all subsystem debugfs files
    - f2fs: introduce IS_F2FS_IPU_* macro
    - f2fs: fix to set ipu policy
    - ext4: use ext4_fc_tl_mem in fast-commit replay path
    - ext4: don't show commit interval if it is zero
    - netfilter: nf_tables: allow to fetch set elements when table has an owner
    - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
    - um: virtio_uml: free command if adding to virtqueue failed
    - um: virtio_uml: mark device as unregistered when breaking it
    - um: virtio_uml: move device breaking into workqueue
    - um: virt-pci: properly remove PCI device from bus
    - f2fs: synchronize atomic write aborts
    - watchdog: rzg2l_wdt: Issue a reset before we put the PM clocks
    - watchdog: rzg2l_wdt: Handle TYPE-B reset for RZ/V2M
    - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in
      error path
    - watchdog: Fix kmemleak in watchdog_cdev_register
    - watchdog: pcwd_usb: Fix attempting to access uninitialized memory
    - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
    - netfilter: ctnetlink: fix possible refcount leak in
      ctnetlink_create_conntrack()
    - netfilter: conntrack: fix rmmod double-free race
    - netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
    - netfilter: ebtables: fix table blob use-after-free
    - netfilter: xt_length: use skb len to match in length_mt6
    - netfilter: ctnetlink: make event listener tracking global
    - netfilter: x_tables: fix percpu counter block leak on error path when
      creating new netns
    - swiotlb: mark swiotlb_memblock_alloc() as __init
    - ptp: vclock: use mutex to fix "sleep on atomic" bug
    - drm/i915: move a Kconfig symbol to unbreak the menu presentation
    - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
    - drm/i915/xelpmp: Consider GSI offset when doing MCR lookups
    - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet
    - net: sunhme: Fix region request
    - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
    - octeontx2-pf: Use correct struct reference in test condition
    - net: fix __dev_kfree_skb_any() vs drop monitor
    - 9p/xen: fix version parsing
    - 9p/xen: fix connection sequence
    - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
    - spi: tegra210-quad: Fix validate combined sequence
    - mlx5: fix skb leak while fifo resync and push
    - mlx5: fix possible ptp queue fifo use-after-free
    - net/mlx5: ECPF, wait for VF pages only after disabling host PFs
    - net/mlx5e: Verify flow_source cap before using it
    - net/mlx5: Geneve, Fix handling of Geneve object id as error code
    - ext4: fix incorrect options show of original mount_opt and extend mount_opt2
    - nfc: fix memory leak of se_io context in nfc_genl_se_io
    - net/sched: transition act_pedit to rcu and percpu stats
    - net/sched: act_pedit: fix action bind logic
    - net/sched: act_mpls: fix action bind logic
    - net/sched: act_sample: fix action bind logic
    - net: dsa: seville: ignore mscc-miim read errors from Lynx PCS
    - net: dsa: felix: fix internal MDIO controller resource length
    - ARM: dts: aspeed: p10bmc: Update battery node name
    - ARM: dts: spear320-hmi: correct STMPE GPIO compatible
    - tcp: tcp_check_req() can be called from process context
    - vc_screen: modify vcs_size() handling in vcs_read()
    - spi: tegra210-quad: Fix iterator outside loop
    - rtc: sun6i: Always export the internal oscillator
    - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
    - scsi: ipr: Work around fortify-string warning
    - scsi: mpi3mr: Fix an issue found by KASAN
    - scsi: mpi3mr: Use number of bits to manage bitmap sizes
    - rtc: allow rtc_read_alarm without read_alarm callback
    - io_uring: fix size calculation when registering buf ring
    - loop: loop_set_status_from_info() check before assignment
    - ASoC: adau7118: don't disable regulators on device unbind
    - ASoC: apple: mca: Fix final status read on SERDES reset
    - ASoC: apple: mca: Fix SERDES reset sequence
    - ASoC: apple: mca: Improve handling of unavailable DMA channels
    - nvme: bring back auto-removal of deleted namespaces during sequential scan
    - nvme-tcp: don't access released socket during error recovery
    - nvme-fabrics: show well known discovery name
    - ASoC: zl38060 add gpiolib dependency
    - ASoC: mediatek: mt8195: add missing initialization
    - thermal: intel: quark_dts: fix error pointer dereference
    - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
    - cpufreq: apple-soc: Fix an IS_ERR() vs NULL check
    - tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
    - kernel/printk/index.c: fix memory leak with using debugfs_lookup()
    - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
    - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC
      support
    - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
    - IB/hfi1: Update RMT size calculation
    - iommu: Remove deferred attach check from __iommu_detach_device()
    - PCI/ACPI: Account for _S0W of the target bridge in acpi_pci_bridge_d3()
    - media: uvcvideo: Remove format descriptions
    - media: uvcvideo: Handle cameras with invalid descriptors
    - media: uvcvideo: Handle errors from calls to usb_string
    - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
    - media: uvcvideo: Silence memcpy() run-time false positive warnings
    - USB: fix memory leak with using debugfs_lookup()
    - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
    - usb: fotg210: List different variants
    - dt-bindings: usb: Add device id for Genesys Logic hub controller
    - staging: emxx_udc: Add checks for dma_alloc_coherent()
    - tty: fix out-of-bounds access in tty_driver_lookup_tty()
    - tty: serial: fsl_lpuart: disable the CTS when send break signal
    - serial: sc16is7xx: setup GPIO controller later in probe
    - mei: bus-fixup:upon error print return values of send and receive
    - tools/iio/iio_utils:fix memory leak
    - bus: mhi: ep: Fix the debug message for MHI_PKT_TYPE_RESET_CHAN_CMD cmd
    - iio: accel: mma9551_core: Prevent uninitialized variable in
      mma9551_read_status_word()
    - iio: accel: mma9551_core: Prevent uninitialized variable in
      mma9551_read_config_word()
    - media: uvcvideo: Add GUID for BGRA/X 8:8:8:8
    - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe()
    - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown
    - PCI: loongson: Prevent LS7A MRRS increases
    - staging: pi433: fix memory leak with using debugfs_lookup()
    - USB: dwc3: fix memory leak with using debugfs_lookup()
    - USB: chipidea: fix memory leak with using debugfs_lookup()
    - USB: ULPI: fix memory leak with using debugfs_lookup()
    - USB: uhci: fix memory leak with using debugfs_lookup()
    - USB: sl811: fix memory leak with using debugfs_lookup()
    - USB: fotg210: fix memory leak with using debugfs_lookup()
    - USB: isp116x: fix memory leak with using debugfs_lookup()
    - USB: isp1362: fix memory leak with using debugfs_lookup()
    - USB: gadget: gr_udc: fix memory leak with using debugfs_lookup()
    - USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()
    - USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()
    - USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()
    - USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()
    - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer
      math
    - USB: ene_usb6250: Allocate enough memory for full object
    - usb: uvc: Enumerate valid values for color matching
    - usb: gadget: uvc: Make bSourceID read/write
    - PCI: Align extra resources for hotplug bridges properly
    - PCI: Take other bus devices into account when distributing resources
    - PCI: Distribute available resources for root buses, too
    - tty: pcn_uart: fix memory leak with using debugfs_lookup()
    - misc: vmw_balloon: fix memory leak with using debugfs_lookup()
    - drivers: base: component: fix memory leak with using debugfs_lookup()
    - drivers: base: dd: fix memory leak with using debugfs_lookup()
    - kernel/fail_function: fix memory leak with using debugfs_lookup()
    - PCI: loongson: Add more devices that need MRRS quirk
    - PCI: Add ACS quirk for Wangxun NICs
    - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
    - phy: rockchip-typec: Fix unsigned comparison with less than zero
    - RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size
    - soundwire: cadence: Remove wasted space in response_buf
    - soundwire: cadence: Drain the RX FIFO after an IO timeout
    - eth: fealnx: bring back this old driver
    - net: tls: avoid hanging tasks on the tx_lock
    - x86/resctl: fix scheduler confusion with 'current'
    - vDPA/ifcvf: decouple hw features manipulators from the adapter
    - vDPA/ifcvf: decouple config space ops from the adapter
    - vDPA/ifcvf: alloc the mgmt_dev before the adapter
    - vDPA/ifcvf: decouple vq IRQ releasers from the adapter
    - vDPA/ifcvf: decouple config IRQ releaser from the adapter
    - vDPA/ifcvf: decouple vq irq requester from the adapter
    - vDPA/ifcvf: decouple config/dev IRQ requester and vectors allocator from the
      adapter
    - vDPA/ifcvf: ifcvf_request_irq works on ifcvf_hw
    - vDPA/ifcvf: manage ifcvf_hw in the mgmt_dev
    - vDPA/ifcvf: allocate the adapter in dev_add()
    - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state()
    - drm/display/dp_mst: Fix down/up message handling after sink disconnect
    - drm/display/dp_mst: Fix down message handling after a packet reception error
    - drm/display/dp_mst: Fix payload addition on a disconnected sink
    - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs
    - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload()
    - drm/i915/dp_mst: Fix payload removal during output disabling
    - drm/i915: Fix system suspend without fbdev being initialized
    - media: uvcvideo: Fix race condition with usb_kill_urb
    - arm64: efi: Make efi_rt_lock a raw_spinlock
    - usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
    - Linux 6.2.5

  * Lunar update: v6.2.4 upstream stable release (LP: #2011428)
    - Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and
      blkcg_deactivate_policy()"
    - Revert "blk-cgroup: dropping parent refcount after pd_free_fn() is done"
    - Linux 6.2.4

  * Lunar update: v6.2.3 upstream stable release (LP: #2011425)
    - HID: asus: use spinlock to protect concurrent accesses
    - HID: asus: use spinlock to safely schedule workers
    - iommu/amd: Fix error handling for pdev_pri_ats_enable()
    - iommu/amd: Skip attach device domain is same as new domain
    - iommu/amd: Improve page fault error reporting
    - iommu: Attach device group to old domain in error path
    - powerpc/mm: Rearrange if-else block to avoid clang warning
    - ata: ahci: Revert "ata: ahci: Add Tiger Lake UP{3,4} AHCI controller"
    - ARM: OMAP2+: Fix memory leak in realtime_counter_init()
    - arm64: dts: qcom: qcs404: use symbol names for PCIe resets
    - arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up
    - arm64: dts: qcom: sm6115: Fix UFS node
    - arm64: dts: qcom: sm6115: Provide xo clk to rpmcc
    - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k
    - arm64: dts: qcom: pmi8950: Correct rev_1250v channel label to mv
    - arm64: dts: qcom: sm6350: Fix up the ramoops node
    - arm64: dts: qcom: sdm670-google-sargo: keep pm660 ldo8 on
    - arm64: dts: qcom: Re-enable resin on MSM8998 and SDM845 boards
    - arm64: dts: qcom: sm8350-sagami: Configure SLG51000 PMIC on PDX215
    - arm64: dts: qcom: sm8350-sagami: Add GPIO line names for PMIC GPIOs
    - arm64: dts: qcom: sm8350-sagami: Rectify GPIO keys
    - arm64: dts: qcom: sm6350-lena: Flatten gpio-keys pinctrl state
    - arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings
    - arm64: dts: qcom: sm6125-seine: Clean up gpio-keys (volume down)
    - arm64: dts: imx8m: Align SoC unique ID node unit address
    - ARM: zynq: Fix refcount leak in zynq_early_slcr_init
    - fs: dlm: fix return value check in dlm_memory_init()
    - arm64: dts: mediatek: mt8195: Add power domain to U3PHY1 T-PHY
    - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description
    - arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description
    - arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description
    - arm64: dts: mediatek: mt8186: Fix systimer 13 MHz clock description
    - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
    - arm64: dts: qcom: sdm845-xiaomi-beryllium: fix audio codec interrupt pin
      name
    - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC
    - arm64: dts: qcom: sc7180: correct SPMI bus address cells
    - arm64: dts: qcom: sc7280: correct SPMI bus address cells
    - arm64: dts: qcom: sc8280xp: correct SPMI bus address cells
    - arm64: dts: qcom: sm8450: correct Soundwire wakeup interrupt name
    - arm64: dts: qcom: sdm845: make DP node follow the schema
    - arm64: dts: qcom: msm8996-oneplus-common: drop vdda-supply from DSI PHY
    - arm64: dts: qcom: sc8280xp: Vote for CX in USB controllers
    - arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node
    - arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name
    - arm64: dts: meson-axg: jethub-j1xx: Fix MAC address node names
    - arm64: dts: meson-gx: Fix Ethernet MAC address unit name
    - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
    - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
    - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
    - arm64: dts: ti: k3-am62-main: Fix clocks for McSPI
    - arm64: tegra: Fix duplicate regulator on Jetson TX1
    - arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size
    - arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem
    - arm64: dts: qcom: msm8956: use SoC-specific compat for tsens
    - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names
    - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY
    - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY
    - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges
    - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node
    - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names
    - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
    - ARM: OMAP1: call platform_device_put() in error case in
      omap1_dm_timer_init()
    - arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken
    - ARM: bcm2835_defconfig: Enable the framebuffer
    - ARM: s3c: fix s3c64xx_set_timer_source prototype
    - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range
    - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
    - ARM: imx: Call ida_simple_remove() for ida_simple_get
    - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
    - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
    - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
    - arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix supply name of USB
      controller node
    - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names
      property
    - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
    - arm64: dts: amlogic: meson-gxl-s905w-jethome-jethub-j80: fix invalid rtc
      node name
    - arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix invalid rtc node
      name
    - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node
      name
    - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name
    - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names
    - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
    - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name
    - arm64: dts: amlogic: meson-g12b-odroid-go-ultra: fix rk818 pmic properties
    - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip
    - locking/rwsem: Disable preemption in all down_read*() and up_read() code
      paths
    - arm64: tegra: Mark host1x as dma-coherent on Tegra194/234
    - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference
    - arm64: dts: meson: radxa-zero: allow usb otg mode
    - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN
    - ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
    - ublk_drv: remove nr_aborted_queues from ublk_device
    - ublk_drv: don't probe partitions if the ubq daemon isn't trusted
    - ARM: dts: imx7s: correct iomuxc gpr mux controller cells
    - sbitmap: remove redundant check in __sbitmap_queue_get_batch
    - sbitmap: correct wake_batch recalculation to avoid potential IO hung
    - arm64: dts: mt8195: Fix CPU map for single-cluster SoC
    - arm64: dts: mt8192: Fix CPU map for single-cluster SoC
    - arm64: dts: mt8186: Fix CPU map for single-cluster SoC
    - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
    - arm64: dts: mediatek: mt8186: Fix watchdog compatible
    - arm64: dts: mediatek: mt8195: Fix watchdog compatible
    - arm64: dts: mediatek: mt7986: Fix watchdog compatible
    - ARM: dts: stm32: Update part number NVMEM description on stm32mp131
    - arm64: dts: qcom: sm8450-nagara: Correct firmware paths
    - blk-mq: avoid sleep in blk_mq_alloc_request_hctx
    - blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
    - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
    - blk-mq: Fix potential io hung for shared sbitmap per tagset
    - blk-mq: correct stale comment of .get_budget
    - arm64: dts: qcom: msm8996: support using GPLL0 as kryocc input
    - arm64: dts: qcom: msm8996 switch from RPM_SMD_BB_CLK1 to RPM_SMD_XO_CLK_SRC
    - arm64: dts: qcom: sm8350: drop incorrect cells from serial
    - arm64: dts: qcom: sm8450: drop incorrect cells from serial
    - arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM
      and MPSS memory regions
    - arm64: dts: qcom: msm8953: correct TLMM gpio-ranges
    - arm64: dts: qcom: sm6115: correct TLMM gpio-ranges
    - arm64: dts: qcom: msm8992-lg-bullhead: Enable regulators
    - s390/dasd: Fix potential memleak in dasd_eckd_init()
    - io_uring,audit: don't log IORING_OP_MADVISE
    - sched/rt: pick_next_rt_entity(): check list_entry
    - perf/x86/intel/ds: Fix the conversion from TSC to perf time
    - x86/perf/zhaoxin: Add stepping check for ZXC
    - KEYS: asymmetric: Fix ECDSA use via keyctl uapi
    - block: ublk: check IO buffer based on flag need_get_data
    - arm64: dts: qcom: pmk8350: Use the correct PON compatible
    - erofs: relinquish volume with mutex held
    - block: sync mixed merged request's failfast with 1st bio's
    - block: Fix io statistics for cgroup in throttle path
    - block: bio-integrity: Copy flags when bio_integrity_payload is cloned
    - block: use proper return value from bio_failfast()
    - wifi: mt76: mt7915: add missing of_node_put()
    - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host
    - wifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks
    - wifi: mt76: mt7996: fix insecure data handling of mt7996_mcu_ie_countdown()
    - wifi: mt76: mt7996: fix insecure data handling of
      mt7996_mcu_rx_radar_detected()
    - wifi: mt76: mt7996: fix integer handling issue of mt7996_rf_regval_set()
    - wifi: mt76: mt7915: check return value before accessing free_block_num
    - wifi: mt76: mt7996: check return value before accessing free_block_num
    - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr()
    - wifi: mt76: mt7996: drop always true condition of __mt7996_reg_addr()
    - wifi: mt76: mt7996: fix endianness warning in mt7996_mcu_sta_he_tlv
    - wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power
    - wifi: mt76: mt7996: fix unintended sign extension of mt7996_hw_queue_read()
    - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read()
    - wifi: mt76: fix coverity uninit_use_in_call in
      mt76_connac2_reverse_frag0_hdr_trans()
    - wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()
    - wifi: rsi: Fix memory leak in rsi_coex_attach()
    - wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
    - wifi: libertas: fix memory leak in lbs_init_adapter()
    - wifi: rtl8xxxu: Fix assignment to bit field priv->pi_enabled
    - wifi: rtl8xxxu: Fix assignment to bit field priv->cck_agc_report_type
    - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
    - wifi: rtw89: 8852c: rfk: correct DACK setting
    - wifi: rtw89: 8852c: rfk: correct DPK settings
    - wifi: rtlwifi: Fix global-out-of-bounds bug in
      _rtl8812ae_phy_set_txpower_limit()
    - libbpf: Fix single-line struct definition output in btf_dump
    - libbpf: Fix btf__align_of() by taking into account field offsets
    - wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
    - wifi: ipw2200: fix memory leak in ipw_wdev_init()
    - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
    - wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()
    - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
    - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
    - wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
    - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
    - libbpf: Fix invalid return address register in s390
    - crypto: x86/ghash - fix unaligned access in ghash_setkey()
    - crypto: ux500 - update debug config after ux500 cryp driver removal
    - ACPICA: Drop port I/O validation for some regions
    - genirq: Fix the return type of kstat_cpu_irqs_sum()
    - rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
    - rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
    - rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
    - lib/mpi: Fix buffer overrun when SG is too long
    - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2
    - platform/chrome: cros_ec_typec: Update port DP VDO
    - ACPICA: nsrepair: handle cases without a return value correctly
    - libbpf: Fix map creation flags sanitization
    - bpf_doc: Fix build error with older python versions
    - selftests/xsk: print correct payload for packet dump
    - selftests/xsk: print correct error codes when exiting
    - arm64/cpufeature: Fix field sign for DIT hwcap detection
    - arm64/sysreg: Fix errors in 32 bit enumeration values
    - kselftest/arm64: Fix syscall-abi for systems without 128 bit SME
    - workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex
    - s390/early: fix sclp_early_sccb variable lifetime
    - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue()
    - x86/signal: Fix the value returned by strict_sas_size()
    - thermal/drivers/tsens: Drop msm8976-specific defines
    - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
    - thermal/drivers/tsens: fix slope values for msm8939
    - thermal/drivers/tsens: limit num_sensors to 9 for msm8939
    - wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()
    - wifi: rtw89: Add missing check for alloc_workqueue
    - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
    - wifi: orinoco: check return value of hermes_write_wordrec()
    - wifi: rtw88: Use rtw_iterate_vifs() for rtw_vif_watch_dog_iter()
    - wifi: rtw88: Use non-atomic sta iterator in rtw_ra_mask_info_update()
    - thermal/drivers/imx_sc_thermal: Fix the loop condition
    - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback
      function
    - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
    - wifi: ath9k: Fix potential stack-out-of-bounds write in
      ath9k_wmi_rsp_callback()
    - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
    - wifi: cfg80211: Fix extended KCK key length check in
      nl80211_set_rekey_data()
    - ACPI: battery: Fix missing NUL-termination with large strings
    - selftests/bpf: Fix build errors if CONFIG_NF_CONNTRACK=m
    - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
    - crypto: essiv - Handle EBUSY correctly
    - crypto: seqiv - Handle EBUSY correctly
    - powercap: fix possible name leak in powercap_register_zone()
    - bpf: Fix state pruning for STACK_DYNPTR stack slots
    - bpf: Fix missing var_off check for ARG_PTR_TO_DYNPTR
    - bpf: Fix partial dynptr stack slot reads/writes
    - x86/microcode: Add a parameter to microcode_check() to store CPU
      capabilities
    - x86/microcode: Check CPU capabilities after late microcode update correctly
    - x86/microcode: Adjust late loading result reporting message
    - net: ethernet: ti: am65-cpsw/cpts: Fix CPTS release action
    - selftests/bpf: Fix vmtest static compilation error
    - crypto: xts - Handle EBUSY correctly
    - leds: led-class: Add missing put_device() to led_put()
    - drm/nouveau/disp: Fix nvif_outp_acquire_dp() argument size
    - s390/bpf: Add expoline to tail calls
    - wifi: iwlwifi: mei: fix compilation errors in rfkill()
    - kselftest/arm64: Fix enumeration of systems without 128 bit SME
    - can: rcar_canfd: Fix R-Car V3U CAN mode selection
    - can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses
    - selftests/bpf: Initialize tc in xdp_synproxy
    - crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware
    - bpftool: profile online CPUs instead of possible
    - wifi: mt76: mt7921: fix deadlock in mt7921_abort_roc
    - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after
      init_work
    - wifi: mt76: mt7915: rework mt7915_mcu_set_thermal_throttling
    - wifi: mt76: mt7915: rework mt7915_thermal_temp_store()
    - wifi: mt76: mt7921: fix channel switch fail in monitor mode
    - wifi: mt76: mt7996: fix chainmask calculation in mt7996_set_antenna()
    - wifi: mt76: mt7996: update register for CFEND_RATE
    - wifi: mt76: connac: fix POWER_CTRL command name typo
    - wifi: mt76: mt7921: fix invalid remain_on_channel duration
    - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
    - wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit
    - wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup
    - wifi: mt76: fix switch default case in mt7996_reverse_frag0_hdr_trans
    - wifi: mt76: mt7915: fix WED TxS reporting
    - wifi: mt76: add memory barrier to SDIO queue kick
    - wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val
    - net/mlx5: Enhance debug print in page allocation failure
    - irqchip: Fix refcount leak in platform_irqchip_probe
    - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
    - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
    - irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
    - s390/mem_detect: fix detect_memory() error handling
    - s390/vmem: fix empty page tables cleanup under KASAN
    - s390/boot: cleanup decompressor header files
    - s390/mem_detect: rely on diag260() if sclp_early_get_memsize() fails
    - s390/boot: fix mem_detect extended area allocation
    - net: add sock_init_data_uid()
    - tun: tun_chr_open(): correctly initialize socket uid
    - tap: tap_open(): correctly initialize socket uid
    - rxrpc: Fix overwaking on call poking
    - OPP: fix error checking in opp_migrate_dentry()
    - cpufreq: davinci: Fix clk use after free
    - Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds
    - Bluetooth: L2CAP: Fix potential user-after-free
    - Bluetooth: hci_qca: get wakeup status from serdev device handle
    - net: ipa: generic command param fix
    - s390: vfio-ap: tighten the NIB validity check
    - s390/ap: fix status returned by ap_aqic()
    - s390/ap: fix status returned by ap_qact()
    - libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
    - xen/grant-dma-iommu: Implement a dummy probe_device() callback
    - rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
    - crypto: rsa-pkcs1pad - Use akcipher_request_complete
    - m68k: /proc/hardware should depend on PROC_FS
    - RISC-V: time: initialize hrtimer based broadcast clock event device
    - clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first
      use
    - wifi: iwl3945: Add missing check for create_singlethread_workqueue
    - wifi: iwl4965: Add missing check for create_singlethread_workqueue()
    - wifi: brcmfmac: Rename Cypress 89459 to BCM4355
    - wifi: brcmfmac: pcie: Add IDs/properties for BCM4355
    - wifi: brcmfmac: pcie: Add IDs/properties for BCM4377
    - wifi: brcmfmac: pcie: Perform correct BCM4364 firmware selection
    - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
    - wifi: rtw89: fix parsing offset for MCC C2H
    - selftests/bpf: Fix out-of-srctree build
    - ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models
    - ACPI: resource: Do IRQ override on all TongFang GMxRGxx
    - crypto: octeontx2 - Fix objects shared between several modules
    - crypto: crypto4xx - Call dma_unmap_page when done
    - vfio/ccw: remove WARN_ON during shutdown
    - wifi: mac80211: move color collision detection report in a delayed work
    - wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
    - wifi: mac80211: fix non-MLO station association
    - wifi: mac80211: Don't translate MLD addresses for multicast
    - wifi: mac80211: avoid u32_encode_bits() warning
    - wifi: mac80211: fix off-by-one link setting
    - tools/lib/thermal: Fix thermal_sampling_exit()
    - thermal/drivers/hisi: Drop second sensor hi3660
    - selftests/bpf: Fix map_kptr test.
    - wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta()
    - bpf: Zeroing allocated object from slab in bpf memory allocator
    - selftests/bpf: Fix xdp_do_redirect on s390x
    - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a
      bus error
    - can: esd_usb: Make use of can_change_state() and relocate checking skb for
      NULL
    - xsk: check IFF_UP earlier in Tx path
    - LoongArch, bpf: Use 4 instructions for function address in JIT
    - bpf: Fix global subprog context argument resolution logic
    - irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
    - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
    - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
    - net/smc: fix application data exception
    - selftests/net: Interpret UDP_GRO cmsg data as an int value
    - l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
    - net: bcmgenet: fix MoCA LED control
    - net: lan966x: Fix possible deadlock inside PTP
    - net/mlx4_en: Introduce flexible array to silence overflow warning
    - net/mlx5e: Align IPsec ASO result memory to be as required by hardware
    - selftest: fib_tests: Always cleanup before exit
    - sefltests: netdevsim: wait for devlink instance after netns removal
    - drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
    - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
    - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec
    - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC
    - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
    - drm/bridge: megachips: Fix error handling in i2c_register_driver()
    - drm/vkms: Fix memory leak in vkms_init()
    - drm/vkms: Fix null-ptr-deref in vkms_release()
    - drm/modes: Use strscpy() to copy command-line mode name
    - drm/vc4: dpi: Fix format mapping for RGB565
    - drm/bridge: it6505: Guard bridge power in IRQ handler
    - drm: tidss: Fix pixel format definition
    - gpu: ipu-v3: common: Add of_node_put() for reference returned by
      of_graph_get_port_by_id()
    - drm/ast: Init iosys_map pointer as I/O memory for damage handling
    - drm/vc4: drop all currently held locks if deadlock happens
    - hwmon: (ftsteutates) Fix scaling of measurements
    - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()
    - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
    - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins
    - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
    - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
    - drm/vc4: hvs: Configure the HVS COB allocations
    - drm/vc4: hvs: Set AXI panic modes
    - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4
    - drm/vc4: hvs: Correct interrupt masking bit assignment for HVS5
    - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
    - drm/vc4: hdmi: Correct interlaced timings again
    - drm/msm: clean event_thread->worker in case of an error
    - drm/panel-edp: fix name for IVO product id 854b
    - scsi: qla2xxx: Fix exchange oversubscription
    - scsi: qla2xxx: Fix exchange oversubscription for management commands
    - scsi: qla2xxx: edif: Fix clang warning
    - ASoC: fsl_sai: initialize is_dsp_mode flag
    - drm/bridge: tc358767: Set default CLRSIPO count
    - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
    - ALSA: hda/ca0132: minor fix for allocation size
    - drm/amdgpu: Use the sched from entity for amdgpu_cs trace
    - drm/msm/gem: Add check for kmalloc
    - drm/msm/dpu: Disallow unallocated resources to be returned
    - drm/bridge: lt9611: fix sleep mode setup
    - drm/bridge: lt9611: fix HPD reenablement
    - drm/bridge: lt9611: fix polarity programming
    - drm/bridge: lt9611: fix programming of video modes
    - drm/bridge: lt9611: fix clock calculation
    - drm/bridge: lt9611: pass a pointer to the of node
    - regulator: tps65219: use IS_ERR() to detect an error pointer
    - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
    - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags
    - drm/msm/dsi: Allow 2 CTRLs on v2.5.0
    - scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096
    - drm/msm/dpu: sc7180: add missing WB2 clock control
    - drm/msm: use strscpy instead of strncpy
    - drm/msm/dpu: Add check for cstate
    - drm/msm/dpu: Add check for pstates
    - drm/msm/mdp5: Add check for kzalloc
    - habanalabs: bugs fixes in timestamps buff alloc
    - pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()
    - pinctrl: mediatek: Initialize variable pullen and pullup to zero
    - pinctrl: mediatek: Initialize variable *buf to zero
    - gpu: host1x: Fix mask for syncpoint increment register
    - gpu: host1x: Don't skip assigning syncpoints to channels
    - drm/tegra: firewall: Check for is_addr_reg existence in IMM check
    - drm/i915/mtl: Add initial gt workarounds
    - drm/i915/xehp: GAM registers don't need to be re-applied on engine resets
    - pinctrl: renesas: rzg2l: Fix configuring the GPIO pins as interrupts
    - drm/i915/xehp: Annotate a couple more workaround registers as MCR
    - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()
    - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd
    - drm/mediatek: Use NULL instead of 0 for NULL pointer
    - drm/mediatek: Drop unbalanced obj unref
    - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc
    - drm/mediatek: Clean dangling pointer on bind error path
    - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
    - dt-bindings: display: mediatek: Fix the fallback for mediatek,mt8186-disp-
      ccorr
    - gpio: pca9570: rename platform_data to chip_data
    - gpio: vf610: connect GPIO label to dev name
    - ASoC: topology: Properly access value coming from topology file
    - spi: dw_bt1: fix MUX_MMIO dependencies
    - ASoC: mchp-spdifrx: fix controls which rely on rsr register
    - ASoC: mchp-spdifrx: fix return value in case completion times out
    - ASoC: mchp-spdifrx: fix controls that works with completion mechanism
    - ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()
    - dm: improve shrinker debug names
    - regmap: apply reg_base and reg_downshift for single register ops
    - accel: fix CONFIG_DRM dependencies
    - ASoC: rsnd: fixup #endif position
    - ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()
    - ASoC: dt-bindings: meson: fix gx-card codec node regex
    - regulator: tps65219: use generic set_bypass()
    - hwmon: (asus-ec-sensors) add missing mutex path
    - hwmon: (ltc2945) Handle error case in ltc2945_value_store
    - ALSA: hda: Fix the control element identification for multiple codecs
    - drm/amdgpu: fix enum odm_combine_mode mismatch
    - scsi: mpt3sas: Fix a memory leak
    - scsi: aic94xx: Add missing check for dma_map_single()
    - HID: multitouch: Add quirks for flipped axes
    - HID: retain initial quirks set up when creating HID devices
    - ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared
    - ASoC: qcom: q6apm-dai: fix race condition while updating the position
      pointer
    - ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag
    - ASoC: codecs: lpass: register mclk after runtime pm
    - ASoC: codecs: lpass: fix incorrect mclk rate
    - drm/amd/display: don't call dc_interrupt_set() for disabled crtcs
    - HID: logitech-hidpp: Hard-code HID++ 1.0 fast scroll support
    - spi: bcm63xx-hsspi: Fix multi-bit mode setting
    - hwmon: (mlxreg-fan) Return zero speed for broken fan
    - ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init
    - dm: remove flush_scheduled_work() during local_exit()
    - nfs4trace: fix state manager flag printing
    - NFS: fix disabling of swap
    - drm/i915/pvc: Implement recommended caching policy
    - drm/i915/pvc: Annotate two more workaround/tuning registers as MCR
    - drm/i915: Fix GEN8_MISCCPCTL
    - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
    - ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
    - HID: bigben: use spinlock to protect concurrent accesses
    - HID: bigben_worker() remove unneeded check on report_field
    - HID: bigben: use spinlock to safely schedule workers
    - hid: bigben_probe(): validate report count
    - ALSA: hda/hdmi: Register with vga_switcheroo on Dual GPU Macbooks
    - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()
    - NFSD: enhance inter-server copy cleanup
    - NFSD: fix leaked reference count of nfsd4_ssc_umount_item
    - nfsd: fix race to check ls_layouts
    - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath
    - NFSD: fix problems with cleanup on errors in nfsd4_copy
    - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open
    - nfsd: don't fsync nfsd_files on last close
    - NFSD: copy the whole verifier in nfsd_copy_write_verifier
    - cifs: Fix lost destroy smbd connection when MR allocate failed
    - cifs: Fix warning and UAF when destroy the MR list
    - cifs: use tcon allocation functions even for dummy tcon
    - gfs2: jdata writepage fix
    - perf llvm: Fix inadvertent file creation
    - leds: led-core: Fix refcount leak in of_led_get()
    - leds: is31fl319x: Wrap mutex_destroy() for devm_add_action_or_rest()
    - leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver
    - tools/tracing/rtla: osnoise_hist: use total duration for average calculation
    - perf inject: Use perf_data__read() for auxtrace
    - perf intel-pt: Do not try to queue auxtrace data on pipe
    - perf stat: Hide invalid uncore event output for aggr mode
    - perf jevents: Correct bad character encoding
    - perf test bpf: Skip test if kernel-debuginfo is not present
    - perf tools: Fix auto-complete on aarch64
    - perf stat: Avoid merging/aggregating metric counts twice
    - sparc: allow PM configs for sparc32 COMPILE_TEST
    - selftests: find echo binary to use -ne options
    - selftests/ftrace: Fix bash specific "==" operator
    - selftests: use printf instead of echo -ne
    - perf record: Fix segfault with --overwrite and --max-size
    - printf: fix errname.c list
    - perf tests stat_all_metrics: Change true workload to sleep workload for
      system wide check
    - objtool: add UACCESS exceptions for __tsan_volatile_read/write
    - selftests/ftrace: Fix probepoint testcase to ignore __pfx_* symbols
    - sysctl: fix proc_dobool() usability
    - mfd: rk808: Re-add rk808-clkout to RK818
    - mfd: cs5535: Don't build on UML
    - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
    - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0
    - RDMA/erdma: Fix refcount leak in erdma_mmap
    - dmaengine: HISI_DMA should depend on ARCH_HISI
    - RDMA/hns: Fix refcount leak in hns_roce_mmap
    - iio: light: tsl2563: Do not hardcode interrupt trigger type
    - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()
    - i2c: designware: fix i2c_dw_clk_rate() return size to be u32
    - i2c: qcom-geni: change i2c_master_hub to static
    - soundwire: cadence: Don't overflow the command FIFOs
    - driver core: fix potential null-ptr-deref in device_add()
    - kobject: Fix slab-out-of-bounds in fill_kobj_path()
    - alpha/boot/tools/objstrip: fix the check for ELF header
    - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()
    - media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU
    - media: uvcvideo: Refactor uvc_ctrl_mappings_uvcXX
    - media: uvcvideo: Refactor power_line_frequency_controls_limited
    - coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR
    - coresight: cti: Prevent negative values of enable count
    - coresight: cti: Add PM runtime call in enable_store
    - usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count
    - PCI/IOV: Enlarge virtfn sysfs name buffer
    - PCI: switchtec: Return -EFAULT for copy_to_user() errors
    - PCI: endpoint: pci-epf-vntb: Add epf_ntb_mw_bar_clear() num_mws kernel-doc
    - hwtracing: hisi_ptt: Only add the supported devices to the filters list
    - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()
    - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()
    - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()
    - Revert "char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in
      set_protocol"
    - eeprom: idt_89hpesx: Fix error handling in idt_init()
    - applicom: Fix PCI device refcount leak in applicom_init()
    - firmware: stratix10-svc: add missing gen_pool_destroy() in
      stratix10_svc_drv_probe()
    - firmware: stratix10-svc: fix error handle while alloc/add device failed
    - VMCI: check context->notify_page after call to get_user_pages_fast() to
      avoid GPF
    - mei: pxp: Use correct macros to initialize uuid_le
    - misc/mei/hdcp: Use correct macros to initialize uuid_le
    - misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe()
    - iommu/exynos: Fix error handling in exynos_iommu_init()
    - driver core: fix resource leak in device_add()
    - driver core: location: Free struct acpi_pld_info *pld before return false
    - drivers: base: transport_class: fix possible memory leak
    - drivers: base: transport_class: fix resource leak when
      transport_add_device() fails
    - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle
    - selftests: iommu: Fix test_cmd_destroy_access() call in user_copy
    - iommufd: Add three missing structures in ucmd_buffer
    - fotg210-udc: Add missing completion handler
    - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers
    - fpga: microchip-spi: move SPI I/O buffers out of stack
    - fpga: microchip-spi: rewrite status polling in a time measurable way
    - usb: early: xhci-dbc: Fix a potential out-of-bound memory access
    - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case
    - RDMA/cxgb4: add null-ptr-check after ip_dev_find()
    - usb: musb: mediatek: don't unregister something that wasn't registered
    - usb: gadget: configfs: Restrict symlink creation is UDC already binded
    - phy: mediatek: remove temporary variable @mask_
    - PCI: mt7621: Delay phy ports initialization
    - iommu/vt-d: Set No Execute Enable bit in PASID table entry
    - power: supply: remove faulty cooling logic
    - RDMA/siw: Fix user page pinning accounting
    - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
    - usb: max-3421: Fix setting of I/O pins
    - RDMA/irdma: Cap MSIX used to online CPUs + 1
    - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue
    - tty: serial: imx: disable Ageing Timer interrupt request irq
    - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links
    - driver core: fw_devlink: Don't purge child fwnode's consumer links
    - driver core: fw_devlink: Allow marking a fwnode link as being part of a
      cycle
    - driver core: fw_devlink: Consolidate device link flag computation
    - driver core: fw_devlink: Improve check for fwnode with no device/driver
    - driver core: fw_devlink: Make cycle detection more robust
    - mtd: mtdpart: Don't create platform device that'll never probe
    - usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev
    - dmaengine: dw-edma: Fix readq_ch() return value truncation
    - PCI: Fix dropping valid root bus resources with .end = zero
    - phy: rockchip-typec: fix tcphy_get_mode error case
    - PCI: qcom: Fix host-init error handling
    - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
    - iommu: Fix error unwind in iommu_group_alloc()
    - iommu/amd: Do not identity map v2 capable device when snp is enabled
    - dmaengine: sf-pdma: pdma_desc memory leak fix
    - dmaengine: dw-axi-dmac: Do not dereference NULL structure
    - dmaengine: ptdma: check for null desc before calling pt_cmd_callback
    - iommu/vt-d: Fix error handling in sva enable/disable paths
    - iommu/vt-d: Allow to use flush-queue when first level is default
    - RDMA/rxe: Cleanup mr_check_range
    - RDMA/rxe: Move rxe_map_mr_sg to rxe_mr.c
    - RDMA-rxe: Isolate mr code from atomic_reply()
    - RDMA-rxe: Isolate mr code from atomic_write_reply()
    - RDMA/rxe: Cleanup page variables in rxe_mr.c
    - RDMA/rxe: Replace rxe_map and rxe_phys_buf by xarray
    - Subject: RDMA/rxe: Handle zero length rdma
    - RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering
      memory on first packet
    - RDMA/rxe: Fix missing memory barriers in rxe_queue.h
    - IB/hfi1: Fix math bugs in hfi1_can_pin_pages()
    - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
    - Revert "remoteproc: qcom_q6v5_mss: map/unmap metadata region before/after
      use"
    - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
    - media: ti: cal: fix possible memory leak in cal_ctx_create()
    - media: platform: ti: Add missing check for devm_regulator_get
    - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in
      imx7_csi_init()
    - powerpc: Remove linker flag from KBUILD_AFLAGS
    - s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64
    - builddeb: clean generated package content
    - media: max9286: Fix memleak in max9286_v4l2_register()
    - media: ov2740: Fix memleak in ov2740_init_controls()
    - media: ov5675: Fix memleak in ov5675_init_controls()
    - media: i2c: tc358746: fix missing return assignment
    - media: i2c: tc358746: fix ignoring read error in g_register callback
    - media: i2c: tc358746: fix possible endianness issue
    - media: ov5640: Fix soft reset sequence and timings
    - media: ov5640: Handle delays when no reset_gpio set
    - media: mc: Get media_device directly from pad
    - media: i2c: ov772x: Fix memleak in ov772x_probe()
    - media: i2c: imx219: Split common registers from mode tables
    - media: i2c: imx219: Fix binning for RAW8 capture
    - media: platform: mtk-mdp3: Fix return value check in mdp_probe()
    - media: camss: csiphy-3ph: avoid undefined behavior
    - media: platform: mtk-mdp3: fix Kconfig dependencies
    - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data
    - media: v4l2-jpeg: ignore the unknown APP14 marker
    - media: hantro: Fix JPEG encoder ENUM_FRMSIZE on RK3399
    - media: imx-jpeg: Apply clk_bulk api instead of operating specific clk
    - media: amphion: correct the unspecified color space
    - media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers
    - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
    - media: atomisp: fix videobuf2 Kconfig depenendency
    - media: atomisp: Only set default_run_mode on first open of a stream/asd
    - media: i2c: ov7670: 0 instead of -EINVAL was returned
    - media: usb: siano: Fix use after free bugs caused by do_submit_urb
    - media: saa7134: Use video_unregister_device for radio_dev
    - rpmsg: glink: Avoid infinite loop on intent for missing channel
    - rpmsg: glink: Release driver_override
    - ARM: OMAP2+: omap4-common: Fix refcount leak bug
    - arm64: dts: qcom: msm8996: Add additional A2NoC clocks
    - udf: Define EFSCORRUPTED error code
    - context_tracking: Fix noinstr vs KASAN
    - exit: Detect and fix irq disabled state in oops
    - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
    - fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
    - blk-iocost: fix divide by 0 error in calc_lcoefs()
    - blk-cgroup: dropping parent refcount after pd_free_fn() is done
    - blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and
      blkcg_deactivate_policy()
    - trace/blktrace: fix memory leak with using debugfs_lookup()
    - btrfs: scrub: improve tree block error reporting
    - arm64: zynqmp: Enable hs termination flag for USB dwc3 controller
    - cpuidle, intel_idle: Fix CPUIDLE_FLAG_INIT_XSTATE
    - x86/fpu: Don't set TIF_NEED_FPU_LOAD for PF_IO_WORKER threads
    - cpuidle: drivers: firmware: psci: Dont instrument suspend code
    - cpuidle: lib/bug: Disable rcu_is_watching() during WARN/BUG
    - perf/x86/intel/uncore: Add Meteor Lake support
    - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
    - wifi: ath11k: fix monitor mode bringup crash
    - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
    - rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
    - rcu: Suppress smp_processor_id() complaint in
      synchronize_rcu_expedited_wait()
    - srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL
    - rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
    - rcu-tasks: Handle queue-shrink/callback-enqueue race condition
    - wifi: ath11k: debugfs: fix to work with multiple PCI devices
    - thermal: intel: Fix unsigned comparison with less than zero
    - timers: Prevent union confusion from unexpected restart_syscall()
    - x86/bugs: Reset speculation control settings on init
    - bpftool: Always disable stack protection for BPF objects
    - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-
      of-bounds
    - wifi: rtw89: fix assignation of TX BD RAM table
    - wifi: mt7601u: fix an integer underflow
    - inet: fix fast path in __inet_hash_connect()
    - ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
    - ice: add missing checks for PF vsi type
    - Compiler attributes: GCC cold function alignment workarounds
    - ACPI: Don't build ACPICA with '-Os'
    - bpf, docs: Fix modulo zero, division by zero, overflow, and underflow
    - thermal: intel: intel_pch: Add support for Wellsburg PCH
    - clocksource: Suspend the watchdog temporarily when high read latency
      detected
    - crypto: hisilicon: Wipe entire pool on error
    - net: bcmgenet: Add a check for oversized packets
    - m68k: Check syscall_trace_enter() return code
    - s390/mm,ptdump: avoid Kasan vs Memcpy Real markers swapping
    - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
    - can: isotp: check CAN address family in isotp_bind()
    - gcc-plugins: drop -std=gnu++11 to fix GCC 13 build
    - tools/power/x86/intel-speed-select: Add Emerald Rapid quirk
    - platform/x86: dell-ddv: Add support for interface version 3
    - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
    - ACPI: video: Fix Lenovo Ideapad Z570 DMI match
    - net/mlx5: fw_tracer: Fix debug print
    - coda: Avoid partial allocation of sig_inputArgs
    - uaccess: Add minimum bounds check on kernel buffer size
    - s390/idle: mark arch_cpu_idle() noinstr
    - time/debug: Fix memory leak with using debugfs_lookup()
    - PM: domains: fix memory leak with using debugfs_lookup()
    - PM: EM: fix memory leak with using debugfs_lookup()
    - Bluetooth: Fix issue with Actions Semi ATS2851 based devices
    - Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921
    - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
    - wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30
    - hv_netvsc: Check status in SEND_RNDIS_PKT completion message
    - s390/kfence: fix page fault reporting
    - devlink: Fix TP_STRUCT_entry in trace of devlink health report
    - scm: add user copy checks to put_cmsg()
    - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F
    - drm: panel-orientation-quirks: Add quirk for DynaBook K50
    - drm/amd/display: Reduce expected sdp bandwidth for dcn321
    - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h
      write
    - drm/amd/display: Fix potential null-deref in dm_resume
    - drm/omap: dsi: Fix excessive stack usage
    - HID: Add Mapping for System Microphone Mute
    - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers
    - drm/amd/display: Defer DIG FIFO disable after VID stream enable
    - drm/radeon: free iio for atombios when driver shutdown
    - drm/amd: Avoid BUG() for case of SRIOV missing IP version
    - drm/amdkfd: Page aligned memory reserve size
    - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write
    - Revert "fbcon: don't lose the console font across generic->chip driver
      switch"
    - drm/amd: Avoid ASSERT for some message failures
    - drm: amd: display: Fix memory leakage
    - drm/amd/display: fix mapping to non-allocated address
    - HID: uclogic: Add frame type quirk
    - HID: uclogic: Add battery quirk
    - HID: uclogic: Add support for XP-PEN Deco Pro SW
    - HID: uclogic: Add support for XP-PEN Deco Pro MW
    - drm/msm/dsi: Add missing check for alloc_ordered_workqueue
    - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
    - drm: rcar-du: Fix setting a reserved bit in DPLLCR
    - drm/drm_print: correct format problem
    - drm/amd/display: Set hvm_enabled flag for S/G mode
    - drm/client: Test for connectors before sending hotplug event
    - habanalabs: extend fatal messages to contain PCI info
    - habanalabs: fix bug in timestamps registration code
    - docs/scripts/gdb: add necessary make scripts_gdb step
    - drm/msm/dpu: Add DSC hardware blocks to register snapshot
    - ASoC: soc-compress: Reposition and add pcm_mutex
    - ASoC: kirkwood: Iterate over array indexes instead of using pointer math
    - regulator: max77802: Bounds check regulator id against opmode
    - regulator: s5m8767: Bounds check id indexing into arrays
    - Revert "drm/amdgpu: TA unload messages are not actually sent to psp when
      amdgpu is uninstalled"
    - drm/amd/display: fix FCLK pstate change underflow
    - gfs2: Improve gfs2_make_fs_rw error handling
    - hwmon: (coretemp) Simplify platform device handling
    - hwmon: (nct6775) Directly call ASUS ACPI WMI method
    - hwmon: (nct6775) B650/B660/X670 ASUS boards support
    - pinctrl: at91: use devm_kasprintf() to avoid potential leaks
    - drm/amd/display: Do not commit pipe when updating DRR
    - scsi: snic: Fix memory leak with using debugfs_lookup()
    - scsi: ufs: core: Fix device management cmd timeout flow
    - HID: logitech-hidpp: Don't restart communication if not necessary
    - drm/amd/display: Enable P-state validation checks for DCN314
    - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
    - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now
    - drm/amd/display: disable SubVP + DRR to prevent underflow
    - dm thin: add cond_resched() to various workqueue loops
    - dm cache: add cond_resched() to various workqueue loops
    - nfsd: zero out pointers after putting nfsd_files on COPY setup error
    - nfsd: don't hand out delegation on setuid files being opened for write
    - cifs: prevent data race in smb2_reconnect()
    - drm/i915/mtl: Correct implementation of Wa_18018781329
    - drm/shmem-helper: Revert accidental non-GPL export
    - driver core: fw_devlink: Avoid spurious error message
    - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
    - firmware: coreboot: framebuffer: Ignore reserved pixel color bits
    - block: don't allow multiple bios for IOCB_NOWAIT issue
    - block: clear bio->bi_bdev when putting a bio back in the cache
    - block: be a bit more careful in checking for NULL bdev while polling
    - rtc: pm8xxx: fix set-alarm race
    - ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms'
    - ipmi:ssif: resend_msg() cannot fail
    - ipmi_ssif: Rename idle state and check
    - ipmi:ssif: Add a timer between request retries
    - io_uring: Replace 0-length array with flexible array
    - io_uring: use user visible tail in io_uring_poll()
    - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
    - io_uring: add a conditional reschedule to the IOPOLL cancelation loop
    - io_uring: add reschedule point to handle_tw_list()
    - io_uring/rsrc: disallow multi-source reg buffers
    - io_uring: remove MSG_NOSIGNAL from recvmsg
    - io_uring/poll: allow some retries for poll triggering spuriously
    - io_uring: fix fget leak when fs don't support nowait buffered read
    - s390/extmem: return correct segment type in __segment_load()
    - s390: discard .interp section
    - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
    - s390/kprobes: fix current_kprobe never cleared after kprobes reenter
    - KVM: s390: disable migration mode when dirty tracking is disabled
    - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID
    - cifs: Fix uninitialized memory read in smb3_qfs_tcon()
    - cifs: Fix uninitialized memory reads for oparms.mode
    - cifs: fix mount on old smb servers
    - cifs: introduce cifs_io_parms in smb2_async_writev()
    - cifs: split out smb3_use_rdma_offload() helper
    - cifs: don't try to use rdma offload on encrypted connections
    - cifs: Check the lease context if we actually got a lease
    - cifs: return a single-use cfid if we did not get a lease
    - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization
    - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()
    - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi
    - btrfs: hold block group refcount during async discard
    - btrfs: sysfs: update fs features directory asynchronously
    - locking/rwsem: Prevent non-first waiter from spinning in down_write()
      slowpath
    - ksmbd: fix wrong data area length for smb2 lock request
    - ksmbd: do not allow the actual frame length to be smaller than the rfc1002
      length
    - ksmbd: fix possible memory leak in smb2_lock()
    - torture: Fix hang during kthread shutdown phase
    - ARM: dts: exynos: correct HDMI phy compatible in Exynos4
    - io_uring: mark task TASK_RUNNING before handling resume/task work
    - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
    - fs: hfsplus: fix UAF issue in hfsplus_put_super
    - exfat: fix reporting fs error when reading dir beyond EOF
    - exfat: fix unexpected EOF while reading dir
    - exfat: redefine DIR_DELETED as the bad cluster number
    - exfat: fix inode->i_blocks for non-512 byte sector size device
    - fs: dlm: start midcomms before scand
    - fs: dlm: fix use after free in midcomms commit
    - fs: dlm: be sure to call dlm_send_queue_flush()
    - fs: dlm: fix race setting stop tx flag
    - fs: dlm: don't set stop rx flag after node reset
    - fs: dlm: move sending fin message into state change handling
    - fs: dlm: send FIN ack back in right cases
    - f2fs: fix information leak in f2fs_move_inline_dirents()
    - f2fs: retry to update the inode page given data corruption
    - f2fs: fix cgroup writeback accounting with fs-layer encryption
    - f2fs: fix kernel crash due to null io->bio
    - f2fs: Revert "f2fs: truncate blocks in batch in __complete_revoke_list()"
    - ocfs2: fix defrag path triggering jbd2 ASSERT
    - ocfs2: fix non-auto defrag path not working issue
    - fs/cramfs/inode.c: initialize file_ra_state
    - selftests/landlock: Skip overlayfs tests when not supported
    - selftests/landlock: Test ptrace as much as possible with Yama
    - udf: Truncate added extents on failed expansion
    - udf: Do not bother merging very long extents
    - udf: Do not update file length for failed writes to inline files
    - udf: Preserve link count of system files
    - udf: Detect system inodes linked into directory hierarchy
    - udf: Fix file corruption when appending just after end of preallocated
      extent
    - md: don't update recovery_cp when curr_resync is ACTIVE
    - KVM: Destroy target device if coalesced MMIO unregistration fails
    - KVM: VMX: Fix crash due to uninitialized current_vmcs
    - KVM: Register /dev/kvm as the _very_ last thing during initialization
    - KVM: x86: Purge "highest ISR" cache when updating APICv state
    - KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps
    - KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled
    - KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID
    - KVM: SVM: Flush the "current" TLB when activating AVIC
    - KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target
    - KVM: SVM: Don't put/load AVIC when setting virtual APIC mode
    - KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
    - KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32
    - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
    - KVM: SVM: hyper-v: placate modpost section mismatch error
    - selftests: x86: Fix incorrect kernel headers search path
    - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
    - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
    - x86/reboot: Disable virtualization in an emergency if SVM is supported
    - x86/reboot: Disable SVM, not just VMX, when stopping CPUs
    - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
    - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe
      range
    - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
    - x86/microcode/AMD: Add a @cpu parameter to the reloading functions
    - x86/microcode/AMD: Fix mixed steppings support
    - x86/speculation: Allow enabling STIBP with legacy IBRS
    - Documentation/hw-vuln: Document the interaction between IBRS and STIBP
    - virt/sev-guest: Return -EIO if certificate buffer is not large enough
    - brd: mark as nowait compatible
    - brd: return 0/-error from brd_insert_page()
    - brd: check for REQ_NOWAIT and set correct page allocation mask
    - ima: fix error handling logic when file measurement failed
    - ima: Align ima_file_mmap() parameters with mmap_file LSM hook
    - selftests/powerpc: Fix incorrect kernel headers search path
    - selftests/ftrace: Fix eprobe syntax test case to check filter support
    - selftests: sched: Fix incorrect kernel headers search path
    - selftests: core: Fix incorrect kernel headers search path
    - selftests: pid_namespace: Fix incorrect kernel headers search path
    - selftests: arm64: Fix incorrect kernel headers search path
    - selftests: clone3: Fix incorrect kernel headers search path
    - selftests: pidfd: Fix incorrect kernel headers search path
    - selftests: membarrier: Fix incorrect kernel headers search path
    - selftests: kcmp: Fix incorrect kernel headers search path
    - selftests: media_tests: Fix incorrect kernel headers search path
    - selftests: gpio: Fix incorrect kernel headers search path
    - selftests: filesystems: Fix incorrect kernel headers search path
    - selftests: user_events: Fix incorrect kernel headers search path
    - selftests: ptp: Fix incorrect kernel headers search path
    - selftests: sync: Fix incorrect kernel headers search path
    - selftests: rseq: Fix incorrect kernel headers search path
    - selftests: move_mount_set_group: Fix incorrect kernel headers search path
    - selftests: mount_setattr: Fix incorrect kernel headers search path
    - selftests: perf_events: Fix incorrect kernel headers search path
    - selftests: ipc: Fix incorrect kernel headers search path
    - selftests: futex: Fix incorrect kernel headers search path
    - selftests: drivers: Fix incorrect kernel headers search path
    - selftests: dmabuf-heaps: Fix incorrect kernel headers search path
    - selftests: vm: Fix incorrect kernel headers search path
    - selftests: seccomp: Fix incorrect kernel headers search path
    - irqdomain: Fix association race
    - irqdomain: Fix disassociation race
    - irqdomain: Look for existing mapping only once
    - irqdomain: Drop bogus fwspec-mapping error handling
    - irqdomain: Refactor __irq_domain_alloc_irqs()
    - irqdomain: Fix mapping-creation race
    - irqdomain: Fix domain registration race
    - crypto: qat - fix out-of-bounds read
    - mm/damon/paddr: fix missing folio_put()
    - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
    - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
    - jbd2: fix data missing when reusing bh which is ready to be checkpointed
    - ext4: optimize ea_inode block expansion
    - ext4: refuse to create ea block when umounted
    - cxl/pmem: Fix nvdimm registration races
    - Input: exc3000 - properly stop timer on shutdown
    - mtd: spi-nor: sfdp: Fix index value for SCCR dwords
    - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
    - dm: send just one event on resize, not two
    - dm: add cond_resched() to dm_wq_work()
    - dm: add cond_resched() to dm_wq_requeue_work()
    - wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice
    - wifi: rtl8xxxu: Use a longer retry limit of 48
    - wifi: ath11k: allow system suspend to survive ath11k
    - wifi: cfg80211: Fix use after free for wext
    - wifi: cfg80211: Set SSID if it is not already set
    - cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies
    - qede: fix interrupt coalescing configuration
    - thermal: intel: powerclamp: Fix cur_state for multi package system
    - dm flakey: fix logic when corrupting a bio
    - dm cache: free background tracker's queued work in btracker_destroy
    - dm flakey: don't corrupt the zero page
    - dm flakey: fix a bug with 32-bit highmem systems
    - hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation
    - hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div()
    - spi: intel: Check number of chip selects after reading the descriptor
    - ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node
    - ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node
    - ARM: dts: exynos: correct TMU phandle in Exynos4210
    - ARM: dts: exynos: correct TMU phandle in Exynos4
    - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family
    - ARM: dts: exynos: correct TMU phandle in Exynos5250
    - ARM: dts: exynos: correct TMU phandle in Odroid XU
    - ARM: dts: exynos: correct TMU phandle in Odroid HC1
    - arm64: acpi: Fix possible memory leak of ffh_ctxt
    - arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP
    - arm64: Reset KASAN tag in copy_highpage with HW tags only
    - fuse: add inode/permission checks to fileattr_get/fileattr_set
    - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
    - ceph: update the time stamps and try to drop the suid/sgid
    - regulator: core: Use ktime_get_boottime() to determine how long a regulator
      was off
    - panic: fix the panic_print NMI backtrace setting
    - mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON
    - genirq/msi, platform-msi: Ensure that MSI descriptors are unreferenced
    - genirq/msi: Take the per-device MSI lock before validating the control
      structure
    - spi: spi-sn-f-ospi: fix duplicate flag while assigning to mode_bits
    - alpha: fix FEN fault handling
    - dax/kmem: Fix leak of memory-hotplug resources
    - mips: fix syscall_get_nr
    - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
    - remoteproc/mtk_scp: Move clk ops outside send_lock
    - vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd
    - docs: gdbmacros: print newest record
    - mm: memcontrol: deprecate charge moving
    - mm/thp: check and bail out if page in deferred queue already
    - ktest.pl: Give back console on Ctrt^C on monitor
    - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
    - ktest.pl: Fix missing "end_monitor" when machine check fails
    - ktest.pl: Add RUN_TIMEOUT option with default unlimited
    - memory tier: release the new_memtier in find_create_memory_tier()
    - ring-buffer: Handle race between rb_move_tail and rb_check_pages
    - tools/bootconfig: fix single & used for logical condition
    - tracing/eprobe: Fix to add filter on eprobe description in README file
    - iommu/amd: Add a length limitation for the ivrs_acpihid command-line
      parameter
    - scsi: aacraid: Allocate cmd_priv with scsicmd
    - scsi: qla2xxx: Fix link failure in NPIV environment
    - scsi: qla2xxx: Check if port is online before sending ELS
    - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
    - scsi: qla2xxx: Remove unintended flag clearing
    - scsi: qla2xxx: Fix erroneous link down
    - scsi: qla2xxx: Remove increment of interface err cnt
    - scsi: ses: Don't attach if enclosure has no components
    - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
    - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
    - scsi: ses: Fix possible desc_ptr out-of-bounds accesses
    - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
    - RISC-V: add a spin_shadow_stack declaration
    - riscv: Avoid enabling interrupts in die()
    - riscv: mm: fix regression due to update_mmu_cache change
    - riscv: jump_label: Fixup unaligned arch_static_branch function
    - riscv: ftrace: Fixup panic by disabling preemption
    - riscv, mm: Perform BPF exhandler fixup on page fault
    - riscv: ftrace: Remove wasted nops for !RISCV_ISA_C
    - riscv: ftrace: Reduce the detour code size to half
    - MIPS: DTS: CI20: fix otg power gpio
    - PCI/PM: Observe reset delay irrespective of bridge_d3
    - PCI: Unify delay handling for reset and resume
    - PCI: hotplug: Allow marking devices as disconnected during bind/unbind
    - PCI: Avoid FLR for AMD FCH AHCI adapters
    - PCI/DPC: Await readiness of secondary bus after reset
    - bus: mhi: ep: Only send -ENOTCONN status if client driver is available
    - bus: mhi: ep: Move chan->lock to the start of processing queued ch ring
    - bus: mhi: ep: Save channel state locally during suspend and resume
    - iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
    - iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
    - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
    - iommu/vt-d: Fix PASID directory pointer coherency
    - vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR
    - vfio/type1: prevent underflow of locked_vm via exec()
    - vfio/type1: track locked_vm per dma
    - vfio/type1: restore locked_vm
    - drm/amd: Fix initialization for nbio 7.5.1
    - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
    - drm/radeon: Fix eDP for single-display iMac11,2
    - drm/i915: Don't use stolen memory for ring buffers with LLC
    - drm/i915: Don't use BAR mappings for ring buffers with LLC
    - drm/gud: Fix UBSAN warning
    - drm/edid: fix AVI infoframe aspect ratio handling
    - drm/edid: fix parsing of 3D modes from HDMI VSDB
    - qede: avoid uninitialized entries in coal_entry array
    - brd: use radix_tree_maybe_preload instead of radix_tree_preload
    - net: avoid double iput when sock_alloc_file fails
    - Linux 6.2.3

  * Miscellaneous Ubuntu changes
    - [Config] update annotations after applying 6.2.3 stable patches
    - [Config] update annotations after applying 6.2.6 stable patches

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 14 Mar 2023 16:43:44 +0100

linux (6.2.0-16.16) lunar; urgency=medium

  * lunar/linux: 6.2.0-16.16 -proposed tracker (LP: #2009914)

  * linux-libc-dev is no longer multi-arch safe (LP: #2009355)
    - Revert "UBUNTU: [Packaging] install headers to debian/linux-libc-dev
      directly"

  * linux: CONFIG_SERIAL_8250_MID=y (LP: #2009283)
    - [Config] enable CONFIG_SERIAL_8250_MID=y

  * cpufreq: intel_pstate: Update Balance performance EPP for Sapphire Rapids
    (LP: #2008519)
    - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 10 Mar 2023 18:34:28 +0100

linux (6.2.0-15.15) lunar; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: document annotations headers

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 10 Mar 2023 07:36:59 +0100

linux (6.2.0-14.14) lunar; urgency=medium

  * lunar/linux: 6.2.0-14.14 -proposed tracker (LP: #2009856)

  * Miscellaneous Ubuntu changes
    - [Packaging] rust: add rust build dependencies to all arches
    - [Packaging] Support skipped dkms modules
    - [Packaging] actually enforce set -e in dkms-build--nvidia-N
    - [Packaging] Preserve the correct log file variable value
    - [Packaging] update getabis

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 09 Mar 2023 16:40:36 +0100

linux (6.2.0-13.13) lunar; urgency=medium

  * lunar/linux: 6.2.0-13.13 -proposed tracker (LP: #2009704)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * mt7921: add support of MTFG table (LP: #2009642)
    - wifi: mt76: mt7921: add support to update fw capability with MTFG table

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 08 Mar 2023 14:40:25 +0100

linux (6.2.0-12.12) lunar; urgency=medium

  * lunar/linux: 6.2.0-12.12 -proposed tracker (LP: #2009698)

  * Miscellaneous Ubuntu changes
    - SAUCE: enforce rust availability only on x86_64
    - [Config] update CONFIG_RUST_IS_AVAILABLE

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 08 Mar 2023 12:50:15 +0100

linux (6.2.0-11.11) lunar; urgency=medium

  * lunar/linux: 6.2.0-11.11 -proposed tracker (LP: #2009697)

  * Miscellaneous Ubuntu changes
    - [Packaging] do not stop the build if rust is not available

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 08 Mar 2023 12:24:55 +0100

linux (6.2.0-10.10) lunar; urgency=medium

  * lunar/linux: 6.2.0-10.10 -proposed tracker (LP: #2009673)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * enable Rust support in the kernel (LP: #2007654)
    - [Packaging] propagate makefile variables to kernelconfig
    - SAUCE: rust: fix regexp in scripts/is_rust_module.sh
    - SAUCE: scripts: rust: drop is_rust_module.sh
    - SAUCE: rust: allow to use INIT_STACK_ALL_ZERO
    - SAUCE: scripts: Exclude Rust CUs with pahole
    - SAUCE: modpost: support arbitrary symbol length in modversion
    - SAUCE: allows to enable Rust with modversions
    - SAUCE: rust: properly detect the version of libclang used by bindgen
    - [Packaging] rust: add the proper make flags to enable rust support
    - [Packaging] add rust dependencies
    - [Packaging] bpftool: always use vmlinux to generate headers
    - [Packaging] run rustavailable target as debugging before build
    - [Config] enable Rust support

  * Fail to output sound to external monitor which connects via docking station
    (LP: #2009024)
    - [Config] Enable CONFIG_SND_HDA_INTEL_HDMI_SILENT_STREAM

  * Miscellaneous Ubuntu changes
    - SAUCE: Makefile: replace rsync with tar

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 08 Mar 2023 12:01:56 +0100

linux (6.2.0-1.1) lunar; urgency=medium

  * lunar/linux: 6.2.0-1.1 -proposed tracker (LP: #2009621)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)
    - SAUCE: apparmor: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor: add user namespace creation mediation

  * Lunar update: v6.2.2 upstream stable release (LP: #2009358)
    - ALSA: hda: cs35l41: Correct error condition handling
    - crypto: arm64/sm4-gcm - Fix possible crash in GCM cryption
    - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
    - vc_screen: don't clobber return value in vcs_read
    - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB
    - drm/amd/display: Properly reuse completion structure
    - scripts/tags.sh: fix incompatibility with PCRE2
    - wifi: rtw88: usb: Set qsel correctly
    - wifi: rtw88: usb: send Zero length packets if necessary
    - wifi: rtw88: usb: drop now unnecessary URB size check
    - usb: dwc3: pci: add support for the Intel Meteor Lake-M
    - USB: serial: option: add support for VW/Skoda "Carstick LTE"
    - usb: gadget: u_serial: Add null pointer check in gserial_resume
    - arm64: dts: uniphier: Fix property name in PXs3 USB node
    - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO
    - USB: core: Don't hold device lock while reading the "descriptors" sysfs file
    - Linux 6.2.2

  * Lunar update: v6.2.1 upstream stable release (LP: #2009127)
    - uaccess: Add speculation barrier to copy_from_user()
    - x86/alternatives: Introduce int3_emulate_jcc()
    - x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
    - x86/static_call: Add support for Jcc tail-calls
    - HID: mcp-2221: prevent UAF in delayed work
    - wifi: mwifiex: Add missing compatible string for SD8787
    - audit: update the mailing list in MAINTAINERS
    - platform/x86/amd/pmf: Add depends on CONFIG_POWER_SUPPLY
    - platform/x86: nvidia-wmi-ec-backlight: Add force module parameter
    - ext4: Fix function prototype mismatch for ext4_feat_ktype
    - randstruct: disable Clang 15 support
    - bpf: add missing header file include
    - Linux 6.2.1

  * Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
    - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read

  * overlayfs mounts as R/O over idmapped mount (LP: #2009065)
    - SAUCE: overlayfs: handle idmapped mounts in ovl_do_(set|remove)xattr

  * RaptorLake: Fix the Screen is shaking by onboard HDMI port in mirror mode
    (LP: #1993561)
    - drm/i915/display: Drop check for doublescan mode in modevalid
    - drm/i915/display: Prune Interlace modes for Display >=12

  * screen flicker after PSR2 enabled (LP: #2007516)
    - SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457

  * [23.04 FEAT] Support for new IBM Z Hardware (IBM z16) - Reset DAT-Protection
    facility support (LP: #1982378)
    - s390/mm: add support for RDP (Reset DAT-Protection)

  * [23.04 FEAT] zcrypt DD: AP command filtering (LP: #2003637)
    - s390/zcrypt: introduce ctfm field in struct CPRBX

  * rtcpie in timers from ubuntu_kernel_selftests randomly failing
    (LP: #1814234)
    - SAUCE: selftest: rtcpie: Force passing unreliable subtest

  * [23.04 FEAT] Support for List-Directed IPL and re-IPL from ECKD DASD
    (LP: #2003394)
    - s390/ipl: add DEFINE_GENERIC_LOADPARM()
    - s390/ipl: add loadparm parameter to eckd ipl/reipl data

  * Miscellaneous Ubuntu changes
    - SAUCE: drm/i915/sseu: fix max_subslices array-index-out-of-bounds access
    - SAUCE: mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
    - SAUCE: Revert "fbdev: Make registered_fb[] private to fbmem.c"
    - [Packaging] disable signing for ppc64el
    - [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
    - SAUCE: Revert "arm64/fpsimd: Make kernel_neon_ API _GPL"

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 07 Mar 2023 18:45:31 +0100

linux (6.2.0-0.0) lunar; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 03 Mar 2023 08:42:43 +0100

linux-unstable (6.2.0-10.10) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-10.10 -proposed tracker (LP: #2007818)

  * Built-in camera device dies after runtime suspended (LP: #2007530)
    - SAUCE: usb: xhci: Workaround for runpm issue on AMD xHC

  * Miscellaneous Ubuntu changes
    - [Config] update annotations after rebase to v6.2

  [ Upstream Kernel Changes ]

  * Rebase to v6.2

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 20 Feb 2023 10:36:20 +0100

linux-unstable (6.2.0-9.9) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-9.9 -proposed tracker (LP: #2007069)

  * Move kernel ADT tests to python3 (LP: #2004429)
    - [Debian] Use a python3 compatable kernel-testing repo

  * Mediatek FM350-GL wwan module failed to init: Invalid device status 0x1
    (LP: #2002089)
    - SAUCE: Revert "net: wwan: t7xx: Add AP CLDMA"
    - SAUCE: net: wwan: t7xx: Add AP CLDMA
    - SAUCE: net: wwan: t7xx: Infrastructure for early port configuration
    - SAUCE: net: wwan: t7xx: PCIe reset rescan
    - SAUCE: net: wwan: t7xx: Enable devlink based fw flashing and coredump
      collection
    - SAUCE: net: wwan: t7xx: Devlink documentation

  * LXD containers using shiftfs on ZFS or TMPFS broken on 5.15.0-48.54
    (LP: #1990849)
    - SAUCE: shiftfs: fix -EOVERFLOW inside the container

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: do not drop undefined configs in derivatives
    - [Packaging]: annotations: fix _remove_entry() logic
    - [Packaging] rsync no longer available on lunar
    - [Packaging] annotations: Handle single-line annoation rules
    - [Packaging] annotations: Preserve single-line annotation rules
    - [Packaging] annotations: Fix linter errors
    - [Packaging] annotations: Clean up policy writes
    - [Packaging] annotations: Handle tabs in annotations file
    - [Packaging] annotations: Fail on invalid lines
    - [Packaging] annotations: Write out annotations with notes first
    - [Packaging] annotations: Check validity of FLAVOUR_DEP
    - [Config] update annotations to split configs with/without notes
    - [Packaging] annotations: various code cleanups
    - [Config] update annotations after rebase to v6.2-rc8

  * Miscellaneous upstream changes
    - selftests/net: mv bpf/nat6to4.c to net folder

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc8

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 13 Feb 2023 09:32:18 +0100

linux-unstable (6.2.0-8.8) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-8.8 -proposed tracker (LP: #2004229)

  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable signing for ppc64el and s390x
    - SAUCE: s390/decompressor: specify __decompress() buf len to avoid overflow

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 31 Jan 2023 08:21:21 +0100

linux-unstable (6.2.0-7.7) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-7.7 -proposed tracker (LP: #2004142)

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 30 Jan 2023 10:23:15 +0100

linux-unstable (6.2.0-6.6) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-6.6 -proposed tracker (LP: #2004138)

  * Miscellaneous Ubuntu changes
    - [Packaging] debian/rules: Bring back 'editconfigs'
    - [Packaging] debian/rules: 1-maintainer.mk -- Use make's if-else
    - [Packaging] annotations: make sure to always drop undefined configs
    - [Config] update annotations after rebase to v6.2-rc6

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 30 Jan 2023 09:20:26 +0100

linux-unstable (6.2.0-5.5) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-5.5 -proposed tracker (LP: #2003682)

  * [23.04] Kernel 6.2 does not boot on s390x (LP: #2003348)
    - SAUCE Revert "zstd: import usptream v1.5.2"
    - SAUCE: Revert "zstd: Move zstd-common module exports to
      zstd_common_module.c"

  * Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

  * CVE-2023-0179
    - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

  * [23.04] net/smc: Alibaba patches about tunable buffer sizes may cause errors
    and need to be removed (kernel 6.2) (LP: #2003547)
    - SAUCE: Revert "net/smc: Unbind r/w buffer size from clcsock and make them
      tunable"
    - SAUCE: Revert "net/smc: Introduce a specific sysctl for TEST_LINK time"

  * 5.15 stuck at boot on c4.large (LP: #1956780)
    - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"

  * Miscellaneous Ubuntu changes
    - [Packaging] scripts/misc/kernelconfig: Disable config checks for mainline
      builds
    - [Packaging] annotations: add CONFIG_GCC_VERSION to the list of ignored
      configs

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 23 Jan 2023 08:20:26 +0100

linux-unstable (6.2.0-4.4) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-4.4 -proposed tracker (LP: #2003051)

  * Miscellaneous Ubuntu changes
    - [Packaging] add python3 as a build dependency
    - [Packaging] scripts/misc/kernelconfig: Rewrite

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 17 Jan 2023 09:18:54 +0100

linux-unstable (6.2.0-3.3) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-3.3 -proposed tracker (LP: #2002939)

  * Enable kernel config for P2PDMA (LP: #1987394)
    - [Config] Enable CONFIG_HSA_AMD_P2P

  * Miscellaneous Ubuntu changes
    - SAUCE: (no-up) Remove obj- += foo.o hack
    - SAUCE: (no-up) re-add ubuntu/ directory
    - [Config] enable EFI handover protocol
    - [Packaging] Fix module-check error when modules are compressed
    - SAUCE: (no-up) do not remove debian directory by 'make mrproper'
    - [Packaging] debian/rules: Drop AUTOBUILD
    - [Packaging] debian/rules: Drop NOKERNLOG and PRINTSHAS env variables
    - [Packaging] debian/rules: Replace skip<foo> variables with skip_checks
    - [Packaging] checks/retpoline-check: Make 'skipretpoline' argument optional
    - [Packaging] checks/module-signature-check: Add 'skip_checks' argument
    - [Packaging] debian/rules: Rename 'skip_dbg' to 'do_dbgsym_package'
    - [Packaging] debian/rules: Rename 'skip_checks' to 'do_skip_checks'
    - [Packaging] debian/rules: Rename 'full_build' to 'do_full_build'
    - [Packaging] debian/rules: Fix PPA debug package builds
    - [Packaging] debian/rules: Remove debug package install directory earlier
    - [Packaging] debian/rules: Remove unnecessary 'lockme_<foo>' variables
    - [Packaging] debian/rules: Remove unused target 'diffupstream'
    - [Packaging] debian/rules: Mark PHONY targets individually
    - [Packaging] debian/rules: Clean up 'help' target output
    - [Packaging] debian/rules: Clean up 'printenv' target output
    - [Packaging] debian/rules: Add missing 'do_<foo>' variables to 'printenv'
    - [Config] update annotations after rebase to v6.2-rc4

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 16 Jan 2023 16:01:40 +0100

linux-unstable (6.2.0-2.2) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-2.2 -proposed tracker (LP: #2001892)

  * Soundwire support for the Intel RPL Gen 0C40/0C11 platforms (LP: #2000030)
    - SAUCE: ASoC: Intel: soc-acpi: add configuration for variant of 0C40 product
    - SAUCE: ASoC: Intel: soc-acpi: add configuration for variant of 0C11 product

  * Miscellaneous Ubuntu changes
    - [Config] update toolchain version in annotations

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] Support skipped dkms modules"

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 05 Jan 2023 09:19:55 +0100

linux-unstable (6.2.0-1.1) lunar; urgency=medium

  * lunar/linux-unstable: 6.2.0-1.1 -proposed tracker (LP: #2000904)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: remove configs that are undefined across all
      arches/flavours
    - SAUCE: Revert "apparmor: make __aa_path_perm() static"
    - [Packaging] abi-check: ignore failures when abi check is skipped
    - [Packaging] temporarily disable zfs dkms
    - [Config] update annotations after rebase to 6.2-rc1

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 04 Jan 2023 12:08:32 +0100

linux-unstable (6.2.0-0.0) lunar; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Sun, 01 Jan 2023 10:16:00 +0100

linux (6.1.0-11.11) lunar; urgency=medium

  * lunar/linux: 6.1.0-11.11 -proposed tracker (LP: #2000704)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Lunar update: v6.1.1 upstream stable release (LP: #2000706)
    - x86/vdso: Conditionally export __vdso_sgx_enter_enclave()
    - libbpf: Fix uninitialized warning in btf_dump_dump_type_data
    - PCI: mt7621: Add sentinel to quirks table
    - mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem
    - mips: ralink: mt7621: soc queries and tests as functions
    - mips: ralink: mt7621: do not use kzalloc too early
    - irqchip/ls-extirq: Fix endianness detection
    - udf: Discard preallocation before extending file with a hole
    - udf: Fix preallocation discarding at indirect extent boundary
    - udf: Do not bother looking for prealloc extents if i_lenExtents matches
      i_size
    - udf: Fix extending file within last block
    - usb: gadget: uvc: Prevent buffer overflow in setup handler
    - USB: serial: option: add Quectel EM05-G modem
    - USB: serial: cp210x: add Kamstrup RF sniffer PIDs
    - USB: serial: f81232: fix division by zero on line-speed change
    - USB: serial: f81534: fix division by zero on line-speed change
    - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
    - staging: r8188eu: fix led register settings
    - igb: Initialize mailbox message for VF reset
    - usb: typec: ucsi: Resume in separate work
    - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system
      for Raptor Lake
    - cifs: fix oops during encryption
    - KEYS: encrypted: fix key instantiation with user-provided data
    - Linux 6.1.1

  * Expose built-in trusted and revoked certificates (LP: #1996892)
    - [Packaging] Expose built-in trusted and revoked certificates

  * Fix System cannot detect bluetooth after running suspend stress test
    (LP: #1998727)
    - wifi: rtw88: 8821c: enable BT device recovery mechanism

  * Gnome doesn't run smooth when performing normal usage with RPL-P CPU
    (LP: #1998419)
    - drm/i915/rpl-p: Add stepping info

  * Mute/mic LEDs no function on a HP platfrom (LP: #1998882)
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook

  * Add additional Mediatek MT7922 BT device ID (LP: #1998885)
    - Bluetooth: btusb: Add a new VID/PID 0489/e0f2 for MT7922

  * Support Icicle Kit reference design v2022.10 (LP: #1993148)
    - SAUCE: riscv: dts: microchip: Disable PCIe on the Icicle Kit

  * Add iommu passthrough quirk for Intel IPU6 on RaptorLake (LP: #1989041)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Raptor
      Lake

  * Enable Intel FM350 wwan CCCI driver port logging (LP: #1997686)
    - net: wwan: t7xx: use union to group port type specific data
    - net: wwan: t7xx: Add port for modem logging

  * TEE Support for CCP driver (LP: #1991608)
    - crypto: ccp - Add support for TEE for PCI ID 0x14CA

  * Kinetic update: v5.19.17 upstream stable release (LP: #1994179)
    - Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
    - kbuild: Add skip_encoding_btf_enum64 option to pahole

  * Kinetic update: v5.19.15 upstream stable release (LP: #1994078)
    - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"

  * support independent clock and LED GPIOs for Intel IPU6 platforms
    (LP: #1989046)
    - SAUCE: platform/x86: int3472: support independent clock and LED GPIOs

  * Kernel livepatch support for for s390x (LP: #1639924)
    - [Config] Enable EXPOLINE_EXTERN on s390x

  * Kinetic update: v5.19.7 upstream stable release (LP: #1988733)
    - Revert "PCI/portdrv: Don't disable AER reporting in
      get_port_device_capability()"

  * Kinetic update: v5.19.3 upstream stable release (LP: #1987345)
    - Revert "mm: kfence: apply kmemleak_ignore_phys on early allocated pool"

  * Fix non-working e1000e device after resume (LP: #1951861)
    - SAUCE: Revert "e1000e: Add polling mechanism to indicate CSME DPG exit"

  * Add additional Mediatek MT7921 WiFi/BT device IDs (LP: #1937004)
    - SAUCE: Bluetooth: btusb: Add support for Foxconn Mediatek Chip

  * Fix system sleep on TGL systems with Intel ME (LP: #1919321)
    - SAUCE: PCI: Serialize TGL e1000e PM ops

  * Fix broken e1000e device after S3 (LP: #1897755)
    - SAUCE: e1000e: Increase polling timeout on MDIC ready bit

  * Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
    - SAUCE: USB: core: Make port power cycle a seperate helper function
    - SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state

  * Set explicit CC in the headers package (LP: #1999750)
    - [Packaging] Set explicit CC in the headers package

  * commit cf58599cded35cf4affed1e659c0e2c742d3fda7 seems to be missing in
    kinetic master to remove "hio" reference from Makefile (LP: #1999556)
    - SAUCE: remove leftover reference to ubuntu/hio driver

  * Miscellaneous Ubuntu changes
    - [Packaging] kernelconfig: always complete all config checks
    - [Packaging] annotations: unify same rule across all flavour within the same
      arch
    - [Config] annotations: compact annotations file
    - [Config] disable EFI_ZBOOT
    - SAUCE: input: i8042: fix section mismatch warning
    - debian/dkms-versions -- re-enable zfs
    - [Packaging] old-kernelconfig: update config-check path
    - [Packaging] update getabis
    - [Packaging] update Ubuntu.md

  * Miscellaneous upstream changes
    - Revert "drm/i915/opregion: check port number bounds for SWSCI display power
      state"

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 30 Dec 2022 11:23:16 +0100

linux (6.1.0-10.10) lunar; urgency=medium

  * lunar/linux: 6.1.0-10.10 -proposed tracker (LP: #1999569)

  * Soundwire support for the Intel RPL Gen platforms (LP: #1997944)
    - ASoC: Intel: sof_sdw: Add support for SKU 0C10 product
    - ASoC: Intel: soc-acpi: add SKU 0C10 SoundWire configuration
    - ASoC: Intel: sof_sdw: Add support for SKU 0C40 product
    - ASoC: Intel: soc-acpi: add SKU 0C40 SoundWire configuration
    - ASoC: Intel: sof_sdw: Add support for SKU 0C4F product
    - ASoC: rt1318: Add RT1318 SDCA vendor-specific driver
    - ASoC: intel: sof_sdw: add rt1318 codec support.
    - ASoC: Intel: sof_sdw: Add support for SKU 0C11 product
    - ASoC: Intel: soc-acpi: add SKU 0C11 SoundWire configuration
    - SAUCE: ASoC: Intel: soc-acpi: update codec addr on 0C11/0C4F product
    - [Config] enable CONFIG_SND_SOC_RT1318_SDW

  * Virtual GPU driver packaging regression (LP: #1996112)
    - [Packaging] Reintroduce VM DRM drivers into modules

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 13 Dec 2022 22:14:08 +0100

linux (6.1.0-9.9) lunar; urgency=medium

  * Empty entry (ABI bump)

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 13 Dec 2022 21:31:08 +0100

linux (6.1.0-3.3) lunar; urgency=medium

  * lunar/linux: 6.1.0-3.3 -proposed tracker (LP: #1999534)

  * [DEP-8] Run ADT regression suite for lowlatency kernels Jammy and later
    (LP: #1999528)
    - [DEP-8] Fix regression suite to run on lowlatency

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: do not add constraints on toolchain versions

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 13 Dec 2022 16:45:59 +0100

linux (6.1.0-2.2) lunar; urgency=medium

  * lunar/linux: 6.1.0-2.2 -proposed tracker (LP: #1999411)

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: do not enforce toolchain versions

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 12 Dec 2022 17:05:59 +0100

linux (6.1.0-1.1) lunar; urgency=medium

  * lunar/linux: 6.1.0-1.1 -proposed tracker (LP: #1999373)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Packaging] annotations: set and delete configs from command line
    - [Packaging] migrateconfigs: ignore README.rst if it doesn't exist
    - [Packaging] migrate-annotations: properly determine arches in derivatives
    - [Packaging] annotations: allow to set note to config options directly
    - [Packaging] annotations: assume --query as default command
    - [Packaging] annotations: allow to query using CONFIG_<option> or <option>
    - [Packaging] annotations: support flavour inheritance
    - [Packaging] annotations: properly merge configs with includes
    - [Packaging] annotations: accept config options with or without CONFIG_
      prefix
    - [Packaging] annotations: clarify error message with --import
    - [Packaging] annotations: properly support multiple levels of inclusion
    - [Packaging] annotations: catch syntax errors in annotations
    - [Packaging] kernelconfig: report arch and flavour in config-check log
    - [Packaging] annotations: prevent generating .pyc files on import
    - [Packaging] annotations: prevent python broken pipe errors
    - [Packaging] annotations: allow to specify --write and --note at the same
      time
    - [Packaging] annotations: add an option to enable config autocompletion in
      bash
    - [Packaging] annotations: introduce --source
    - [Packaging] annotations: add missing CONFIG_ prefix in main()
    - [Packaging] Remove obsolete etc/kernelconfig
    - [Packaging] Rewrite debian/scripts/abi-check in Python
    - [Packaging] Simplify debian/scripts/module-check
    - [Packaging] Clean up debian/scripts/module-check
    - [Packaging] Move checker scripts to debian/scripts/checks
    - [Packaging] mark phony targets
    - [Packaging] Make the compiler for fix-filenames explicit
    - [Packaging] add -rR MAKEFLAGS to clear implicit rules
    - [Packaging] use dpkg-parsechangelog to get package name and series
    - [Packaging] simplify revision/release
    - [Packaging] simplify custom_override
    - [Packaging] Remove meaningless code in install-arch-headers
    - [Packaging] use olddefconfig in stamp-prepare-tree
    - [Packaging] use parralel builds in more places
    - [Packaging] install headers to debian/linux-libc-dev directly
    - [Packaging] simplify abinum and uploadnum definitions
    - [Packaging] Remove unused INSTALL_FW_PATH
    - [Packaging] Merge install commands
    - [Config] clean up deprecated notes in annotations
    - [Packaging] automatically apply changes to annotations and drop
      importconfigs
    - [Packaging] kernelconfig: drop listnewconfigs
    - [Packaging] annotations: do not hijack CONFIGS/* to update annotations

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 12 Dec 2022 10:05:03 +0100

linux (6.1.0-0.0) lunar; urgency=medium

  * Empty entry

  [ Upstream Kernel Changes ]

  * Rebase to v6.1

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 12 Dec 2022 09:42:01 +0100

linux-unstable (6.1.0-9.9) lunar; urgency=medium

  * lunar/linux-unstable: 6.1.0-9.9 -proposed tracker (LP: #1998078)

  * Miscellaneous Ubuntu changes
    - [Config] Set ARM64_ERRATUM_2077057=y
    - SAUCE: add python cached bytecode to .gitignore
    - [Packaging] config-check: ignore values that are not defined in annotations
    - [Packaging] config-check: do not strictly enforce CONFIG_CC_VERSION_TEXT
    - [Packaging] config-check: support annotations format 4
    - [Packaging] introduce annotations script
    - [Packaging] add a README.rst to document the new annotations schema
    - [Packaging] kernelconfig: automatically generate configs from annotations
    - [Packaging] drop deprecated script tristate.sh
    - [Packaging] use annotations to generate initial configs check them
    - [Packaging] simplify kernelconfig
    - [Packaging] kernelconfig: always keep configs
    - [Packaging] kernelconfig: provide listnewconfigs
    - [Packaging] kernelconfig: introduce importconfigs
    - [Packaging] snap: support new annotations with snapcraft
    - [Packaging] final-checks: support new annotations
    - [Packaging] introduce migrate-annotations
    - [Packaging] re-introduce previous kernelconfig as old-kernelconfig
    - [Packaging] provide migrateconfigs debian/rules target
    - [Packaging] correctly propagate errors during updateconfigs
    - [Packaging] annotations: report failed config checks in alphabetic order
    - [Config] merge configs into annotations
    - [Config] udpate annotations after rebase to v6.1-rc7

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 28 Nov 2022 11:25:44 +0100

linux-unstable (6.1.0-8.8) lunar; urgency=medium

  * lunar/linux-unstable: 6.1.0-8.8 -proposed tracker (LP: #1997357)

  *  Fibocom WWAN FM350-GL suspend error (notebook not suspend) (LP: #1990700)
    - net: wwan: t7xx: Add AP CLDMA

  * Miscellaneous Ubuntu changes
    - Rebase to v6.1-rc6
    - [Config] update configs following v6.1-rc6 rebase

  * Miscellaneous Ubuntu changes
    - [Config] update configs following v6.1-rc6 rebase

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 22 Nov 2022 11:56:26 +0100

linux-unstable (6.1.0-7.7) lunar; urgency=medium

  * lunar/linux-unstable: 6.1.0-7.7 -proposed tracker (LP: #1996731)

  * Miscellaneous Ubuntu changes
    - ppc64el: remove missing module

 -- Paolo Pisati <paolo.pisati@canonical.com>  Wed, 16 Nov 2022 11:37:05 +0100

linux-unstable (6.1.0-6.6) lunar; urgency=medium

  * lunar/linux-unstable: 6.1.0-6.6 -proposed tracker (LP: #1996616)

  * Miscellaneous Ubuntu changes
    - [Config] update configs following v6.1-rc5 rebase

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 15 Nov 2022 15:55:33 +0100

linux-unstable (6.1.0-5.5) lunar; urgency=medium

  * lunar/linux-unstable: 6.1.0-5.5 -proposed tracker (LP: #1995875)

  * Please have linux-tools-common Provide: bpftool (LP: #1981089)
    - [Packaging] let linux-tools-common provides bpftool

  * Miscellaneous Ubuntu changes
    - packaging: switch to lunar series
    - Rebase to v6.1-rc4
    - [Config] toolchian update

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc4

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 07 Nov 2022 16:43:21 +0100

linux-unstable (6.1.0-4.4) lunar; urgency=medium

  * kinetic/linux-unstable: 6.1.0-4.4 -proposed tracker (LP: #1995500)

  * Fix ath11k deadlock on WCN6855 (LP: #1995041)
    - SAUCE: wifi: ath11k: avoid deadlock during regulatory update in
      ath11k_regd_update()

  * Bump (kernel) '-mtune' to z16 / arch14 with 23.04 (LP: #1982833)
    - [Config] Enable mtune z16

  * armhf kernel compiled with gcc-12 fails to boot on pi 3/2 (LP: #1993120)
    - [Packaging] Support arch-specific compilers in updateconfigs

  * Miscellaneous Ubuntu changes
    - [Config] update configs after rebase to 6.1-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc3

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 03 Nov 2022 14:00:41 +0100

linux-unstable (6.1.0-3.3) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.1.0-3.3 -proposed tracker (LP: #1994037)

  * Miscellaneous Ubuntu changes
    - [Packaging] Support skipped dkms modules
    - [Config] update configs after rebase to 6.1-rc2

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 24 Oct 2022 15:53:11 +0200

linux-unstable (6.1.0-2.2) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.1.0-2.2 -proposed tracker (LP: #1993350)

  * Populating Hyper-V MSR for Ubuntu 13.10 (LP: #1193172)
    - SAUCE: (no-up) hv: Supply vendor ID and package ABI

  * Miscellaneous Ubuntu changes
    - SAUCE: perf tools: Fix man page build wrt perf-arm-coresight.txt

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 18 Oct 2022 23:02:31 +0200

linux-unstable (6.1.0-1.1) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.1.0-1.1 -proposed tracker (LP: #1993118)

  * Raise CONFIG_NR_CPUS (LP: #1967889)
    - [Config] Raise riscv64 CONFIG_NR_CPUS to 32

  * rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
    - [Config] Disable VMAP_STACK on riscv64

  * Disable sv57 as the userspace is not ready (LP: #1991790)
    - SAUCE: riscv: mm: Force disable sv57

  * earlyconsole prints question marks on 5.19.0-1002-generic (LP: #1988984)
    - [Config] Set CONFIG_PWM_SIFIVE=m for riscv64

  * RCU stalls (LP: #1991951)
    - [Config] Harmonize RCU_CPU_STALL_TIMEOUT

  * backport dkms fixes to build modules correctly for hwe-5.19+ kernels with
    custom compiler (LP: #1991664)
    - [Packaging] use versioned gcc-12
    - [Packaging] Update configs with versioned compiler version

  * FTBFS on kinetic (LP: #1990964)
    - SAUCE: uapi: Fixup strace compile error

  * Miscellaneous Ubuntu changes
    - [Packaging] sameport -- add support for sameport versioning
    - [Packaging] move to kernel 6.1
    - SAUCE: platform/x86: dell-uart-backlight: remove
      acpi_video_set_dmi_backlight_type()
    - SAUCE: shiftfs: support kernel 6.1
    - [Config] update configs and annotations after rebase to 6.1-rc1
    - debian/dkms-versions -- temporarily disable dkms builds

  [ Upstream Kernel Changes ]

  * Rebase to v6.1-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 18 Oct 2022 17:21:43 +0200

linux-unstable (6.1.0-0.0) kinetic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 17 Oct 2022 08:57:58 +0200

linux-unstable (6.0.0-9.9) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-9.9 -proposed tracker (LP: #1991521)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous Ubuntu changes
    - [Config] update toolchain configs after rebase to 6.0

  [ Upstream Kernel Changes ]

  * Rebase to v6.0

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 03 Oct 2022 15:51:57 +0200

linux-unstable (6.0.0-8.8) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-8.8 -proposed tracker (LP: #1990101)

  [ Upstream Kernel Changes ]

  * Rebase to v6.0-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 20 Sep 2022 10:22:14 +0200

linux-unstable (6.0.0-7.7) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-7.7 -proposed tracker (LP: #1989331)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)
    - debian/dkms-versions -- update from kernel-versions (main/master)
    - [Packaging] resync getabis
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Please enable CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU (LP: #1980861)
    - [Config] Switch from DECOMP_SINGLE to DECOMP_MULTI_PERCPU

  * Miscellaneous Ubuntu changes
    - [Packaging] Pass kernel build_arch to dkms
    - [Packaging[ get rid of unnecessary 'set -x'
    - [Config] update configs and annotations after rebase to 6.0-rc5

  [ Upstream Kernel Changes ]

  * Rebase to v6.0-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 12 Sep 2022 14:03:55 +0200

linux-unstable (6.0.0-6.6) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-6.6 -proposed tracker (LP: #1988706)

  * Support Intel TDX guest attestation driver (LP: #1988120)
    - SAUCE: x86/tdx: Add TDX Guest attestation interface driver
    - SAUCE: selftests: tdx: Test GetReport TDX attestation feature

  * Miscellaneous Ubuntu changes
    - [Packaging] temporarily disable signing for ppc64el and s390x
    - [Config] enable security-related configs
    - [Config] update toolchain versions
    - [Packaging] fix URLs used to retrieve kernel ABI

  [ Upstream Kernel Changes ]

  * Rebase to v6.0-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 05 Sep 2022 16:59:40 +0200

linux-unstable (6.0.0-5.5) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-5.5 -proposed tracker (LP: #1988019)

  * LSM: Configuring Too Many LSMs Causes Kernel Panic on Boot (LP: #1987998)
    - SAUCE: LSM: Change Landlock from LSMBLOB_NEEDED to LSMBLOB_NOT_NEEDED

  * RISC-V kernel config is out of sync with other archs (LP: #1981437)
    - [Config] Align riscv64 CONFIG_LSM with other architectures
    - [Config] Enable CONFIG_DRM_RCAR_USE_LVDS for riscv64
    - [Config] Enable CONFIG_DTPM for riscv64
    - [Config] Set CONFIG_MTD_RAW_NAND=m for riscv64

  * Miscellaneous Ubuntu changes
    - [Packaging]: always use fully qualified <triplet>-gcc-VER toolchain
    - [Packaging] use unversioned default gcc
    - [Packaging] Remove circular dependency between image & modules
    - [Config] update configs after rebase to 6.0-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v6.0-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 29 Aug 2022 09:18:39 +0200

linux-unstable (6.0.0-4.4) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-4.4 -proposed tracker (LP: #1987517)

  * Fix invalid MAC address after hotplug tbt dock (LP: #1942999)
    - SAUCE: igc: wait for the MAC copy when enabled MAC passthrough

  * Miscellaneous Ubuntu changes
    - [Packaging] getabis: Add modules.builtin to the ABI

  * Miscellaneous upstream changes
    - perf tools: Fix compile error for x86

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 24 Aug 2022 15:10:24 +0200

linux-unstable (6.0.0-3.3) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-3.3 -proposed tracker (LP: #1987241)

  * [22.04 FEAT] Deactivitate  CONFIG_QETH_OSX kernel config option
    (LP: #1959890)
    - [Config] disable CONFIG_QETH_OSX on s390x

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Packaging] Make stamp-install-<flavor> target reentrant
    - [Config] update toolchain version

  [ Upstream Kernel Changes ]

  * Rebase to v6.0-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 22 Aug 2022 09:09:26 +0200

linux-unstable (6.0.0-2.2) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-2.2 -proposed tracker (LP: #1986844)

  * Miscellaneous Ubuntu changes
    - SAUCE: Revert "perf tools: Use Python devtools for version autodetection
      rather than runtime"

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 17 Aug 2022 19:40:07 +0200

linux-unstable (6.0.0-1.1) kinetic; urgency=medium

  * kinetic/linux-unstable: 6.0.0-1.1 -proposed tracker (LP: #1986784)

  * refactoring of overlayfs fix to properly support shiftfs (LP: #1983640)
    - SAUCE: for aufs mmap: print the virtual file path
    - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files

  * Miscellaneous Ubuntu changes
    - [Packaging] move to kernel 6.0
    - [Config] update configs and annotations after rebase to 6.0-rc1
    - [Packaging] temporarily disable dkms

  [ Upstream Kernel Changes ]

  * Rebase to v6.0-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 17 Aug 2022 16:56:18 +0200

linux-unstable (6.0.0-0.0) kinetic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 17 Aug 2022 10:23:42 +0200

linux (5.19.0-15.15) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-15.15 -proposed tracker (LP: #1983335)

  * Miscellaneous Ubuntu changes
    - [Config] update annotations to support both gcc-11 and gcc-12

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 02 Aug 2022 09:23:01 +0200

linux (5.19.0-14.14) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-14.14 -proposed tracker (LP: #1983273)

  * Miscellaneous Ubuntu changes
    - [Packaging] module-signature-check: Check debian.<foo>/signature-inclusion
    - [Packaging] Introduce debian/scripts/sign-module
    - SAUCE: Switch to using debian/scripts/sign-module
    - [Config] update configs/annotations after rebase to 5.19
    - [Config] update configs after moving to gcc-12

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging]: always use fully qualified <triplet>-gcc-VER
      toolchain"

  [ Upstream Kernel Changes ]

  * Rebase to v5.19

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 01 Aug 2022 17:19:01 +0200

linux (5.19.0-13.13) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-13.13 -proposed tracker (LP: #1983033)

  * network-manager/1.36.4-2ubuntu1 ADT test failure with linux/5.15.0-28.29
    (LP: #1971418)
    - Revert "rfkill: make new event layout opt-in"

  * Miscellaneous Ubuntu changes
    - [Config] Tighten up LP bug links in annotations
    - [Config] Use mark<ENFORCED> for CONFIG_DEVTMPFS
    - [Config] Use flag<DEPRECATED> for CONFIG_HIPPI
    - [Config] Use note<> for CONFIG_XEN_ACPI_PROCESSOR
    - [Config] Fix DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING annotation
    - [Config] Fix CONFIG_CPU_LITTLE_ENDIAN annotation
    - SAUCE: x86/bugs: Do not enable IBPB at firmware entry when IBPB is not
      available

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 28 Jul 2022 17:04:33 +0200

linux (5.19.0-12.12) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-12.12 -proposed tracker (LP: #1982741)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous Ubuntu changes
    - [Packaging]: always use fully qualified <triplet>-gcc-VER toolchain

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 26 Jul 2022 15:07:13 +0200

linux (5.19.0-11.11) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-11.11 -proposed tracker (LP: #1982726)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * GPIO character device v1 API not enabled in kernel (LP: #1953613)
    - [Config] Enable CONFIG_GPIO_CDEV_V1

  * Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
    - [Debian] Use kernel-testing repo from launchpad

  * Support AMD P-State cpufreq control mechanism (LP: #1956509)
    - [Config] enable X86_AMD_PSTATE as built-in on amd64

  * PCIE LnkCtl ASPM not enabled under VMD mode for Alder Lake platforms
    (LP: #1942160)
    - SAUCE: PCI/ASPM: Enable ASPM for links under VMD domain
    - SAUCE: PCI/ASPM: Enable LTR for endpoints behind VMD
    - SAUCE: vmd: fixup bridge ASPM by driver name instead

  * Miscellaneous Ubuntu changes
    - [Packaging] Double the speed of updateconfigs
    - Remove ubuntu/hio driver
    - [Config] update config after rebase to 5.19-rc8

  [ Upstream Kernel Changes ]

  * Rebase to v5.19-rc8

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 25 Jul 2022 08:54:21 +0200

linux (5.19.0-10.10) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-10.10 -proposed tracker (LP: #1982013)

  * enable config for fixing 5.17 kernel won't load mok (LP: #1972802)
    - [Config] enable configs for fixing kernel won't load mok

  * RISC-V kernel config is out of sync with other archs (LP: #1981437)
    - [Config] Disable CONFIG_CXL_MEM_RAW_COMMANDS on riscv64
    - [Config] Disable CONFIG_EROFS_FS_ZIP_LZMA on riscv64
    - [Config] Disable CONFIG_FONT_6x8 on riscv64
    - [Config] Disable CONFIG_NTFS3_64BIT_CLUSTER on riscv64
    - [Config] Disable CONFIG_SCSI_IZIP_EPP16 on riscv64
    - [Config] Disable CONFIG_SCSI_UFS_HWMON on riscv64
    - [Config] Disable CONFIG_SPI_AX88796C_COMPRESSION on riscv64
    - [Config] Disable CONFIG_VIDEO_ZORAN on riscv64
    - [Config] Enable CONFIG_BPF_KPROBE_OVERRIDE on riscv64
    - [Config] Enable CONFIG_CACHEFILES_ERROR_INJECTION on riscv64
    - [Config] Enable CONFIG_DRM_AMD_DC_SI on riscv64
    - [Config] Enable CONFIG_NUMA_BALANCING on riscv64
    - [Config] Enable CONFIG_PROC_VMCORE_DEVICE_DUMP on riscv64
    - [Config] Enable CONFIG_WLAN_VENDOR_MICROCHIP on riscv64
    - [Config] Set CONFIG_MHI_WWAN_CTRL=m on riscv64
    - [Config] Set CONFIG_NFC_S3FWRN82_UART=m on riscv64
    - [Config] Enable CONFIG_EFIVAR_FS on riscv64
    - [Config] Enable CONFIG_SUNRPC_DISABLE_INSECURE_ENCTYPES on riscv64
    - [Config] Enable CONFIG_STRICT_DEVMEM on riscv64
    - [Config] Enable CONFIG_VMAP_STACK on riscv64
    - [Config] Enable CONFIG_KEXEC_FILE on riscv64
    - [Config] Set CONFIG_MTD_PSTORE=m on riscv64
    - [Config] Set CONFIG_KFENCE_SAMPLE_INTERVAL=0 on riscv64
    - [Config] Enable CONFIG_KEXEC_FILE on s390x

  * Ubuntu 22.04 and 20.04 DPC Fixes for Failure Cases of DownPort Containment
    events (LP: #1965241)
    - Enable config option CONFIG_PCIE_EDR
    - Correct CONFIG_PCIE_EDR annotation on arm64

  * config CONFIG_HISI_PMU for  kunpeng920 (LP: #1956086)
    - [Config] CONFIG_HISI_PMU=m

  * Skip setting ethernet LED on Dell EMC board (LP: #1971667)
    - SAUCE: net: phy: marvell: Skip setting LED on Dell EMC board

  * Miscellaneous Ubuntu changes
    - [Packaging] ignore warnings from the output of ld.bfd
    - [Packaging] Fix bashism in dkms-build script
    - [Packaging] Always catch errors in dkms-build scripts
    - [Packaging] Fix dkms builds with linker @module.mod files
    - [Packaging] mark dkms-build-configure--zfs executable
    - [Config] update configs and annotations after rebase to 5.19-rc7

  [ Upstream Kernel Changes ]

  * Rebase to v5.19-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 18 Jul 2022 23:45:28 +0200

linux (5.19.0-9.9) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-9.9 -proposed tracker (LP: #1980622)

  * Miscellaneous Ubuntu changes
    - [Config] update config after rebase to 5.19-rc5

  [ Upstream Kernel Changes ]

  * Rebase to v5.19-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 04 Jul 2022 12:05:04 +0200

linux (5.19.0-8.8) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-8.8 -proposed tracker (LP: #1980482)

  * temporarily disable CONFIG_X86_KERNEL_IBT (LP: #1980484)
    - [Config] temporarily disable CONFIG_X86_KERNEL_IBT

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 01 Jul 2022 11:58:56 +0200

linux (5.19.0-7.7) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-7.7 -proposed tracker (LP: #1980056)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * RISC-V enables CONFIG_COMPAT in the unstable branch (LP: #1980061)
    - [Config] Disable CONFIG_COMPAT on RISC-V

  * No RISC-V configuration in the unstable tree (LP: #1979647)
    - [Config] Merge riscv64 config and annotations

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 28 Jun 2022 12:25:48 +0200

linux (5.19.0-6.6) kinetic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 28 Jun 2022 07:50:17 +0200

linux-unstable (5.19.0-6.6) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.19.0-6.6 -proposed tracker (LP: #1979948)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous Ubuntu changes
    - [Packaging] Remove 'family=ubuntu' concept
    - [Packaging] final-checks: Remove useless sourcing of kernelconfig
    - [Config] update config after rebase to 5.19-rc4

  [ Upstream Kernel Changes ]

  * Rebase to v5.19-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 27 Jun 2022 09:16:40 +0200

linux-unstable (5.19.0-5.5) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.19.0-5.5 -proposed tracker (LP: #1979611)

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] temporarily disable signing for ppc64el and
      s390x"

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 23 Jun 2022 11:13:32 +0200

linux-unstable (5.19.0-4.4) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.19.0-4.4 -proposed tracker (LP: #1979177)

  * Miscellaneous Ubuntu changes
    - [Config] update configs after rebase to 5.19-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v5.19-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 20 Jun 2022 09:02:58 +0200

linux-unstable (5.19.0-3.3) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.19.0-3.3 -proposed tracker (LP: #1978439)

  * Miscellaneous Ubuntu changes
    - [Config] update annotations for 5.19

  [ Upstream Kernel Changes ]

  * Rebase to v5.19-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 13 Jun 2022 07:16:32 +0200

linux-unstable (5.19.0-2.2) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.19.0-2.2 -proposed tracker (LP: #1978313)

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 10 Jun 2022 15:17:20 +0200

linux-unstable (5.19.0-1.1) kinetic; urgency=medium

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * linux: Staging modules should be unsigned (LP: #1642368)
    - [Packaging] Move and update signature inclusion list
    - [Packaging] Strip signatures from untrusted staging modules
    - [Packaging] Add module-signature-check

  * Miscellaneous Ubuntu changes
    - [Config] update configs and annotations after rebase to 5.19-rc1
    - [Packaging] move to kernel 5.19
    - [Packaging] workaround missing python3-dev dependency
    - SAUCE: Revert "perf tools: Use Python devtools for version autodetection
      rather than runtime"
    - SAUCE: watchdog: gxp: Add missing MODULE_LICENSE
    - [Packaging] add python3-dev as build dependency

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 10 Jun 2022 14:43:46 +0200

linux-unstable (5.19.0-0.0) kinetic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 09 Jun 2022 12:13:06 +0200

linux (5.18.0-6.6) kinetic; urgency=medium

  * kinetic/linux: 5.18.0-6.6 -proposed tracker (LP: #1976327)

  * Miscellaneous Ubuntu changes
    - [Packaging] temporarily disable signing for ppc64el and s390x
    - [Config] update toolchain versions
    - [Config] enable CONFIG_X86_KERNEL_IBT

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 31 May 2022 11:05:51 +0200

linux (5.18.0-5.5) kinetic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 23 May 2022 16:59:47 +0200

linux-unstable (5.18.0-5.5) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.18.0-5.5 -proposed tracker (LP: #1975458)

  * enable CONFIG_DEVTMPFS_SAFE (LP: #1974442)
    - [Config] enable CONFIG_DEVTMPFS_SAFE

  * build backport-iwlwifi-dkms as linux-modules-iwlwifi-ABI (LP: #1969434)
    - [Packaging] drop do_<mod> arch specific configs

  * prevent kernel panic with overlayfs + shiftfs (LP: #1973620)
    - SAUCE: overlayfs: prevent dereferencing struct file in ovl_vm_prfile_set()

  * linux-image-5.0.0-35-generic breaks checkpointing of container
    (LP: #1857257) // re-apply missing overlayfs SAUCE patch (LP: #1967924)
    - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files

  [ Upstream Kernel Changes ]

  * Rebase to v5.18

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 23 May 2022 11:21:38 +0200

linux-unstable (5.18.0-4.4) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.18.0-4.4 -proposed tracker (LP: #1973587)

  * build backport-iwlwifi-dkms as linux-modules-iwlwifi-ABI (LP: #1969434)
    - [Packaging] support standalone dkms module builds

  * Enable speakup kernel modules to allow the speakup screen reader to function
    (LP: #1967702)
    - [Config] CONFIG_SPEAKUP=m for all but s390x

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] temporarily disable v4l2loopback"
    - Revert "UBUNTU: [Packaging] temporarily disable zfs"

  [ Upstream Kernel Changes ]

  * Rebase to v5.18-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 16 May 2022 14:15:35 +0200

linux-unstable (5.18.0-3.3) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.18.0-3.3 -proposed tracker (LP: #1972162)

  * disable Intel DMA remapping by default (LP: #1971699)
    - Revert "UBUNTU: [Config] enable Intel DMA remapping options by default"

  [ Upstream Kernel Changes ]

  * Rebase to v5.18-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 09 May 2022 12:15:39 +0200

linux-unstable (5.18.0-2.2) kinetic; urgency=medium

  * kinetic/linux-unstable: 5.18.0-2.2 -proposed tracker (LP: #1971340)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous Ubuntu changes
    - [Config] update configs after rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.18-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 03 May 2022 12:24:49 +0200

linux-unstable (5.18.0-1.1) kinetic; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 03 May 2022 09:38:06 +0200

linux-unstable (5.18.0-1.1) jammy; urgency=medium

  * kinetic/linux-unstable: 5.18.0-1.1 -proposed tracker (LP: #1969476)

  * Miscellaneous Ubuntu changes
    - [Config] update configs and annotations after rebase to 5.18
    - [Packaging] temporarily disable zfs
    - [Packaging] temporarily disable v4l2loopback

  [ Upstream Kernel Changes ]

  * Rebase to v5.18-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 27 Apr 2022 20:26:42 +0200

linux-unstable (5.18.0-0.0) jammy; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 19 Apr 2022 16:20:00 +0200

linux-unstable (5.17.0-8.8) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-8.8 -proposed tracker (LP: #1969016)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 14 Apr 2022 10:30:39 +0200

linux-unstable (5.17.0-7.7) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-7.7 -proposed tracker (LP: #1968988)

  * zfcpdump-kernel update to v5.15 (LP: #1965766)
    - SAUCE: Audit: Fix incorrect static inline function declration.

  * intel_iommu breaks Intel IPU6 camera: isys port open ready failed -16
    (LP: #1958004)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs

  * Jammy update: v5.17.3 upstream stable release (LP: #1968986)
    - lib/logic_iomem: correct fallback config references
    - um: fix and optimize xor select template for CONFIG64 and timetravel mode
    - rtc: wm8350: Handle error for wm8350_register_irq
    - net: dsa: felix: fix possible NULL pointer dereference
    - mm: kfence: fix objcgs vector allocation
    - KVM: x86/pmu: Use different raw event masks for AMD and Intel
    - KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode()
    - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
    - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic
    - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest
    - drm: Add orientation quirk for GPD Win Max
    - Bluetooth: hci_sync: Fix compilation warning
    - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
    - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
    - drm/amd/display: Add signal type check when verify stream backends same
    - drm/amdkfd: enable heavy-weight TLB flush on Arcturus
    - drm/edid: remove non_desktop quirk for HPN-3515 and LEN-B800.
    - drm/edid: improve non-desktop quirk logging
    - Bluetooth: hci_event: Ignore multiple conn complete events
    - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
    - drm/amd/display: Fix memory leak
    - drm/amd/display: Use PSR version selected during set_psr_caps
    - usb: gadget: tegra-xudc: Do not program SPARAM
    - usb: gadget: tegra-xudc: Fix control endpoint's definitions
    - usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value
    - ptp: replace snprintf with sysfs_emit
    - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
    - selftests, xsk: Fix bpf_res cleanup test
    - net/mlx5e: TC, Hold sample_attr on stack instead of pointer
    - drm/amdkfd: Don't take process mutex for svm ioctls
    - drm/amdkfd: Ensure mm remain valid in svm deferred_list work
    - drm/amdkfd: svm range restore work deadlock when process exit
    - drm/amdgpu: Fix an error message in rmmod
    - mlxsw: spectrum: Guard against invalid local ports
    - RDMA/rtrs-clt: Do stop and failover outside reconnect work.
    - powerpc/xive: Export XIVE IPI information for online-only processors.
    - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
    - ath11k: fix kernel panic during unload/load ath11k modules
    - ath11k: pci: fix crash on suspend if board file is not found
    - ath11k: mhi: use mhi_sync_power_up()
    - net/smc: Send directly when TCP_CORK is cleared
    - drm/bridge: Add missing pm_runtime_put_sync
    - bpf: Make dst_port field in struct bpf_sock 16-bit wide
    - scsi: mvsas: Replace snprintf() with sysfs_emit()
    - scsi: bfa: Replace snprintf() with sysfs_emit()
    - drm/v3d: fix missing unlock
    - power: supply: axp20x_battery: properly report current when discharging
    - mt76: mt7921: fix crash when startup fails.
    - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill
    - i40e: Add sending commands in atomic context
    - cfg80211: don't add non transmitted BSS to 6GHz scanned channels
    - libbpf: Fix build issue with llvm-readelf
    - ipv6: make mc_forwarding atomic
    - ref_tracker: implement use-after-free detection
    - net: initialize init_net earlier
    - powerpc: Set crashkernel offset to mid of RMA region
    - drm/amdgpu: Fix recursive locking warning
    - scsi: smartpqi: Fix rmmod stack trace
    - scsi: smartpqi: Fix kdump issue when controller is locked up
    - PCI: aardvark: Fix support for MSI interrupts
    - kvm: selftests: aarch64: fix assert in gicv3_access_reg
    - kvm: selftests: aarch64: pass vgic_irq guest args as a pointer
    - kvm: selftests: aarch64: fix the failure check in
      kvm_set_gsi_routing_irqchip_check
    - kvm: selftests: aarch64: fix some vgic related comments
    - kvm: selftests: aarch64: use a tighter assert in vgic_poke_irq()
    - iommu/arm-smmu-v3: fix event handling soft lockup
    - usb: ehci: add pci device support for Aspeed platforms
    - KVM: arm64: Do not change the PMU event filter after a VCPU has run
    - libbpf: Fix accessing syscall arguments on powerpc
    - libbpf: Fix accessing the first syscall argument on arm64
    - libbpf: Fix accessing the first syscall argument on s390
    - PCI: endpoint: Fix alignment fault error in copy tests
    - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH.
    - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
    - scsi: mpi3mr: Fix deadlock while canceling the fw event
    - scsi: mpi3mr: Fix reporting of actual data transfer size
    - scsi: mpi3mr: Fix memory leaks
    - powerpc/set_memory: Avoid spinlock recursion in change_page_attr()
    - power: supply: axp288-charger: Set Vhold to 4.4V
    - drm/sprd: fix potential NULL dereference
    - drm/sprd: check the platform_get_resource() return value
    - drm/amd/display: reset lane settings after each PHY repeater LT
    - net/mlx5e: Disable TX queues before registering the netdev
    - HID: apple: Report Magic Keyboard 2021 battery over USB
    - HID: apple: Report Magic Keyboard 2021 with fingerprint reader battery over
      USB
    - usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks()
    - iwlwifi: mvm: Correctly set fragmented EBS
    - iwlwifi: fix small doc mistake for iwl_fw_ini_addr_val
    - iwlwifi: mvm: move only to an enabled channel
    - ipv6: annotate some data-races around sk->sk_prot
    - drm/msm/dsi: Remove spurious IRQF_ONESHOT flag
    - x86/mce: Work around an erratum on fast string copy instructions
    - rtw89: fix RCU usage in rtw89_core_txq_push()
    - ath11k: Fix frames flush failure caused by deadlock
    - ipv4: Invalidate neighbour for broadcast address upon address addition
    - rtw88: change rtw_info() to proper message level
    - dm ioctl: prevent potential spectre v1 gadget
    - dm: requeue IO if mapping table not yet available
    - drm/amdkfd: make CRAT table missing message informational only
    - vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA
    - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface
    - scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
    - scsi: pm8001: Fix tag values handling
    - scsi: pm8001: Fix task leak in pm8001_send_abort_all()
    - scsi: pm8001: Fix tag leaks on error
    - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()
    - mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU
    - mctp: make __mctp_dev_get() take a refcount hold
    - powerpc/64s/hash: Make hash faults work in NMI context
    - mt76: mt7615: Fix assigning negative values to unsigned variable
    - power: supply: axp288_charger: Use acpi_quirk_skip_acpi_ac_and_battery()
    - power: supply: axp288_fuel_gauge: Use acpi_quirk_skip_acpi_ac_and_battery()
    - scsi: aha152x: Fix aha152x_setup() __setup handler return value
    - scsi: hisi_sas: Free irq vectors in order for v3 HW
    - scsi: hisi_sas: Limit users changing debugfs BIST count value
    - net/smc: correct settings of RMB window update limit
    - mips: ralink: fix a refcount leak in ill_acc_of_setup()
    - iavf: stop leaking iavf_status as "errno" values
    - macvtap: advertise link netns via netlink
    - platform/x86: thinkpad_acpi: Add dual fan probe
    - tuntap: add sanity checks about msg_controllen in sendmsg
    - Bluetooth: mediatek: fix the conflict between mtk and msft vendor event
    - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg}
    - Bluetooth: use memset avoid memory leaks
    - bnxt_en: Eliminate unintended link toggle during FW reset
    - PCI: endpoint: Fix misused goto label
    - MIPS: fix fortify panic when copying asm exception handlers
    - powerpc/code-patching: Pre-map patch area
    - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E
    - powerpc/secvar: fix refcount leak in format_show()
    - scsi: libfc: Fix use after free in fc_exch_abts_resp()
    - platform/x86: x86-android-tablets: Depend on EFI and SPI
    - can: isotp: set default value for N_As to 50 micro seconds
    - can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before
      calling es58x_check_msg_len()
    - riscv: Fixed misaligned memory access. Fixed pointer comparison.
    - net: account alternate interface name memory
    - net: limit altnames to 64k total
    - net/mlx5e: Remove overzealous validations in netlink EEPROM query
    - platform/x86: hp-wmi: Fix SW_TABLET_MODE detection method
    - platform/x86: hp-wmi: Fix 0x05 error code reported by several WMI calls
    - net: sfp: add 2500base-X quirk for Lantech SFP module
    - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
    - xen/usb: harden xen_hcd against malicious backends
    - mt76: fix monitor mode crash with sdio driver
    - xtensa: fix DTC warning unit_address_format
    - iwlwifi: mei: fix building iwlmei
    - MIPS: ingenic: correct unit node address
    - Bluetooth: Fix use after free in hci_send_acl
    - netfilter: conntrack: revisit gc autotuning
    - netlabel: fix out-of-bounds memory accesses
    - ceph: fix inode reference leakage in ceph_get_snapdir()
    - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
    - lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option
    - init/main.c: return 1 from handled __setup() functions
    - minix: fix bug when opening a file with O_DIRECT
    - clk: si5341: fix reported clk_rate when output divider is 2
    - clk: mediatek: Fix memory leaks on probe
    - staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances
    - staging: vchiq_core: handle NULL result of find_service_by_handle
    - phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use
    - phy: amlogic: meson8b-usb2: Use dev_err_probe()
    - phy: amlogic: meson8b-usb2: fix shared reset control use
    - clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568
    - cpufreq: CPPC: Fix performance/frequency conversion
    - opp: Expose of-node's name in debugfs
    - staging: wfx: apply the necessary SDIO quirks for the Silabs WF200
    - staging: wfx: fix an error handling in wfx_init_common()
    - w1: w1_therm: fixes w1_seq for ds28ea00 sensors
    - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()
    - NFSv4: Protect the state recovery thread against direct reclaim
    - habanalabs: fix possible memory leak in MMU DR fini
    - habanalabs: reject host map with mmu disabled
    - habanalabs/gaudi: handle axi errors from NIC engines
    - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
    - clk: ti: Preserve node in ti_dt_clocks_register()
    - clk: Enforce that disjoints limits are invalid
    - SUNRPC/xprt: async tasks mustn't block waiting for memory
    - SUNRPC: remove scheduling boost for "SWAPPER" tasks.
    - NFS: swap IO handling is slightly different for O_DIRECT IO
    - NFS: swap-out must always use STABLE writes.
    - x86: Annotate call_on_stack()
    - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy
    - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
    - virtio_console: eliminate anonymous module_init & module_exit
    - jfs: prevent NULL deref in diFree
    - SUNRPC: Fix socket waits for write buffer space
    - NFS: nfsiod should not block forever in mempool_alloc()
    - NFS: Avoid writeback threads getting stuck in mempool_alloc()
    - selftests: net: Add tls config dependency for tls selftests
    - parisc: Fix CPU affinity for Lasi, WAX and Dino chips
    - parisc: Fix patch code locking and flushing
    - mm: fix race between MADV_FREE reclaim and blkdev direct IO read
    - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
    - Drivers: hv: vmbus: Fix initialization of device object in
      vmbus_device_register()
    - Drivers: hv: vmbus: Fix potential crash on module unload
    - netfilter: bitwise: fix reduce comparisons
    - Revert "NFSv4: Handle the special Linux file open access mode"
    - NFSv4: fix open failure with O_ACCMODE flag
    - scsi: core: scsi_logging: Fix a BUG
    - scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling
    - scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map()
    - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
    - vdpa: mlx5: prevent cvq work from hogging CPU
    - net: sfc: add missing xdp queue reinitialization
    - net/tls: fix slab-out-of-bounds bug in decrypt_internal
    - vrf: fix packet sniffing for traffic originating from ip tunnels
    - skbuff: fix coalescing for page_pool fragment recycling
    - Revert "net: dsa: stop updating master MTU from master.c"
    - ice: Clear default forwarding VSI during VSI release
    - ice: Fix MAC address setting
    - mctp: Fix check for dev_hard_header() result
    - mctp: Use output netdev to allocate skb headroom
    - net: ipv4: fix route with nexthop object delete warning
    - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
    - drm/imx: imx-ldb: Check for null pointer after calling kmemdup
    - drm/imx: Fix memory leak in imx_pd_connector_get_modes
    - drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe
    - regulator: rtq2134: Fix missing active_discharge_on setting
    - spi: rpc-if: Fix RPM imbalance in probe error path
    - regulator: atc260x: Fix missing active_discharge_on setting
    - arch/arm64: Fix topology initialization for core scheduling
    - bnxt_en: Synchronize tx when xdp redirects happen on same ring
    - bnxt_en: reserve space inside receive page for skb_shared_info
    - bnxt_en: Prevent XDP redirect from running when stopping TX queue
    - sfc: Do not free an empty page_ring
    - RDMA/mlx5: Don't remove cache MRs when a delay is needed
    - RDMA/mlx5: Add a missing update of cache->last_add
    - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD
    - cifs: fix potential race with cifsd thread
    - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
    - sctp: count singleton chunks in assoc user stats
    - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
    - ice: Set txq_teid to ICE_INVAL_TEID on ring creation
    - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg
    - ipv6: Fix stats accounting in ip6_pkt_drop
    - ice: synchronize_rcu() when terminating rings
    - ice: xsk: fix VSI state check in ice_xsk_wakeup()
    - ice: clear cmd_type_offset_bsz for TX rings
    - net: openvswitch: don't send internal clone attribute to the userspace.
    - net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address()
    - net: openvswitch: fix leak of nested actions
    - rxrpc: fix a race in rxrpc_exit_net()
    - net: sfc: fix using uninitialized xdp tx_queue
    - net: phy: mscc-miim: reject clause 45 register accesses
    - qede: confirm skb is allocated before using
    - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
    - drm/amd/display: Fix for dmub outbox notification enable
    - drm/amd/display: Remove redundant dsc power gating from init_hw
    - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
    - drbd: Fix five use after free bugs in get_initial_state
    - scsi: sd: sd_read_cpr() requires VPD pages
    - scsi: ufs: ufshpb: Fix a NULL check on list iterator
    - io_uring: nospec index for tags on files update
    - io_uring: don't touch scm_fp_list after queueing skb
    - SUNRPC: Handle ENOMEM in call_transmit_status()
    - SUNRPC: Handle low memory situations in call_status()
    - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec()
    - iommu/omap: Fix regression in probe for NULL pointer dereference
    - perf unwind: Don't show unwind error messages when augmenting frame pointer
      stack
    - perf: arm-spe: Fix perf report --mem-mode
    - perf tools: Fix perf's libperf_print callback
    - perf session: Remap buf if there is no space for event
    - arm64: Add part number for Arm Cortex-A78AE
    - scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()
    - scsi: ufs: ufs-pci: Add support for Intel MTL
    - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
    - mmc: block: Check for errors after write on SPI
    - mmc: mmci: stm32: correctly check all elements of sg list
    - mmc: renesas_sdhi: special 4tap settings only apply to HS400
    - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is
      complete
    - mmc: core: Fixup support for writeback-cache for eMMC and SD
    - lz4: fix LZ4_decompress_safe_partial read out of bound
    - highmem: fix checks in __kmap_local_sched_{in,out}
    - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
    - mm/mempolicy: fix mpol_new leak in shared_policy_replace
    - io_uring: don't check req->file in io_fsync_prep()
    - io_uring: defer splice/tee file validity check until command issue
    - io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF
    - io_uring: fix race between timeout flush and removal
    - x86/pm: Save the MSR validity status at context setup
    - x86/speculation: Restore speculation related MSRs during S3 resume
    - perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids
    - btrfs: fix qgroup reserve overflow the qgroup limit
    - btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone
    - btrfs: remove device item and update super block in the same transaction
    - btrfs: avoid defragging extents whose next extents are not targets
    - btrfs: prevent subvol with swapfile from being deleted
    - spi: core: add dma_map_dev for __spi_unmap_msg()
    - cifs: force new session setup and tcon for dfs
    - qed: fix ethtool register dump
    - arm64: patch_text: Fixup last cpu should be master
    - RDMA/hfi1: Fix use-after-free bug for mm struct
    - drbd: fix an invalid memory access caused by incorrect use of list iterator
    - gpio: Restrict usage of GPIO chip irq members before initialization
    - x86/msi: Fix msi message data shadow struct
    - x86/mm/tlb: Revert retpoline avoidance approach
    - perf/x86/intel: Don't extend the pseudo-encoding to GP counters
    - ata: sata_dwc_460ex: Fix crash due to OOB write
    - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
    - perf/core: Inherit event_caps
    - irqchip/gic-v3: Fix GICR_CTLR.RWP polling
    - fbdev: Fix unregistering of framebuffers without device
    - amd/display: set backlight only if required
    - drm/panel: ili9341: fix optional regulator handling
    - drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
    - drm/amdgpu/display: change pipe policy for DCN 2.1
    - drm/amdgpu/smu10: fix SoC/fclk units in auto mode
    - drm/amdgpu/vcn: Fix the register setting for vcn1
    - drm/nouveau/pmu: Add missing callbacks for Tegra devices
    - drm/amdkfd: Create file descriptor after client is added to smi_clients list
    - drm/amdgpu: don't use BACO for reset in S3
    - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
    - Revert "ACPI: processor: idle: Only flush cache on entering C3"
    - drm/amdkfd: Fix variable set but not used warning
    - net/smc: send directly on setting TCP_NODELAY
    - Revert "selftests: net: Add tls config dependency for tls selftests"
    - bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide
    - selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port
    - bpf: Treat bpf_sk_lookup remote_port as a 2-byte field
    - perf build: Don't use -ffat-lto-objects in the python feature test when
      building with clang-13
    - perf python: Fix probing for some clang command line options
    - tools build: Filter out options and warnings not supported by clang
    - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
    - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
    - KVM: avoid NULL pointer dereference in kvm_dirty_ring_push
    - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb()
    - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
    - Revert "powerpc: Set max_mapnr correctly"
    - x86/bug: Prevent shadowing in __WARN_FLAGS
    - objtool: Fix SLS validation for kcov tail-call replacement
    - sched/core: Fix forceidle balancing
    - sched: Teach the forced-newidle balancer about CPU affinity limitation.
    - x86,static_call: Fix __static_call_return0 for i386
    - x86/extable: Prefer local labels in .set directives
    - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
    - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S
    - irqchip/gic, gic-v3: Prevent GSI to SGI translations
    - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
    - static_call: Don't make __static_call_return0 static
    - io_uring: move read/write file prep state into actual opcode handler
    - io_uring: propagate issue_flags state down to file assignment
    - io_uring: defer file assignment
    - io_uring: drop the old style inflight file tracking
    - Linux 5.17.3

  * Jammy update: v5.17.2 upstream stable release Edit (LP: #1968984)
    - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
    - USB: serial: pl2303: add IBM device IDs
    - dt-bindings: usb: hcd: correct usb-device path
    - USB: serial: pl2303: fix GS type detection
    - USB: serial: simple: add Nokia phone driver
    - mm: kfence: fix missing objcg housekeeping for SLAB
    - locking/lockdep: Avoid potential access of invalid memory in lock_class
    - drm/amdgpu: move PX checking into amdgpu_device_ip_early_init
    - drm/amdgpu: only check for _PR3 on dGPUs
    - iommu/iova: Improve 32-bit free space estimate
    - block: flush plug based on hardware and software queue order
    - block: ensure plug merging checks the correct queue at least once
    - usb: typec: tipd: Forward plug orientation to typec subsystem
    - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
    - xhci: fix garbage USBSTS being logged in some cases
    - xhci: fix runtime PM imbalance in USB2 resume
    - xhci: make xhci_handshake timeout for xhci_reset() adjustable
    - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
    - mei: me: disable driver on the ign firmware
    - mei: me: add Alder Lake N device id.
    - mei: avoid iterator usage outside of list_for_each_entry
    - bus: mhi: pci_generic: Add mru_default for Quectel EM1xx series
    - bus: mhi: Fix pm_state conversion to string
    - bus: mhi: Fix MHI DMA structure endianness
    - docs: sphinx/requirements: Limit jinja2<3.1
    - coresight: Fix TRCCONFIGR.QE sysfs interface
    - coresight: syscfg: Fix memleak on registration failure in
      cscfg_create_device
    - dt-bindings: iio: adc: zynqmp_ams: Add clock entry
    - iio: adc: xilinx-ams: Fix single channel switching sequence
    - iio: accel: mma8452: use the correct logic to get mma8452_data
    - iio: adc: aspeed: Add divider flag to fix incorrect voltage reading.
    - iio: imu: st_lsm6dsx: use dev_to_iio_dev() to get iio_dev struct
    - iio: afe: rescale: use s64 for temporary scale calculations
    - iio: adc: xilinx-ams: Fixed missing PS channels
    - iio: adc: xilinx-ams: Fixed wrong sequencer register settings
    - iio: inkern: apply consumer scale on IIO_VAL_INT cases
    - iio: inkern: apply consumer scale when no channel scale is available
    - iio: inkern: make a best effort on offset calculation
    - greybus: svc: fix an error handling bug in gb_svc_hello()
    - clk: rockchip: re-add rational best approximation algorithm to the
      fractional divider
    - clk: uniphier: Fix fixed-rate initialization
    - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
    - cifs: truncate the inode and mapping when we simulate fcollapse
    - cifs: fix handlecache and multiuser
    - cifs: we do not need a spinlock around the tree access during umount
    - KEYS: fix length validation in keyctl_pkey_params_get_2()
    - KEYS: asymmetric: enforce that sig algo matches key algo
    - KEYS: asymmetric: properly validate hash_algo and encoding
    - Documentation: add link to stable release candidate tree
    - Documentation: update stable tree link
    - firmware: stratix10-svc: add missing callback parameter on RSU
    - firmware: sysfb: fix platform-device leak in error path
    - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
    - SUNRPC: avoid race between mod_timer() and del_timer_sync()
    - SUNRPC: Do not dereference non-socket transports in sysfs
    - NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR
    - NFSD: prevent underflow in nfssvc_decode_writeargs()
    - NFSD: prevent integer overflow on 32 bit systems
    - f2fs: fix to unlock page correctly in error path of is_alive()
    - f2fs: quota: fix loop condition at f2fs_quota_sync()
    - f2fs: fix to do sanity check on .cp_pack_total_block_count
    - remoteproc: Fix count check in rproc_coredump_write()
    - mm/mlock: fix two bugs in user_shm_lock()
    - pinctrl: ingenic: Fix regmap on X series SoCs
    - pinctrl: samsung: drop pin banks references on error paths
    - net: bnxt_ptp: fix compilation error
    - spi: mxic: Fix the transmit path
    - mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set
    - mtd: rawnand: protect access to rawnand devices while in suspend
    - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    - can: m_can: m_can_tx_handler(): fix use after free of skb
    - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
      path
    - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
    - jffs2: fix memory leak in jffs2_do_mount_fs
    - jffs2: fix memory leak in jffs2_scan_medium
    - mm: fs: fix lru_cache_disabled race in bh_lru
    - mm: don't skip swap entry even if zap_details specified
    - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
    - mm: invalidate hwpoison page cache page in fault path
    - mempolicy: mbind_range() set_policy() after vma_merge()
    - scsi: core: sd: Add silence_suspend flag to suppress some PM messages
    - scsi: ufs: Fix runtime PM messages never-ending cycle
    - scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters
    - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
    - qed: display VF trust config
    - qed: validate and restrict untrusted VFs vlan promisc mode
    - riscv: dts: canaan: Fix SPI3 bus width
    - riscv: Fix fill_callchain return value
    - riscv: Increase stack size under KASAN
    - RISC-V: Declare per cpu boot data as static
    - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
    - cifs: do not skip link targets when an I/O fails
    - cifs: fix incorrect use of list iterator after the loop
    - cifs: prevent bad output lengths in smb2_ioctl_query_info()
    - cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
    - ALSA: cs4236: fix an incorrect NULL check on list iterator
    - ALSA: hda: Avoid unsol event during RPM suspending
    - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
    - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
    - rtc: mc146818-lib: fix locking in mc146818_set_time
    - rtc: pl031: fix rtc features null pointer dereference
    - io_uring: ensure that fsnotify is always called
    - ocfs2: fix crash when mount with quota enabled
    - drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD
      panels
    - mm: madvise: skip unmapped vma holes passed to process_madvise
    - mm: madvise: return correct bytes advised with process_madvise
    - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise"
    - mm,hwpoison: unmap poisoned page before invalidation
    - mm: only re-generate demotion targets when a numa node changes its N_CPU
      state
    - mm/kmemleak: reset tag when compare object pointer
    - dm stats: fix too short end duration_ns when using precise_timestamps
    - dm: fix use-after-free in dm_cleanup_zoned_dev()
    - dm: interlock pending dm_io and dm_wait_for_bios_completion
    - dm: fix double accounting of flush with data
    - dm integrity: set journal entry unused when shrinking device
    - tracing: Have trace event string test handle zero length strings
    - drbd: fix potential silent data corruption
    - can: isotp: sanitize CAN ID checks in isotp_bind()
    - PCI: fu740: Force 2.5GT/s for initial device probe
    - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available
    - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory
      zones
    - arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2
    - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs
    - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs
    - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs
    - arm64: dts: ti: k3-am64: Fix gic-v3 compatible regs
    - arm64: dts: ti: k3-j721s2: Fix gic-v3 compatible regs
    - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
    - mmc: core: use sysfs_emit() instead of sprintf()
    - Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query
      flag"
    - ACPI: properties: Consistently return -ENOENT if there are no more
      references
    - coredump: Also dump first pages of non-executable ELF libraries
    - ext4: fix ext4_fc_stats trace point
    - ext4: fix fs corruption when tring to remove a non-empty directory with IO
      error
    - ext4: make mb_optimize_scan option work with set/unset mount cmd
    - ext4: make mb_optimize_scan performance mount option work with extents
    - samples/landlock: Fix path_list memory leak
    - landlock: Use square brackets around "landlock-ruleset"
    - mailbox: tegra-hsp: Flush whole channel
    - btrfs: zoned: put block group after final usage
    - block: fix rq-qos breakage from skipping rq_qos_done_bio()
    - block: limit request dispatch loop duration
    - block: don't merge across cgroup boundaries if blkcg is enabled
    - drm/edid: check basic audio support on CEA extension block
    - fbdev: Hot-unplug firmware fb devices on forced removal
    - video: fbdev: sm712fb: Fix crash in smtcfb_read()
    - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
    - rfkill: make new event layout opt-in
    - ARM: dts: at91: sama7g5: Remove unused properties in i2c nodes
    - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
    - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
    - ARM: dts: exynos: add missing HDMI supplies on SMDK5250
    - ARM: dts: exynos: add missing HDMI supplies on SMDK5420
    - mgag200 fix memmapsl configuration in GCTL6 register
    - carl9170: fix missing bit-wise or operator for tx_params
    - pstore: Don't use semaphores in always-atomic-context code
    - thermal: int340x: Increase bitmap size
    - lib/raid6/test: fix multiple definition linking error
    - exec: Force single empty string when argv is empty
    - crypto: rsa-pkcs1pad - only allow with rsa
    - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
    - crypto: rsa-pkcs1pad - restore signature length check
    - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
    - bcache: fixup multiple threads crash
    - PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove()
    - DEC: Limit PMAX memory probing to R3k systems
    - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC
    - media: omap3isp: Use struct_group() for memcpy() region
    - media: venus: vdec: fixed possible memory leak issue
    - media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3
    - media: venus: venc: Fix h264 8x8 transform control
    - media: davinci: vpif: fix unbalanced runtime PM get
    - media: davinci: vpif: fix unbalanced runtime PM enable
    - media: davinci: vpif: fix use-after-free on driver unbind
    - mips: Always permit to build u-boot images
    - btrfs: zoned: mark relocation as writing
    - btrfs: extend locking to all space_info members accesses
    - btrfs: verify the tranisd of the to-be-written dirty extent buffer
    - xtensa: define update_mmu_tlb function
    - xtensa: fix stop_machine_cpuslocked call in patch_text
    - xtensa: fix xtensa_wsr always writing 0
    - KVM: s390x: fix SCK locking
    - drm/syncobj: flatten dma_fence_chains on transfer
    - drm/nouveau/backlight: Fix LVDS backlight detection on some laptops
    - drm/nouveau/backlight: Just set all backlight types as RAW
    - drm/fb-helper: Mark screen buffers in system memory with FBINFO_VIRTFB
    - brcmfmac: firmware: Allocate space for default boardrev in nvram
    - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
    - brcmfmac: pcie: Declare missing firmware files in pcie.c
    - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
    - brcmfmac: pcie: Fix crashes due to early IRQs
    - drm/i915/opregion: check port number bounds for SWSCI display power state
    - drm/i915/gem: add missing boundary check in vm_access
    - PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails
    - PCI: pciehp: Clear cmd_busy bit in polling mode
    - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup"
    - PCI: xgene: Revert "PCI: xgene: Fix IB window setup"
    - regulator: qcom_smd: fix for_each_child.cocci warnings
    - selinux: access superblock_security_struct in LSM blob way
    - selinux: check return value of sel_make_avc_files
    - crypto: ccp - Ensure psp_ret is always init'd in
      __sev_platform_init_locked()
    - crypto: qat - fix a signedness bug in get_service_enabled()
    - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER
    - crypto: sun8i-ss - really disable hash on A80
    - crypto: kdf - Select hmac in addition to sha256
    - crypto: qat - fix access to PFVF interrupt registers for GEN4
    - crypto: authenc - Fix sleep in atomic context in decrypt_tail
    - crypto: octeontx2 - select CONFIG_NET_DEVLINK
    - crypto: mxs-dcp - Fix scatterlist processing
    - selinux: Fix selinux_sb_mnt_opts_compat()
    - thermal: int340x: Check for NULL after calling kmemdup()
    - crypto: octeontx2 - remove CONFIG_DM_CRYPT check
    - spi: tegra114: Add missing IRQ check in tegra_spi_probe
    - spi: tegra210-quad: Fix missin IRQ check in tegra_qspi_probe
    - perf: MARVELL_CN10K_TAD_PMU should depend on ARCH_THUNDER
    - selftests/sgx: Fix NULL-pointer-dereference upon early test failure
    - selftests/sgx: Do not attempt enclave build without valid enclave
    - selftests/sgx: Ensure enclave data available during debug print
    - stack: Constrain and fix stack offset randomization with Clang builds
    - arm64/mm: avoid fixmap race condition when create pud mapping
    - security: add sctp_assoc_established hook
    - blk-cgroup: set blkg iostat after percpu stat aggregation
    - selftests/x86: Add validity check and allow field splitting
    - selftests/sgx: Treat CC as one argument
    - crypto: rockchip - ECB does not need IV
    - block: update io_ticks when io hang
    - audit: log AUDIT_TIME_* records only from rules
    - EVM: fix the evm= __setup handler return value
    - crypto: ccree - don't attempt 0 len DMA mappings
    - crypto: hisilicon/sec - fix the aead software fallback for engine
    - spi: pxa2xx-pci: Balance reference count for PCI DMA device
    - hwmon: (pmbus) Add mutex to regulator ops
    - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
    - nvme: cleanup __nvme_check_ids
    - nvme: fix the check for duplicate unique identifiers
    - block: don't delete queue kobject before its children
    - PM: hibernate: fix __setup handler error handling
    - PM: suspend: fix return value of __setup handler
    - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask
    - hwrng: atmel - disable trng on failure path
    - crypto: sun8i-ss - call finalize with bh disabled
    - crypto: sun8i-ce - call finalize with bh disabled
    - crypto: amlogic - call finalize with bh disabled
    - crypto: gemini - call finalize with bh disabled
    - crypto: vmx - add missing dependencies
    - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix
    - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts
    - clocksource/drivers/timer-microchip-pit64b: Use notrace
    - clocksource/drivers/timer-of: Check return value of of_iomap in
      timer_of_base_init()
    - arm64: prevent instrumentation of bp hardening callbacks
    - perf/arm-cmn: Hide XP PUB events for CMN-600
    - perf/arm-cmn: Update watchpoint format
    - KEYS: trusted: Fix trusted key backends when building as module
    - KEYS: trusted: Avoid calling null function trusted_key_exit
    - ACPI: APEI: fix return value of __setup handlers
    - crypto: ccp - ccp_dmaengine_unregister release dma channels
    - crypto: ccree - Fix use after free in cc_cipher_exit()
    - crypto: qat - fix initialization of pfvf cap_msg structures
    - crypto: qat - fix initialization of pfvf rts_map_msg structures
    - hwrng: nomadik - Change clk_disable to clk_disable_unprepare
    - hwmon: (pmbus) Add Vin unit off handling
    - clocksource: acpi_pm: fix return value of __setup handler
    - io_uring: don't check unrelated req->open.how in accept request
    - io_uring: terminate manual loop iterator loop correctly for non-vecs
    - watch_queue: Fix NULL dereference in error cleanup
    - watch_queue: Actually free the watch
    - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface
    - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
    - sched/core: Export pelt_thermal_tp
    - sched/sugov: Ignore 'busy' filter when rq is capped by uclamp_max
    - sched/uclamp: Fix iowait boost escaping uclamp restriction
    - rseq: Remove broken uapi field layout on 32-bit little endian
    - perf/core: Fix address filter parser for multiple filters
    - perf/x86/intel/pt: Fix address filter config for 32-bit kernel
    - sched/fair: Improve consistency of allowed NUMA balance calculations
    - f2fs: fix missing free nid in f2fs_handle_failed_inode
    - ext4: fix remount with 'abort' option
    - nfsd: more robust allocation failure handling in nfsd_file_cache_init
    - sched/cpuacct: Fix charge percpu cpuusage
    - sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race
    - f2fs: fix to avoid potential deadlock
    - btrfs: fix unexpected error path when reflinking an inline extent
    - iomap: Fix iomap_invalidatepage tracepoint
    - fs: erofs: add sanity check for kobject in erofs_unregister_sysfs
    - f2fs: fix compressed file start atomic write may cause data corruption
    - cifs: use a different reconnect helper for non-cifsd threads
    - selftests, x86: fix how check_cc.sh is being invoked
    - drivers/base/memory: add memory block to memory group after registration
      succeeded
    - kunit: make kunit_test_timeout compatible with comment
    - pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios
    - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size
    - media: camss: csid-170: fix non-10bit formats
    - media: camss: csid-170: don't enable unused irqs
    - media: camss: csid-170: set the right HALT_CMD when disabled
    - media: camss: vfe-170: fix "VFE halt timeout" error
    - media: staging: media: imx: imx7-mipi-csis: Make subdev name unique
    - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
    - media: mtk-vcodec: potential dereference of null pointer
    - media: imx: imx8mq-mipi-csi2: remove wrong irq config write operation
    - media: imx: imx8mq-mipi_csi2: fix system resume
    - media: bttv: fix WARNING regression on tunerless devices
    - media: atmel: atmel-sama7g5-isc: fix ispck leftover
    - ASoC: sh: rz-ssi: Drop calling rz_ssi_pio_recv() recursively
    - ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio
    - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
    - ASoC: simple-card-utils: Set sysclk on all components
    - memory: tegra20-emc: Correct memory device mask
    - media: coda: Fix missing put_device() call in coda_get_vdoa_data
    - media: meson: vdec: potential dereference of null pointer
    - media: hantro: Fix overfill bottom register field name
    - media: ov6650: Fix set format try processing path
    - media: v4l: Avoid unaligned access warnings when printing 4cc modifiers
    - media: ov5648: Don't pack controls struct
    - media: ov2740: identify module after subdev initialisation
    - media: aspeed: Correct value for h-total-pixels
    - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to
      avoid black screen
    - video: fbdev: controlfb: Fix COMPILE_TEST build
    - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
    - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
    - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
    - ARM: dts: Fix OpenBMC flash layout label addresses
    - ASoC: max98927: add missing header file
    - arm64: dts: qcom: sc7280: Fix gmu unit address
    - firmware: qcom: scm: Remove reassignment to desc following initializer
    - ARM: dts: qcom: ipq4019: fix sleep clock
    - soc: qcom: rpmpd: Check for null return of devm_kcalloc
    - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem
    - soc: qcom: aoss: Fix missing put_device call in qmp_get
    - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
    - arm64: dts: qcom: sdm845: fix microphone bias properties and values
    - arm64: dts: qcom: sm8250: fix PCIe bindings to follow schema
    - arm64: dts: qcom: msm8916-j5: Fix typo
    - arm64: dts: broadcom: bcm4908: use proper TWD binding
    - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
    - arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc
    - arm64: dts: qcom: sm8450: Update cpuidle states parameters
    - arm64: dts: qcom: msm8994: Provide missing "xo_board" and "sleep_clk" to GCC
    - arm64: dts: qcom: ipq6018: fix usb reference period
    - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not
      defined
    - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
    - cpuidle: qcom-spm: Check if any CPU is managed by SPM
    - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order
    - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
    - vsprintf: Fix potential unaligned access
    - ARM: dts: qcom: sdx55: Fix the address used for PCIe EP local addr space
    - ARM: dts: imx: Add missing LVDS decoder on M53Menlo
    - media: mexon-ge2d: fixup frames size in registers
    - media: video/hdmi: handle short reads of hdmi info frame.
    - media: ti-vpe: cal: Fix a NULL pointer dereference in
      cal_ctx_v4l2_init_formats()
    - media: em28xx: initialize refcount before kref_get
    - media: uapi: Init VP9 stateless decode params
    - media: usb: go7007: s2250-board: fix leak in probe()
    - media: cedrus: H265: Fix neighbour info buffer size
    - media: cedrus: h264: Fix neighbour info buffer size
    - arm64: dts: ti: k3-j721s2-mcu-wakeup: Fix the interrupt-parent for
      wkup_gpioX instances
    - ASoC: codecs: rx-macro: fix accessing compander for aux
    - ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type
    - ASoC: codecs: va-macro: fix accessing array out of bounds for enum type
    - ASoC: codecs: wc938x: fix accessing array out of bounds for enum type
    - ASoC: codecs: wcd938x: fix kcontrol max values
    - ASoC: codecs: wcd934x: fix kcontrol max values
    - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put
    - media: v4l2-core: Initialize h264 scaling matrix
    - media: hantro: sunxi: Fix VP9 steps
    - media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated
    - selftests: vm: remove dependecy from internal kernel macros
    - selftests/lkdtm: Add UBSAN config
    - vsprintf: Fix %pK with kptr_restrict == 0
    - uaccess: fix nios2 and microblaze get_user_8()
    - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
    - ASoC: acp: check the return value of devm_kzalloc() in
      acp_legacy_dai_links_create()
    - soc: mediatek: pm-domains: Add wakeup capacity support in power domain
    - mmc: sdhci_am654: Fix the driver data of AM64 SoC
    - ASoC: ti: davinci-i2s: Add check for clk_enable()
    - ALSA: spi: Add check for clk_enable()
    - arm64: dts: ns2: Fix spi-cpol and spi-cpha property
    - arm64: dts: broadcom: Fix sata nodename
    - printk: fix return value of printk.devkmsg __setup handler
    - ASoC: mxs-saif: Handle errors for clk_enable
    - ASoC: atmel_ssc_dai: Handle errors for clk_enable
    - ASoC: dwc-i2s: Handle errors for clk_enable
    - ASoC: soc-compress: prevent the potentially use of null pointer
    - media: i2c: Fix pixel array positions in ov8865
    - memory: emif: Add check for setup_interrupts
    - memory: emif: check the pointer temp in get_device_details()
    - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
    - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
    - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined
    - media: stk1160: If start stream fails, return buffers with
      VB2_BUF_STATE_QUEUED
    - media: vidtv: Check for null return of vzalloc
    - ASoC: cs35l41: Fix GPIO2 configuration
    - ASoC: cs35l41: Fix max number of TX channels
    - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
    - ASoC: wm8350: Handle error for wm8350_register_irq
    - ASoC: fsi: Add check for clk_enable
    - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
    - media: saa7134: fix incorrect use to determine if list is empty
    - ivtv: fix incorrect device_caps for ivtvfb
    - ASoC: atmel: Fix error handling in snd_proto_probe
    - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in
      rockchip_i2s_probe
    - ASoC: SOF: Add missing of_node_put() in imx8m_probe
    - ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe
    - ASoC: rk817: Fix missing clk_disable_unprepare() in rk817_platform_probe
    - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
    - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
    - ASoC: fsl_spdif: Disable TX clock when stop
    - ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
    - ASoC: SOF: Intel: enable DMI L1 for playback streams
    - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in
      msm8916_wcd_digital_probe
    - mmc: davinci_mmc: Handle error for clk_enable
    - rtla/osnoise: Fix osnoise hist stop tracing message
    - ASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume
    - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe
    - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
    - ASoC: mediatek: mt8195: Fix error handling in
      mt8195_mt6359_rt1019_rt5682_dev_probe
    - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data
    - ASoC: amd: Fix reference to PCM buffer address
    - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS
    - ARM: configs: multi_v5_defconfig: re-enable DRM_PANEL and FB_xxx
    - drm/bridge: sn65dsi83: Fix an error handling path in sn65dsi83_probe()
    - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops
    - drm/meson: Fix error handling when afbcd.ops->init fails
    - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
    - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
    - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe
    - drm: bridge: adv7511: Fix ADV7535 HPD enablement
    - ath11k: add missing of_node_put() to avoid leak
    - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
    - drm/v3d/v3d_drv: Check for error num after setting mask
    - Bluetooth: hci_sync: unlock on error in hci_inquiry_result_with_rssi_evt()
    - ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855
    - drm/panfrost: Check for error num after setting mask
    - bpftool: Fix error check when calling hashmap__new()
    - libbpf: Fix possible NULL pointer dereference when destroying skeleton
    - bpftool: Only set obj->skeleton on complete success
    - ath11k: fix error code in ath11k_qmi_assign_target_mem_chunk()
    - udmabuf: validate ubuf->pagecount
    - bpf: Fix UAF due to race between btf_try_get_module and load_module
    - drm/selftests/test-drm_dp_mst_helper: Fix memory leak in
      sideband_msg_req_encode_decode
    - drm/locking: fix drm_modeset_acquire_ctx kernel-doc
    - selftests: bpf: Fix bind on used port
    - Bluetooth: btintel: Fix WBS setting for Intel legacy ROM products
    - Bluetooth: hci_serdev: call init_rwsem() before p->open()
    - Bluetooth: mt7921s: fix firmware coredump retrieve
    - Bluetooth: mt7921s: fix bus hang with wrong privilege
    - Bluetooth: btmtksdio: refactor btmtksdio_runtime_[suspend|resume]()
    - Bluetooth: mt7921s: fix btmtksdio_[drv|fw]_pmctrl()
    - Bluetooth: btmtksdio: mask out interrupt status
    - mtd: onenand: Check for error irq
    - mtd: rawnand: gpmi: fix controller timings setting
    - selftests, xsk: Fix rx_full stats test
    - drm/edid: Don't clear formats if using deep color
    - drm/edid: Split deep color modes between RGB and YUV444
    - ionic: fix type complaint in ionic_dev_cmd_clean()
    - ionic: start watchdog after all is setup
    - ionic: Don't send reset commands if FW isn't running
    - ionic: fix up printing of timeout error
    - ionic: Correctly print AQ errors if completions aren't received
    - net: dsa: Move VLAN filtering syncing out of dsa_switch_bridge_leave
    - net: dsa: Avoid cross-chip syncing of VLAN filtering
    - Bluetooth: hci_event: Fix HCI_EV_VENDOR max_len
    - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl()
    - drm/amd/display: Call dc_stream_release for remove link enc assignment
    - drm/amd/display: Fix a NULL pointer dereference in
      amdgpu_dm_connector_add_common_modes()
    - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function
    - net: phy: at803x: move page selection fix to config_init
    - selftests/bpf/test_xdp_redirect_multi: use temp netns for testing
    - ath9k_htc: fix uninit value bugs
    - ath11k: set WMI_PEER_40MHZ while peer assoc for 6 GHz
    - RDMA/core: Set MR type in ib_reg_user_mr
    - KVM: PPC: Fix vmx/vsx mixup in mmio emulation
    - selftests/net: timestamping: Fix bind_phc check
    - rtw88: check for validity before using a pointer
    - rtw88: fix idle mode flow for hw scan
    - rtw88: fix memory overrun and memory leak during hw_scan
    - drm/bridge: lt9611: Fix an error handling path in lt9611_probe()
    - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
    - i40e: respect metadata on XSK Rx to skb
    - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
    - ice: respect metadata on XSK Rx to skb
    - igc: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
    - ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly
    - ixgbe: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
    - ixgbe: respect metadata on XSK Rx to skb
    - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
    - ray_cs: Check ioremap return value
    - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch
    - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init
    - powerpc/perf: Don't use perf_hw_context for trace IMC PMU
    - mt76: connac: fix sta_rec_wtbl tag len
    - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta
      mode
    - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv
    - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error
    - mt76: mt7921: set EDCA parameters with the MCU CE command
    - mt76: mt7921: do not always disable fw runtime-pm
    - mt76: mt7921: fix a leftover race in runtime-pm
    - mt76: mt7615: fix a leftover race in runtime-pm
    - mt76: mt7915: fix ht mcs in mt7915_mac_add_txs_skb()
    - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb()
    - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl
    - mt76: mt7921e: fix possible probe failure after reboot
    - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
    - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
    - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta
    - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch
    - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs()
    - mt76: mt7915: fix the nss setting in bitrates
    - ptp: unregister virtual clocks when unregistering physical clock.
    - net: dsa: mv88e6xxx: Enable port policy support on 6097
    - bpf: Fix a btf decl_tag bug when tagging a function
    - mac80211: limit bandwidth in HE capabilities
    - scripts/dtc: Call pkg-config POSIXly correct
    - livepatch: Fix build failure on 32 bits processors
    - net: asix: add proper error handling of usb read errors
    - i2c: bcm2835: Fix the error handling in 'bcm2835_i2c_probe()'
    - mtd: mchp23k256: Add SPI ID table
    - mtd: mchp48l640: Add SPI ID table
    - selftests/bpf: Extract syscall wrapper
    - selftests/bpf: Use "__se_" prefix on architectures without syscall wrapper
    - igc: avoid kernel warning when changing RX ring parameters
    - igb: refactor XDP registration
    - drm/amdgpu: Don't offset by 2 in FRU EEPROM
    - PCI: aardvark: Fix reading MSI interrupt number
    - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
    - RDMA/rxe: Check the last packet by RXE_END_MASK
    - libbpf: Fix signedness bug in btf_dump_array_data()
    - libbpf: Fix riscv register names
    - cxl/core: Fix cxl_probe_component_regs() error message
    - tools/testing/cxl: Fix root port to host bridge assignment
    - cxl/regs: Fix size of CXL Capability Header Register
    - Netvsc: Call hv_unmap_memory() in the netvsc_device_remove()
    - net:enetc: allocate CBD ring data memory using DMA coherent methods
    - libbpf: Fix compilation warning due to mismatched printf format
    - rtw88: fix use after free in rtw_hw_scan_update_probe_req()
    - drm/bridge: dw-hdmi: use safe format when first in bridge chain
    - power: supply: ab8500: Swap max and overvoltage
    - libbpf: Fix libbpf.map inheritance chain for LIBBPF_0.7.0
    - libbpf: Use dynamically allocated buffer when receiving netlink messages
    - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
    - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
    - iommu/ipmmu-vmsa: Check for error num after setting mask
    - drm/bridge: anx7625: Fix overflow issue on reading EDID
    - ath11k: fix uninitialized rate_idx in ath11k_dp_tx_update_txcompl()
    - i2c: pasemi: Drop I2C classes from platform driver variant
    - bpftool: Fix the error when lookup in no-btf maps
    - drm/amd/pm: enable pm sysfs write for one VF mode
    - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
    - bpftool: Fix pretty print dump for maps without BTF loaded
    - libbpf: Fix memleak in libbpf_netlink_recv()
    - IB/cma: Allow XRC INI QPs to set their local ACK timeout
    - cxl/core/port: Rename bus.c to port.c
    - cxl/port: Hold port reference until decoder release
    - dax: make sure inodes are flushed before destroy cache
    - selftests: mptcp: add csum mib check for mptcp_connect
    - iwlwifi: mvm: Don't call iwl_mvm_sta_from_mac80211() with NULL sta
    - iwlwifi: mvm: don't iterate unadded vifs when handling FW SMPS req
    - iwlwifi: mvm: align locking in D3 test debugfs
    - iwlwifi: yoyo: remove DBGI_SRAM address reset writing
    - iwlwifi: yoyo: Avoid using dram data if allocation failed
    - iwlwifi: mvm: fix off by one in iwl_mvm_stat_iterator_all_macs()
    - iwlwifi: Fix -EIO error code that is never returned
    - iwlwifi: mvm: Fix an error code in iwl_mvm_up()
    - mtd: rawnand: pl353: Set the nand chip node as the flash node
    - drm/msm/dp: do not initialize phy until plugin interrupt received
    - drm/msm/dp: populate connector of struct dp_panel
    - drm/msm/dp: stop link training after link training 2 failed
    - drm/msm/dp: always add fail-safe mode into connector mode list
    - drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent
    - drm/msm/dsi/phy: fix 7nm v4.0 settings for C-PHY mode
    - drm/msm/dpu: add DSPP blocks teardown
    - drm/msm/dpu: fix dp audio condition
    - drm/msm/dpu: remove msm_dp cached in dpu_encoder_virt
    - drm/msm/dp: fix panel bridge attachment
    - i40e: remove dead stores on XSK hotpath
    - ath11k: Invalidate cached reo ring entry before accessing it
    - mips: Enable KCSAN
    - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
    - vfio/pci: fix memory leak during D3hot to D0 transition
    - vfio/pci: wake-up devices around reset functions
    - scsi: fnic: Fix a tracing statement
    - scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
    - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
    - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
    - scsi: pm8001: Fix le32 values handling in
      pm80xx_set_sas_protocol_timer_config()
    - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update()
    - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req()
    - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req()
    - scsi: pm8001: Fix NCQ NON DATA command task initialization
    - scsi: pm8001: Fix NCQ NON DATA command completion handling
    - scsi: pm8001: Fix abort all task initialization
    - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans
    - mt76: fix endianness errors in reverse_frag0_hdr_trans
    - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts
    - net: dsa: realtek-smi: fix kdoc warnings
    - net: dsa: realtek-smi: move to subdirectory
    - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR
    - drm/amd/display: Remove vupdate_int_entry definition
    - TOMOYO: fix __setup handlers return values
    - power: supply: sbs-charger: Don't cancel work that is not initialized
    - mt76: mt7915: enlarge wcid size to 544
    - mt76: mt7915: fix the muru tlv issue
    - drm/dp: Fix OOB read when handling Post Cursor2 register
    - ext2: correct max file size computing
    - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
    - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false
      return
    - scsi: hisi_sas: Change permission of parameter prot_mask
    - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
    - bpf, arm64: Call build_prologue() first in first JIT pass
    - bpf, arm64: Feed byte-offset into bpf line info
    - xsk: Fix race at socket teardown
    - RDMA/irdma: Fix netdev notifications for vlan's
    - RDMA/irdma: Fix Passthrough mode in VM
    - RDMA/irdma: Remove incorrect masking of PD
    - libbpf: Fix BPF_MAP_TYPE_PERF_EVENT_ARRAY auto-pinning
    - gpu: host1x: Fix an error handling path in 'host1x_probe()'
    - gpu: host1x: Fix a memory leak in 'host1x_remove()'
    - libbpf: Skip forward declaration when counting duplicated type names
    - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties()
    - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
    - KVM: x86: Fix emulation in writing cr8
    - KVM: x86/emulator: Defer not-present segment check in
      __load_segment_descriptor()
    - KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors
    - hv_balloon: rate-limit "Unhandled message" warning
    - KVM: arm64: Enable Cortex-A510 erratum 2077057 by default
    - i2c: xiic: Make bus names unique
    - net: phy: micrel: Fix concurrent register access
    - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync()
    - Bluetooth: Fix skb allocation in mgmt_remote_name() &
      mgmt_device_connected()
    - power: supply: wm8350-power: Handle error for wm8350_register_irq
    - power: supply: wm8350-power: Add missing free in free_charger_irq
    - IB/hfi1: Allow larger MTU without AIP
    - RDMA/core: Fix ib_qp_usecnt_dec() called when error
    - PCI: Reduce warnings on possible RW1C corruption
    - net: axienet: fix RX ring refill allocation failure handling
    - drm/msm/a6xx: Fix missing ARRAY_SIZE() check
    - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
    - MIPS: Sanitise Cavium switch cases in TLB handler synthesizers
    - powerpc/sysdev: fix incorrect use to determine if list is empty
    - powerpc/64s: Don't use DSISR for SLB faults
    - mfd: mc13xxx: Add check for mc13xxx_irq_request
    - libbpf: Unmap rings when umem deleted
    - selftests/bpf: Make test_lwt_ip_encap more stable and faster
    - platform/x86: huawei-wmi: check the return value of device_create_file()
    - scsi: mpt3sas: Fix incorrect 4GB boundary check
    - powerpc: 8xx: fix a return value error in mpc8xx_pic_init
    - xtensa: add missing XCHAL_HAVE_WINDOWED check
    - iwlwifi: pcie: fix SW error MSI-X mapping
    - vxcan: enable local echo for sent CAN frames
    - ath10k: Fix error handling in ath10k_setup_msa_resources
    - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base
    - MIPS: RB532: fix return value of __setup handler
    - MIPS: pgalloc: fix memory leak caused by pgd_free()
    - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
    - power: ab8500_chargalg: Use CLOCK_MONOTONIC
    - RDMA/irdma: Prevent some integer underflows
    - Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error"
    - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
    - bpf, sockmap: Fix memleak in sk_psock_queue_msg
    - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
    - bpf, sockmap: Fix more uncharged while msg has more_data
    - bpf, sockmap: Fix double uncharge the mem of sk_msg
    - samples/bpf, xdpsock: Fix race when running for fix duration of time
    - USB: storage: ums-realtek: fix error code in rts51x_read_mem()
    - drm/amd/display: Fix double free during GPU reset on DC streams
    - RDMA/rxe: Change variable and function argument to proper type
    - RDMA/rxe: Fix ref error in rxe_av.c
    - powerpc/xive: fix return value of __setup handler
    - powerpc/time: Fix KVM host re-arming a timer beyond decrementer range
    - drm/i915/display: Fix HPD short pulse handling for eDP
    - drm/i915/display: Do not re-enable PSR after it was marked as not reliable
    - netfilter: flowtable: Fix QinQ and pppoe support for inet table
    - mt76: mt7921: fix mt7921_queues_acq implementation
    - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket
    - can: isotp: support MSG_TRUNC flag when reading from socket
    - bareudp: use ipv6_mod_enabled to check if IPv6 enabled
    - PCI: imx6: Invoke the PHY exit function after PHY power off
    - PCI: imx6: Assert i.MX8MM CLKREQ# even if no device present
    - ibmvnic: fix race between xmit and reset
    - af_unix: Fix some data-races around unix_sk(sk)->oob_skb.
    - selftests/bpf: Fix error reporting from sock_fields programs
    - Bluetooth: hci_uart: add missing NULL check in h5_enqueue
    - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed
    - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
    - RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()
    - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates
    - mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release
      skb
    - af_netlink: Fix shift out of bounds in group mask calculation
    - i2c: meson: Fix wrong speed use from probe
    - netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()
    - i2c: mux: demux-pinctrl: do not deactivate a master that is not active
    - powerpc/pseries: Fix use after free in remove_phb_dynamic()
    - ax25: Fix refcount leaks caused by ax25_cb_del()
    - ax25: Fix NULL pointer dereferences in ax25 timers
    - drm/i915: Fix renamed struct field
    - selftests/bpf/test_lirc_mode2.sh: Exit with proper code
    - bpftool: Fix print error when show bpf map
    - PCI: Avoid broken MSI on SB600 USB devices
    - net: bcmgenet: Use stronger register read/writes to assure ordering
    - tcp: ensure PMTU updates are processed during fastopen
    - openvswitch: always update flow key after nat
    - net: dsa: fix panic on shutdown if multi-chip tree failed to probe
    - net: wwan: qcom_bam_dmux: fix wrong pointer passed to IS_ERR()
    - tipc: fix the timer expires after interval 100ms
    - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
    - ice: fix 'scheduling while atomic' on aux critical err interrupt
    - ice: don't allow to run ice_send_event_to_aux() in atomic ctx
    - drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via
      ethtool
    - kernel/resource: fix kfree() of bootmem memory again
    - clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3
    - staging: r8188eu: release_firmware is not called if allocation fails
    - mxser: fix xmit_buf leak in activate when LSR == 0xff
    - fsi: scom: Fix error handling
    - fsi: scom: Remove retries in indirect scoms
    - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
    - pps: clients: gpio: Propagate return value from pps_gpio_probe
    - fsi: Aspeed: Fix a potential double free
    - misc: alcor_pci: Fix an error handling path
    - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse
    - soundwire: intel: fix wrong register name in intel_shim_wake
    - clk: qcom: ipq8074: fix PCI-E clock oops
    - dmaengine: idxd: restore traffic class defaults after wq reset
    - iio: mma8452: Fix probe failing when an i2c_device_id is used
    - staging: qlge: add unregister_netdev in qlge_probe
    - serial: 8250_aspeed_vuart: add PORT_ASPEED_VUART port type
    - staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
    - clk: renesas: r8a779f0: Fix RSW2 clock divider
    - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
    - pinctrl: renesas: checker: Fix miscalculation of number of states
    - clk: qcom: ipq8074: Use floor ops for SDCC1 clock
    - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
    - phy: phy-brcm-usb: fixup BCM4908 support
    - serial: 8250_mid: Balance reference count for PCI DMA device
    - serial: 8250_lpss: Balance reference count for PCI DMA device
    - NFS: Use of mapping_set_error() results in spurious errors
    - serial: 8250: Fix race condition in RTS-after-send handling
    - iio: adc: Add check for devm_request_threaded_irq
    - habanalabs: Add check for pci_enable_device
    - NFS: Return valid errors from nfs2/3_decode_dirent()
    - staging: r8188eu: fix endless loop in recv_func
    - dma-debug: fix return value of __setup handlers
    - clk: imx7d: Remove audio_mclk_root_clk
    - clk: imx: off by one in imx_lpcg_parse_clks_from_dt()
    - clk: at91: sama7g5: fix parents of PDMCs' GCLK
    - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
    - clk: qcom: clk-rcg2: Update the frac table for pixel clock
    - clk: starfive: jh7100: Don't round divisor up twice
    - clk: starfive: jh7100: Handle audio_div clock properly
    - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma
    - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
    - remoteproc: qcom_wcnss: Add missing of_node_put() in
      wcnss_alloc_memory_region
    - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
    - nvdimm/region: Fix default alignment for small regions
    - clk: actions: Terminate clk_div_table with sentinel element
    - clk: loongson1: Terminate clk_div_table with sentinel element
    - clk: hisilicon: Terminate clk_div_table with sentinel element
    - clk: clps711x: Terminate clk_div_table with sentinel element
    - clk: Fix clk_hw_get_clk() when dev is NULL
    - clk: tegra: tegra124-emc: Fix missing put_device() call in
      emc_ensure_emc_driver
    - mailbox: imx: fix crash in resume on i.mx8ulp
    - NFS: remove unneeded check in decode_devicenotify_args()
    - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
    - staging: mt7621-dts: fix formatting
    - staging: mt7621-dts: fix pinctrl properties for ethernet
    - staging: mt7621-dts: fix GB-PC2 devicetree
    - pinctrl: ocelot: fix confops resource index
    - pinctrl: ocelot: fix duplicate debugfs entry
    - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
    - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback
    - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
    - pinctrl: mediatek: paris: Fix pingroup pin config state readback
    - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual
      GPIOs
    - pinctrl: ocelot: Fix interrupt parsing
    - pinctrl: microchip-sgpio: lock RMW access
    - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
    - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
    - clk: visconti: prevent array overflow in visconti_clk_register_gates()
    - tty: hvc: fix return value of __setup handler
    - kgdboc: fix return value of __setup handler
    - serial: 8250: fix XOFF/XON sending when DMA is used
    - virt: acrn: obtain pa from VMA with PFNMAP flag
    - virt: acrn: fix a memory leak in acrn_dev_ioctl()
    - kgdbts: fix return value of __setup handler
    - firmware: google: Properly state IOMEM dependency
    - driver core: dd: fix return value of __setup handler
    - perf test arm64: Test unwinding using fame-pointer (fp) mode
    - jfs: fix divide error in dbNextAG
    - SUNRPC/call_alloc: async tasks mustn't block waiting for memory
    - SUNRPC: improve 'swap' handling: scheduling and PF_MEMALLOC
    - SUNRPC: Don't call connect() more than once on a TCP socket
    - perf parse-events: Move slots only with topdown
    - netfilter: egress: Report interface as outgoing
    - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
    - SUNRPC don't resend a task on an offlined transport
    - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
    - kdb: Fix the putarea helper function
    - perf stat: Fix forked applications enablement of counters
    - net: stmmac: dwmac-qcom-ethqos: Enable RGMII functional clock on resume
    - clk: qcom: gcc-msm8994: Fix gpll4 width
    - vsock/virtio: initialize vdev->priv before using VQs
    - vsock/virtio: read the negotiated features before using VQs
    - vsock/virtio: enable VQs early on probe
    - clk: Initialize orphan req_rate
    - xen: fix is_xen_pmu()
    - net: enetc: report software timestamping via SO_TIMESTAMPING
    - net: hns3: fix bug when PF set the duplicate MAC address for VFs
    - net: hns3: fix port base vlan add fail when concurrent with reset
    - net: hns3: add vlan list lock to protect vlan list
    - net: hns3: refine the process when PF set VF VLAN
    - net: phy: broadcom: Fix brcm_fet_config_init()
    - selftests: test_vxlan_under_vrf: Fix broken test case
    - NFS: Don't loop forever in nfs_do_recoalesce()
    - libperf tests: Fix typo in perf_evlist__open() failure error messages
    - net: hns3: fix ethtool tx copybreak buf size indicating not aligned issue
    - net: hns3: add max order judgement for tx spare buffer
    - net: hns3: clean residual vf config after disable sriov
    - net: hns3: add netdev reset check for hns3_set_tunable()
    - net: hns3: add NULL pointer check for hns3_set/get_ringparam()
    - net: hns3: fix phy can not link up when autoneg off and reset
    - net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL
    - qlcnic: dcb: default to returning -EOPNOTSUPP
    - net/x25: Fix null-ptr-deref caused by x25_disconnect
    - net: sparx5: switchdev: fix possible NULL pointer dereference
    - octeontx2-af: initialize action variable
    - selftests: tls: skip cmsg_to_pipe tests with TLS=n
    - net/sched: act_ct: fix ref leak when switching zones
    - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
    - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
    - fs: fd tables have to be multiples of BITS_PER_LONG
    - lib/test: use after free in register_test_dev_kmod()
    - fs: fix fd table size alignment properly
    - LSM: general protection fault in legacy_parse_param
    - regulator: rpi-panel: Handle I2C errors/timing to the Atmel
    - crypto: hisilicon/qm - cleanup warning in qm_vf_read_qos
    - crypto: octeontx2 - CN10K CPT to RNM workaround
    - gcc-plugins/stackleak: Exactly match strings instead of prefixes
    - rcu: Kill rnp->ofl_seq and use only rcu_state.ofl_lock for exclusion
    - pinctrl: npcm: Fix broken references to chip->parent_device
    - rcu: Mark writes to the rcu_segcblist structure's ->flags field
    - block: throttle split bio in case of iops limit
    - memstick/mspro_block: fix handling of read-only devices
    - block/bfq_wf2q: correct weight to ioprio
    - crypto: xts - Add softdep on ecb
    - crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3
    - block, bfq: don't move oom_bfqq
    - selinux: use correct type for context length
    - powercap/dtpm_cpu: Reset per_cpu variable in the release function
    - arm64: module: remove (NOLOAD) from linker script
    - selinux: allow FIOCLEX and FIONCLEX with policy capability
    - loop: use sysfs_emit() in the sysfs xxx show()
    - Fix incorrect type in assignment of ipv6 port for audit
    - irqchip/qcom-pdc: Fix broken locking
    - irqchip/nvic: Release nvic_base upon failure
    - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
    - hwrng: cavium - fix NULL but dereferenced coccicheck error
    - bfq: fix use-after-free in bfq_dispatch_request
    - ACPICA: Avoid walking the ACPI Namespace if it is not there
    - ACPI / x86: Add skip i2c clients quirk for Nextbook Ares 8
    - ACPI / x86: Add skip i2c clients quirk for Lenovo Yoga Tablet 1050F/L
    - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
    - Revert "Revert "block, bfq: honor already-setup queue merges""
    - ACPI/APEI: Limit printable size of BERT table data
    - PM: core: keep irq flags in device_pm_check_callbacks()
    - parisc: Fix non-access data TLB cache flush faults
    - parisc: Fix handling off probe non-access faults
    - nvme-tcp: lockdep: annotate in-kernel sockets
    - spi: tegra20: Use of_device_get_match_data()
    - spi: fsi: Implement a timeout for polling status
    - atomics: Fix atomic64_{read_acquire,set_release} fallbacks
    - locking/lockdep: Iterate lock_classes directly when reading lockdep files
    - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb
    - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
    - sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE
    - ext4: don't BUG if someone dirty pages without asking ext4 first
    - f2fs: fix to do sanity check on curseg->alloc_type
    - NFSD: Fix nfsd_breaker_owns_lease() return values
    - f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs
    - btrfs: harden identification of a stale device
    - btrfs: make search_csum_tree return 0 if we get -EFBIG
    - btrfs: handle csum lookup errors properly on reads
    - btrfs: do not double complete bio on errors during compressed reads
    - btrfs: do not clean up repair bio if submit fails
    - f2fs: use spin_lock to avoid hang
    - f2fs: compress: fix to print raw data size in error path of lz4
      decompression
    - Adjust cifssb maximum read size
    - ntfs: add sanity check on allocation size
    - media: staging: media: zoran: move videodev alloc
    - media: staging: media: zoran: calculate the right buffer number for
      zoran_reap_stat_com
    - media: staging: media: zoran: fix various V4L2 compliance errors
    - media: atmel: atmel-isc-base: report frame sizes as full supported range
    - media: ir_toy: free before error exiting
    - ASoC: sh: rz-ssi: Make the data structures available before registering the
      handlers
    - ASoC: cs42l42: Report full jack status when plug is detected
    - ASoC: SOF: Intel: match sdw version on link_slaves_found
    - media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
    - ASoC: SOF: Intel: hda: Remove link assignment limitation
    - media: iommu/mediatek-v1: Free the existed fwspec if the master dev already
      has
    - media: iommu/mediatek: Return ENODEV if the device is NULL
    - media: iommu/mediatek: Add device_link between the consumer and the larb
      devices
    - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
    - video: fbdev: w100fb: Reset global state
    - video: fbdev: cirrusfb: check pixclock to avoid divide by zero
    - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
    - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
    - ARM: dts: bcm2837: Add the missing L1/L2 cache information
    - ASoC: madera: Add dependencies on MFD
    - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator
      off on some boards
    - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
    - ARM: ftrace: avoid redundant loads or clobbering IP
    - ALSA: hda: Fix driver index handling at re-binding
    - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk
    - arm64: defconfig: build imx-sdma as a module
    - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
    - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of
      snprintf()
    - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
    - ARM: dts: bcm2711: Add the missing L1/L2 cache information
    - ASoC: soc-core: skip zero num_dai component in searching dai name
    - ASoC: Intel: sof_es8336: add quirk for Huawei D15 2021
    - media: imx-jpeg: fix a bug of accessing array out of bounds
    - media: cx88-mpeg: clear interrupt status register before streaming video
    - ASoC: rt5682s: Fix the wrong jack type detected
    - ARM: tegra: transformer: Drop reg-shift for Tegra HS UART
    - uaccess: fix type mismatch warnings from access_ok()
    - lib/test_lockup: fix kernel pointer check for separate address spaces
    - ARM: tegra: tamonten: Fix I2C3 pad setting
    - ARM: mmp: Fix failure to remove sram device
    - ASoC: amd: vg: fix for pm resume callback sequence
    - ASoC: amd: vangogh: fix uninitialized symbol warning in machine driver
    - video: fbdev: sm712fb: Fix crash in smtcfb_write()
    - media: i2c: ov5648: Fix lockdep error
    - media: Revert "media: em28xx: add missing em28xx_close_extension"
    - media: hdpvr: initialize dev->worker at hdpvr_register_videodev
    - ASoC: SOF: debug: clarify operator precedence
    - ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13"
    - ASoC: SOF: Intel: hda: retrieve DMIC number for I2S boards
    - ALSA: intel-nhlt: add helper to detect SSP link mask
    - ALSA: intel-dsp-config: add more ACPI HIDs for ES83x6 devices
    - ASoC: Intel: soc-acpi: add more ACPI HIDs for ES83x6 devices
    - ALSA: intel-dspconfig: add ES8336 support for CNL
    - ASoC: Intel: Revert "ASoC: Intel: sof_es8336: add quirk for Huawei D15 2021"
    - ASoC: Intel: sof_es8336: log all quirks
    - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well
    - mmc: host: Return an error when ->enable_sdio_irq() ops is missing
    - ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe
    - media: atomisp: fix bad usage at error handling logic
    - ALSA: hda/realtek: Add alc256-samsung-headphone fixup
    - KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255
    - KVM: x86: Reinitialize context if host userspace toggles EFER.LME
    - KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook
    - KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root()
    - KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU
    - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU
    - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi()
    - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb()
    - KVM: x86: hyper-v: Fix the maximum number of sparse banks for XMM fast TLB
      flush hypercalls
    - KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall
    - powerpc/kasan: Fix early region not updated correctly
    - powerpc/tm: Fix more userspace r13 corruption
    - powerpc/lib/sstep: Fix 'sthcx' instruction
    - powerpc/lib/sstep: Fix build errors with newer binutils
    - powerpc: Add set_memory_{p/np}() and remove set_memory_attr()
    - powerpc: Fix build errors with newer binutils
    - drm/dp: Fix off-by-one in register cache size
    - drm/i915: Treat SAGV block time 0 as SAGV disabled
    - drm/i915: Fix PSF GV point mask when SAGV is not possible
    - drm/i915: Reject unsupported TMDS rates on ICL+
    - scsi: qla2xxx: Refactor asynchronous command initialization
    - scsi: qla2xxx: Implement ref count for SRB
    - scsi: qla2xxx: Fix stuck session in gpdb
    - scsi: qla2xxx: Fix warning message due to adisc being flushed
    - scsi: qla2xxx: Fix scheduling while atomic
    - scsi: qla2xxx: Fix premature hw access after PCI error
    - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
    - scsi: qla2xxx: Fix warning for missing error code
    - scsi: qla2xxx: Fix device reconnect in loop topology
    - scsi: qla2xxx: edif: Fix clang warning
    - scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters
    - scsi: qla2xxx: Add devids and conditionals for 28xx
    - scsi: qla2xxx: Check for firmware dump already collected
    - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
    - scsi: qla2xxx: Fix disk failure to rediscover
    - scsi: qla2xxx: Fix incorrect reporting of task management failure
    - scsi: qla2xxx: Fix hang due to session stuck
    - scsi: qla2xxx: Fix laggy FC remote port session recovery
    - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
    - scsi: qla2xxx: Fix crash during module load unload test
    - scsi: qla2xxx: Fix N2N inconsistent PLOGI
    - scsi: qla2xxx: Fix stuck session of PRLI reject
    - scsi: qla2xxx: Reduce false trigger to login
    - scsi: qla2xxx: Use correct feature type field during RFF_ID processing
    - platform: chrome: Split trace include file
    - MIPS: crypto: Fix CRC32 code
    - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
    - KVM: x86: Avoid theoretical NULL pointer dereference in
      kvm_irq_delivery_to_apic_fast()
    - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
    - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
    - KVM: Prevent module exit until all VMs are freed
    - KVM: x86: fix sending PV IPI
    - KVM: SVM: fix panic on out-of-bounds guest IRQ
    - KVM: avoid double put_page with gfn-to-pfn cache
    - ubifs: rename_whiteout: Fix double free for whiteout_ui->data
    - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
    - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
    - ubifs: Rename whiteout atomically
    - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work
    - ubifs: Rectify space amount budget for mkdir/tmpfile operations
    - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
    - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
    - ubifs: Fix to add refcount once page is set private
    - ubifs: rename_whiteout: correct old_dir size computing
    - nvme: allow duplicate NSIDs for private namespaces
    - nvme: fix the read-only state for zoned namespaces with unsupposed features
    - wireguard: queueing: use CFI-safe ptr_ring cleanup function
    - wireguard: socket: free skb in send6 when ipv6 is disabled
    - wireguard: socket: ignore v6 endpoints when ipv6 is disabled
    - XArray: Fix xas_create_range() when multi-order entry present
    - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
    - can: mcba_usb: properly check endpoint type
    - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value
    - XArray: Include bitmap.h from xarray.h
    - XArray: Update the LRU list in xas_split()
    - modpost: restore the warning message for missing symbol versions
    - rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram
    - rtc: check if __rtc_read_time was successful
    - loop: fix ioctl calls using compat_loop_info
    - gfs2: gfs2_setattr_size error path fix
    - gfs2: Fix gfs2_file_buffered_write endless loop workaround
    - gfs2: Make sure FITRIM minlen is rounded up to fs block size
    - net: hns3: fix the concurrency between functions reading debugfs
    - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
    - rxrpc: fix some null-ptr-deref bugs in server_key.c
    - rxrpc: Fix call timer start racing with call destruction
    - mailbox: imx: fix wakeup failure from freeze mode
    - crypto: x86/poly1305 - Fixup SLS
    - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes
    - watch_queue: Free the page array when watch_queue is dismantled
    - pinctrl: pinconf-generic: Print arguments for bias-pull-*
    - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function
    - net: sparx5: uses, depends on BRIDGE or !BRIDGE
    - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
    - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
    - ASoC: rockchip: i2s_tdm: Fixup config for SND_SOC_DAIFMT_DSP_A/B
    - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
    - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
    - ARM: iop32x: offset IRQ numbers by 1
    - block: Fix the maximum minor value is blk_alloc_ext_minor()
    - block: restore the old set_task_ioprio() behaviour wrt PF_EXITING
    - Revert "virtio-pci: harden INTX interrupts"
    - Revert "virtio_pci: harden MSI-X interrupts"
    - virtio: use virtio_device_ready() in virtio_device_restore()
    - io_uring: remove poll entry from list when canceling all
    - io_uring: bump poll refs to full 31-bits
    - io_uring: fix memory leak of uid in files registration
    - riscv module: remove (NOLOAD)
    - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
    - vhost: handle error while adding split ranges to iotlb
    - spi: Fix Tegra QSPI example
    - platform/chrome: cros_ec_typec: Check for EC device
    - platform/x86: asus-wmi: Fix regression when probing for fan curve control
    - can: isotp: restore accidentally removed MSG_PEEK feature
    - proc: bootconfig: Add null pointer check
    - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation
    - x86/sev: Unroll string mmio with CC_ATTR_GUEST_UNROLL_STRING_IO
    - drm/connector: Fix typo in documentation
    - scsi: qla2xxx: Add qla2x00_async_done() for async routines
    - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet
    - docs: fix 'make htmldocs' warning in SCTP.rst
    - arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition
    - ASoC: soc-compress: Change the check for codec_dai
    - KVM: x86: SVM: fix avic spec based definitions again
    - ax25: fix UAF bug in ax25_send_control()
    - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
    - tracing: Have type enum modifications copy the strings
    - mips: Enable KCSAN - take 2
    - net: add skb_set_end_offset() helper
    - mm/mmap: return 1 from stack_guard_gap __setup() handler
    - ARM: 9187/1: JIVE: fix return value of __setup handler
    - mm/memcontrol: return 1 from cgroup.memory __setup() handler
    - mm/usercopy: return 1 from hardened_usercopy __setup() handler
    - af_unix: Support POLLPRI for OOB.
    - libbpf: Define BTF_KIND_* constants in btf.h to avoid compilation errors
    - bpf: Adjust BPF stack helper functions to accommodate skip > 0
    - bpf: Fix comment for helper bpf_current_task_under_cgroup()
    - nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
    - mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM
    - dt-bindings: mtd: nand-controller: Fix the reg property description
    - dt-bindings: mtd: nand-controller: Fix a comment in the examples
    - dt-bindings: spi: mxic: The interrupt property is not mandatory
    - media: dt-binding: media: hynix,hi846: use $defs/port-base port description
    - media: dt-bindings: media: hynix,hi846: add link-frequencies description
    - dt-bindings: memory: mtk-smi: Rename clock to clocks
    - dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167
    - dt-bindings: memory: mtk-smi: Correct minItems to 2 for the gals clocks
    - dt-bindings: pinctrl: mt8195: fix bias-pull-{up,down} checks
    - dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example
    - ubi: fastmap: Return error code if memory allocation fails in add_aeb()
    - net: preserve skb_end_offset() in skb_unclone_keeptruesize()
    - ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV
    - ASoC: topology: Allow TLV control to be either read or write
    - perf vendor events: Update metrics for SkyLake Server
    - media: ov6650: Add try support to selection API operations
    - media: ov6650: Fix crop rectangle affected by set format
    - pinctrl: canonical rsel resistance selection property
    - spi: mediatek: support tick_delay without enhance_timing
    - ARM: dts: spear1340: Update serial node properties
    - ARM: dts: spear13xx: Update SPI dma properties
    - arm64: dts: ls1043a: Update i2c dma properties
    - arm64: dts: ls1046a: Update i2c node dma properties
    - um: Fix uml_mconsole stop/go
    - docs: sysctl/kernel: add missing bit to panic_print
    - xsk: Do not write NULL in SW ring at allocation failure
    - ice: xsk: Fix indexing in ice_tx_xsk_pool()
    - vdpa/mlx5: Avoid processing works if workqueue was destroyed
    - openvswitch: Fixed nd target mask field in the flow dump.
    - torture: Make torture.sh help message match reality
    - n64cart: convert bi_disk to bi_bdev->bd_disk fix build
    - Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()"
    - mmc: rtsx: Let MMC core handle runtime PM
    - mmc: rtsx: Fix build errors/warnings for unused variable
    - coredump: Snapshot the vmas in do_coredump
    - coredump: Remove the WARN_ON in dump_vma_snapshot
    - coredump/elf: Pass coredump_params into fill_note_info
    - coredump: Use the vma snapshot in fill_files_note
    - Linux 5.17.2

  * Jammy update: v5.17.1 upstream stable release (LP: #1968982)
    - tpm: Fix error handling in async work
    - Bluetooth: btusb: Add another Realtek 8761BU
    - llc: fix netdevice reference leaks in llc_ui_bind()
    - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
    - ALSA: oss: Fix PCM OSS buffer allocation overflow
    - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE
    - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ
    - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ
    - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
    - ALSA: hda/realtek: Add quirk for ASUS GA402
    - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
    - ALSA: pcm: Fix races among concurrent read/write and buffer changes
    - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
    - ALSA: pcm: Fix races among concurrent prealloc proc writes
    - ALSA: pcm: Add stream lock during PCM reset ioctl operations
    - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
    - ALSA: cmipci: Restore aux vol on suspend/resume
    - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
    - drivers: net: xgene: Fix regression in CRC stripping
    - netfilter: nf_tables: initialize registers in nft_do_chain()
    - netfilter: nf_tables: validate registers coming from userspace.
    - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
    - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
    - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
    - crypto: qat - disable registration of algorithms
    - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
    - Bluetooth: hci_sync: Add a new quirk to skip HCI_FLT_CLEAR_ALL
    - Bluetooth: btusb: Use quirk to skip HCI_FLT_CLEAR_ALL on fake CSR
      controllers
    - Revert "ath: add support for special 0x0 regulatory domain"
    - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
    - jbd2: fix use-after-free of transaction_t race
    - rcu: Don't deboost before reporting expedited quiescent state
    - uaccess: fix integer overflow on access_ok()
    - mac80211: fix potential double free on mesh join
    - tpm: fix reference counting for struct tpm_chip
    - tpm: use try_get_ops() in tpm-space.c
    - wcn36xx: Differentiate wcn3660 from wcn3620
    - m68k: fix access_ok for coldfire
    - nds32: fix access_ok() checks in get/put_user
    - drm/msm/gpu: Fix crash on devices without devfreq support (v2)
    - llc: only change llc->dev when bind() succeeds
    - Linux 5.17.1

  * Miscellaneous Ubuntu changes
    - SAUCE: shiftfs: always rely on init_user_ns
    - [Config] update configs and annotations after stable updates
    - SAUCE: sfc: The size of the RX recycle ring should be more flexible
    - [Packaging] remove references to lowlatency flavor

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 14 Apr 2022 08:45:40 +0200

linux-unstable (5.17.0-6.6) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-6.6 -proposed tracker (LP: #1965731)

  * dependency on crda obsolete according to Debian (LP: #1958918)
    - [Packaging] switch dependency from crda to wireless-regdb

  * Miscellaneous Ubuntu changes
    - [Config] disable CONFIG_SYSFB_SIMPLEFB on amd64

  [ Upstream Kernel Changes ]

  * Rebase to v5.17

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 21 Mar 2022 09:46:03 +0100

linux-unstable (5.17.0-5.5) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-5.5 -proposed tracker (LP: #1964766)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5

  * Miscellaneous Ubuntu changes
    - [Config] update configs and annotations after rebase to v5.17-rc8

  [ Upstream Kernel Changes ]

  * Rebase to v5.17-rc8

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 14 Mar 2022 13:15:50 +0100

linux-unstable (5.17.0-4.4) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-4.4 -proposed tracker (LP: #1963880)

  [ Upstream Kernel Changes ]

  * Rebase to v5.17-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 07 Mar 2022 10:20:48 +0100

linux-unstable (5.17.0-3.3) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-3.3 -proposed tracker (LP: #1962450)

  * 5.15 stuck at boot on c4.large (LP: #1956780)
    - Revert "PCI/MSI: Mask MSI-X vectors only on success"

  * [22.04 FEAT] KVM: Enable storage key checking for intercepted instruction
    handled by userspace (LP: #1933179)
    - s390/uaccess: Add copy_from/to_user_key functions
    - KVM: s390: Honor storage keys when accessing guest memory
    - KVM: s390: handle_tprot: Honor storage keys
    - KVM: s390: Add optional storage key checking to MEMOP IOCTL
    - KVM: s390: Add vm IOCTL for key checked guest absolute memory access
    - KVM: s390: Rename existing vcpu memop functions
    - KVM: s390: Update api documentation for memop ioctl
    - KVM: s390: Clarify key argument for MEM_OP in api docs
    - KVM: s390: Add missing vm MEM_OP size check

  [ Upstream Kernel Changes ]

  * Rebase to v5.17-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 28 Feb 2022 09:42:32 +0100

linux-unstable (5.17.0-2.2) jammy; urgency=medium

  * jammy/linux-unstable: 5.17.0-2.2 -proposed tracker (LP: #1962137)

  * CVE-2022-25636
    - netfilter: nf_tables_offload: incorrect flow offload action array size

  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
    - [Packaging] update Ubuntu.md
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Jammy update: v5.15.22 upstream stable release (LP: #1960516)
    - Revert "ASoC: mediatek: Check for error clk pointer"
    - [Config] disable FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION

  * Jammy update: v5.15.20 upstream stable release (LP: #1960509)
    - Revert "UBUNTU: SAUCE: Revert "e1000e: Additional PHY power saving in S0ix""

  * Jammy update: v5.15.19 upstream stable release (LP: #1959879)
    - drm/etnaviv: relax submit size limits

  * Jammy update: v5.15.17 upstream stable release (LP: #1959376)
    - net: dsa: hellcreek: Allow PTP P2P measurements on blocked ports
    - rtw88: add quirk to disable pci caps on HP 250 G7 Notebook PC
    - ASoC: mediatek: Check for error clk pointer
    - regulator: da9121: Prevent current limit change when enabled
    - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
    - drm/etnaviv: limit submit sizes
    - Bluetooth: hci_sync: Fix not setting adv set duration
    - net: axienet: Wait for PhyRstCmplt after core reset

  * rtw88_8821ce causes freeze (LP: #1927808) // Jammy update: v5.15.17 upstream
    stable release (LP: #1959376)
    - rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE

  * Jammy update: v5.15.15 upstream stable release (LP: #1958418)
    - Bluetooth: btusb: Add support for Foxconn MT7922A
    - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
    - platform/x86/intel: hid: add quirk to support Surface Go 3

  * Support USB4 DP alt mode for AMD Yellow Carp graphics card (LP: #1953008)
    - SAUCE: drm/amd/display: Fixup previous PSR policy commit

  * alsa/sdw: add sdw audio machine driver for several ADL machines
    (LP: #1951563)
    - ASoC: Intel: sof_sdw: Add support for SKU 0B11 product
    - ASoC: Intel: sof_sdw: Add support for SKU 0B13 product
    - ASoC: Intel: sof_sdw: Add support for SKU 0B29 product
    - ASoC: Intel: sof_sdw: Add support for SKU 0B12 product

  * Improve performance and idle power consumption (LP: #1941893)
    - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs

  * Fix spurious wakeup caused by Intel 7560 WWAN (LP: #1956443)
    - net: wwan: iosm: Keep device at D0 for s2idle case

  * Jammy update: v5.15.13 upstream stable release (LP: #1956926)
    - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
    - net/mlx5: Fix tc max supported prio for nic mode

  * Miscellaneous Ubuntu changes
    - [Packaging] Update dependency of pahole / dwarves
    - [packaging] unhook lowlatency flavours from the build
    - [Packaging] use default zstd compression
    - [Packaging] do not use compression for image packages
    - [Packaging] use xz compression for ddebs
    - SAUCE: Makefile: Remove inclusion of lbm header files
    - SAUCE: Makefile: Fix compiler warnings
    - [Config] drop unused lowlatency configs
    - [Config] update configs and annotations after rebase to v5.17-rc5

  * Miscellaneous upstream changes
    - Revert "rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE"
    - MAINTAINERS: Add scripts/pahole-flags.sh to BPF section
    - kbuild: Add CONFIG_PAHOLE_VERSION
    - lib/Kconfig.debug: Use CONFIG_PAHOLE_VERSION
    - lib/Kconfig.debug: Allow BTF + DWARF5 with pahole 1.21+
    - Revert "UBUNTU: [Packaging] temporarily disable zfs"

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 24 Feb 2022 09:41:40 +0100

linux-unstable (5.17.0-1.1) jammy; urgency=medium

  * Rebase to 5.17-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 21 Feb 2022 08:22:18 +0100

linux-unstable (5.17.0-0.0) jammy; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 28 Jan 2022 17:14:13 +0100

linux (5.15.0-18.18) jammy; urgency=medium

  * jammy/linux: 5.15.0-18.18 -proposed tracker (LP: #1958638)

  * CVE-2021-4155
    - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate

  * CVE-2022-0185
    - SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE

  * [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
    kernel part (LP: #1953334)
    - KVM: s390: add debug statement for diag 318 CPNC data

  * OOB write on BPF_RINGBUF (LP: #1956585)
    - SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other
      than 0

  * Miscellaneous Ubuntu changes
    - [Config] re-enable shiftfs
    - [SAUCE] shiftfs: support kernel 5.15
    - [Config] update toolchain versions

  * Miscellaneous upstream changes
    - vfs: fs_context: fix up param length parsing in legacy_parse_param

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 21 Jan 2022 13:32:27 +0100

linux (5.15.0-17.17) jammy; urgency=medium

  * jammy/linux: 5.15.0-17.17 -proposed tracker (LP: #1957809)

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 13 Jan 2022 17:11:21 +0100

linux (5.15.0-16.16) jammy; urgency=medium

  * jammy/linux: 5.15.0-16.16 -proposed tracker (LP: #1956820)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * 5.15 stuck at boot on c4.large (LP: #1956780)
    - Revert "PCI/MSI: Mask MSI-X vectors only on success"

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] temporarily disable signed v4l2loopback"

 -- Andrea Righi <andrea.righi@canonical.com>  Sat, 08 Jan 2022 10:57:58 +0100

linux (5.15.0-15.15) jammy; urgency=medium

  * jammy/linux: 5.15.0-15.15 -proposed tracker (LP: #1956314)

  * Packaging resync (LP: #1786013)
    - update dkms package versions
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * rtw88_8821ce causes freeze (LP: #1927808)
    - rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE

  * alsa/sdw: fix the  audio sdw codec parsing logic in the acpi table
    (LP: #1955686)
    - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
    - ALSA: hda: intel-sdw-acpi: harden detection of controller

  * Got black screen when resume from s2idle with AMD dGPU (LP: #1955790)
    - SAUCE: drm/amdgpu: put SMU into proper state on runpm suspending for BOCO
      capable platform
    - SAUCE: drm/amdgpu: always reset the asic in suspend (v2)

  *  Fix USB3 detection on HP dock (LP: #1955443)
    - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0

  * support signed v4l2loopback dkms build (LP: #1938531)
    - enable v4l2loopback builds on amd64 kernels
    - support v4l2loopback dkms build

  * Jammy update: v5.15.12 upstream stable release (LP: #1956305)
    - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
    - net: usb: lan78xx: add Allied Telesis AT29M2-AF
    - ext4: prevent partial update of the extent blocks
    - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
    - ext4: check for inconsistent extents between index and leaf block
    - selftests: KVM: Fix non-x86 compiling
    - HID: holtek: fix mouse probing
    - HID: potential dereference of null pointer
    - NFSD: Fix READDIR buffer overflow
    - PM: sleep: Fix error handling in dpm_prepare()
    - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
    - bus: sunxi-rsb: Fix shutdown
    - spi: change clk_disable_unprepare to clk_unprepare
    - ucounts: Fix rlimit max values check
    - drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
    - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
    - RDMA/hns: Fix RNR retransmission issue for HIP08
    - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
    - RDMA/hns: Replace kfree() with kvfree()
    - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
    - netfilter: fix regression in looped (broad|multi)cast's MAC handling
    - ARM: dts: imx6qdl-wandboard: Fix Ethernet support
    - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
    - ice: xsk: return xsk buffers back to pool when cleaning the ring
    - net: marvell: prestera: fix incorrect return of port_find
    - net: marvell: prestera: fix incorrect structure access
    - qlcnic: potential dereference null pointer of rx_queue->page_ring
    - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
    - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
    - inet: fully convert sk->sk_rx_dst to RCU rules
    - net: accept UFOv6 packages in virtio_net_hdr_to_skb
    - net: skip virtio_net_hdr_set_proto if protocol already set
    - igb: fix deadlock caused by taking RTNL in RPM resume path
    - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
    - gpio: virtio: remove timeout
    - bonding: fix ad_actor_system option setting to default
    - fjes: Check for error irq
    - drivers: net: smc911x: Check for error irq
    - net: ks8851: Check for error irq
    - sfc: Check null pointer of rx_queue->page_ring
    - sfc: falcon: Check null pointer of rx_queue->page_ring
    - asix: fix uninit-value in asix_mdio_read()
    - asix: fix wrong return value in asix_check_host_enable()
    - io_uring: zero iocb->ki_pos for stream file types
    - veth: ensure skb entering GRO are not cloned.
    - net: stmmac: ptp: fix potentially overflowing expression
    - net: bridge: Use array_size() helper in copy_to_user()
    - net: bridge: fix ioctl old_deviceless bridge argument
    - r8152: fix the force speed doesn't work for RTL8156
    - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
    - pinctrl: bcm2835: Change init order for gpio hogs
    - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
    - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
    - hwmon: (lm90) Introduce flag indicating extended temperature support
    - hwmon: (lm90) Add basic support for TI TMP461
    - hwmon: (lm90) Drop critical attribute support for MAX6654
    - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
    - uapi: Fix undefined __always_inline on non-glibc systems
    - compiler.h: Fix annotation macro misplacement with Clang
    - platform/x86/intel: Remove X86_PLATFORM_DRIVERS_INTEL
    - kernel/crash_core: suppress unknown crashkernel parameter warning
    - Revert "x86/boot: Pull up cmdline preparation and early param parsing"
    - x86/boot: Move EFI range reservation after cmdline parsing
    - ALSA: jack: Check the return value of kstrdup()
    - ALSA: drivers: opl3: Fix incorrect use of vp->state
    - ALSA: rawmidi - fix the uninitalized user_pversion
    - ALSA: hda/hdmi: Disable silent stream on GLK
    - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
    - ALSA: hda/realtek: Add new alc285-hp-amp-init model
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
    - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
    - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
    - ASoC: tegra: Add DAPM switches for headphones and mic jack
    - ASoC: tegra: Restore headphones jack name on Nyan Big
    - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
    - ipmi: bail out if init_srcu_struct fails
    - ipmi: ssif: initialize ssif_info->client early
    - ipmi: fix initialization when workqueue allocation fails
    - parisc: Correct completer in lws start
    - parisc: Fix mask used to select futex spinlock
    - tee: handle lookup of shm with reference count 0
    - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
    - platform/x86: amd-pmc: only use callbacks for suspend
    - platform/x86: intel_pmc_core: fix memleak on registration failure
    - KVM: x86: Always set kvm_run->if_flag
    - KVM: x86/mmu: Don't advance iterator after restart due to yielding
    - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
    - KVM: VMX: Always clear vmx->fail on emulation_required
    - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
    - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
    - gpio: dln2: Fix interrupts when replugging the device
    - mmc: sdhci-tegra: Fix switch to HS400ES mode
    - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
    - mmc: core: Disable card detect during shutdown
    - mmc: mmci: stm32: clear DLYB_CR after sending tuning command
    - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
    - ksmbd: fix error code in ndr_read_int32()
    - ksmbd: fix uninitialized symbol 'pntsd_size'
    - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
    - mac80211: fix locking in ieee80211_start_ap error path
    - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
    - mm, hwpoison: fix condition in free hugetlb page path
    - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
    - mm/damon/dbgfs: protect targets destructions with kdamond_lock
    - tee: optee: Fix incorrect page free bug
    - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
    - netfs: fix parameter of cleanup()
    - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
    - arm64: dts: lx2160a: fix scl-gpios property name
    - kfence: fix memory leak when cat kfence objects
    - Input: iqs626a - prohibit inlining of channel parsing functions
    - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
    - Input: goodix - add id->model mapping for the "9111" model
    - ASoC: tas2770: Fix setting of high sample rates
    - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
    - ASoC: SOF: Intel: pci-tgl: add ADL-N support
    - ASoC: rt5682: fix the wrong jack type detected
    - pinctrl: mediatek: fix global-out-of-bounds issue
    - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
    - hwmon: (lm90) Do not report 'busy' status bit as alarm
    - r8152: sync ocp base
    - ax25: NPD bug when detaching AX25 device
    - hamradio: defer ax25 kfree after unregister_netdev
    - hamradio: improve the incomplete fix to avoid NPD
    - tun: avoid double free in tun_free_netdev
    - phonet/pep: refuse to enable an unbound pipe
    - Linux 5.15.12

  * Thinkpad E14 Gen2: Kernel panic with trackpad and trackpoint enabled
    (LP: #1945590) // Jammy update: v5.15.12 upstream stable release
    (LP: #1956305)
    - Input: elantech - fix stack out of bound access in
      elantech_change_report_id()

  * Jammy update: v5.15.11 upstream stable release (LP: #1956302)
    - reset: tegra-bpmp: Revert Handle errors in BPMP response
    - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
    - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
    - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
    - x86/kvm: remove unused ack_notifier callbacks
    - KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid()
    - mac80211: fix rate control for retransmitted frames
    - mac80211: fix regression in SSN handling of addba tx
    - mac80211: mark TX-during-stop for TX in in_reconfig
    - mac80211: send ADDBA requests using the tid/queue of the aggregation session
    - mac80211: validate extended element ID is present
    - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
    - bpf: Fix kernel address leakage in atomic fetch
    - bpf, selftests: Add test case for atomic fetch on spilled pointer
    - bpf: Fix signed bounds propagation after mov32
    - bpf: Make 32->64 bounds propagation slightly more robust
    - bpf, selftests: Add test case trying to taint map value pointer
    - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
    - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
    - vduse: fix memory corruption in vduse_dev_ioctl()
    - vduse: check that offset is within bounds in get_config()
    - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
    - vdpa: check that offsets are within bounds
    - s390/entry: fix duplicate tracking of irq nesting level
    - recordmcount.pl: look for jgnop instruction as well as bcrl on s390
    - arm64: dts: ten64: remove redundant interrupt declaration for gpio-keys
    - ceph: fix up non-directory creation in SGID directories
    - dm btree remove: fix use after free in rebalance_children()
    - audit: improve robustness of the audit queue handling
    - btrfs: convert latest_bdev type to btrfs_device and rename
    - btrfs: use latest_dev in btrfs_show_devname
    - btrfs: update latest_dev when we create a sprout device
    - btrfs: remove stale comment about the btrfs_show_devname
    - scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION
    - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
      edge
    - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
    - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
    - arm64: dts: rockchip: fix audio-supply for Rock Pi 4
    - arm64: dts: rockchip: fix poweroff on helios64
    - dmaengine: idxd: add halt interrupt support
    - dmaengine: idxd: fix calling wq quiesce inside spinlock
    - mac80211: track only QoS data frames for admission control
    - tee: amdtee: fix an IS_ERR() vs NULL bug
    - ceph: fix duplicate increment of opened_inodes metric
    - ceph: initialize pathlen variable in reconnect_caps_cb
    - ARM: socfpga: dts: fix qspi node compatible
    - arm64: dts: imx8mq: remove interconnect property from lcdif
    - clk: Don't parent clks until the parent is fully registered
    - soc: imx: Register SoC device only on i.MX boards
    - iwlwifi: mvm: don't crash on invalid rate w/o STA
    - virtio: always enter drivers/virtio/
    - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
    - vdpa: Consider device id larger than 31
    - Revert "drm/fb-helper: improve DRM fbdev emulation device names"
    - selftests: net: Correct ping6 expected rc from 2 to 1
    - s390/kexec_file: fix error handling when applying relocations
    - sch_cake: do not call cake_destroy() from cake_init()
    - inet_diag: fix kernel-infoleak for UDP sockets
    - netdevsim: don't overwrite read only ethtool parms
    - selftests: icmp_redirect: pass xfail=0 to log_test()
    - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
    - net: hns3: fix race condition in debugfs
    - selftests: Add duplicate config only for MD5 VRF tests
    - selftests: Fix raw socket bind tests with VRF
    - selftests: Fix IPv6 address bind tests
    - dmaengine: idxd: fix missed completion on abort path
    - dmaengine: st_fdma: fix MODULE_ALIAS
    - drm: simpledrm: fix wrong unit with pixel clock
    - net/sched: sch_ets: don't remove idle classes from the round-robin list
    - selftests/net: toeplitz: fix udp option
    - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
    - selftest/net/forwarding: declare NETIFS p9 p10
    - mptcp: never allow the PM to close a listener subflow
    - drm/ast: potential dereference of null pointer
    - drm/i915/display: Fix an unsigned subtraction which can never be negative.
    - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
    - cfg80211: Acquire wiphy mutex on regulatory work
    - mac80211: fix lookup when adding AddBA extension element
    - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
    - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
    - rds: memory leak in __rds_conn_create()
    - ice: Use div64_u64 instead of div_u64 in adjfine
    - ice: Don't put stale timestamps in the skb
    - drm/amd/display: Set exit_optimized_pwr_state for DCN31
    - drm/amd/pm: fix a potential gpu_metrics_table memory leak
    - mptcp: remove tcp ulp setsockopt support
    - mptcp: clear 'kern' flag from fallback sockets
    - mptcp: fix deadlock in __mptcp_push_pending()
    - soc/tegra: fuse: Fix bitwise vs. logical OR warning
    - igb: Fix removal of unicast MAC filters of VFs
    - igbvf: fix double free in `igbvf_probe`
    - igc: Fix typo in i225 LTR functions
    - ixgbe: Document how to enable NBASE-T support
    - ixgbe: set X550 MDIO speed before talking to PHY
    - netdevsim: Zero-initialize memory for new map's value in function
      nsim_bpf_map_alloc
    - net/packet: rx_owner_map depends on pg_vec
    - net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
    - sfc_ef100: potential dereference of null pointer
    - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
    - net: Fix double 0x prefix print in SKB dump
    - net/smc: Prevent smc_release() from long blocking
    - net: systemport: Add global locking for descriptor lifecycle
    - sit: do not call ipip6_dev_free() from sit_init_net()
    - afs: Fix mmap
    - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
    - bpf: Fix extable fixup offset.
    - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
    - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
    - USB: gadget: bRequestType is a bitfield, not a enum
    - Revert "usb: early: convert to readl_poll_timeout_atomic()"
    - KVM: x86: Drop guest CPUID check for host initiated writes to
      MSR_IA32_PERF_CAPABILITIES
    - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
    - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
    - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
    - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
    - PCI/MSI: Mask MSI-X vectors only on success
    - usb: xhci-mtk: fix list_del warning when enable list debug
    - usb: xhci: Extend support for runtime power management for AMD's Yellow
      carp.
    - usb: cdnsp: Fix incorrect status for control request
    - usb: cdnsp: Fix incorrect calling of cdnsp_died function
    - usb: cdnsp: Fix issue in cdnsp_log_ep trace event
    - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
    - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
    - usb: gadget: u_ether: fix race in setting MAC address in setup phase
    - USB: serial: cp210x: fix CP2105 GPIO registration
    - USB: serial: option: add Telit FN990 compositions
    - selinux: fix sleeping function called from invalid context
    - btrfs: fix memory leak in __add_inode_ref()
    - btrfs: fix double free of anon_dev after failure to create subvolume
    - btrfs: check WRITE_ERR when trying to read an extent buffer
    - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
    - zonefs: add MODULE_ALIAS_FS
    - iocost: Fix divide-by-zero on donation from low hweight cgroup
    - serial: 8250_fintek: Fix garbled text for console
    - timekeeping: Really make sure wall_to_monotonic isn't positive
    - cifs: sanitize multiple delimiters in prepath
    - locking/rtmutex: Fix incorrect condition in rtmutex_spin_on_owner()
    - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
    - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
    - perf inject: Fix segfault due to close without open
    - perf inject: Fix segfault due to perf_data__fd() without open
    - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
    - powerpc/module_64: Fix livepatching for RO modules
    - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
    - drm/amdgpu: don't override default ECO_BITs setting
    - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
    - Revert "can: m_can: remove support for custom bit timing"
    - can: m_can: make custom bittiming fields const
    - can: m_can: pci: use custom bit timings for Elkhart Lake
    - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
    - xsk: Do not sleep in poll() when need_wakeup set
    - mptcp: add missing documented NL params
    - bpf, x64: Factor out emission of REX byte in more cases
    - bpf: Fix extable address check.
    - USB: core: Make do_proc_control() and do_proc_bulk() killable
    - media: mxl111sf: change mutex_init() location
    - fuse: annotate lock in fuse_reverse_inval_entry()
    - ovl: fix warning in ovl_create_real()
    - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
    - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
    - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
    - io-wq: remove spurious bit clear on task_work addition
    - io-wq: check for wq exit after adding new worker task_work
    - rcu: Mark accesses to rcu_state.n_force_qs
    - io-wq: drop wqe lock before creating new worker
    - bus: ti-sysc: Fix variable set but not used warning for reinit_modules
    - selftests/damon: test debugfs file reads/writes with huge count
    - Revert "xsk: Do not sleep in poll() when need_wakeup set"
    - xen/blkfront: harden blkfront against event channel storms
    - xen/netfront: harden netfront against event channel storms
    - xen/console: harden hvc_xen against event channel storms
    - xen/netback: fix rx queue stall detection
    - xen/netback: don't queue unlimited number of packages
    - Linux 5.15.11

  * Jammy update: v5.15.10 upstream stable release (LP: #1956301)
    - nfc: fix segfault in nfc_genl_dump_devices_done
    - hwmon: (corsair-psu) fix plain integer used as NULL pointer
    - RDMA: Fix use-after-free in rxe_queue_cleanup
    - RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
    - mtd: rawnand: Fix nand_erase_op delay
    - mtd: rawnand: Fix nand_choose_best_timings() on unsupported interface
    - inet: use #ifdef CONFIG_SOCK_RX_QUEUE_MAPPING consistently
    - dt-bindings: media: nxp,imx7-mipi-csi2: Drop bad if/then schema
    - clk: qcom: sm6125-gcc: Swap ops of ice and apps on sdcc1
    - perf bpf_skel: Do not use typedef to avoid error on old clang
    - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
    - RDMA/irdma: Fix a user-after-free in add_pble_prm
    - RDMA/irdma: Fix a potential memory allocation issue in
      'irdma_prm_add_pble_mem()'
    - RDMA/irdma: Report correct WC errors
    - RDMA/irdma: Don't arm the CQ more than two times if no CE for this CQ
    - ice: fix FDIR init missing when reset VF
    - vmxnet3: fix minimum vectors alloc issue
    - i2c: virtio: fix completion handling
    - drm/msm: Fix null ptr access msm_ioctl_gem_submit()
    - drm/msm/a6xx: Fix uinitialized use of gpu_scid
    - drm/msm/dsi: set default num_data_lanes
    - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
    - KVM: arm64: Save PSTATE early on exit
    - s390/test_unwind: use raw opcode instead of invalid instruction
    - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
    - net/mlx4_en: Update reported link modes for 1/10G
    - loop: Use pr_warn_once() for loop_control_remove() warning
    - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
    - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
    - parisc/agp: Annotate parisc agp init functions with __init
    - i2c: rk3x: Handle a spurious start completion interrupt flag
    - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
    - drm/amdgpu: cancel the correct hrtimer on exit
    - drm/amdgpu: check atomic flag to differeniate with legacy path
    - drm/amd/display: Fix for the no Audio bug with Tiled Displays
    - drm/amdkfd: fix double free mem structure
    - drm/amd/display: add connector type check for CRC source set
    - drm/amdkfd: process_info lock not needed for svm
    - tracing: Fix a kmemleak false positive in tracing_map
    - staging: most: dim2: use device release method
    - fuse: make sure reclaim doesn't write the inode
    - perf inject: Fix itrace space allowed for new attributes
    - Linux 5.15.10

  * Jammy update: v5.15.9 upstream stable release (LP: #1955161)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - Linux 5.15.9

  * [SRU][I/J/OEM-5.13/OEM-5.14] Fix pci port lost when hotplug dock
    (LP: #1954646)
    - PCI: Re-enable Downstream Port LTR after reset or hotplug

  * Add support for NVIDIA EC backlight (LP: #1953286)
    - platform/x86: Add driver for ACPI WMAA EC-based backlight control
    - platform/x86: Remove "WMAA" from identifier names in wmaa-backlight-wmi.c
    - platform/x86: Rename wmaa-backlight-wmi to nvidia-wmi-ec-backlight
    - [Config] NVIDIA_WMI_EC_BACKLIGHT=m

  * Improve USB Type-C support (LP: #1950974)
    - usb: typec: ucsi: Always cancel the command if PPM reports BUSY condition
    - usb: typec: ucsi: Don't stop alt mode registration on busy condition
    - usb: typec: ucsi: Add polling mechanism for partner tasks like alt mode
      checking
    - usb: typec: ucsi: acpi: Reduce the command completion timeout
    - usb: typec: ucsi: Check the partner alt modes always if there is PD contract
    - usb: typec: ucsi: Read the PDOs in separate work
    - usb: typec: ucsi: Better fix for missing unplug events issue

  *  Fix power button wakeup with shared IRQs on AMD platforms (LP: #1953540)
    - pinctrl: amd: Fix wakeups when IRQ is shared with SCI

  * AMD: Suspend not working when some cores are disabled through cpufreq
    (LP: #1954930)
    - ACPI: processor idle: Allow playing dead in C3 state

  * Jammy update: v5.15.8 upstream stable release (LP: #1954931)
    - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
      rp_filter tests"
    - usb: gadget: uvc: fix multiple opens
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - mtd: dataflash: Add device-tree SPI IDs
    - mmc: spi: Add device-tree SPI IDs
    - HID: sony: fix error path in probe
    - HID: Ignore battery for Elan touchscreen on Asus UX550VE
    - platform/x86/intel: hid: add quirk to support Surface Go 3
    - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
    - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
    - IB/hfi1: Fix early init panic
    - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - can: pch_can: pch_can_rx_normal: fix use after free
    - can: m_can: m_can_read_fifo: fix memory leak in error branch
    - can: m_can: pci: fix incorrect reference clock rate
    - can: m_can: pci: fix iomap_read_fifo() and iomap_write_fifo()
    - can: m_can: Disable and ignore ELO interrupt
    - net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
    - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
    - x86/sme: Explicitly map new EFI memmap table as encrypted
    - platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf, x86: Fix "no previous prototype" warning
    - bpf, sockmap: Attach map progs to psock early for feature probes
    - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - ethtool: do not perform operations on net devices being unregistered
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - udp: using datalen to cap max gso segments
    - netfilter: nft_exthdr: break evaluation if setting TCP option fails
    - netfilter: conntrack: annotate data-races around ct->timeout
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
    - net: bcm4908: Handle dma_set_coherent_mask error codes
    - net: dsa: mv88e6xxx: error handling for serdes_power functions
    - net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
    - net/sched: fq_pie: prevent dismantle issue
    - net: mvpp2: fix XDP rx queues registering
    - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
    - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
    - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
      hypercall
    - timers: implement usleep_idle_range()
    - mm/damon/core: fix fake load reports due to uninterruptible sleeps
    - mm/slub: fix endianness bug for alloc/free_traces attributes
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - cifs: Fix crash on unload of cifs_arc4.ko
    - scsi: qla2xxx: Format log strings only if needed
    - btrfs: clear extent buffer uptodate when we fail to write it
    - btrfs: fix re-dirty process of tree-log nodes
    - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
    - btrfs: free exchange changeset on failures
    - perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
      usage
    - perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
    - perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
    - perf intel-pt: Fix state setting when receiving overflow (OVF) packet
    - perf intel-pt: Fix next 'err' value, walking trace
    - perf intel-pt: Fix missing 'instruction' events with 'q' option
    - perf intel-pt: Fix error timestamp setting on the decoder error path
    - md: fix update super 1.0 on rdev size change
    - nfsd: fix use-after-free due to delegation race
    - nfsd: Fix nsfd startup race (again)
    - tracefs: Have new files inherit the ownership of their parent
    - selftests: KVM: avoid failures due to reserved HyperTransport region
    - hwmon: (pwm-fan) Ensure the fan going on in .probe()
    - mmc: renesas_sdhi: initialize variable properly when tuning
    - clk: qcom: regmap-mux: fix parent clock lookup
    - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
    - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
    - libata: add horkage for ASMedia 1092
    - io_uring: ensure task_work gets run as part of cancelations
    - wait: add wake_up_pollfree()
    - binder: use wake_up_pollfree()
    - signalfd: use wake_up_pollfree()
    - aio: keep poll requests on waitqueue until completed
    - aio: fix use-after-free due to missing POLLFREE handling
    - tracefs: Set all files to the same group ownership as the mount option
    - i2c: mpc: Use atomic read and fix break condition
    - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
    - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
    - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
    - ALSA: usb-audio: Reorder snd_djm_devices[] entries
    - qede: validate non LSO skb length
    - PM: runtime: Fix pm_runtime_active() kerneldoc comment
    - ASoC: rt5682: Fix crash due to out of scope stack vars
    - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
    - ASoC: codecs: wsa881x: fix return values from kcontrol put
    - ASoC: codecs: wcd934x: handle channel mappping list correctly
    - ASoC: codecs: wcd934x: return correct value from mixer put
    - RDMA/hns: Do not halt commands during reset until later
    - RDMA/hns: Do not destroy QP resources in the hw resetting phase
    - hwmon: (dell-smm) Fix warning on /proc/i8k creation error
    - clk: imx: use module_platform_driver
    - clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
    - i40e: Fix failed opcode appearing if handling messages from VF
    - i40e: Fix pre-set max number of queues for VF
    - mtd: rawnand: fsmc: Take instruction delay into account
    - mtd: rawnand: fsmc: Fix timing computation
    - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
    - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
    - Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
    - drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset
    - perf tools: Fix SMT detection fast read path
    - Documentation/locking/locktypes: Update migrate_disable() bits.
    - dt-bindings: net: Reintroduce PHY no lane swap binding
    - tools build: Remove needless libpython-version feature check that breaks
      test-all fast path
    - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
    - net: altera: set a couple error code in probe()
    - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
    - net, neigh: clear whole pneigh_entry at alloc time
    - net/qla3xxx: fix an error code in ql_adapter_up()
    - selftests/fib_tests: Rework fib_rp_filter_test()
    - USB: gadget: detect too-big endpoint 0 requests
    - USB: gadget: zero allocate endpoint 0 buffers
    - Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by default"
    - usb: core: config: fix validation of wMaxPacketValue entries
    - usb: core: config: using bit mask instead of individual bits
    - xhci: avoid race between disable slot command and host runtime suspend
    - iio: gyro: adxrs290: fix data signedness
    - iio: trigger: Fix reference counting
    - iio: trigger: stm32-timer: fix MODULE_ALIAS
    - iio: stk3310: Don't return error code in interrupt handler
    - iio: mma8452: Fix trigger reference couting
    - iio: ltr501: Don't return error code in trigger handler
    - iio: kxsd9: Don't return error code in trigger handler
    - iio: itg3200: Call iio_trigger_notify_done() on error
    - iio: dln2-adc: Fix lockdep complaint
    - iio: dln2: Check return value of devm_iio_trigger_register()
    - iio: at91-sama5d2: Fix incorrect sign extension
    - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
    - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
    - iio: ad7768-1: Call iio_trigger_notify_done() on error
    - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
    - nvmem: eeprom: at25: fix FRAM byte_len
    - bus: mhi: pci_generic: Fix device recovery failed issue
    - bus: mhi: core: Add support for forced PM resume
    - csky: fix typo of fpu config macro
    - irqchip/aspeed-scu: Replace update_bits with write_bits.
    - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
    - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
    - aio: Fix incorrect usage of eventfd_signal_allowed()
    - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
    - irqchip: nvic: Fix offset for Interrupt Priority Offsets
    - misc: fastrpc: fix improper packet size calculation
    - clocksource/drivers/dw_apb_timer_of: Fix probe failure
    - bpf: Add selftests to cover packet access corner cases
    - Linux 5.15.8

  * Can't read/write SD card after running CPU offline test in 5.11.0 and 5.13.0
    (LP: #1951784) // Jammy update: v5.15.8 upstream stable release
    (LP: #1954931)
    - misc: rtsx: Avoid mangling IRQ during runtime PM

  * Enable Landlock by default (LP: #1953192)
    - [Config] Enable Landlock by default

  * Add s0i3 RTC wake up for AMD systems (LP: #1950013)
    - platform/x86: amd-pmc: Export Idlemask values based on the APU
    - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd`
    - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup

  * Fix runtime power management on USB controller with XHCI_RESET_ON_RESUME
    flag (LP: #1954369)
    - SAUCE: xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
      suspending

  * Fix System hangs on black screen when reboot (LP: #1949321)
    - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
    - drm/i915: Don't request GMBUS to generate irqs when called while irqs are
      off
    - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()

  * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
    - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc

  * mt7921e: Failed to start WM firmware (LP: #1954300)
    - SAUCE: Bluetooth: btusb: Handle download_firmware failure cases
    - SAUCE: Bluetooth: btusb: Return error code when getting patch status failed

  * Miscellaneous Ubuntu changes
    - [Packaging] Add list of built-in modules to the ABI
    - [Packaging] abi-check: Process modules.builtin
    - SAUCE: allow to use __wake_up_pollfree() from GPL modules
    - [Packaging] enforce xz compression for debs
    - [Config] update config after v5.15.12
    - [Packaging] temporarily disable signed v4l2loopback

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 04 Jan 2022 11:22:10 +0100

linux (5.15.0-14.14) jammy; urgency=medium

  * jammy/linux: 5.15.0-14.14 -proposed tracker (LP: #1954627)

  * Jammy update: v5.15.7 upstream stable release (LP: #1953731)
    - ALSA: usb-audio: Restrict rates for the shared clocks
    - ALSA: usb-audio: Rename early_playback_start flag with lowlatency_playback
    - ALSA: usb-audio: Disable low-latency playback for free-wheel mode
    - ALSA: usb-audio: Disable low-latency mode for implicit feedback sync
    - ALSA: usb-audio: Check available frames for the next packet size
    - ALSA: usb-audio: Add spinlock to stop_urbs()
    - ALSA: usb-audio: Improved lowlatency playback support
    - ALSA: usb-audio: Avoid killing in-flight URBs during draining
    - ALSA: usb-audio: Fix packet size calculation regression
    - ALSA: usb-audio: Less restriction for low-latency playback mode
    - ALSA: usb-audio: Switch back to non-latency mode at a later point
    - ALSA: usb-audio: Don't start stream for capture at prepare
    - gfs2: release iopen glock early in evict
    - gfs2: Fix length of holes reported at end-of-file
    - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
      persistent memory"
    - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and
      one window
    - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
    - mac80211: do not access the IV when it was stripped
    - mac80211: fix throughput LED trigger
    - x86/hyperv: Move required MSRs check to initial platform probing
    - net/smc: Transfer remaining wait queue entries during fallback
    - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
    - net: return correct error code
    - pinctrl: qcom: fix unmet dependencies on GPIOLIB for GPIOLIB_IRQCHIP
    - platform/x86: dell-wmi-descriptor: disable by default
    - platform/x86: thinkpad_acpi: Add support for dual fan control
    - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
    - s390/setup: avoid using memblock_enforce_memory_limit
    - btrfs: silence lockdep when reading chunk tree during mount
    - btrfs: check-integrity: fix a warning on write caching disabled disk
    - thermal: core: Reset previous low and high trip during thermal zone init
    - scsi: iscsi: Unblock session then wake up error handler
    - drm/amd/pm: Remove artificial freq level on Navi1x
    - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
    - drm/amd/amdgpu: fix potential memleak
    - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
    - ata: libahci: Adjust behavior when StorageD3Enable _DSD is set
    - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
      hns_dsaf_ge_srst_by_port()
    - ipv6: check return value of ipv6_skip_exthdr
    - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
      bound
    - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
      type3_infoblock()
    - perf sort: Fix the 'weight' sort key behavior
    - perf sort: Fix the 'ins_lat' sort key behavior
    - perf sort: Fix the 'p_stage_cyc' sort key behavior
    - perf inject: Fix ARM SPE handling
    - perf hist: Fix memory leak of a perf_hpp_fmt
    - perf report: Fix memory leaks around perf_tip()
    - tracing: Don't use out-of-sync va_list in event printing
    - net/smc: Avoid warning of possible recursive locking
    - ACPI: Add stubs for wakeup handler functions
    - net/tls: Fix authentication failure in CCM mode
    - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
    - kprobes: Limit max data_size of the kretprobe instances
    - ALSA: hda/cs8409: Set PMSG_ON earlier inside cs8409 driver
    - rt2x00: do not mark device gone on EPROTO errors during start
    - ipmi: Move remove_work to dedicated workqueue
    - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
    - iwlwifi: mvm: retry init flow if failed
    - dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
    - s390/pci: move pseudo-MMIO to prevent MIO overlap
    - fget: check that the fd still exists after getting a ref to it
    - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
    - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
    - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO
    - scsi: ufs: ufs-pci: Add support for Intel ADL
    - ipv6: fix memory leak in fib6_rule_suppress
    - drm/amd/display: Allow DSC on supported MST branch devices
    - drm/i915/dp: Perform 30ms delay after source OUI write
    - KVM: fix avic_set_running for preemptable kernels
    - KVM: Disallow user memslot with size that exceeds "unsigned long"
    - KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
    - KVM: Ensure local memslot copies operate on up-to-date arch-specific data
    - KVM: x86: ignore APICv if LAPIC is not enabled
    - KVM: nVMX: Emulate guest TLB flush on nested VM-Enter with new vpid12
    - KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
    - KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
    - KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled
    - KVM: x86: Use a stable condition around all VT-d PI paths
    - KVM: MMU: shadow nested paging does not have PKU
    - KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
    - KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
    - KVM: x86: check PIR even for vCPUs with disabled APICv
    - tracing/histograms: String compares should not care about signed values
    - net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
    - net: dsa: mv88e6xxx: Drop unnecessary check in
      mv88e6393x_serdes_erratum_4_6()
    - net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
    - net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
    - net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
    - net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
    - wireguard: selftests: increase default dmesg log size
    - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
    - wireguard: selftests: actually test for routing loops
    - wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
    - wireguard: device: reset peer src endpoint when netns exits
    - wireguard: receive: use ring buffer for incoming handshakes
    - wireguard: receive: drop handshakes if queue lock is contended
    - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
    - i2c: stm32f7: flush TX FIFO upon transfer errors
    - i2c: stm32f7: recover the bus on access timeout
    - i2c: stm32f7: stop dma transfer in case of NACK
    - i2c: cbus-gpio: set atomic transfer callback
    - natsemi: xtensa: fix section mismatch warnings
    - tcp: fix page frag corruption on page fault
    - net: qlogic: qlcnic: Fix a NULL pointer dereference in
      qlcnic_83xx_add_rings()
    - net: mpls: Fix notifications when deleting a device
    - siphash: use _unaligned version by default
    - arm64: ftrace: add missing BTIs
    - iwlwifi: fix warnings produced by kernel debug options
    - net/mlx5e: IPsec: Fix Software parser inner l3 type setting in case of
      encapsulation
    - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
    - selftests: net: Correct case name
    - net: dsa: b53: Add SPI ID table
    - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
    - ASoC: tegra: Fix wrong value type in ADMAIF
    - ASoC: tegra: Fix wrong value type in I2S
    - ASoC: tegra: Fix wrong value type in DMIC
    - ASoC: tegra: Fix wrong value type in DSPK
    - ASoC: tegra: Fix kcontrol put callback in ADMAIF
    - ASoC: tegra: Fix kcontrol put callback in I2S
    - ASoC: tegra: Fix kcontrol put callback in DMIC
    - ASoC: tegra: Fix kcontrol put callback in DSPK
    - ASoC: tegra: Fix kcontrol put callback in AHUB
    - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
    - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
    - ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
    - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
    - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
      is available
    - net: marvell: mvpp2: Fix the computation of shared CPUs
    - dpaa2-eth: destroy workqueue at the end of remove function
    - octeontx2-af: Fix a memleak bug in rvu_mbox_init()
    - net: annotate data-races on txq->xmit_lock_owner
    - ipv4: convert fib_num_tclassid_users to atomic_t
    - net/smc: fix wrong list_del in smc_lgr_cleanup_early
    - net/rds: correct socket tunable error in rds_tcp_tune()
    - net/smc: Keep smc_close_final rc during active close
    - drm/msm/a6xx: Allocate enough space for GMU registers
    - drm/msm: Do hw_init() before capturing GPU state
    - drm/vc4: kms: Wait for the commit before increasing our clock rate
    - drm/vc4: kms: Fix return code check
    - drm/vc4: kms: Add missing drm_crtc_commit_put
    - drm/vc4: kms: Clear the HVS FIFO commit pointer once done
    - drm/vc4: kms: Don't duplicate pending commit
    - drm/vc4: kms: Fix previous HVS commit wait
    - atlantic: Increase delay for fw transactions
    - atlatnic: enable Nbase-t speeds with base-t
    - atlantic: Fix to display FW bundle version instead of FW mac version.
    - atlantic: Add missing DIDs and fix 115c.
    - Remove Half duplex mode speed capabilities.
    - atlantic: Fix statistics logic for production hardware
    - atlantic: Remove warn trace message.
    - KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
    - KVM: x86/mmu: Pass parameter flush as false in
      kvm_tdp_mmu_zap_collapsible_sptes()
    - drm/msm/devfreq: Fix OPP refcnt leak
    - drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP
    - drm/msm: Fix wait_fence submitqueue leak
    - drm/msm: Restore error return on invalid fence
    - ASoC: rk817: Add module alias for rk817-codec
    - iwlwifi: Fix memory leaks in error handling path
    - KVM: X86: Fix when shadow_root_level=5 && guest root_level<4
    - KVM: SEV: initialize regions_list of a mirror VM
    - net/mlx5e: Fix missing IPsec statistics on uplink representor
    - net/mlx5: Move MODIFY_RQT command to ignore list in internal error state
    - net/mlx5: E-switch, Respect BW share of the new group
    - net/mlx5: E-Switch, fix single FDB creation on BlueField
    - net/mlx5: E-Switch, Check group pointer before reading bw_share value
    - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
    - KVM: VMX: Set failure code in prepare_vmcs02()
    - mctp: Don't let RTM_DELROUTE delete local routes
    - Revert "drm/i915: Implement Wa_1508744258"
    - io-wq: don't retry task_work creation failure on fatal conditions
    - x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
    - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
    - x86/entry: Use the correct fence macro after swapgs in kernel CR3
    - x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
    - preempt/dynamic: Fix setup_preempt_mode() return value
    - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
    - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
    - KVM: x86/mmu: Rename slot_handle_leaf to slot_handle_level_4k
    - KVM: x86/mmu: Remove spurious TLB flushes in TDP MMU zap collapsible path
    - net/mlx5e: Rename lro_timeout to packet_merge_timeout
    - net/mlx5e: Rename TIR lro functions to TIR packet merge functions
    - net/mlx5e: Sync TIR params updates against concurrent create/modify
    - serial: 8250_bcm7271: UART errors after resuming from S2
    - parisc: Fix KBUILD_IMAGE for self-extracting kernel
    - parisc: Fix "make install" on newer debian releases
    - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
    - vgacon: Propagate console boot parameters before calling `vc_resize'
    - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
    - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
    - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
    - usb: cdns3: gadget: fix new urb never complete if ep cancel previous
      requests
    - usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
    - x86/tsc: Add a timer to make sure TSC_adjust is always checked
    - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
    - x86/64/mm: Map all kernel memory into trampoline_pgd
    - tty: serial: msm_serial: Deactivate RX DMA for polling support
    - serial: pl011: Add ACPI SBSA UART match id
    - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
      tegra30
    - serial: core: fix transmit-buffer reset and memleak
    - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
    - serial: 8250_pci: rewrite pericom_do_set_divisor()
    - serial: 8250: Fix RTS modem control while in rs485 mode
    - serial: liteuart: Fix NULL pointer dereference in ->remove()
    - serial: liteuart: fix use-after-free and memleak on unbind
    - serial: liteuart: fix minor-number leak on probe errors
    - ipmi: msghandler: Make symbol 'remove_work_wq' static
    - Linux 5.15.7

  * Updates to ib_peer_memory requested by Nvidia (LP: #1947206)
    - SAUCE: RDMA/core: Updated ib_peer_memory
    - SAUCE: RDMA/core: ib_peer_memory fix build errors

  * Jammy update: v5.15.6 upstream stable release (LP: #1953370)
    - scsi: sd: Fix sd_do_mode_sense() buffer length handling
    - ACPI: Get acpi_device's parent from the parent field
    - ACPI: CPPC: Add NULL pointer check to cppc_get_perf()
    - USB: serial: pl2303: fix GC type detection
    - USB: serial: option: add Telit LE910S1 0x9200 composition
    - USB: serial: option: add Fibocom FM101-GL variants
    - usb: dwc2: gadget: Fix ISOC flow for elapsed frames
    - usb: dwc2: hcd_queue: Fix use of floating point literal
    - usb: dwc3: leave default DMA for PCI devices
    - usb: dwc3: core: Revise GHWPARAMS9 offset
    - usb: dwc3: gadget: Ignore NoStream after End Transfer
    - usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
    - usb: dwc3: gadget: Fix null pointer exception
    - net: usb: Correct PHY handling of smsc95xx
    - net: nexthop: fix null pointer dereference when IPv6 is not enabled
    - usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe
    - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
    - usb: xhci: tegra: Check padctrl interrupt presence in device tree
    - usb: hub: Fix usb enumeration issue due to address0 race
    - usb: hub: Fix locking issues with address0_mutex
    - binder: fix test regression due to sender_euid change
    - ALSA: ctxfi: Fix out-of-range access
    - ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
    - ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
    - media: cec: copy sequence field for the reply
    - Revert "parisc: Fix backtrace to always include init funtion names"
    - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
    - staging/fbtft: Fix backlight
    - staging: greybus: Add missing rwsem around snd_ctl_remove() calls
    - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
    - staging: r8188eu: Use kzalloc() with GFP_ATOMIC in atomic context
    - staging: r8188eu: Fix breakage introduced when 5G code was removed
    - staging: r8188eu: use GFP_ATOMIC under spinlock
    - staging: r8188eu: fix a memory leak in rtw_wx_read32()
    - fuse: release pipe buf after last use
    - xen: don't continue xenstore initialization in case of errors
    - xen: detect uninitialized xenbus in xenbus_init
    - io_uring: correct link-list traversal locking
    - io_uring: fail cancellation for EXITING tasks
    - io_uring: fix link traversal locking
    - drm/amdgpu: IH process reset count when restart
    - drm/amdgpu/pm: fix powerplay OD interface
    - drm/nouveau: recognise GA106
    - ksmbd: downgrade addition info error msg to debug in smb2_get_info_sec()
    - ksmbd: contain default data stream even if xattr is empty
    - ksmbd: fix memleak in get_file_stream_info()
    - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
    - tracing/uprobe: Fix uprobe_perf_open probes iteration
    - tracing: Fix pid filtering when triggers are attached
    - mmc: sdhci-esdhc-imx: disable CMDQ support
    - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
    - mdio: aspeed: Fix "Link is Down" issue
    - arm64: mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd
    - cpufreq: intel_pstate: Fix active mode offline/online EPP handling
    - powerpc/32: Fix hardlockup on vmap stack overflow
    - iomap: Fix inline extent handling in iomap_readpage
    - NFSv42: Fix pagecache invalidation after COPY/CLONE
    - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
    - PCI: aardvark: Implement re-issuing config requests on CRS response
    - PCI: aardvark: Simplify initialization of rootcap on virtual bridge
    - PCI: aardvark: Fix link training
    - drm/amd/display: Fix OLED brightness control on eDP
    - proc/vmcore: fix clearing user buffer by properly using clear_user()
    - ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended
    - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
    - netfilter: ctnetlink: do not erase error code with EINVAL
    - netfilter: ipvs: Fix reuse connection if RS weight is 0
    - netfilter: flowtable: fix IPv6 tunnel addr match
    - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86
    - firmware: arm_scmi: Fix null de-reference on error path
    - ARM: dts: BCM5301X: Fix I2C controller interrupt
    - ARM: dts: BCM5301X: Add interrupt properties to GPIO node
    - ARM: dts: bcm2711: Fix PCIe interrupts
    - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
    - ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling
    - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
    - ASoC: codecs: wcd938x: fix volatile register range
    - ASoC: codecs: wcd934x: return error code correctly from hw_params
    - ASoC: codecs: lpass-rx-macro: fix HPHR setting CLSH mask
    - net: ieee802154: handle iftypes as u32
    - firmware: arm_scmi: Fix base agent discover response
    - firmware: arm_scmi: pm: Propagate return value to caller
    - ASoC: stm32: i2s: fix 32 bits channel length without mclk
    - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
    - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
    - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
    - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo()
    - scsi: mpt3sas: Fix kernel panic during drive powercycle test
    - scsi: mpt3sas: Fix system going into read-only mode
    - scsi: mpt3sas: Fix incorrect system timestamp
    - drm/vc4: fix error code in vc4_create_object()
    - drm/aspeed: Fix vga_pw sysfs output
    - net: marvell: prestera: fix brige port operation
    - net: marvell: prestera: fix double free issue on err path
    - HID: input: Fix parsing of HID_CP_CONSUMER_CONTROL fields
    - HID: input: set usage type to key on keycode remap
    - HID: magicmouse: prevent division by 0 on scroll
    - iavf: Prevent changing static ITR values if adaptive moderation is on
    - iavf: Fix refreshing iavf adapter stats on ethtool request
    - iavf: Fix VLAN feature flags after VFR
    - x86/pvh: add prototype for xen_pvh_init()
    - xen/pvh: add missing prototype to header
    - ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec
    - mptcp: fix delack timer
    - mptcp: use delegate action to schedule 3rd ack retrans
    - af_unix: fix regression in read after shutdown
    - firmware: smccc: Fix check for ARCH_SOC_ID not implemented
    - ipv6: fix typos in __ip6_finish_output()
    - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
    - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
    - net: ipv6: add fib6_nh_release_dsts stub
    - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
    - ice: fix vsi->txq_map sizing
    - ice: avoid bpf_prog refcount underflow
    - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
    - scsi: scsi_debug: Zero clear zones at reset write pointer
    - erofs: fix deadlock when shrink erofs slab
    - i2c: virtio: disable timeout handling
    - net/smc: Ensure the active closing peer first closes clcsock
    - mlxsw: spectrum: Protect driver from buggy firmware
    - net: ipa: directly disable ipa-setup-ready interrupt
    - net: ipa: separate disabling setup from modem stop
    - net: ipa: kill ipa_cmd_pipeline_clear()
    - net: marvell: mvpp2: increase MTU limit when XDP enabled
    - cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs
    - nvmet-tcp: fix incomplete data digest send
    - drm/hyperv: Fix device removal on Gen1 VMs
    - arm64: uaccess: avoid blocking within critical sections
    - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
    - PM: hibernate: use correct mode for swsusp_close()
    - drm/amd/display: Fix DPIA outbox timeout after GPU reset
    - drm/amd/display: Set plane update flags for all planes in reset
    - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
      flows
    - lan743x: fix deadlock in lan743x_phy_link_status_change()
    - net: phylink: Force link down and retrigger resolve on interface change
    - net: phylink: Force retrigger in case of latched link-fail indicator
    - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
    - net/smc: Fix loop in smc_listen
    - nvmet: use IOCB_NOWAIT only if the filesystem supports it
    - igb: fix netpoll exit with traffic
    - MIPS: loongson64: fix FTLB configuration
    - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
    - tls: splice_read: fix record type check
    - tls: splice_read: fix accessing pre-processed records
    - tls: fix replacing proto_ops
    - net: stmmac: Disable Tx queues when reconfiguring the interface
    - net/sched: sch_ets: don't peek at classes beyond 'nbands'
    - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
    - net: vlan: fix underflow for the real_dev refcnt
    - net/smc: Don't call clcsock shutdown twice when smc shutdown
    - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
    - net: hns3: fix incorrect components info of ethtool --reset command
    - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
    - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
    - locking/rwsem: Make handoff bit handling more consistent
    - perf: Ignore sigtrap for tracepoints destined for other tasks
    - sched/scs: Reset task stack state in bringup_cpu()
    - iommu/rockchip: Fix PAGE_DESC_HI_MASKs for RK3568
    - iommu/vt-d: Fix unmap_pages support
    - f2fs: quota: fix potential deadlock
    - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
    - riscv: dts: microchip: fix board compatible
    - riscv: dts: microchip: drop duplicated MMC/SDHC node
    - cifs: nosharesock should not share socket with future sessions
    - ceph: properly handle statfs on multifs setups
    - iommu/amd: Clarify AMD IOMMUv2 initialization messages
    - vdpa_sim: avoid putting an uninitialized iova_domain
    - vhost/vsock: fix incorrect used length reported to the guest
    - ksmbd: Fix an error handling path in 'smb2_sess_setup()'
    - tracing: Check pid filtering when creating events
    - cifs: nosharesock should be set on new server
    - io_uring: fix soft lockup when call __io_remove_buffers
    - firmware: arm_scmi: Fix type error assignment in voltage protocol
    - firmware: arm_scmi: Fix type error in sensor protocol
    - docs: accounting: update delay-accounting.rst reference
    - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
      disk_release()
    - block: avoid to quiesce queue in elevator_init_mq
    - drm/amdgpu/gfx10: add wraparound gpu counter check for APUs as well
    - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
    - Linux 5.15.6

  * Fix bogus HDMI audio interface  (LP: #1953208)
    - ALSA: hda/hdmi: Consider ELD is invalid when no SAD is present

  * Miscellaneous Ubuntu changes
    - [Config] re-enabled UBSAN without TRAP
    - SAUCE: ipv6: fix NULL pointer dereference in ip6_output()
    - SAUCE: RDMA/core: Introduce peer memory interface
    - [Config] toolchain version update

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] Temporarily disable signing for ppc64el and s390x"
    - Revert "UBUNTU: SAUCE: vt -- maintain bootloader screen mode and content
      until vt switch"

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 13 Dec 2021 12:13:17 +0100

linux (5.15.0-13.13) jammy; urgency=medium

  * jammy/linux: 5.15.0-13.13 -proposed tracker (LP: #1952583)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Jammy update: v5.15.5 upstream stable release (LP: #1952579)
    - arm64: zynqmp: Do not duplicate flash partition label property
    - arm64: zynqmp: Fix serial compatible string
    - clk: sunxi-ng: Unregister clocks/resets when unbinding
    - ARM: dts: sunxi: Fix OPPs node name
    - arm64: dts: allwinner: h5: Fix GPU thermal zone node name
    - arm64: dts: allwinner: a100: Fix thermal zone node name
    - staging: wfx: ensure IRQ is ready before enabling it
    - ARM: dts: BCM5301X: Fix nodes names
    - ARM: dts: BCM5301X: Fix MDIO mux binding
    - ARM: dts: NSP: Fix mpcore, mmc node names
    - arm64: dts: broadcom: bcm4908: Move reboot syscon out of bus
    - scsi: pm80xx: Fix memory leak during rmmod
    - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
    - ASoC: mediatek: mt8195: Add missing of_node_put()
    - arm64: dts: rockchip: Disable CDN DP on Pinebook Pro
    - arm64: dts: hisilicon: fix arm,sp805 compatible string
    - RDMA/bnxt_re: Check if the vlan is valid before reporting
    - bus: ti-sysc: Add quirk handling for reinit on context lost
    - bus: ti-sysc: Use context lost quirk for otg
    - usb: musb: tusb6010: check return value after calling
      platform_get_resource()
    - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
    - ARM: dts: ux500: Skomer regulator fixes
    - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
    - staging: rtl8723bs: remove a second possible deadlock
    - staging: rtl8723bs: remove a third possible deadlock
    - ARM: BCM53016: Specify switch ports for Meraki MR32
    - arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
    - arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property
    - arm64: dts: qcom: ipq8074: Fix qcom,controlled-remotely property
    - arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property
    - arm64: dts: freescale: fix arm,sp805 compatible string
    - arm64: dts: ls1012a: Add serial alias for ls1012a-rdb
    - RDMA/rxe: Separate HW and SW l/rkeys
    - ASoC: SOF: Intel: hda-dai: fix potential locking issue
    - scsi: core: Fix scsi_mode_sense() buffer length handling
    - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
      UFX1604
    - clk: imx: imx6ul: Move csi_sel mux to correct base register
    - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
    - ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
    - ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
    - scsi: advansys: Fix kernel pointer leak
    - scsi: smartpqi: Add controller handshake during kdump
    - arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY
    - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
      codec
    - ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
    - ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
    - firmware_loader: fix pre-allocated buf built-in firmware use
    - HID: multitouch: disable sticky fingers for UPERFECT Y
    - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
    - ARM: dts: omap: fix gpmc,mux-add-data type
    - usb: host: ohci-tmio: check return value after calling
      platform_get_resource()
    - ASoC: rt5682: fix a little pop while playback
    - ARM: dts: ls1021a: move thermal-zones node out of soc/
    - ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
    - ALSA: ISA: not for M68K
    - iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option
    - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    - MIPS: sni: Fix the build
    - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
    - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
    - scsi: target: Fix ordered tag handling
    - scsi: target: Fix alua_tg_pt_gps_count tracking
    - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
    - RDMA/core: Use kvzalloc when allocating the struct ib_port
    - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
    - scsi: lpfc: Fix link down processing to address NULL pointer dereference
    - scsi: lpfc: Allow fabric node recovery if recovery is in progress before
      devloss
    - memory: tegra20-emc: Add runtime dependency on devfreq governor module
    - powerpc/5200: dts: fix memory node unit name
    - ARM: dts: qcom: fix memory and mdio nodes naming for RB3011
    - arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes
    - ALSA: gus: fix null pointer dereference on pointer block
    - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
    - clk: at91: sama7g5: remove prescaler part of master clock
    - iommu/dart: Initialize DART_STREAMS_ENABLE
    - powerpc/dcr: Use cmplwi instead of 3-argument cmpli
    - powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST
    - sh: check return code of request_irq
    - maple: fix wrong return value of maple_bus_init().
    - f2fs: fix up f2fs_lookup tracepoints
    - f2fs: fix to use WHINT_MODE
    - f2fs: fix wrong condition to trigger background checkpoint correctly
    - sh: fix kconfig unmet dependency warning for FRAME_POINTER
    - sh: math-emu: drop unused functions
    - sh: define __BIG_ENDIAN for math-emu
    - f2fs: compress: disallow disabling compress on non-empty compressed file
    - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
    - clk: ingenic: Fix bugs with divided dividers
    - clk/ast2600: Fix soc revision for AHB
    - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
    - KVM: arm64: Fix host stage-2 finalization
    - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
    - MIPS: boot/compressed/: add __bswapdi2() to target for ZSTD decompression
    - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
    - sched/fair: Prevent dead task groups from regaining cfs_rq's
    - perf/x86/vlbr: Add c->flags to vlbr event constraints
    - blkcg: Remove extra blkcg_bio_issue_init
    - tracing/histogram: Do not copy the fixed-size char array field over the
      field size
    - perf bpf: Avoid memory leak from perf_env__insert_btf()
    - perf bench futex: Fix memory leak of perf_cpu_map__new()
    - perf tests: Remove bash construct from record+zstd_comp_decomp.sh
    - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
    - bpf: Fix inner map state pruning regression.
    - samples/bpf: Fix summary per-sec stats in xdp_sample_user
    - samples/bpf: Fix incorrect use of strlen in xdp_redirect_cpu
    - selftests: net: switch to socat in the GSO GRE test
    - net/ipa: ipa_resource: Fix wrong for loop range
    - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
    - tracing: Add length protection to histogram string copies
    - nl80211: fix radio statistics in survey dump
    - mac80211: fix monitor_sdata RCU/locking assertions
    - net: ipa: HOLB register sometimes must be written twice
    - net: ipa: disable HOLB drop when updating timer
    - selftests: gpio: fix gpio compiling error
    - net: bnx2x: fix variable dereferenced before check
    - bnxt_en: reject indirect blk offload when hw-tc-offload is off
    - tipc: only accept encrypted MSG_CRYPTO msgs
    - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
    - net/smc: Make sure the link_id is unique
    - NFSD: Fix exposure in nfsd4_decode_bitmap()
    - iavf: Fix return of set the new channel count
    - iavf: check for null in iavf_fix_features
    - iavf: free q_vectors before queues in iavf_disable_vf
    - iavf: don't clear a lock we don't hold
    - iavf: Fix failure to exit out from last all-multicast mode
    - iavf: prevent accidental free of filter structure
    - iavf: validate pointers
    - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
    - iavf: Fix for setting queues to 0
    - iavf: Restore VLAN filters after link down
    - bpf: Fix toctou on read-only map's constant scalar tracking
    - MIPS: generic/yamon-dt: fix uninitialized variable error
    - mips: bcm63xx: add support for clk_get_parent()
    - mips: lantiq: add support for clk_get_parent()
    - gpio: rockchip: needs GENERIC_IRQ_CHIP to fix build errors
    - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
    - platform/x86: think-lmi: Abort probe on analyze failure
    - udp: Validate checksum in udp_read_sock()
    - btrfs: make 1-bit bit-fields of scrub_page unsigned int
    - RDMA/core: Set send and receive CQ before forwarding to the driver
    - net/mlx5e: kTLS, Fix crash in RX resync flow
    - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
    - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
    - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
    - net/mlx5: Update error handler for UCTX and UMEM
    - net/mlx5: E-Switch, rebuild lag only when needed
    - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
    - net/mlx5: Lag, update tracker when state change event received
    - net/mlx5: E-Switch, return error if encap isn't supported
    - scsi: ufs: core: Improve SCSI abort handling
    - scsi: core: sysfs: Fix hang when device state is set via sysfs
    - scsi: ufs: core: Fix task management completion timeout race
    - scsi: ufs: core: Fix another task management completion race
    - net: mvmdio: fix compilation warning
    - net: sched: act_mirred: drop dst for the direction from egress to ingress
    - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
    - net: virtio_net_hdr_to_skb: count transport header in UFO
    - i40e: Fix correct max_pkt_size on VF RX queue
    - i40e: Fix NULL ptr dereference on VSI filter sync
    - i40e: Fix changing previously set num_queue_pairs for PFs
    - i40e: Fix ping is lost after configuring ADq on VF
    - RDMA/mlx4: Do not fail the registration on port stats
    - i40e: Fix warning message and call stack during rmmod i40e driver
    - i40e: Fix creation of first queue by omitting it if is not power of two
    - i40e: Fix display error code in dmesg
    - NFC: reorganize the functions in nci_request
    - NFC: reorder the logic in nfc_{un,}register_device
    - NFC: add NCI_UNREG flag to eliminate the race
    - e100: fix device suspend/resume
    - ptp: ocp: Fix a couple NULL vs IS_ERR() checks
    - tools build: Fix removal of feature-sync-compare-and-swap feature detection
    - riscv: fix building external modules
    - KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
    - powerpc: clean vdso32 and vdso64 directories
    - powerpc/pseries: rename numa_dist_table to form2_distances
    - powerpc/pseries: Fix numa FORM2 parsing fallback code
    - pinctrl: qcom: sdm845: Enable dual edge errata
    - pinctrl: qcom: sm8350: Correct UFS and SDC offsets
    - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
    - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
    - perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
    - s390/kexec: fix return code handling
    - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
    - dmaengine: remove debugfs #ifdef
    - tun: fix bonding active backup with arp monitoring
    - Revert "mark pstore-blk as broken"
    - pstore/blk: Use "%lu" to format unsigned long
    - hexagon: export raw I/O routines for modules
    - hexagon: clean up timer-regs.h
    - tipc: check for null after calling kmemdup
    - ipc: WARN if trying to remove ipc object which is absent
    - shm: extend forced shm destroy to support objects from several IPC nses
    - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
    - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
    - kmap_local: don't assume kmap PTEs are linear arrays in memory
    - mm/damon/dbgfs: use '__GFP_NOWARN' for user-specified size buffer allocation
    - mm/damon/dbgfs: fix missed use of damon_dbgfs_lock
    - x86/boot: Pull up cmdline preparation and early param parsing
    - x86/sgx: Fix free page accounting
    - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
    - KVM: x86: Assume a 64-bit hypercall for guests with protected state
    - KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap()
    - KVM: x86/mmu: include EFER.LMA in extended mmu role
    - KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
    - powerpc/signal32: Fix sigset_t copy
    - powerpc/xive: Change IRQ domain to a tree domain
    - powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX
    - Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
    - Revert "parisc: Reduce sigreturn trampoline to 3 instructions"
    - ata: libata: improve ata_read_log_page() error message
    - ata: libata: add missing ata_identify_page_supported() calls
    - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
    - pinctrl: ralink: include 'ralink_regs.h' in 'pinctrl-mt7620.c'
    - s390/setup: avoid reserving memory above identity mapping
    - s390/boot: simplify and fix kernel memory layout setup
    - s390/vdso: filter out -mstack-guard and -mstack-size
    - s390/kexec: fix memory leak of ipl report buffer
    - s390/dump: fix copying to user-space of swapped kdump oldmem
    - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
    - fbdev: Prevent probing generic drivers if a FB is already registered
    - KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
    - KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested
      state load
    - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
    - printk: restore flushing of NMI buffers on remote CPUs after NMI backtraces
    - udf: Fix crash after seekdir
    - spi: fix use-after-free of the add_lock mutex
    - net: stmmac: socfpga: add runtime suspend/resume callback for stratix10
      platform
    - Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
    - btrfs: fix memory ordering between normal and ordered work functions
    - fs: handle circular mappings correctly
    - net: stmmac: Fix signed/unsigned wreckage
    - parisc/sticon: fix reverse colors
    - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
    - mac80211: fix radiotap header generation
    - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
    - drm/amd/display: Update swizzle mode enums
    - drm/amd/display: Limit max DSC target bpp for specific monitors
    - drm/i915/guc: Fix outstanding G2H accounting
    - drm/i915/guc: Don't enable scheduling on a banned context, guc_id invalid,
      not registered
    - drm/i915/guc: Workaround reset G2H is received after schedule done G2H
    - drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
    - drm/i915/guc: Unwind context requests in reverse order
    - drm/udl: fix control-message timeout
    - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
    - drm/nouveau: Add a dedicated mutex for the clients list
    - drm/nouveau: use drm_dev_unplug() during device removal
    - drm/nouveau: clean up all clients on device removal
    - drm/i915/dp: Ensure sink rate values are always valid
    - drm/i915/dp: Ensure max link params are always valid
    - drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms
    - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
      and dvi connectors
    - drm/amd/pm: avoid duplicate powergate/ungate setting
    - signal: Implement force_fatal_sig
    - exit/syscall_user_dispatch: Send ordinary signals on failure
    - signal/powerpc: On swapcontext failure force SIGSEGV
    - signal/s390: Use force_sigsegv in default_trap_handler
    - signal/sparc32: Exit with a fatal signal when try_to_clear_window_buffer
      fails
    - signal/sparc32: In setup_rt_frame and setup_fram use force_fatal_sig
    - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved.
    - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit
    - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
    - signal: Don't always set SA_IMMUTABLE for forced signals
    - signal: Replace force_fatal_sig with force_exit_sig when in doubt
    - hugetlbfs: flush TLBs correctly after huge_pmd_unshare
    - RDMA/netlink: Add __maybe_unused to static inline in C file
    - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
    - selinux: fix NULL-pointer dereference when hashtab allocation fails
    - ASoC: DAPM: Cover regression by kctl change notification fix
    - ASoC: rsnd: fixup DMAEngine API
    - usb: max-3421: Use driver data instead of maintaining a list of bound
      devices
    - ice: Fix VF true promiscuous mode
    - ice: Delete always true check of PF pointer
    - fs: export an inode_update_time helper
    - btrfs: update device path inode time instead of bd_inode
    - net: add and use skb_unclone_keeptruesize() helper
    - x86/Kconfig: Fix an unused variable error in dell-smm-hwmon
    - ALSA: hda: hdac_ext_stream: fix potential locking issues
    - ALSA: hda: hdac_stream: fix potential locking issue in
      snd_hdac_stream_assign()
    - Linux 5.15.5

  * Fix non-working e1000e device after resume (LP: #1951861)
    - SAUCE: Revert "e1000e: Additional PHY power saving in S0ix"
    - SAUCE: Revert "e1000e: Add polling mechanism to indicate CSME DPG exit"
    - SAUCE: Revert "e1000e: Add handshake with the CSME to support S0ix"

  * [SRU][I/OEM-5.13/OEM-5.14] Add MAC passthrough support for more Lenovo docks
    (LP: #1951767)
    - net: usb: r8152: Add MAC passthrough support for more Lenovo Docks

  * [amdgpu] USB4 support for DP tunneling (LP: #1951868)
    - drm/amd/display: Support for DMUB HPD interrupt handling
    - drm/amd/display: Update link encoder object creation.
    - drm/amd/display: USB4 DPIA enumeration and AUX Tunneling
    - drm/amd/display: Support for DMUB HPD and HPD RX interrupt handling
    - drm/amd/display: Set DPIA link endpoint type
    - drm/amd/display: Stub out DPIA link training call
    - drm/amd/display: Add stub to get DPIA tunneling device data
    - drm/amd/display: Skip DPCD read for DPTX-to-DPIA hop
    - drm/amd/display: Train DPIA links with fallback
    - drm/amd/display: Implement DPIA training loop
    - drm/amd/display: Implement DPIA link configuration
    - drm/amd/display: Implement DPIA clock recovery phase
    - drm/amd/display: Implement DPIA equalisation phase
    - drm/amd/display: Implement end of training for hop in DPIA display path
    - drm/amd/display: Support for SET_CONFIG processing with DMUB
    - drm/amd/display: isolate link training setting override to its own function
    - drm/amd/display: Read USB4 DP tunneling data from DPCD.
    - drm/amd/display: Add dpia debug options
    - drm/amd/display: Support for SET_CONFIG processing with DMUB
    - drm/amd/display: Add DPCD writes at key points
    - drm/amd/display: Fix DIG_HPD_SELECT for USB4 display endpoints.
    - drm/amd/display: Add helper for blanking all dp displays
    - drm/amd/display: Fix link training fallback logic
    - drm/amd/display: Add debug flags for USB4 DP link training.
    - drm/amd/display: Fix dynamic link encoder access.
    - drm/amd/display: Fix concurrent dynamic encoder assignment
    - drm/amd/display: Fix dynamic encoder reassignment
    - drm/amd/display: Fix for access for ddc pin and aux engine.
    - drm/amd/display: Deadlock/HPD Status/Crash Bug Fix
    - drm/amd/display: Fix USB4 Aux via DMUB terminate unexpectedly

  * Miscellaneous Ubuntu changes
    - [Packaging] Rewrite debian/scripts/module-check in Python
    - [Config] update config and annotations after applying v5.15.5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 29 Nov 2021 09:25:37 +0100

linux (5.15.0-12.12) jammy; urgency=medium

  * jammy/linux: 5.15.0-12.12 -proposed tracker (LP: #1951810)

  * Jammy update: v5.15.4 upstream stable release (LP: #1951820)
    - string: uninline memcpy_and_pad
    - Revert "drm: fb_helper: improve CONFIG_FB dependency"
    - Revert "drm: fb_helper: fix CONFIG_FB dependency"
    - KVM: Fix steal time asm constraints
    - btrfs: introduce btrfs_is_data_reloc_root
    - btrfs: zoned: add a dedicated data relocation block group
    - btrfs: zoned: only allow one process to add pages to a relocation inode
    - btrfs: zoned: use regular writes for relocation
    - btrfs: check for relocation inodes on zoned btrfs in should_nocow
    - btrfs: zoned: allow preallocation for relocation inodes
    - fortify: Explicitly disable Clang support
    - block: Add a helper to validate the block size
    - loop: Use blk_validate_block_size() to validate block size
    - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
    - parisc/entry: fix trace test in syscall exit path
    - PCI/MSI: Deal with devices lying about their MSI mask capability
    - PCI: Add MSI masking quirk for Nvidia ION AHCI
    - perf/core: Avoid put_page() when GUP fails
    - thermal: Fix NULL pointer dereferences in of_thermal_ functions
    - Revert "ACPI: scan: Release PM resources blocked by unused objects"
    - Linux 5.15.4

  * Jammy update: v5.15.3 upstream stable release (LP: #1951822)
    - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
      delay
    - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
    - Input: iforce - fix control-message timeout
    - Input: elantench - fix misreporting trackpoint coordinates
    - Input: i8042 - Add quirk for Fujitsu Lifebook T725
    - libata: fix read log timeout value
    - ocfs2: fix data corruption on truncate
    - scsi: scsi_ioctl: Validate command size
    - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not
      run
    - scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
    - scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding
    - scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
    - scsi: qla2xxx: Fix crash in NVMe abort path
    - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
    - scsi: qla2xxx: Fix use after free in eh_abort path
    - ce/gf100: fix incorrect CE0 address calculation on some GPUs
    - char: xillybus: fix msg_ep UAF in xillyusb_probe()
    - mmc: mtk-sd: Add wait dma stop done flow
    - mmc: dw_mmc: Dont wait for DRTO on Write RSP error
    - exfat: fix incorrect loading of i_blocks for large files
    - io-wq: remove worker to owner tw dependency
    - parisc: Fix set_fixmap() on PA1.x CPUs
    - parisc: Fix ptrace check on syscall return
    - tpm: Check for integer overflow in tpm2_map_response_body()
    - firmware/psci: fix application of sizeof to pointer
    - crypto: s5p-sss - Add error handling in s5p_aes_probe()
    - media: rkvdec: Do not override sizeimage for output format
    - media: ite-cir: IR receiver stop working after receive overflow
    - media: rkvdec: Support dynamic resolution changes
    - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
    - media: v4l2-ioctl: Fix check_ext_ctrls
    - ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
    - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
    - ALSA: hda/realtek: Add quirk for Clevo PC70HS
    - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
    - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
    - ALSA: hda/realtek: Add quirk for ASUS UX550VE
    - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
    - ALSA: ua101: fix division by zero at probe
    - ALSA: 6fire: fix control and bulk message timeouts
    - ALSA: line6: fix control and interrupt message timeouts
    - ALSA: mixer: oss: Fix racy access to slots
    - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
    - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
    - ALSA: usb-audio: Add registration quirk for JBL Quantum 400
    - ALSA: hda: Free card instance properly at probe errors
    - ALSA: synth: missing check for possible NULL after the call to kstrdup
    - ALSA: pci: rme: Fix unaligned buffer addresses
    - ALSA: PCM: Fix NULL dereference at mmap checks
    - ALSA: timer: Fix use-after-free problem
    - ALSA: timer: Unconditionally unlink slave instances, too
    - Revert "ext4: enforce buffer head state assertion in ext4_da_map_blocks"
    - ext4: fix lazy initialization next schedule time computation in more
      granular unit
    - ext4: ensure enough credits in ext4_ext_shift_path_extents
    - ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
    - fuse: fix page stealing
    - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
    - x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
    - x86/irq: Ensure PI wakeup handler is unregistered before module unload
    - x86/iopl: Fake iopl(3) CLI/STI usage
    - btrfs: clear MISSING device status bit in btrfs_close_one_device
    - btrfs: fix lost error handling when replaying directory deletes
    - btrfs: call btrfs_check_rw_degradable only if there is a missing device
    - KVM: x86/mmu: Drop a redundant, broken remote TLB flush
    - KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
    - KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ
      handling
    - ia64: kprobes: Fix to pass correct trampoline address to the handler
    - selinux: fix race condition when computing ocontext SIDs
    - ipmi:watchdog: Set panic count to proper value on a panic
    - md/raid1: only allocate write behind bio for WriteMostly device
    - hwmon: (pmbus/lm25066) Add offset coefficients
    - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
      disabled
    - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
      dvs-idx property
    - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
    - mwifiex: fix division by zero in fw download path
    - ath6kl: fix division by zero in send path
    - ath6kl: fix control-message timeout
    - ath10k: fix control-message timeout
    - ath10k: fix division by zero in send path
    - PCI: Mark Atheros QCA6174 to avoid bus reset
    - rtl8187: fix control-message timeouts
    - evm: mark evm_fixmode as __ro_after_init
    - ifb: Depend on netfilter alternatively to tc
    - platform/surface: aggregator_registry: Add support for Surface Laptop Studio
    - mt76: mt7615: fix skb use-after-free on mac reset
    - HID: surface-hid: Use correct event registry for managing HID events
    - HID: surface-hid: Allow driver matching for target ID 1 devices
    - wcn36xx: Fix HT40 capability for 2Ghz band
    - wcn36xx: Fix tx_status mechanism
    - wcn36xx: Fix (QoS) null data frame bitrate/modulation
    - PM: sleep: Do not let "syscore" devices runtime-suspend during system
      transitions
    - mwifiex: Read a PCI register after writing the TX ring write pointer
    - mwifiex: Try waking the firmware until we get an interrupt
    - libata: fix checking of DMA state
    - dma-buf: fix and rework dma_buf_poll v7
    - wcn36xx: handle connection loss indication
    - rsi: fix occasional initialisation failure with BT coex
    - rsi: fix key enabled check causing unwanted encryption for vap_id > 0
    - rsi: fix rate mask set leading to P2P failure
    - rsi: Fix module dev_oper_mode parameter description
    - perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
    - perf/x86/intel/uncore: Fix invalid unit check
    - perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
    - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
    - ASoC: tegra: Set default card name for Trimslice
    - ASoC: tegra: Restore AC97 support
    - signal: Remove the bogus sigkill_pending in ptrace_stop
    - memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
    - signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
    - soc: samsung: exynos-pmu: Fix compilation when nothing selects
      CONFIG_MFD_CORE
    - soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
    - soc: fsl: dpio: use the combined functions to protect critical zone
    - mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
    - mctp: handle the struct sockaddr_mctp padding fields
    - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
    - power: supply: max17042_battery: use VFSOC for capacity when no rsns
    - iio: core: fix double free in iio_device_unregister_sysfs()
    - iio: core: check return value when calling dev_set_name()
    - KVM: arm64: Extract ESR_ELx.EC only
    - KVM: x86: Fix recording of guest steal time / preempted status
    - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows
    - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
    - KVM: nVMX: Handle dynamic MSR intercept toggling
    - can: peak_usb: always ask for BERR reporting for PCAN-USB devices
    - can: mcp251xfd: mcp251xfd_irq(): add missing
      can_rx_offload_threaded_irq_finish() in case of bus off
    - can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
    - can: j1939: j1939_can_recv(): ignore messages with invalid source address
    - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
    - iio: adc: tsc2046: fix scan interval warning
    - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
    - io_uring: honour zeroes as io-wq worker limits
    - ring-buffer: Protect ring_buffer_reset() from reentrancy
    - serial: core: Fix initializing and restoring termios speed
    - ifb: fix building without CONFIG_NET_CLS_ACT
    - xen/balloon: add late_initcall_sync() for initial ballooning done
    - ovl: fix use after free in struct ovl_aio_req
    - ovl: fix filattr copy-up failure
    - PCI: pci-bridge-emul: Fix emulation of W1C bits
    - PCI: cadence: Add cdns_plat_pcie_probe() missing return
    - cxl/pci: Fix NULL vs ERR_PTR confusion
    - PCI: aardvark: Do not clear status bits of masked interrupts
    - PCI: aardvark: Fix checking for link up via LTSSM state
    - PCI: aardvark: Do not unmask unused interrupts
    - PCI: aardvark: Fix reporting Data Link Layer Link Active
    - PCI: aardvark: Fix configuring Reference clock
    - PCI: aardvark: Fix return value of MSI domain .alloc() method
    - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
    - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
      bridge
    - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
    - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
    - PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
    - quota: check block number when reading the block in quota file
    - quota: correct error number in free_dqentry()
    - cifs: To match file servers, make sure the server hostname matches
    - cifs: set a minimum of 120s for next dns resolution
    - mfd: simple-mfd-i2c: Select MFD_CORE to fix build error
    - pinctrl: core: fix possible memory leak in pinctrl_enable()
    - coresight: cti: Correct the parameter for pm_runtime_put
    - coresight: trbe: Fix incorrect access of the sink specific data
    - coresight: trbe: Defer the probe on offline CPUs
    - iio: buffer: check return value of kstrdup_const()
    - iio: buffer: Fix memory leak in iio_buffers_alloc_sysfs_and_mask()
    - iio: buffer: Fix memory leak in __iio_buffer_alloc_sysfs_and_mask()
    - iio: buffer: Fix memory leak in iio_buffer_register_legacy_sysfs_groups()
    - drivers: iio: dac: ad5766: Fix dt property name
    - iio: dac: ad5446: Fix ad5622_write() return value
    - iio: ad5770r: make devicetree property reading consistent
    - Documentation:devicetree:bindings:iio:dac: Fix val
    - USB: serial: keyspan: fix memleak on probe errors
    - serial: 8250: fix racy uartclk update
    - ksmbd: set unique value to volume serial field in FS_VOLUME_INFORMATION
    - io-wq: serialize hash clear with wakeup
    - serial: 8250: Fix reporting real baudrate value in c_ospeed field
    - Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
    - most: fix control-message timeouts
    - USB: iowarrior: fix control-message timeouts
    - USB: chipidea: fix interrupt deadlock
    - power: supply: max17042_battery: Clear status bits in interrupt handler
    - component: do not leave master devres group open after bind
    - dma-buf: WARN on dmabuf release with pending attachments
    - drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
    - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
    - drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
    - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
    - Bluetooth: fix use-after-free error in lock_sock_nested()
    - Bluetooth: call sock_hold earlier in sco_conn_del
    - drm/panel-orientation-quirks: add Valve Steam Deck
    - rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
    - platform/x86: wmi: do not fail if disabling fails
    - drm/amdgpu: move iommu_resume before ip init/resume
    - MIPS: lantiq: dma: add small delay after reset
    - MIPS: lantiq: dma: reset correct number of channel
    - locking/lockdep: Avoid RCU-induced noinstr fail
    - net: sched: update default qdisc visibility after Tx queue cnt changes
    - rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
    - smackfs: Fix use-after-free in netlbl_catmap_walk()
    - ath11k: Align bss_chan_info structure with firmware
    - crypto: aesni - check walk.nbytes instead of err
    - x86/mm/64: Improve stack overflow warnings
    - x86: Increase exception stack sizes
    - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
    - mwifiex: Properly initialize private structure on interface type changes
    - spi: Check we have a spi_device_id for each DT compatible
    - fscrypt: allow 256-bit master keys with AES-256-XTS
    - drm/amdgpu: Fix MMIO access page fault
    - drm/amd/display: Fix null pointer dereference for encoders
    - selftests: net: fib_nexthops: Wait before checking reported idle time
    - ath11k: Avoid reg rules update during firmware recovery
    - ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
    - ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
    - ath10k: high latency fixes for beacon buffer
    - octeontx2-pf: Enable promisc/allmulti match MCAM entries.
    - media: mt9p031: Fix corrupted frame after restarting stream
    - media: netup_unidvb: handle interrupt properly according to the firmware
    - media: atomisp: Fix error handling in probe
    - media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
    - media: uvcvideo: Set capability in s_param
    - media: uvcvideo: Return -EIO for control errors
    - media: uvcvideo: Set unique vdev name based in type
    - media: vidtv: Fix memory leak in remove
    - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
    - media: s5p-mfc: Add checking to s5p_mfc_probe().
    - media: videobuf2: rework vb2_mem_ops API
    - media: imx: set a media_device bus_info string
    - media: rcar-vin: Use user provided buffers when starting
    - media: mceusb: return without resubmitting URB in case of -EPROTO error.
    - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
    - rtw88: fix RX clock gate setting while fifo dump
    - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
    - media: rcar-csi2: Add checking to rcsi2_start_receiver()
    - ipmi: Disable some operations during a panic
    - fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
    - kselftests/sched: cleanup the child processes
    - ACPICA: Avoid evaluating methods too early during system resume
    - cpufreq: Make policy min/max hard requirements
    - ice: Move devlink port to PF/VF struct
    - media: imx-jpeg: Fix possible null pointer dereference
    - media: ipu3-imgu: imgu_fmt: Handle properly try
    - media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
    - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
    - net-sysfs: try not to restart the syscall if it will fail eventually
    - drm/amdkfd: rm BO resv on validation to avoid deadlock
    - tracefs: Have tracefs directories not set OTH permission bits by default
    - tracing: Disable "other" permission bits in the tracefs files
    - ath: dfs_pattern_detector: Fix possible null-pointer dereference in
      channel_detector_create()
    - KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
    - mmc: moxart: Fix reference count leaks in moxart_probe
    - iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
    - ACPI: battery: Accept charges over the design capacity as full
    - ACPI: scan: Release PM resources blocked by unused objects
    - drm/amd/display: fix null pointer deref when plugging in display
    - drm/amdkfd: fix resume error when iommu disabled in Picasso
    - net: phy: micrel: make *-skew-ps check more lenient
    - leaking_addresses: Always print a trailing newline
    - thermal/core: Fix null pointer dereference in thermal_release()
    - drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
    - thermal/drivers/tsens: Add timeout to get_temp_tsens_valid
    - block: bump max plugged deferred size from 16 to 32
    - floppy: fix calling platform_device_unregister() on invalid drives
    - md: update superblock after changing rdev flags in state_store
    - memstick: r592: Fix a UAF bug when removing the driver
    - locking/rwsem: Disable preemption for spinning region
    - lib/xz: Avoid overlapping memcpy() with invalid input with in-place
      decompression
    - lib/xz: Validate the value before assigning it to an enum variable
    - workqueue: make sysfs of unbound kworker cpumask more clever
    - tracing/cfi: Fix cmp_entries_* functions signature mismatch
    - mt76: mt7915: fix an off-by-one bound check
    - mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
    - iwlwifi: change all JnP to NO-160 configuration
    - block: remove inaccurate requeue check
    - media: allegro: ignore interrupt if mailbox is not initialized
    - drm/amdgpu/pm: properly handle sclk for profiling modes on vangogh
    - nvmet: fix use-after-free when a port is removed
    - nvmet-rdma: fix use-after-free when a port is removed
    - nvmet-tcp: fix use-after-free when a port is removed
    - nvme: drop scan_lock and always kick requeue list when removing namespaces
    - samples/bpf: Fix application of sizeof to pointer
    - arm64: vdso32: suppress error message for 'make mrproper'
    - PM: hibernate: Get block device exclusively in swsusp_check()
    - selftests: kvm: fix mismatched fclose() after popen()
    - selftests/bpf: Fix perf_buffer test on system with offline cpus
    - iwlwifi: mvm: disable RX-diversity in powersave
    - smackfs: use __GFP_NOFAIL for smk_cipso_doi()
    - ARM: clang: Do not rely on lr register for stacktrace
    - gre/sit: Don't generate link-local addr if addr_gen_mode is
      IN6_ADDR_GEN_MODE_NONE
    - can: bittiming: can_fixup_bittiming(): change type of tseg1 and alltseg to
      unsigned int
    - gfs2: Cancel remote delete work asynchronously
    - gfs2: Fix glock_hash_walk bugs
    - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
    - tools/latency-collector: Use correct size when writing queue_full_warning
    - vrf: run conntrack only in context of lower/physdev for locally generated
      packets
    - net: annotate data-race in neigh_output()
    - ACPI: AC: Quirk GK45 to skip reading _PSR
    - ACPI: resources: Add one more Medion model in IRQ override quirk
    - btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
    - btrfs: do not take the uuid_mutex in btrfs_rm_device
    - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
      bcm_qspi_probe()
    - wcn36xx: Correct band/freq reporting on RX
    - wcn36xx: Fix packet drop on resume
    - Revert "wcn36xx: Enable firmware link monitoring"
    - ftrace: do CPU checking after preemption disabled
    - inet: remove races in inet{6}_getname()
    - x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
    - drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
    - perf/x86/intel: Fix ICL/SPR INST_RETIRED.PREC_DIST encodings
    - parisc: fix warning in flush_tlb_all
    - task_stack: Fix end_of_stack() for architectures with upwards-growing stack
    - erofs: don't trigger WARN() when decompression fails
    - parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
    - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
    - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
      state
    - selftests/bpf: Fix strobemeta selftest regression
    - fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
    - drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
    - perf/x86/intel/uncore: Fix Intel SPR CHA event constraints
    - perf/x86/intel/uncore: Fix Intel SPR IIO event constraints
    - perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints
    - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints
    - drm/bridge: it66121: Initialize {device,vendor}_ids
    - drm/bridge: it66121: Wait for next bridge to be probed
    - Bluetooth: fix init and cleanup of sco_conn.timeout_work
    - libbpf: Don't crash on object files with no symbol tables
    - Bluetooth: hci_uart: fix GPF in h5_recv
    - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
    - MIPS: lantiq: dma: fix burst length for DEU
    - x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
    - objtool: Handle __sanitize_cov*() tail calls
    - net/mlx5: Publish and unpublish all devlink parameters at once
    - drm/v3d: fix wait for TMU write combiner flush
    - crypto: sm4 - Do not change section of ck and sbox
    - virtio-gpu: fix possible memory allocation failure
    - lockdep: Let lock_is_held_type() detect recursive read as read
    - net: net_namespace: Fix undefined member in key_remove_domain()
    - net: phylink: don't call netif_carrier_off() with NULL netdev
    - drm: bridge: it66121: Fix return value it66121_probe
    - spi: Fixed division by zero warning
    - cgroup: Make rebind_subsystems() disable v2 controllers all at once
    - wcn36xx: Fix Antenna Diversity Switching
    - wilc1000: fix possible memory leak in cfg_scan_result()
    - Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
    - drm/amdgpu: Fix crash on device remove/driver unload
    - drm/amd/display: Pass display_pipe_params_st as const in DML
    - drm/amdgpu: move amdgpu_virt_release_full_gpu to fini_early stage
    - crypto: caam - disable pkc for non-E SoCs
    - crypto: qat - power up 4xxx device
    - Bluetooth: hci_h5: Fix (runtime)suspend issues on RTL8723BS HCIs
    - bnxt_en: Check devlink allocation and registration status
    - qed: Don't ignore devlink allocation failures
    - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
    - mptcp: do not shrink snd_nxt when recovering
    - fortify: Fix dropped strcpy() compile-time write overflow check
    - mac80211: twt: don't use potentially unaligned pointer
    - cfg80211: always free wiphy specific regdomain
    - net/mlx5: Accept devlink user input after driver initialization complete
    - net: dsa: rtl8366rb: Fix off-by-one bug
    - net: dsa: rtl8366: Fix a bug in deleting VLANs
    - bpf/tests: Fix error in tail call limit tests
    - ath11k: fix some sleeping in atomic bugs
    - ath11k: Avoid race during regd updates
    - ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
    - ath11k: Fix memory leak in ath11k_qmi_driver_event_work
    - gve: DQO: avoid unused variable warnings
    - ath10k: Fix missing frame timestamp for beacon/probe-resp
    - ath10k: sdio: Add missing BH locking around napi_schdule()
    - drm/ttm: stop calling tt_swapin in vm_access
    - arm64: mm: update max_pfn after memory hotplug
    - drm/amdgpu: fix warning for overflow check
    - libbpf: Fix skel_internal.h to set errno on loader retval < 0
    - media: em28xx: add missing em28xx_close_extension
    - media: meson-ge2d: Fix rotation parameter changes detection in
      'ge2d_s_ctrl()'
    - media: cxd2880-spi: Fix a null pointer dereference on error handling path
    - media: ttusb-dec: avoid release of non-acquired mutex
    - media: dvb-usb: fix ununit-value in az6027_rc_query
    - media: imx258: Fix getting clock frequency
    - media: v4l2-ioctl: S_CTRL output the right value
    - media: mtk-vcodec: venc: fix return value when start_streaming fails
    - media: TDA1997x: handle short reads of hdmi info frame.
    - media: mtk-vpu: Fix a resource leak in the error handling path of
      'mtk_vpu_probe()'
    - media: imx-jpeg: Fix the error handling path of 'mxc_jpeg_probe()'
    - media: i2c: ths8200 needs V4L2_ASYNC
    - media: sun6i-csi: Allow the video device to be open multiple times
    - media: radio-wl1273: Avoid card name truncation
    - media: si470x: Avoid card name truncation
    - media: tm6000: Avoid card name truncation
    - media: cx23885: Fix snd_card_free call on null card pointer
    - media: atmel: fix the ispck initialization
    - scs: Release kasan vmalloc poison in scs_free process
    - kprobes: Do not use local variable when creating debugfs file
    - crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
    - drm: fb_helper: fix CONFIG_FB dependency
    - cpuidle: Fix kobject memory leaks in error paths
    - media: em28xx: Don't use ops->suspend if it is NULL
    - ath10k: Don't always treat modem stop events as crashes
    - ath9k: Fix potential interrupt storm on queue reset
    - PM: EM: Fix inefficient states detection
    - x86/insn: Use get_unaligned() instead of memcpy()
    - EDAC/amd64: Handle three rank interleaving mode
    - rcu: Always inline rcu_dynticks_task*_{enter,exit}()
    - rcu: Fix rcu_dynticks_curr_cpu_in_eqs() vs noinstr
    - netfilter: nft_dynset: relax superfluous check on set updates
    - media: venus: fix vpp frequency calculation for decoder
    - media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
    - crypto: ccree - avoid out-of-range warnings from clang
    - crypto: qat - detect PFVF collision after ACK
    - crypto: qat - disregard spurious PFVF interrupts
    - hwrng: mtk - Force runtime pm ops for sleep ops
    - ima: fix deadlock when traversing "ima_default_rules".
    - b43legacy: fix a lower bounds test
    - b43: fix a lower bounds test
    - gve: Recover from queue stall due to missed IRQ
    - gve: Track RX buffer allocation failures
    - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
    - mmc: sdhci-omap: Fix context restore
    - memstick: avoid out-of-range warning
    - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
    - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
    - hwmon: Fix possible memleak in __hwmon_device_register()
    - hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
      lm25066_coeff
    - ath10k: fix max antenna gain unit
    - kernel/sched: Fix sched_fork() access an invalid sched_task_group
    - net: fealnx: fix build for UML
    - net: intel: igc_ptp: fix build for UML
    - net: tulip: winbond-840: fix build for UML
    - tcp: switch orphan_count to bare per-cpu counters
    - crypto: octeontx2 - set assoclen in aead_do_fallback()
    - thermal/core: fix a UAF bug in __thermal_cooling_device_register()
    - drm/msm/dsi: do not enable irq handler before powering up the host
    - drm/msm: Fix potential Oops in a6xx_gmu_rpmh_init()
    - drm/msm: potential error pointer dereference in init()
    - drm/msm: unlock on error in get_sched_entity()
    - drm/msm: fix potential NULL dereference in cleanup
    - drm/msm: uninitialized variable in msm_gem_import()
    - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
    - thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM
    - mailbox: Remove WARN_ON for async_cb.cb in cmdq_exec_done
    - media: ivtv: fix build for UML
    - media: ir_toy: assignment to be16 should be of correct type
    - mmc: mxs-mmc: disable regulator on error and in the remove function
    - io-wq: Remove duplicate code in io_workqueue_create()
    - block: ataflop: fix breakage introduced at blk-mq refactoring
    - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
    - mailbox: mtk-cmdq: Validate alias_id on probe
    - mailbox: mtk-cmdq: Fix local clock ID usage
    - ACPI: PM: Turn off unused wakeup power resources
    - ACPI: PM: Fix sharing of wakeup power resources
    - drm/amdkfd: Fix an inappropriate error handling in allloc memory of gpu
    - mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event
    - mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb
    - mt76: mt7921: fix endianness warning in mt7921_update_txs
    - mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
    - mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal()
    - mt76: connac: fix mt76_connac_gtk_rekey_tlv usage
    - mt76: fix build error implicit enumeration conversion
    - mt76: mt7921: fix survey-dump reporting
    - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
    - mt76: mt7921: Fix out of order process by invalid event pkt
    - mt76: mt7915: fix potential overflow of eeprom page index
    - mt76: mt7915: fix bit fields for HT rate idx
    - mt76: mt7921: fix dma hang in rmmod
    - mt76: connac: fix GTK rekey offload failure on WPA mixed mode
    - mt76: overwrite default reg_ops if necessary
    - mt76: mt7921: report HE MU radiotap
    - mt76: mt7921: fix firmware usage of RA info using legacy rates
    - mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate
    - mt76: mt7921: always wake device if necessary in debugfs
    - mt76: mt7915: fix hwmon temp sensor mem use-after-free
    - mt76: mt7615: fix hwmon temp sensor mem use-after-free
    - mt76: mt7915: fix possible infinite loop release semaphore
    - mt76: mt7921: fix retrying release semaphore without end
    - mt76: mt7615: fix monitor mode tear down crash
    - mt76: connac: fix possible NULL pointer dereference in
      mt76_connac_get_phy_mode_v2
    - mt76: mt7915: fix sta_rec_wtbl tag len
    - mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
    - rsi: stop thread firstly in rsi_91x_init() error handling
    - mwifiex: Send DELBA requests according to spec
    - iwlwifi: mvm: reset PM state on unsuccessful resume
    - iwlwifi: pnvm: don't kmemdup() more than we have
    - iwlwifi: pnvm: read EFI data only if long enough
    - net: enetc: unmap DMA in enetc_send_cmd()
    - phy: micrel: ksz8041nl: do not use power down mode
    - nbd: Fix use-after-free in pid_show
    - nvme-rdma: fix error code in nvme_rdma_setup_ctrl
    - PM: hibernate: fix sparse warnings
    - clocksource/drivers/timer-ti-dm: Select TIMER_OF
    - x86/sev: Fix stack type check in vc_switch_off_ist()
    - drm/msm: Fix potential NULL dereference in DPU SSPP
    - drm/msm/dsi: fix wrong type in msm_dsi_host
    - crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
    - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
    - KVM: selftests: Fix nested SVM tests when built with clang
    - libbpf: Fix memory leak in btf__dedup()
    - bpftool: Avoid leaking the JSON writer prepared for program metadata
    - libbpf: Fix overflow in BTF sanity checks
    - libbpf: Fix BTF header parsing checks
    - mt76: mt7615: mt7622: fix ibss and meshpoint
    - s390/gmap: validate VMA in __gmap_zap()
    - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
    - s390/mm: validate VMA in PGSTE manipulation functions
    - s390/mm: fix VMA and page table handling code in storage key handling
      functions
    - s390/uv: fully validate the VMA before calling follow_page()
    - KVM: s390: pv: avoid double free of sida page
    - KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
    - irq: mips: avoid nested irq_enter()
    - net: dsa: avoid refcount warnings when ->port_{fdb,mdb}_del returns error
    - ARM: 9142/1: kasan: work around LPAE build warning
    - ath10k: fix module load regression with iram-recovery feature
    - block: ataflop: more blk-mq refactoring fixes
    - blk-cgroup: synchronize blkg creation against policy deactivation
    - libbpf: Fix off-by-one bug in bpf_core_apply_relo()
    - tpm: fix Atmel TPM crash caused by too frequent queries
    - tpm_tis_spi: Add missing SPI ID
    - libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
    - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
    - tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks
    - cpufreq: intel_pstate: Fix cpu->pstate.turbo_freq initialization
    - spi: spi-rpc-if: Check return value of rpcif_sw_init()
    - samples/kretprobes: Fix return value if register_kretprobe() failed
    - KVM: s390: Fix handle_sske page fault handling
    - libertas_tf: Fix possible memory leak in probe and disconnect
    - libertas: Fix possible memory leak in probe and disconnect
    - wcn36xx: add proper DMA memory barriers in rx path
    - wcn36xx: Fix discarded frames due to wrong sequence number
    - bpf: Avoid races in __bpf_prog_run() for 32bit arches
    - bpf: Fixes possible race in update_prog_stats() for 32bit arches
    - wcn36xx: Channel list update before hardware scan
    - drm/amdgpu: fix a potential memory leak in amdgpu_device_fini_sw()
    - drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
    - selftests/bpf: Fix fd cleanup in sk_lookup test
    - selftests/bpf: Fix memory leak in test_ima
    - sctp: allow IP fragmentation when PLPMTUD enters Error state
    - sctp: reset probe_timer in sctp_transport_pl_update
    - sctp: subtract sctphdr len in sctp_transport_pl_hlen
    - sctp: return true only for pathmtu update in sctp_transport_pl_toobig
    - net: amd-xgbe: Toggle PLL settings during rate change
    - ipmi: kcs_bmc: Fix a memory leak in the error handling path of
      'kcs_bmc_serio_add_device()'
    - nfp: fix NULL pointer access when scheduling dim work
    - nfp: fix potential deadlock when canceling dim work
    - net: phylink: avoid mvneta warning when setting pause parameters
    - net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
    - selftests: net: bridge: update IGMP/MLD membership interval value
    - crypto: pcrypt - Delay write to padata->info
    - selftests/bpf: Fix fclose/pclose mismatch in test_progs
    - udp6: allow SO_MARK ctrl msg to affect routing
    - ibmvnic: don't stop queue in xmit
    - ibmvnic: Process crqs after enabling interrupts
    - ibmvnic: delay complete()
    - selftests: mptcp: fix proto type in link_failure tests
    - skmsg: Lose offset info in sk_psock_skb_ingress
    - cgroup: Fix rootcg cpu.stat guest double counting
    - bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
    - bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
    - of: unittest: fix EXPECT text for gpio hog errors
    - cpufreq: Fix parameter in parse_perf_domain()
    - staging: r8188eu: fix memory leak in rtw_set_key
    - arm64: dts: meson: sm1: add Ethernet PHY reset line for ODROID-C4/HC4
    - iio: st_sensors: disable regulators after device unregistration
    - RDMA/rxe: Fix wrong port_cap_flags
    - ARM: dts: BCM5301X: Fix memory nodes names
    - arm64: dts: broadcom: bcm4908: Fix UART clock name
    - clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
    - scsi: pm80xx: Fix lockup in outbound queue management
    - scsi: qla2xxx: edif: Use link event to wake up app
    - scsi: lpfc: Fix NVMe I/O failover to non-optimized path
    - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
    - arm64: dts: rockchip: Fix GPU register width for RK3328
    - ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
    - RDMA/bnxt_re: Fix query SRQ failure
    - arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
    - arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
    - arm64: dts: ti: j7200-main: Fix "vendor-id"/"device-id" properties of pcie
      node
    - arm64: dts: ti: j7200-main: Fix "bus-range" upto 256 bus number for PCIe
    - arm64: dts: meson-g12a: Fix the pwm regulator supply properties
    - arm64: dts: meson-g12b: Fix the pwm regulator supply properties
    - arm64: dts: meson-sm1: Fix the pwm regulator supply properties
    - bus: ti-sysc: Fix timekeeping_suspended warning on resume
    - ARM: dts: at91: tse850: the emac<->phy interface is rmii
    - arm64: dts: qcom: sc7180: Base dynamic CPU power coefficients in reality
    - soc: qcom: llcc: Disable MMUHWT retention
    - arm64: dts: qcom: sc7280: fix display port phy reg property
    - scsi: dc395: Fix error case unwinding
    - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
    - JFS: fix memleak in jfs_mount
    - pinctrl: renesas: rzg2l: Fix missing port register 21h
    - ASoC: wcd9335: Use correct version to initialize Class H
    - arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
    - arm64: dts: renesas: beacon: Fix Ethernet PHY mode
    - iommu/mediatek: Fix out-of-range warning with clang
    - arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
    - iommu/dma: Fix sync_sg with swiotlb
    - iommu/dma: Fix arch_sync_dma for map
    - ALSA: hda: Reduce udelay() at SKL+ position reporting
    - ALSA: hda: Use position buffer for SKL+ again
    - ALSA: usb-audio: Fix possible race at sync of urb completions
    - soundwire: debugfs: use controller id and link_id for debugfs
    - power: reset: at91-reset: check properly the return value of devm_of_iomap
    - scsi: ufs: core: Fix ufshcd_probe_hba() prototype to match the definition
    - scsi: ufs: core: Stop clearing UNIT ATTENTIONS
    - scsi: megaraid_sas: Fix concurrent access to ISR between IRQ polling and
      real interrupt
    - scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
    - driver core: Fix possible memory leak in device_link_add()
    - arm: dts: omap3-gta04a4: accelerometer irq fix
    - ASoC: SOF: topology: do not power down primary core during topology removal
    - iio: st_pressure_spi: Add missing entries SPI to device ID table
    - soc/tegra: Fix an error handling path in tegra_powergate_power_up()
    - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
    - clk: at91: check pmc node status before registering syscore ops
    - powerpc/mem: Fix arch/powerpc/mm/mem.c:53:12: error: no previous prototype
      for 'create_section_mapping'
    - video: fbdev: chipsfb: use memset_io() instead of memset()
    - powerpc: fix unbalanced node refcount in check_kvm_guest()
    - powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
    - serial: 8250_dw: Drop wrong use of ACPI_PTR()
    - usb: gadget: hid: fix error code in do_config()
    - power: supply: rt5033_battery: Change voltage values to µV
    - power: supply: max17040: fix null-ptr-deref in max17040_probe()
    - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
    - RDMA/mlx4: Return missed an error if device doesn't support steering
    - usb: musb: select GENERIC_PHY instead of depending on it
    - staging: most: dim2: do not double-register the same device
    - staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
    - RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg()
    - dyndbg: make dyndbg a known cli param
    - powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10
    - pinctrl: renesas: checker: Fix off-by-one bug in drive register check
    - ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
    - ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
    - ARM: dts: stm32: fix SAI sub nodes register range
    - ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
    - ASoC: cs42l42: Always configure both ASP TX channels
    - ASoC: cs42l42: Correct some register default values
    - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
    - soc: qcom: rpmhpd: Make power_on actually enable the domain
    - soc: qcom: socinfo: add two missing PMIC IDs
    - iio: buffer: Fix double-free in iio_buffers_alloc_sysfs_and_mask()
    - usb: typec: STUSB160X should select REGMAP_I2C
    - iio: adis: do not disabe IRQs in 'adis_init()'
    - soundwire: bus: stop dereferencing invalid slave pointer
    - scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
    - scsi: lpfc: Wait for successful restart of SLI3 adapter during host sg_reset
    - serial: imx: fix detach/attach of serial console
    - usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
    - usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
    - usb: dwc2: drd: reset current session before setting the new one
    - powerpc/booke: Disable STRICT_KERNEL_RWX, DEBUG_PAGEALLOC and KFENCE
    - usb: dwc3: gadget: Skip resizing EP's TX FIFO if already resized
    - firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
    - soc: qcom: rpmhpd: fix sm8350_mxc's peer domain
    - soc: qcom: apr: Add of_node_put() before return
    - arm64: dts: qcom: pmi8994: Fix "eternal"->"external" typo in WLED node
    - arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
    - arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
    - pinctrl: equilibrium: Fix function addition in multiple groups
    - ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
    - phy: qcom-qusb2: Fix a memory leak on probe
    - phy: ti: gmii-sel: check of_get_address() for failure
    - phy: qcom-qmp: another fix for the sc8180x PCIe definition
    - phy: qcom-snps: Correct the FSEL_MASK
    - phy: Sparx5 Eth SerDes: Fix return value check in sparx5_serdes_probe()
    - serial: xilinx_uartps: Fix race condition causing stuck TX
    - clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
    - clk: at91: clk-master: check if div or pres is zero
    - clk: at91: clk-master: fix prescaler logic
    - HID: u2fzero: clarify error check and length calculations
    - HID: u2fzero: properly handle timeouts in usb_submit_urb
    - powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
    - powerpc/book3e: Fix set_memory_x() and set_memory_nx()
    - powerpc/44x/fsp2: add missing of_node_put
    - powerpc/xmon: fix task state output
    - ALSA: oxfw: fix functional regression for Mackie Onyx 1640i in v5.14 or
      later
    - iommu/dma: Fix incorrect error return on iommu deferred attach
    - powerpc: Don't provide __kernel_map_pages() without
      ARCH_SUPPORTS_DEBUG_PAGEALLOC
    - ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
    - RDMA/hns: Fix initial arm_st of CQ
    - RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware compatibility
    - ASoC: rsnd: Fix an error handling path in 'rsnd_node_count()'
    - serial: cpm_uart: Protect udbg definitions by CONFIG_SERIAL_CPM_CONSOLE
    - virtio_ring: check desc == NULL when using indirect with packed
    - vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit
    - mips: cm: Convert to bitfield API to fix out-of-bounds access
    - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
    - RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
    - apparmor: fix error check
    - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
    - mtd: rawnand: intel: Fix potential buffer overflow in probe
    - nfsd: don't alloc under spinlock in rpc_parse_scope_id
    - rtc: ds1302: Add SPI ID table
    - rtc: ds1390: Add SPI ID table
    - rtc: pcf2123: Add SPI ID table
    - remoteproc: imx_rproc: Fix TCM io memory type
    - i2c: i801: Use PCI bus rescan mutex to protect P2SB access
    - dmaengine: idxd: move out percpu_ref_exit() to ensure it's outside
      submission
    - rtc: mcp795: Add SPI ID table
    - Input: ariel-pwrbutton - add SPI device ID table
    - i2c: mediatek: fixing the incorrect register offset
    - NFS: Default change_attr_type to NFS4_CHANGE_TYPE_IS_UNDEFINED
    - NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
    - NFS: Ignore the directory size when marking for revalidation
    - NFS: Fix dentry verifier races
    - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
    - drm/bridge/lontium-lt9611uxc: fix provided connector suport
    - drm/plane-helper: fix uninitialized variable reference
    - PCI: aardvark: Don't spam about PIO Response Status
    - PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
    - opp: Fix return in _opp_add_static_v2()
    - NFS: Fix deadlocks in nfs_scan_commit_list()
    - sparc: Add missing "FORCE" target when using if_changed
    - fs: orangefs: fix error return code of orangefs_revalidate_lookup()
    - Input: st1232 - increase "wait ready" timeout
    - drm/bridge: nwl-dsi: Add atomic_get_input_bus_fmts
    - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
    - PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
    - mtd: rawnand: arasan: Prevent an unsupported configuration
    - mtd: core: don't remove debugfs directory if device is in use
    - remoteproc: Fix a memory leak in an error handling path in
      'rproc_handle_vdev()'
    - rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
    - dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
    - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
    - dmaengine: stm32-dma: fix stm32_dma_get_max_width
    - NFS: Fix up commit deadlocks
    - NFS: Fix an Oops in pnfs_mark_request_commit()
    - Fix user namespace leak
    - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
    - auxdisplay: ht16k33: Connect backlight to fbdev
    - auxdisplay: ht16k33: Fix frame buffer device blanking
    - soc: fsl: dpaa2-console: free buffer before returning from
      dpaa2_console_read
    - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
    - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
    - dmaengine: tegra210-adma: fix pm runtime unbalance
    - dmanegine: idxd: fix resource free ordering on driver removal
    - dmaengine: idxd: reconfig device after device reset command
    - signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
    - m68k: set a default value for MEMORY_RESERVE
    - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
    - ar7: fix kernel builds for compiler test
    - scsi: target: core: Remove from tmr_list during LUN unlink
    - scsi: qla2xxx: Relogin during fabric disturbance
    - scsi: qla2xxx: Fix gnl list corruption
    - scsi: qla2xxx: Turn off target reset during issue_lip
    - scsi: qla2xxx: edif: Fix app start fail
    - scsi: qla2xxx: edif: Fix app start delay
    - scsi: qla2xxx: edif: Flush stale events and msgs on session down
    - scsi: qla2xxx: edif: Increase ELS payload
    - scsi: qla2xxx: edif: Fix EDIF bsg
    - NFSv4: Fix a regression in nfs_set_open_stateid_locked()
    - dmaengine: idxd: fix resource leak on dmaengine driver disable
    - i2c: xlr: Fix a resource leak in the error handling path of
      'xlr_i2c_probe()'
    - gpio: realtek-otto: fix GPIO line IRQ offset
    - xen-pciback: Fix return in pm_ctrl_init()
    - nbd: fix max value for 'first_minor'
    - nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
    - io-wq: fix max-workers not correctly set on multi-node system
    - net: davinci_emac: Fix interrupt pacing disable
    - kselftests/net: add missed icmp.sh test to Makefile
    - kselftests/net: add missed setup_loopback.sh/setup_veth.sh to Makefile
    - kselftests/net: add missed SRv6 tests
    - kselftests/net: add missed vrf_strict_mode_test.sh test to Makefile
    - kselftests/net: add missed toeplitz.sh/toeplitz_client.sh to Makefile
    - ethtool: fix ethtool msg len calculation for pause stats
    - openrisc: fix SMP tlb flush NULL pointer dereference
    - net: vlan: fix a UAF in vlan_dev_real_dev()
    - net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge
    - ice: Fix replacing VF hardware MAC to existing MAC filter
    - ice: Fix not stopping Tx queues for VFs
    - kdb: Adopt scheduler's task classification
    - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
    - PCI: j721e: Fix j721e_pcie_probe() error path
    - nvdimm/btt: do not call del_gendisk() if not needed
    - scsi: bsg: Fix errno when scsi_bsg_register_queue() fails
    - scsi: ufs: ufshpb: Use proper power management API
    - scsi: ufs: core: Fix NULL pointer dereference
    - scsi: ufs: ufshpb: Properly handle max-single-cmd
    - drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
    - nvdimm/pmem: cleanup the disk if pmem_release_disk() is yet assigned
    - block/ataflop: use the blk_cleanup_disk() helper
    - block/ataflop: add registration bool before calling del_gendisk()
    - block/ataflop: provide a helper for cleanup up an atari disk
    - ataflop: remove ataflop_probe_lock mutex
    - PCI: Do not enable AtomicOps on VFs
    - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
    - net: phy: fix duplex out of sync problem while changing settings
    - block: fix device_add_disk() kobject_create_and_add() error handling
    - drm/ttm: remove ttm_bo_vm_insert_huge()
    - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
    - octeontx2-pf: select CONFIG_NET_DEVLINK
    - ALSA: memalloc: Catch call with NULL snd_dma_buffer pointer
    - mfd: core: Add missing of_node_put for loop iteration
    - mfd: cpcap: Add SPI device ID table
    - mfd: sprd: Add SPI device ID table
    - mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
    - ACPI: PM: Fix device wakeup power reference counting error
    - libbpf: Fix lookup_and_delete_elem_flags error reporting
    - selftests/bpf/xdp_redirect_multi: Put the logs to tmp folder
    - selftests/bpf/xdp_redirect_multi: Use arping to accurate the arp number
    - selftests/bpf/xdp_redirect_multi: Give tcpdump a chance to terminate cleanly
    - selftests/bpf/xdp_redirect_multi: Limit the tests in netns
    - drm: fb_helper: improve CONFIG_FB dependency
    - Revert "drm/imx: Annotate dma-fence critical section in commit path"
    - drm/amdgpu/powerplay: fix sysfs_emit/sysfs_emit_at handling
    - can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
    - can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for
      mcp251xfd_chip_rx_int_enable()
    - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
      zs_unregister_migration()
    - zram: off by one in read_block_state()
    - perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
    - llc: fix out-of-bound array index in llc_sk_dev_hash()
    - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
    - litex_liteeth: Fix a double free in the remove function
    - arm64: arm64_ftr_reg->name may not be a human-readable string
    - arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
    - bpf, sockmap: Remove unhash handler for BPF sockmap usage
    - bpf, sockmap: Fix race in ingress receive verdict with redirect to self
    - bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
    - bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
    - dmaengine: stm32-dma: fix burst in case of unaligned memory address
    - dmaengine: stm32-dma: avoid 64-bit division in stm32_dma_get_max_width
    - gve: Fix off by one in gve_tx_timeout()
    - drm/i915/fb: Fix rounding error in subsampled plane size calculation
    - init: make unknown command line param message clearer
    - seq_file: fix passing wrong private data
    - drm/amdgpu: fix uvd crash on Polaris12 during driver unloading
    - net: dsa: mv88e6xxx: Don't support >1G speeds on 6191X on ports other than
      10
    - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
    - net: hns3: fix ROCE base interrupt vector initialization bug
    - net: hns3: fix pfc packet number incorrect after querying pfc parameters
    - net: hns3: fix kernel crash when unload VF while it is being reset
    - net: hns3: allow configure ETS bandwidth of all TCs
    - net: stmmac: allow a tc-taprio base-time of zero
    - net: ethernet: ti: cpsw_ale: Fix access to un-initialized memory
    - net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
    - vsock: prevent unnecessary refcnt inc for nonblocking connect
    - net/smc: fix sk_refcnt underflow on linkdown and fallback
    - cxgb4: fix eeprom len when diagnostics not implemented
    - selftests/net: udpgso_bench_rx: fix port argument
    - thermal: int340x: fix build on 32-bit targets
    - smb3: do not error on fsync when readonly
    - ARM: 9155/1: fix early early_iounmap()
    - ARM: 9156/1: drop cc-option fallbacks for architecture selection
    - parisc: Fix backtrace to always include init funtion names
    - parisc: Flush kernel data mapping in set_pte_at() when installing pte for
      user page
    - MIPS: fix duplicated slashes for Platform file path
    - MIPS: fix *-pkg builds for loongson2ef platform
    - MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
    - x86/mce: Add errata workaround for Skylake SKX37
    - PCI/MSI: Move non-mask check back into low level accessors
    - PCI/MSI: Destroy sysfs before freeing entries
    - KVM: x86: move guest_pv_has out of user_access section
    - posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
    - irqchip/sifive-plic: Fixup EOI failed when masked
    - f2fs: should use GFP_NOFS for directory inodes
    - f2fs: include non-compressed blocks in compr_written_block
    - f2fs: fix UAF in f2fs_available_free_memory
    - ceph: fix mdsmap decode when there are MDS's beyond max_mds
    - erofs: fix unsafe pagevec reuse of hooked pclusters
    - drm/i915/guc: Fix blocked context accounting
    - block: Hold invalidate_lock in BLKDISCARD ioctl
    - block: Hold invalidate_lock in BLKZEROOUT ioctl
    - block: Hold invalidate_lock in BLKRESETZONE ioctl
    - ksmbd: Fix buffer length check in fsctl_validate_negotiate_info()
    - ksmbd: don't need 8byte alignment for request length in ksmbd_check_message
    - dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
    - dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
    - dmaengine: bestcomm: fix system boot lockups
    - net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
    - 9p/net: fix missing error check in p9_check_errors
    - mm/filemap.c: remove bogus VM_BUG_ON
    - memcg: prohibit unconditional exceeding the limit of dying tasks
    - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
    - mm, oom: do not trigger out_of_memory from the #PF
    - mm, thp: lock filemap when truncating page cache
    - mm, thp: fix incorrect unmap behavior for private pages
    - mfd: dln2: Add cell for initializing DLN2 ADC
    - video: backlight: Drop maximum brightness override for brightness zero
    - bcache: fix use-after-free problem in bcache_device_free()
    - bcache: Revert "bcache: use bvec_virt"
    - PM: sleep: Avoid calling put_device() under dpm_list_mtx
    - s390/cpumf: cpum_cf PMU displays invalid value after hotplug remove
    - s390/cio: check the subchannel validity for dev_busid
    - s390/tape: fix timer initialization in tape_std_assign()
    - s390/ap: Fix hanging ioctl caused by orphaned replies
    - s390/cio: make ccw_device_dma_* more robust
    - remoteproc: elf_loader: Fix loading segment when is_iomem true
    - remoteproc: Fix the wrong default value of is_iomem
    - remoteproc: imx_rproc: Fix ignoring mapping vdev regions
    - remoteproc: imx_rproc: Fix rsc-table name
    - mtd: rawnand: fsmc: Fix use of SM ORDER
    - mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
    - mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
    - powerpc/vas: Fix potential NULL pointer dereference
    - powerpc/bpf: Fix write protecting JIT code
    - powerpc/32e: Ignore ESR in instruction storage interrupt handler
    - powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
    - powerpc/security: Use a mutex for interrupt exit code patching
    - powerpc/64s/interrupt: Fix check_return_regs_valid() false positive
    - powerpc/pseries/mobility: ignore ibm, platform-facilities updates
    - powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
    - drm/sun4i: Fix macros in sun8i_csc.h
    - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
    - PCI: aardvark: Fix PCIe Max Payload Size setting
    - SUNRPC: Partial revert of commit 6f9f17287e78
    - drm/amd/display: Look at firmware version to determine using dmub on dcn21
    - media: vidtv: move kfree(dvb) to vidtv_bridge_dev_release()
    - cifs: fix memory leak of smb3_fs_context_dup::server_hostname
    - ath10k: fix invalid dma_addr_t token assignment
    - mmc: moxart: Fix null pointer dereference on pointer host
    - selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
    - selftests/bpf: Fix also no-alu32 strobemeta selftest
    - arch/cc: Introduce a function to check for confidential computing features
    - x86/sev: Add an x86 version of cc_platform_has()
    - x86/sev: Make the #VC exception stacks part of the default stacks storage
    - media: videobuf2: always set buffer vb2 pointer
    - media: videobuf2-dma-sg: Fix buf->vb NULL pointer dereference
    - Linux 5.15.3

  * kernel panic: NULL pointer dereference in wb_timer_f() (LP: #1947557) //
    Jammy update: v5.15.3 upstream stable release (LP: #1951822)
    - blk-wbt: prevent NULL pointer dereference in wb_timer_fn

  * Medion Notebook Keyboard not working (LP: #1909814) // Jammy update: v5.15.3
    upstream stable release (LP: #1951822)
    - ACPI: resources: Add DMI-based legacy IRQ override quirk

  * Enable CONFIG_INTEL_IOMMU_DEFAULT_ON and
    CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON on jammy 5.15 (LP: #1951440)
    - [Config] enable Intel DMA remapping options by default

  * Thinkpad E14 Gen2: Kernel panic with trackpad and trackpoint enabled
    (LP: #1945590)
    - SAUCE: Input: elantech - Fix stack out of bound access in
      elantech_change_report_id()

  * Miscellaneous Ubuntu changes
    - SAUCE: LSM: Specify which LSM to display (using struct cred as input)
    - SAUCE: selftests/seccomp: fix check of fds being assigned
    - [Config] enable SUNRPC_DISABLE_INSECURE_ENCTYPES
    - [Config] updateconfigs following v5.15.3, v5.15.4 import

  * Miscellaneous upstream changes
    - binder: use cred instead of task for selinux checks
    - binder: use cred instead of task for getsecid
    - Revert "UBUNTU: SAUCE: storvsc: use small sg_tablesize on x86"

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 22 Nov 2021 13:14:15 +0100

linux (5.15.0-11.11) jammy; urgency=medium

  * jammy/linux: 5.15.0-11.11 -proposed tracker (LP: #1950948)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * OOPs on boot: invalid opcode: 0000 [#1] SMP NOPTI (LP: #1942215)
    - SAUCE: ACPICA: prevent out-of-bound access with buggy DSDT
    - [Config] disable UBSAN
    - SAUCE: ACPICA: avoid accessing operands out-of-bounds

  * Jammy update: v5.15.2 upstream stable release (LP: #1950949)
    - KVM: x86: avoid warning with -Wbitwise-instead-of-logical
    - Revert "x86/kvm: fix vcpu-id indexed array sizes"
    - usb: ehci: handshake CMD_RUN instead of STS_HALT
    - usb: gadget: Mark USB_FSL_QE broken on 64-bit
    - usb: musb: Balance list entry in musb_gadget_queue
    - usb-storage: Add compatibility quirk flags for iODD 2531/2541
    - Revert "proc/wchan: use printk format instead of lookup_symbol_name()"
    - binder: use euid from cred instead of using task
    - binder: don't detect sender/target during buffer cleanup
    - kfence: always use static branches to guard kfence_alloc()
    - kfence: default to dynamic branch instead of static keys mode
    - btrfs: fix lzo_decompress_bio() kmap leakage
    - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
    - isofs: Fix out of bound access for corrupted isofs image
    - comedi: dt9812: fix DMA buffers on stack
    - comedi: ni_usb6501: fix NULL-deref in command paths
    - comedi: vmk80xx: fix transfer-buffer overflows
    - comedi: vmk80xx: fix bulk-buffer overflow
    - comedi: vmk80xx: fix bulk and interrupt message timeouts
    - staging: r8712u: fix control-message timeout
    - staging: rtl8192u: fix control-message timeouts
    - staging: r8188eu: fix memleak in rtw_wx_set_enc_ext
    - media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
    - rsi: fix control-message timeout
    - Linux 5.15.2

  * reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le
    (LP: #1867570)
    - selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes

  * Miscellaneous Ubuntu changes
    - packaging: switch getabis to the linux package name

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: (no-up) rename the adv7511 drm driver to adv7511_drm"
    - Revert "UBUNTU: SAUCE: drm/i915/dp: Use max params for older panels"
    - Revert "UBUNTU: SAUCE: i915: Fix build error due to missing struct
      definition"
    - selftests/core: fix conflicting types compile error for close_range()
    - selftests: net: test_vxlan_under_vrf: fix HV connectivity test
    - Revert "UBUNTU: SAUCE: ACPICA: prevent out-of-bound access with buggy DSDT"

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 15 Nov 2021 10:12:47 +0100

linux (5.15.0-10.10) jammy; urgency=medium

  * jammy/linux: 5.15.0-10.10 -proposed tracker (LP: #1950133)

  * Jammy update: v5.15.1 upstream stable release (LP: #1950131)
    - sfc: Fix reading non-legacy supported link modes
    - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
    - Revert "xhci: Set HCD flag to defer primary roothub registration"
    - Revert "usb: core: hcd: Add support for deferring roothub registration"
    - drm/amdkfd: fix boot failure when iommu is disabled in Picasso.
    - Revert "soc: imx: gpcv2: move reset assert after requesting domain power up"
    - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
    - Revert "wcn36xx: Disable bmps when encryption is disabled"
    - drm/amdgpu: revert "Add autodump debugfs node for gpu reset v8"
    - drm/amd/display: Revert "Directly retrain link from debugfs"
    - Revert "drm/i915/gt: Propagate change in error status to children on unhold"
    - ALSA: usb-audio: Add quirk for Audient iD14
    - Linux 5.15.1

  * Miscellaneous Ubuntu changes
    - packaging: fixup previous ABI/spin to -9.9
    - [Packaging] Drop unused d-i build-deps and packaging
    - [Packaging] Drop now unsupported d-i/ input files

  * Miscellaneous upstream changes
    - selftests: net: properly support IPv6 in GSO GRE test
    - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 08 Nov 2021 14:43:24 +0100

linux (5.15.0-9.9) jammy; urgency=medium

  * jammy/linux: 5.15.0-1.1 -proposed tracker (LP: #1949876)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update Ubuntu.md

  * Add F81966 watchdog support (LP: #1949063)
    - SAUCE: ODM: watchdog: f71808e_wdt: Add F81966 support

  * Miscellaneous Ubuntu changes
    - [Packaging] Rewrite debian/scripts/misc/insert-changes.pl in Python
    - [Packaging] change source package name to linux

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 04 Nov 2021 18:47:19 +0100

linux (5.15.0-0.0) jammy; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 04 Nov 2021 16:47:16 +0100

linux-unstable (5.15.0-8.8) jammy; urgency=medium

  * jammy/linux-unstable: 5.15.0-8.8 -proposed tracker (LP: #1949436)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
    cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
    - Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
      cachefiles_read_backing_file while vmscan is active"

  * Add l2tp.sh in net from ubuntu_kernel_selftests back (LP: #1934293)
    - Revert "UBUNTU: SAUCE: selftests/net -- disable l2tp.sh test"

  * Check for changes relevant for security certifications (LP: #1945989)
    - [Packaging] Add fips-checks as part of finalchecks

  * Add final-checks to check certificates (LP: #1947174)
    - [Packaging] Add system trusted and revocation keys final check

  * Can only reach PC3 when ethernet is plugged r8169 (LP: #1946433)
    - r8169: Enable chip-specific ASPM regardless of PCIe ASPM status
    - PCI/ASPM: Introduce a new helper to report ASPM capability
    - r8169: Implement dynamic ASPM mechanism

  * rtw89 kernel module for Realtek 8852 wifi is missing (LP: #1945967)
    - rtw89: add Realtek 802.11ax driver
    - rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf
    - rtw89: fix return value check in rtw89_cam_send_sec_key_cmd()
    - rtw89: remove unneeded semicolon
    - [Config] RTW89=m

  * Fix A yellow screen pops up in an instant (< 1 second) and then disappears
    before loading the system (LP: #1945932)
    - drm/i915: Stop force enabling pipe bottom color gammma/csc

  * disable CONFIG_KFENCE_STATIC_KEYS in linux 5.15 (LP: #1948038)
    - [Config] disable CONFIG_KFENCE_STATIC_KEYS

  * Miscellaneous Ubuntu changes
    - [Debian] Remove old and unused firmware helper scripts
    - [Packaging] Replace Perl oneliner with Bash statements
    - rebase to v5.15

  [ Upstream Kernel Changes ]

  * Rebase to v5.15

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 02 Nov 2021 08:29:45 +0100

linux-unstable (5.15.0-7.7) jammy; urgency=medium

  * jammy/linux-unstable: 5.15.0-7.7 -proposed tracker (LP: #1948770)

  * Miscellaneous Ubuntu changes
    - [Config] Temporarily disable signing for ppc64el and s390x
    - packaging: switch release to Jammy
    - rebase to v5.15-rc7
    - [Config] GCC version update

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc7

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 26 Oct 2021 11:38:14 +0200

linux-unstable (5.15.0-6.6) jammy; urgency=medium

  * impish/linux-unstable: 5.15.0-6.6 -proposed tracker (LP: #1947565)

  * [impish] Remove the downstream xr-usb-uart driver (LP: #1945938)
    - SAUCE: xr-usb-serial: remove driver
    - [Config] update modules list

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous Ubuntu changes
    - rebase to v5.15-rc6
    - [Config] update config & annotations following v5.15-rc6 rebase

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: xr-usb-serial: switch to tty_alloc_driver() and
      tty_driver_kref_put()"
    - Revert "UBUNTU: SAUCE: xr-usb-serial: update return code for
      xr_usb_serial_tty_write_room() and xr_usb_serial_tty_chars_in_buffer()"
    - Revert "UBUNTU: [Packaging] FTBFS: disable zfs"

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc6

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 18 Oct 2021 12:24:45 +0200

linux-unstable (5.15.0-5.5) impish; urgency=medium

  * impish/linux-unstable: 5.15.0-5.5 -proposed tracker (LP: #1946338)

  * Miscellaneous Ubuntu changes
    - rebase to v5.15-rc5
    - [Config] FB_SIMPLE=m
    - [Config] update annotations

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc5

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 11 Oct 2021 12:14:02 +0200

linux-unstable (5.15.0-4.4) impish; urgency=medium

  * impish/linux-unstable: 5.15.0-4.4 -proposed tracker (LP: #1945953)

  * Fix missing HDMI audio on Intel RKL (LP: #1945556)
    - drm/i915/audio: Use BIOS provided value for RKL HDA link

  * Miscellaneous Ubuntu changes
    - SAUCE: media: atomisp: add missing return type (fix -Werror=return-type)
    - SAUCE: xr-usb-serial: switch to tty_alloc_driver() and tty_driver_kref_put()
    - rebase to v5.15-rc4

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] FTBFS: disable INTEL_ATOMISP"
    - Revert "UBUNTU: [Config] FTBFS: disable xr-usb-serial"

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc4

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 04 Oct 2021 10:52:41 +0200

linux-unstable (5.15.0-3.3) impish; urgency=medium

  * impish/linux-unstable: 5.15.0-3.3 -proposed tracker (LP: #1944944)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Miscellaneous Ubuntu changes
    - rebase to v5.15-rc3
    - [Config] updateconfigs following v5.15-rc3 rebase
    - [Packaging] correctly evaluate release in update-dkms-versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc3

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 27 Sep 2021 16:48:03 +0200

linux-unstable (5.15.0-2.2) impish; urgency=medium

  * impish/linux-unstable: 5.15.0-2.2 -proposed tracker (LP: #1944423)

  * Miscellaneous Ubuntu changes
    - rebase to v5.15-rc2
    - [Config] updateconfigs following v5.15-rc2 rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc2

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 21 Sep 2021 11:46:59 +0200

linux-unstable (5.15.0-1.1) impish; urgency=medium

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  *  LRMv5: switch primary version handling to kernel-versions data set
    (LP: #1928921)
    - [Packaging] switch to kernel-versions

  * Miscellaneous Ubuntu changes
    - [Packaging] remove remaining references to ports
    - [Packaging] drop x32 architecture configs
    - [Config] mark CONFIG_BPF_UNPRIV_DEFAULT_OFF enforced
    - [Packaging] bump kernel version to 5.15
    - rebase to v5.15-rc1
    - [Config] updateconfigs following v5.15-rc1 rebase
    - [Config] FTBFS: disable INTEL_ATOMISP
    - [Config] FTBFS: disable xr-usb-serial
    - [Packaging] FTBFS: disable zfs

  * Miscellaneous upstream changes
    - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
      ASPM"
    - Revert "UBUNTU: SAUCE: RDMA/core: Introduce peer memory interface"

  [ Upstream Kernel Changes ]

  * Rebase to v5.15-rc1

 -- Paolo Pisati <paolo.pisati@canonical.com>  Fri, 17 Sep 2021 11:42:25 +0200

linux-unstable (5.15.0-0.0) impish; urgency=medium

  * Empty entry

 -- Paolo Pisati <paolo.pisati@canonical.com>  Wed, 15 Sep 2021 11:54:10 +0200

linux-unstable (5.14.0-9.9) impish; urgency=medium

  * impish/linux-unstable: 5.14.0-9.9 -proposed tracker (LP: #1943022)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Packaging] NVIDIA -- Add the NVIDIA 470 driver
    - [Packaging] NVIDIA: transition -460 and -465 to -470, transition -460-server
      to -470-server

  * Miscellaneous upstream changes
    - vt_kdsetmode: extend console locking
    - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
    - net: dsa: mt7530: fix VLAN traffic leaks again
    - btrfs: fix NULL pointer dereference when deleting device by invalid id
    - Revert "floppy: reintroduce O_NDELAY fix"
    - fscrypt: add fscrypt_symlink_getattr() for computing st_size
    - ext4: report correct st_size for encrypted symlinks
    - f2fs: report correct st_size for encrypted symlinks
    - ubifs: report correct st_size for encrypted symlinks
    - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
    - audit: move put_tree() to avoid trim_trees refcount underflow and UAF
    - Linux 5.14.1

 -- Paolo Pisati <paolo.pisati@canonical.com>  Wed, 08 Sep 2021 12:20:18 +0200

linux-unstable (5.14.0-8.8) impish; urgency=medium

  * impish/linux-unstable: 5.14.0-8.8 -proposed tracker (LP: #1941887)

  * Fix  Intel AC9560 BT function cannot turn on if BT turn off before S3 entry
    (LP: #1941696)
    - SAUCE: Bluetooth: btusb: add a reject table to disable msft

  *  Add USB4 support for AMD SoC (LP: #1941036)
    - thunderbolt: Add vendor specific NHI quirk for auto-clearing interrupt
      status
    - thunderbolt: Handle ring interrupt by reading interrupt status register
    - thunderbolt: Do not read control adapter config space
    - thunderbolt: Fix port linking by checking all adapters

  * Support builtin revoked certificates (LP: #1932029)
    - [Config] Enforce SYSTEM_TRUSTED_KEYS and SYSTEM_REVOCATION_KEYS

  * GPIO error logs in start and dmesg after update of kernel (LP: #1937897)
    - ODM: mfd: Check AAEON BFPI version before adding device

  * initramfs-tools & kernel: use zstd as the default compression method
    (LP: #1931725)
    - [Config] enforce ZSTD compression

  * Miscellaneous Ubuntu changes
    - rebase to v5.14
    - [Config] RESET_MCHP_SPARX5 depends on ARCH_SPARX5

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] FTBFS: disable zfs"

  [ Upstream Kernel Changes ]

  * Rebase to v5.14

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 30 Aug 2021 12:57:19 +0200

linux-unstable (5.14.0-7.7) impish; urgency=medium

  * Please enable CONFIG_UBSAN_BOUNDS (LP: #1914685)
    - [Config] Enable CONFIG_UBSAN_BOUNDS

  * CONFIG_HARDENED_USERCOPY_FALLBACK should be disabled (LP: #1855340)
    - [Config] Disable CONFIG_HARDENED_USERCOPY_FALLBACK

  * fs: removing mandatory locks (LP: #1940392)
    - [Config] Disable CONFIG_MANDATORY_FILE_LOCKING

  * Fix kernel panic caused by legacy devices on AMD platforms (LP: #1936682)
    - SAUCE: iommu/amd: Keep swiotlb enabled to ensure devices with 32bit DMA
      still work

  * ALSA: hda/cs8409: Add support for dolphin (LP: #1939541)
    - ALSA: hda/cirrus: Move CS8409 HDA bridge to separate module
    - ALSA: hda/cs8409: Move arrays of configuration to a new file
    - ALSA: hda/cs8409: Use enums for register names and coefficients
    - ALSA: hda/cs8409: Mask all CS42L42 interrupts on initialization
    - ALSA: hda/cs8409: Reduce HS pops/clicks for Cyborg
    - ALSA: hda/cs8409: Disable unnecessary Ring Sense for Cyborg/Warlock/Bullseye
    - ALSA: hda/cs8409: Disable unsolicited responses during suspend
    - ALSA: hda/cs8409: Disable unsolicited response for the first boot
    - ALSA: hda/cs8409: Mask CS42L42 wake events
    - ALSA: hda/cs8409: Simplify CS42L42 jack detect.
    - ALSA: hda/cs8409: Prevent I2C access during suspend time
    - ALSA: hda/cs8409: Generalize volume controls
    - ALSA: hda/cs8409: Dont disable I2C clock between consecutive accesses
    - ALSA: hda/cs8409: Avoid setting the same I2C address for every access
    - ALSA: hda/cs8409: Avoid re-setting the same page as the last access
    - ALSA: hda/cs8409: Support i2c bulk read/write functions
    - ALSA: hda/cs8409: Separate CS8409, CS42L42 and project functions
    - ALSA: hda/cs8409: Move codec properties to its own struct
    - ALSA: hda/cs8409: Support multiple sub_codecs for Suspend/Resume/Unsol
      events
    - ALSA: hda/cs8409: Add Support to disable jack type detection for CS42L42
    - ALSA: hda/cs8409: Add support for dolphin
    - ALSA: hda/cs8409: Enable Full Scale Volume for Line Out Codec on Dolphin
    - ALSA: hda/cs8409: Set fixed sample rate of 48kHz for CS42L42
    - ALSA: hda/cs8409: Use timeout rather than retries for I2C transaction waits
    - ALSA: hda/cs8409: Remove unnecessary delays
    - ALSA: hda/cs8409: Follow correct CS42L42 power down sequence for suspend
    - ALSA: hda/cs8409: Unmute/Mute codec when stream starts/stops
    - ALSA: hda/cs8409: Prevent pops and clicks during suspend
    - SAUCE: ALSA: hda/cs8409: Prevent pops and clicks during reboot
    - [Config] Enable Cirrus Logic HDA bridge support

  * e1000e: add handshake with the Intel CSME to support S0ix (LP: #1937252)
    - SAUCE: e1000e: Add handshake with the CSME to support S0ix
    - SAUCE: e1000e: Add polling mechanism to indicate CSME DPG exit
    - SAUCE: e1000e: Additional PHY power saving in S0ix

  * AMDGPU: Fix System hang after resume from suspend (LP: #1940204)
    - SAUCE: drm/amdgpu: disable BACO support for 699F:C7 polaris12 SKU
      temporarily

  * [Regression] Audio card [8086:9d71] not detected after upgrade from linux
    5.4 to 5.8 (LP: #1915117)
    - [Config] set CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC to y

  * Miscellaneous Ubuntu changes
    - rebase to v5.14-rc7
    - [Config] updateconfigs following 5.14-rc7 rebase
    - [Config] Enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT
    - [Config] annotations: set CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT to y

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] annotations: set
      CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC to y"
    - Revert "UBUNTU: [Config] set CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC to
      y"

  [ Upstream Kernel Changes ]

  * Rebase to v5.14-rc7

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 24 Aug 2021 10:32:31 +0200

linux-unstable (5.14.0-6.6) impish; urgency=medium

  * Miscellaneous Ubuntu changes
    - no changes upload (to avoid picking up libc6 from -proposed)

  * No changes upload (to avoid picking up libc6 from -proposed)

 -- Paolo Pisati <paolo.pisati@canonical.com>  Wed, 18 Aug 2021 13:41:16 +0200

linux-unstable (5.14.0-5.5) impish; urgency=medium

  * disable “CONFIG_HISI_DMA” config for ubuntu version (LP: #1936771)
    - [Config] Disable CONFIG_HISI_DMA

  * Dell XPS 17 (9710) PCI/internal sound card not detected  (LP: #1935850)
    - ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode
    - ASoC: Intel: sof_sdw: add quirk for Dell XPS 9710

  * [regression] USB device is not detected during boot (LP: #1939638)
    - SAUCE: Revert "usb: core: reduce power-on-good delay time of root hub"

  * armhf build failure (LP: #1939308)
    - SAUCE: arm: Fix instruction set selection for GCC 11

  * REGRESSION: shiftfs lets sendfile fail with EINVAL (LP: #1939301)
    - SAUCE: shiftfs: fix sendfile() invocations

  * Wobbly graphics on built-in display since linux-image-5.11.0-22-generic
    (LP: #1936708)
    - SAUCE: drm/i915/dp: Use max params for older panels

  * [SRU][H/OEM-5.10/OEM-5.13/U] Fix system hang after unplug tbt dock
    (LP: #1938689)
    - SAUCE: igc: fix page fault when thunderbolt is unplugged

  * e1000e blocks the boot process when it tried to write checksum to its NVM
    (LP: #1936998)
    - SAUCE: e1000e: Do not take care about recovery NVM checksum

  * [Regression] Audio card [8086:9d71] not detected after upgrade from linux
    5.4 to 5.8 (LP: #1915117)
    - [Config] set CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC to y
    - [Config] annotations: set CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC to y

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following 5.14-rc6 rebase
    - rebase to v5.14-rc6

  [ Upstream Kernel Changes ]

  * Rebase to v5.14-rc6

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 17 Aug 2021 17:49:15 +0200

linux-unstable (5.14.0-4.4) impish; urgency=medium

  * impish/linux-unstable: 5.14.0-4.4 -proposed tracker (LP: #1938566)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous upstream changes
    - Revert "riscv: Get CPU manufacturer information"

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 03 Aug 2021 14:50:27 +0200

linux-unstable (5.14.0-3.3) impish; urgency=medium

  * Add additional Mediatek MT7921 WiFi/BT device IDs (LP: #1937004)
    - SAUCE: Bluetooth: btusb: Add Mediatek MT7921 support for Foxconn
    - SAUCE: Bluetooth: btusb: Add Mediatek MT7921 support for IMC Network
    - SAUCE: Bluetooth: btusb: Add support for Foxconn Mediatek Chip

  * Fix display output on HP hybrid GFX laptops (LP: #1936296)
    - drm/i915: Invoke another _DSM to enable MUX on HP Workstation laptops

  * Miscellaneous Ubuntu changes
    - rebase to v5.14-rc3
    - [Config] updateconfigs following 5.14-rc3 rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.14-rc3

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 26 Jul 2021 12:52:38 +0200

linux-unstable (5.14.0-2.2) impish; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - SAUCE: xr-usb-serial: update return code for xr_usb_serial_tty_write_room()
      and xr_usb_serial_tty_chars_in_buffer()
    - SAUCE: platform/x86: dell-uart-backlight: update return code for
      uart_chars_in_buffer(()
    - [Config] updateconfigs following 5.14-rc2 rebase

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] FTBFS: disable ubuntu/xr-usb-serial"
    - Revert "UBUNTU: [Config] FTBFS: disable DELL_UART_BACKLIGHT"

  [ Upstream Kernel Changes ]

  * Rebase to v5.14-rc2

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 22 Jul 2021 11:03:28 +0200

linux-unstable (5.14.0-1.1) impish; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Packaging] bump kernel version to 5.14
    - [Config] updateconfigs following 5.14-rc1 rebase
    - [Config] update annotations
    - [Packaging] FTBFS: disable zfs
    - [Config] FTBFS: disable DELL_UART_BACKLIGHT
    - [Config] FTBFS: disable ubuntu/xr-usb-serial

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] update variants"

  [ Upstream Kernel Changes ]

  * Rebase to v5.14-rc1

 -- Paolo Pisati <paolo.pisati@canonical.com>  Fri, 16 Jul 2021 15:20:04 +0200

linux-unstable (5.14.0-0.0) impish; urgency=medium

  * Empty entry

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 13 Jul 2021 12:15:35 +0200

linux (5.13.0-11.11) impish; urgency=medium

  * impish/linux: 5.13.0-11.11 -proposed tracker (LP: #1933854)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Support builtin revoked certificates (LP: #1932029)
    - [Packaging] build canonical-revoked-certs.pem from branch/arch certs
    - [Packaging] Revoke 2012 UEFI signing certificate as built-in
    - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys

  * Miscellaneous Ubuntu changes
    - [Packaging] Change source package name to linux

  * Miscellaneous upstream changes
    - mm/page_alloc: Correct return value of populated elements if bulk array is
      populated

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 29 Jun 2021 07:50:25 +0200

linux (5.13.0-10.10) impish; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 28 Jun 2021 08:40:05 +0200

linux-unstable (5.13.0-10.10) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-10.10 -proposed tracker (LP: #1933795)

  * Pixel format change broken for Elgato Cam Link 4K (LP: #1932367)
    - media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K

  * initramfs-tools & kernel: use zstd as the default compression method
    (LP: #1931725)
    - s390/decompressor: correct BOOT_HEAP_SIZE condition
    - s390/boot: add zstd support
    - [Packaging] use ZSTD to compress s390 kernels

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests: tls: fix chacha+bidir tests
    - SAUCE: selftests: icmp_redirect: support expected failures
    - [Config] update configs and annotations after rebase to 5.13

  * Miscellaneous upstream changes
    - tls: prevent oversized sendfile() hangs by ignoring MSG_MORE

  [ Upstream Kernel Changes ]

  * Rebase to v5.13

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 28 Jun 2021 08:40:05 +0200

linux-unstable (5.13.0-9.9) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-9.9 -proposed tracker (LP: #1933070)

  * Add support for selective build of special drivers (LP: #1912789)
    - [Packaging] Add support for ODM drivers
    - [Packaging] Turn on ODM support for amd64
    - [Packaging] Fix ODM support in actual build
    - [Packaging] Fix ODM DRIVERS Kconfig

  * Add support for IO functions of AAEON devices (LP: #1929504)
    - ODM: [Config] update config for AAEON devices
    - ODM: hwmon: add driver for AAEON devices
    - ODM: leds: add driver for AAEON devices
    - ODM: watchdog: add driver for AAEON devices
    - ODM: gpio: add driver for AAEON devices
    - ODM: mfd: Add support for IO functions of AAEON devices

  * Disable hv-kvp-daemon.service on certain instance types (LP: #1932081)
    - [Packaging]: Add kernel command line condition to hv-kvp-daemon service

  * Fix non-working GPU on Some HP desktops (LP: #1931147)
    - PCI: Coalesce host bridge contiguous apertures

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests: seccomp: bump up timeout to 5min
    - SAUCE: Revert "net/tls(TLS_SW): Add selftest for 'chunked' sendfile test"
    - [Config] update annotations after rebase to 5.13-rc7

  [ Upstream Kernel Changes ]

  * Rebase to v5.13-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 21 Jun 2021 10:55:36 +0200

linux-unstable (5.13.0-8.8) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-8.8 -proposed tracker (LP: #1932018)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * initramfs-tools & kernel: use zstd as the default compression method
    (LP: #1931725)
    - [Config] use ZSTD to compress amd64 kernels

  * Miscellaneous Ubuntu changes
    - [Config] enable signing for ppc64el
    - SAUCE: powerpc: Fix initrd corruption with relative jump labels

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 15 Jun 2021 15:07:34 +0200

linux-unstable (5.13.0-7.7) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-7.7 -proposed tracker (LP: #1931840)

  * Packaging resync (LP: #1786013)
    - update dkms package versions
    - [Packaging] resync getabis
    - [Packaging] update helper scripts
    - update dkms package versions

  * Intel ADL-S graphics feature enabling (LP: #1931240)
    - SAUCE: drm/i915/adl_s: ADL-S platform Update PCI ids for Mobile BGA

  * Kernel package builds running out of space on builders (LP: #1930713)
    - [Config] CONFIG_DEBUG_INFO_COMPRESSED=n

  * Miscellaneous Ubuntu changes
    - [Debian] remove nvidia dkms build support
    - [Config] remove now unsued do_dkms_nvidia* build variables
    - [Config] enable signing for s390x
    - [Config] update annotations after configs review
    - [Config] update toolchain versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.13-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 14 Jun 2021 11:53:08 +0200

linux-unstable (5.13.0-6.6) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-6.6 -proposed tracker (LP: #1931071)

  * Kernel package builds running out of space on builders (LP: #1930713)
    - [Debian] use stamps for flavour install targets
    - [Debian] run install-$(flavour) targets during build phase
    - [Debian] remove dh_testroot from install targets
    - [Debian] dkms-build -- use fakeroot if not running as root
    - [Debian] exclude $(DEBIAN)/__abi.current from linux-source

  * [UBUNTU 21.04] tools/kvm_stat: Add restart delay (LP: #1921870)
    - [Debian] install kvm_stat systemd service

  * Debugging symbols (dbgsym) packages are missing GDB kernel scripts
    (LP: #1928715)
    - [Packaging] Build and include GDB Python scripts into debug packages

  * Can't detect intel wifi 6235 (LP: #1920180)
    - SAUCE: iwlwifi: add new pci id for 6235

  * Select correct boot VGA when BIOS doesn't do it properly (LP: #1929217)
    - vgaarb: Use ACPI HID name to find integrated GPU

  * Fix kernel panic on Intel Bluetooth (LP: #1928838)
    - Bluetooth: Shutdown controller after workqueues are flushed or cancelled

  * build module CONFIG_SND_SOC_INTEL_SOUNDWIRE_SOF_MACH=m for 5.11,  5.13-rc2
    and later (LP: #1921632)
    - [Config] enable soundwire audio mach driver

  * Miscellaneous Ubuntu changes
    - [Config] CONFIG_SND_SOC_RT1308 can only be enabled on amd64

  [ Upstream Kernel Changes ]

  * Rebase to v5.13-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 07 Jun 2021 10:45:13 +0200

linux-unstable (5.13.0-5.5) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-5.5 -proposed tracker (LP: #1930205)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 31 May 2021 12:32:38 +0200

linux-unstable (5.13.0-4.4) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-4.4 -proposed tracker (LP: #1929404)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679)
    - SAUCE: integrity: add informational messages when revoking certs

  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679) // CVE-2020-26541 when certificates are revoked via
    MokListXRT.
    - SAUCE: integrity: Load mokx certs from the EFI MOK config table

  * Miscellaneous Ubuntu changes
    - [Config] Temporarily disable signing for ppc64el and s390x
    - SAUCE: Revert "UBUNTU: SAUCE: overlayfs: Be more careful about copying up
      sxid files"
    - SAUCE: Revert "UBUNTU: SAUCE: overlayfs: Propogate nosuid from lower and
      upper mounts"
    - SAUCE: Revert "UBUNTU: SAUCE: overlayfs: Enable user namespace mounts"
    - SAUCE: Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when
      reading directories"
    - SAUCE: Revert "UBUNTU: SAUCE: fs: Move SB_I_NOSUID to the top of s_iflags"

  [ Upstream Kernel Changes ]

  * Rebase to v5.13-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 24 May 2021 13:06:17 +0200

linux-unstable (5.13.0-3.3) impish; urgency=medium

  * impish/linux-unstable: 5.13.0-3.3 -proposed tracker (LP: #1928655)

  [ Upstream Kernel Changes ]

  * Rebase to v5.13-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 17 May 2021 11:55:02 +0200

linux-unstable (5.13.0-2.2) impish; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] enable CONFIG_DEBUG_INFO_COMPRESSED

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] temporarily disable BPF JIT"

 -- Andrea Righi <andrea.righi@canonical.com>  Fri, 14 May 2021 09:19:02 +0200

linux-unstable (5.13.0-1.1) impish; urgency=medium

  [ Upstream Kernel Changes ]

  * Rebase to v5.13-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 12 May 2021 11:35:23 +0200

linux-unstable (5.13.0-0.0) impish; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 11 May 2021 08:40:09 +0200

linux-unstable (5.12.0-11.11) impish; urgency=medium

  * Impish update: v5.12.1 upstream stable release (LP: #1927094)
    - net: hso: fix NULL-deref on disconnect regression
    - USB: CDC-ACM: fix poison/unpoison imbalance
    - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
    - cfg80211: fix locking in netlink owner interface destruction
    - mei: me: add Alder Lake P device id.
    - Linux 5.12.1

  * Packaging resync (LP: #1786013) // Impish update: v5.12.1 upstream stable
    release (LP: #1927094)
    - update dkms package versions

  * Gigabyte R120-T33 (ARM ThunderX SoC) fails to boot in ACPI mode
    (LP: #1925075) // Impish update: v5.12.1 upstream stable release
    (LP: #1927094)
    - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure

  * Fix kernel panic at boot on dual GFX systems (LP: #1926792) // Impish
    update: v5.12.1 upstream stable release (LP: #1927094)
    - drm/amdgpu: Register VGA clients after init can no longer fail

  * On TGL platforms screen shows garbage when browsing website by scrolling
    mouse (LP: #1926579) // Impish update: v5.12.1 upstream stable release
    (LP: #1927094)
    - SAUCE: drm/i915/display: Disable PSR2 if TGL Display stepping is B1 from A0

  * CirrusLogic: Cracking noises appears in built-in speaker when output volume
    is set >80% (LP: #1924997) // Impish update: v5.12.1 upstream stable release
    (LP: #1927094)
    - SAUCE: ALSA: hda/cirrus: Use CS8409 Equalizer to fix abnormal sounds on
      Bullseye

  * Enable mute/micmute LEDs and limit mic boost on EliteBook 845 G8
    (LP: #1925415) // Impish update: v5.12.1 upstream stable release
    (LP: #1927094)
    - ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook
      845 G8

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: PCI: Disable broken RTIT_BAR of Intel TH"
    - Revert "UBUNTU: [Config] temporarily disable ZFS"

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 04 May 2021 18:35:54 +0200

linux-unstable (5.12.0-10.10) impish; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Packaging] Drop versioned ABI directory names
    - [Packaging] getabis: Download ABIs into an unversioned directory
    - [Packaging] final-checks: Handle unversioned ABI directories
    - bump to impish
    - [Config] GCC version update

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 29 Apr 2021 12:27:20 +0200

linux-unstable (5.12.0-9.9) impish; urgency=medium

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc8

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 26 Apr 2021 11:14:16 -0500

linux-unstable (5.12.0-8.8) hirsute; urgency=medium

  * CVE-2021-3492
    - SAUCE: shiftfs: free allocated memory in shiftfs_btrfs_ioctl_fd_replace()
      error paths
    - SAUCE: shiftfs: handle copy_to_user() return values correctly

  * Fix no picture from HDMI when it's plugged after boot (LP: #1924238)
    - drm/i915/display: Handle lane polarity for DDI port

  * hirsute beta desktop AMD64 ISO kernel panic on boot when booting using UEFI
    (LP: #1922403)
    - SAUCE: efifb: Check efifb_pci_dev before using it

  * Miscellaneous Ubuntu changes
    - Rebase to v5.12-rc8
    - [Config] updateconfigs following 5.12-rc8 rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc8

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 19 Apr 2021 11:37:27 +0200

linux-unstable (5.12.0-7.7) hirsute; urgency=medium

  * drm/i915: Drop force_probe requirement for Rocket Lake (LP: #1905466)
    - drm/i915/rkl: Remove require_force_probe protection

  * HP m400 cartridges fail to find NIC when deploying hirsute (LP: #1918793)
    - PCI: xgene: Fix cfg resource mapping

  * Update - Fix no screen show on display after S3 on CML-R  (LP: #1922768)
    - drm/i915/gen9bc: Handle TGP PCH during suspend/resume

  * Miscellaneous Ubuntu changes
    - SAUCE: RDMA/core: Introduce peer memory interface
    - Rebase to v5.12-rc7

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc7

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 12 Apr 2021 11:48:07 +0200

linux-unstable (5.12.0-6.6) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * i915 doesn't support some high pixel clock 4k * 60Hz monitors (LP: #1922372)
    - drm/i915/vbt: update DP max link rate table

  * Tegra "mmc0: Timeout waiting for hardware interrupt" (LP: #1921140)
    - SAUCE: mmc: host: Add required callbacks to set/clear CQE_EN bit

  * Enable ath11k debugfs/tracing (LP: #1922033)
    - [Config] enable ath11k debugfs/tracing

  * Fix mic on P620 after S3 resume (LP: #1921757)
    - ALSA: usb-audio: Carve out connector value checking into a helper
    - ALSA: usb-audio: Check connector value on resume

  * Miscellaneous Ubuntu changes
    - [Config] amd64,arm64: build KFENCE support but disable it by default
      (KFENCE_SAMPLE_INTERVAL=0)
    - Rebase to v5.12-rc6

  * Miscellaneous upstream changes
    - drm/dp: add MSO related DPCD registers
    - drm/i915/edp: reject modes with dimensions other than fixed mode
    - drm/i915/edp: always add fixed mode to probed modes in ->get_modes()
    - drm/i915/edp: read sink MSO configuration for eDP 1.4+
    - drm/i915/reg: add stream splitter configuration definitions
    - drm/i915/mso: add splitter state readout for platforms that support it
    - drm/i915/mso: add splitter state check
    - drm/i915/edp: modify fixed and downclock modes for MSO
    - drm/i915/edp: enable eDP MSO during link training

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc6

 -- Paolo Pisati <paolo.pisati@canonical.com>  Wed, 07 Apr 2021 11:42:55 +0200

linux-unstable (5.12.0-5.5) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * alsa/realtek: extend the delay time in the  determine_headset_type for a
    Dell AIO (LP: #1920747)
    - SAUCE: ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO

  * power off stress test will hang on the TGL machines (LP: #1919930)
    - SAUCE: ASoC: SOF: Intel: TGL: set shutdown callback to hda_dsp_shutdown
    - [Config] set SND_SOC_SOF_HDA_ALWAYS_ENABLE_DMI_L1 to n

  * lockdown on power (LP: #1855668)
    - SAUCE: (lockdown) powerpc: lock down kernel in secure boot mode

  * Miscellaneous Ubuntu changes
    - [Config] arm64 -- unify build_image and kernel_file values
    - SAUCE: (lockdown) Add efi_status_to_str() and rework efi_status_to_err().
    - SAUCE: (lockdown) Make get_cert_list() use efi_status_to_str() to print
      error messages.
    - SAUCE: (lockdown) security: lockdown: expose a hook to lock the kernel down
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot
      mode
    - SAUCE: (lockdown) efi: Lock down the kernel if booted in secure boot mode
    - SAUCE: (lockdown) s390: Lock down the kernel when the IPL secure flag is set
    - SAUCE: (lockdown) KEYS: Make use of platform keyring for module signature
      verify
    - SAUCE: (lockdown) arm64: Allow locking down the kernel under EFI secure boot
    - SAUCE: (lockdown) security: lockdown: Make
      CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic
    - SAUCE: xr-usb-serial: clean up indentation
    - SAUCE: xr-usb-serial: clean up build warnings
    - SAUCE: apparmor: Fix build error, make sk parameter const
    - Rebase to v5.12-rc5
    - [Config] updateconfigs following v5.12-rc5 rebase

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: (lockdown) s390: Lock down the kernel when the IPL
      secure flag is set"
    - Revert "UBUNTU: SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to
      indicate secure boot mode"
    - Revert "UBUNTU: SAUCE: (lockdown) powerpc: lock down kernel in secure boot
      mode"
    - Revert "UBUNTU: SAUCE: (lockdown) security: lockdown: Make
      CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic"
    - Revert "UBUNTU: SAUCE: (lockdown) arm64: Allow locking down the kernel under
      EFI secure boot"
    - Revert "UBUNTU: SAUCE: (lockdown) KEYS: Make use of platform keyring for
      module signature verify"
    - Revert "UBUNTU: SAUCE: (lockdown) efi: Lock down the kernel if booted in
      secure boot mode"
    - Revert "UBUNTU: SAUCE: (lockdown) security: lockdown: expose a hook to lock
      the kernel down"
    - Revert "UBUNTU: SAUCE: (lockdown) Make get_cert_list() use
      efi_status_to_str() to print error messages."
    - Revert "UBUNTU: SAUCE: (lockdown) Add efi_status_to_str() and rework
      efi_status_to_err()."

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc5

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 29 Mar 2021 12:59:38 +0200

linux-unstable (5.12.0-4.4) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Fix broken efifb on graphics device without driver (LP: #1914411)
    - SAUCE: efifb: Ensure graphics device for efifb stays at PCI D0

  * Fix system sleep on TGL systems with Intel ME (LP: #1919321)
    - SAUCE: PCI: Serialize TGL e1000e PM ops

  * Miscellaneous Ubuntu changes
    - Rebase to v5.12-rc4
    - [Config] updateconfigs following v5.12-rc4 rebase

  * Miscellaneous upstream changes
    - riscv: dts: fu740: fix cache-controller interrupts
    - riscv: sifive: fu740: cpu{1, 2, 3, 4} set compatible to sifive, u74-mc
    - riscv: sifive: unmatched: update for 16GB rev3
    - riscv: Add 3 SBI wrapper functions to get cpu manufacturer information
    - riscv: Get CPU manufacturer information
    - riscv: Introduce alternative mechanism to apply errata solution
    - riscv: sifive: apply errata "cip-453" patch
    - clk: sifive: Add pcie_aux clock in prci driver for PCIe driver
    - clk: sifive: Use reset-simple in prci driver for PCIe driver
    - MAINTAINERS: Add maintainers for SiFive FU740 PCIe driver
    - dt-bindings: PCI: Add SiFive FU740 PCIe host controller
    - PCI: designware: Add SiFive FU740 PCIe host controller driver
    - riscv: dts: Add PCIe support for the SiFive FU740-C000 SoC

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc4

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 22 Mar 2021 12:43:14 +0100

linux-unstable (5.12.0-3.3) hirsute; urgency=medium

  *  riscv: revert SiFive Unleashed CPUFreq (LP: #1917433)
    - SAUCE: Revert "SiFive Unleashed CPUFreq"

  * Dell Precision 5550 takes up to 10 seconds to respond when coming out of
    sleep (LP: #1919123)
    - SAUCE: Input: i8042 - add dmi quirk

  * LRMv4: switch to signing nvidia modules via the Ubuntu Modules signing key
    (LP: #1918134)
    - [Packaging] sync dkms-build et al from LRMv4

  * curtin: install flash-kernel in arm64 UEFI unexpected (LP: #1918427)
    - [Packaging] Allow grub-efi-arm* to satisfy recommends on ARM

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Enable Tegra support in arm64 for NVIDIA Jetson (LP: #1918471)
    - [Config] enable ARCH_TEGRA and all Tegra SOC's
    - [Packaging] include modern Tegra modules

  * Cirrus Audio Codec CS8409/CS42L42: Input Device does not switch to headset
    Mic when a headset is inserted (LP: #1918378)
    - SAUCE: ALSA: hda/cirrus: Fix Headset Mic volume control name

  * Cirrus Audio Codec CS8409/CS42L42 support (LP: #1916554)
    - ALSA: hda/cirrus: Increase AUTO_CFG_MAX_INS from 8 to 18
    - ALSA: hda/cirrus: Add support for CS8409 HDA bridge and CS42L42 companion
      codec.
    - ALSA: hda/cirrus: Add jack detect interrupt support from CS42L42 companion
      codec.
    - ALSA: hda/cirrus: Add Headphone and Headset MIC Volume Control

  * drm/i915: Drop force_probe requirement for JSL (LP: #1917843)
    - SAUCE: drm/i915: Drop require_force_probe from JSL

  * Miscellaneous Ubuntu changes
    - [Packaging] Skip d-i code if udebs are disabled
    - [Packaging] Disable udebs if $DEBIAN/d-i doesn't exist
    - [Packaging] remove dh-systemd build dependency
    - [Config] fix several annotaions with enforcement typos
    - [Config] refresh annotations
    - [Config] updateconfigs following v5.12-rc3 rebase
    - annotations: fixup after v5.12-rc3 rebase
    - Rebase to v5.12-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc3

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 16 Mar 2021 18:43:03 +0100

linux-unstable (5.12.0-2.2) hirsute; urgency=medium

  * Miscellaneous Ubuntu changes
    - Rebase to v5.12-rc2
    - [Config] updateconfigs following v5.12-rc2 rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc2

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 08 Mar 2021 11:22:04 +0100

linux-unstable (5.12.0-1.1) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Support no udeb profile (LP: #1916095)
    - [Packaging] replace custom filter script with dctrl-tools
    - [Packaging] correctly implement noudeb build profiles.

  * Miscellaneous Ubuntu changes
    - [Packaging] dkms-versions -- remove nvidia-graphics-drivers-440-server
    - [Debian] run ubuntu-regression-suite for linux-unstable
    - [Packaging] remove Provides: aufs-dkms
    - [Config] update config and annotations following v5.12-rc1 rebase
    - [Config] disable nvidia and nvidia_server builds
    - [Config] temporarily disable ZFS
    - temporarily disable modules check
    - annotations: s390: temporarily remove CONFIG_KMSG_IDS
    - [Config] amd64: FTBFS: disable HIO
    - [Config] FTBFS: disable SHIFT_FS
    - [Config] s390: temporarily remove CONFIG_KMSG_IDS

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] disable nvidia and nvidia_server builds"
    - Revert "UBUNTU: SAUCE: s390: kernel message catalog"

  [ Upstream Kernel Changes ]

  * Rebase to v5.12-rc1

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 04 Mar 2021 18:26:12 +0100

linux-unstable (5.12.0-0.0) hirsute; urgency=medium

  * Empty entry

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 04 Mar 2021 18:17:32 +0100

linux-unstable (5.11.0-10.11) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Support CML-S CPU + TGP PCH (LP: #1909457)
    - drm/i915/rkl: new rkl ddc map for different PCH
    - SAUCE: drm/i915/gen9_bc : Add TGP PCH support

  * Use DCPD to control HP DreamColor panel (LP: #1911001)
    - SAUCE: drm/dp: Another HP DreamColor panel brigntness fix

  * Update nvidia dkms build for module linker script changes
    - [Packaging] build-dkms--nvidia-N -- Update for preprocessed module linker
      script

  * Please trust Canonical Livepatch Service kmod signing key (LP: #1898716)
    - [Config] enable CONFIG_MODVERSIONS=y
    - [Packaging] build canonical-certs.pem from branch/arch certs
    - [Config] add Canonical Livepatch Service key to SYSTEM_TRUSTED_KEYS
    - [Config] add ubuntu-drivers key to SYSTEM_TRUSTED_KEYS

  * Miscellaneous Ubuntu changes
    - [Config] re-enable nvidia dkms
    - SAUCE: selftests: memory-hotplug: bump timeout to 10min
    - [Debian] update-aufs.sh -- Don't apply tmpfs-idr.patch
    - [Config] Update configs
    - [Config] disable nvidia and nvidia_server builds
    - SAUCE: Import aufs driver
    - [Config] CONFIG_AUFS_FS=n
    - [Config] refresh annotations file
    - [Config] set CONFIG_MIPI_I3C_HCI=m consistently
    - [Config] set CONFIG_PINCTRL_MSM8953=m on armhf generic-lpae
    - [Packaging] Change source package name to linux-unstable
    - [Config] update LD_VERSION in config due to toolchain update

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: tmpfs: Don't use 64-bit inodes by defulat with 32-bit
      ino_t"

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 22 Feb 2021 07:18:07 +0100

linux-unstable (5.11.0-9.10) hirsute; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 22 Feb 2021 07:02:45 +0100

linux (5.11.0-9.10) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Config] update configs/annotations after rebase to 5.11
    - zfs-modules.ignore: add zzstd

  [ Upstream Kernel Changes ]

  * Rebase to v5.11

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 15 Feb 2021 16:29:36 +0100

linux (5.11.0-8.9) hirsute; urgency=medium

  * Missing device id for Intel TGL-H ISH [8086:43fc] in intel-ish-hid driver
    (LP: #1914543)
    - SAUCE: HID: intel-ish-hid: ipc: Add Tiger Lake H PCI device ID

  *  Add support for new Realtek ethernet NIC (LP: #1914604)
    - r8169: Add support for another RTL8168FP

  * Miscellaneous Ubuntu changes
    - SAUCE: tmpfs: Don't use 64-bit inodes by defulat with 32-bit ino_t
    - [Config] Set CONFIG_TMPFS_INODE64=n for s390x
    - [Config] re-enable ZFS

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 08 Feb 2021 11:56:23 +0100

linux (5.11.0-7.8) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  *  Boot fails: failed to validate module [nls_iso8859_1] BTF: -22
    (LP: #1911359)
    - SAUCE: x86/entry: build thunk_$(BITS) only if CONFIG_PREEMPTION=y

  * Remove scary stack trace from Realtek WiFi driver (LP: #1913263)
    - rtw88: reduce the log level for failure of tx report

  * Fix unexpected AER/DPC on PCH400 and PCH500 (LP: #1913691)
    - Revert "UBUNTU: SAUCE: PCI: Enable ACS quirk on all CML root ports"
    - Revert "UBUNTU: SAUCE: PCI: Enable ACS quirk on CML root port"
    - SAUCE: PCI/AER: Disable AER interrupt during suspend
    - SAUCE: PCI/DPC: Disable DPC interrupt during suspend

  * switch to an autogenerated nvidia series based core via dkms-versions
    (LP: #1912803)
    - [Packaging] nvidia -- use dkms-versions to define versions built
    - [Packaging] update-version-dkms -- maintain flags fields

  * Introduce the new NVIDIA 460-server series and update the 460 series
    (LP: #1913200)
    - [Config] dkms-versions -- add the 460-server nvidia driver

  * Fix the video can't output through WD19TB connected with TGL platform during
    cold-boot (LP: #1910211)
    - SAUCE: drm/i915/dp: Prevent setting LTTPR mode if no LTTPR is detected

  * Stop using get_scalar_status command in Dell AIO uart backlight driver
    (LP: #1865402)
    - SAUCE: platform/x86: dell-uart-backlight: add get_display_mode command

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests/seccomp: Accept any valid fd in user_notification_addfd
    - [Packaging] Don't disable CONFIG_DEBUG_INFO in headers packages
    - [Config] update configs/annotations after rebase to 5.11-rc6

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 01 Feb 2021 10:27:52 +0100

linux (5.11.0-6.7) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Prevent thermal shutdown during boot process (LP: #1906168)
    - thermal/drivers/acpi: Use hot and critical ops
    - thermal/core: Remove notify ops
    - thermal: int340x: Fix unexpected shutdown at critical temperature
    - thermal: intel: pch: Fix unexpected shutdown at critical temperature

  * riscv: backport support for SiFive Unmatched (LP: #1910965)
    - RISC-V: Update l2 cache DT documentation to add support for SiFive FU740
    - RISC-V: sifive_l2_cache: Update L2 cache driver to support SiFive FU740
    - dt-bindings: riscv: Update DT binding docs to support SiFive FU740 SoC
    - riscv: dts: add initial support for the SiFive FU740-C000 SoC
    - dt-bindings: riscv: Update YAML doc to support SiFive HiFive Unmatched board
    - riscv: dts: add initial board data for the SiFive HiFive Unmatched
    - PCI: microsemi: Add host driver for Microsemi PCIe controller
    - Microsemi PCIe expansion board DT entry.
    - SiFive Unleashed CPUFreq
    - SiFive HiFive Unleashed: Add PWM LEDs (D1, D2, D3, D4)

  * initramfs unpacking failed (LP: #1835660)
    - lib/decompress_unlz4.c: correctly handle zero-padding around initrds.

  * Miscellaneous Ubuntu changes
    - [Config] update configs and annotations after rebase to 5.11-rc5

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 25 Jan 2021 09:31:31 +0100

linux (5.11.0-5.6) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Config] update config and annotations after rebase to 5.11-rc4

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 18 Jan 2021 10:46:10 +0100

linux (5.11.0-4.5) hirsute; urgency=medium

  *  Boot fails: failed to validate module [nls_iso8859_1] BTF: -22
    (LP: #1911359)
    - SAUCE: x86/entry: build thunk_$(BITS) only if CONFIG_PREEMPTION=y

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 14 Jan 2021 12:53:26 +0100

linux (5.11.0-3.4) hirsute; urgency=medium

  *  Boot fails: failed to validate module [nls_iso8859_1] BTF: -22
    (LP: #1911359)
    - bpf: Allow empty module BTFs
    - libbpf: Allow loading empty BTFs

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 14 Jan 2021 07:43:45 +0100

linux (5.11.0-2.3) hirsute; urgency=medium

  * DMI entry syntax fix for Pegatron / ByteSpeed C15B (LP: #1910639)
    - Input: i8042 - unbreak Pegatron C15B

  * SYNA30B4:00 06CB:CE09 Mouse  on HP EliteBook 850 G7 not working at all
    (LP: #1908992)
    - HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device

  * debian/scripts/file-downloader does not handle positive failures correctly
    (LP: #1878897)
    - [Packaging] file-downloader not handling positive failures correctly

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * CVE-2021-1052 // CVE-2021-1053
    - [Packaging] NVIDIA -- Add the NVIDIA 460 driver

  * Miscellaneous Ubuntu changes
    - [Packaging] Remove nvidia-455 dkms build
    - SAUCE: ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP
      machines
    - [Config] update configs and annotations after rebase to 5.11-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 11 Jan 2021 09:52:27 +0100

linux (5.11.0-1.2) hirsute; urgency=medium

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 07 Jan 2021 16:57:01 +0100

linux (5.11.0-0.1) hirsute; urgency=medium

  * dep-8 ubuntu-regression-suite tests are not run for all linux-hwe-* kernels
    (LP: #1908529)
    - [dep-8] Allow all hwe kernels

  * Fix reading speed and duplex sysfs on igc device (LP: #1906851)
    - igc: Report speed and duplex as unknown when device is runtime suspended

  * rtwpci driver blocks the system to enter PC10, stuck at PC3 (LP: #1907200)
    - SAUCE: rtw88: 8723de: let cpu enter c10

  * [21.04 FEAT] Deactivate CONFIG_QETH_OSN kernel config option (LP: #1906370)
    - [Config] Deactivate CONFIG_QETH_OSN kernel config option

  * Add dpcd backlight control for 0x4c83 0x4f41 (LP: #1905663)
    - SAUCE: drm/dp: Add dpcd backlight control for 0x4c83 0x4f41

  * disable building bpf selftests (LP: #1908144)
    - SAUCE: selftests/bpf: Clarify build error if no vmlinux
    - SAUCE: selftests: Skip BPF selftests by default
    - disable building bpf selftests (no VMLINUX_BTF)

  * Miscellaneous Ubuntu changes
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot
      mode
    - SAUCE: (lockdown) s390: Lock down the kernel when the IPL secure flag is set
    - [Config] update configs and annotations after rebase to v5.11-rc1
    - hio: fix build error with kernel 5.11
    - SAUCE: shiftfs: fix build error with 5.11
    - [Config] temporarily disable ZFS
    - check-aliases: do not error if modules.alias does not exist
    - ppc64el: don't build stripped vdso

  * Miscellaneous upstream changes
    - irq: export irq_check_status_bit

  [ Upstream Kernel Changes ]

  * Rebase to v5.11-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 04 Jan 2021 09:17:48 +0100

linux (5.11.0-0.0) hirsute; urgency=medium

  * Empty entry

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 30 Dec 2020 09:04:41 +0100

linux (5.10.0-9.10) hirsute; urgency=medium

  * Use INTx for Pericom USB controllers (LP: #1906839)
    - PCI: Disable MSI for Pericom PCIe-USB adapter

  * disable building bpf selftests (LP: #1908144)
    - SAUCE: selftests/bpf: clarify build error if no vmlinux
    - SAUCE: selftests: Skip BPF seftests by default
    - disable building bpf selftests (no VMLINUX_BTF)

  * Miscellaneous Ubuntu changes
    - [Config] Enable CONFIG_BPF_LSM

  * Miscellaneous upstream changes
    - Revert "md: change mddev 'chunk_sectors' from int to unsigned"
    - Revert "dm raid: fix discard limits for raid1 and raid10"

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 15 Dec 2020 10:16:14 +0100

linux (5.10.0-8.9) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Fix bpf selftest compilation with clang 11
    - bpf: Fix selftest compilation on clang 11

  * Miscellaneous Ubuntu changes
    - [Config] update configs and annotations after rebase to v5.10

  [ Upstream Kernel Changes ]

  * Rebase to v5.10

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 14 Dec 2020 08:57:57 +0100

linux (5.10.0-7.8) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Fix linux-libc-dev build for hirsute forward port kernels (LP: #1904067)
    - [Debian] Build linux-libc-dev for debian.master* branches

  * Update kernel packaging to support forward porting kernels (LP: #1902957)
    - [Debian] Update for leader included in BACKPORT_SUFFIX

  * Introduce the new NVIDIA 455 series (LP: #1897751)
    - [Packaging] NVIDIA -- Add signed modules for the 455 driver

  * 5.10 kernel fails to boot with secure boot disabled (LP: #1904906)
    - [Config] CONFIG_RCU_SCALE_TEST=n

  * Miscellaneous Ubuntu changes
    - [Config] s390x: disable GPIO_CDEV
    - [Config] ARM_CMN=m
    - [Config] disable GPIO_CDEV_V1
    - [Config] Reorder annotations after 5.10-rc6 rebase
    - [Packaging] Remove nvidia-435 dkms build
    - [Packaging] Change source package name to linux
    - [Config] Update configs and annotations after rebase to v5.10-rc7
    - SAUCE: Revert "mm/filemap: add static for function
      __add_to_page_cache_locked"

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc7

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 07 Dec 2020 00:15:20 -0600

linux (5.10.0-6.7) hirsute; urgency=medium

  * Empty entry.

 -- Seth Forshee <seth.forshee@canonical.com>  Sun, 06 Dec 2020 22:13:46 -0600

linux-5.10 (5.10.0-6.7) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Avoid double newline when running insertchanges (LP: #1903293)
    - [Packaging] insertchanges: avoid double newline

  * Miscellaneous Ubuntu changes
    - [Packaging]: linux-modules should depend on linux-image
    - [Packaging]: linux-image should suggest linux-modules-extra

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 30 Nov 2020 07:47:34 +0100

linux-5.10 (5.10.0-5.6) hirsute; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] add CONFIG_INFINIBAND_VIRT_DMA

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 23 Nov 2020 13:17:44 +0100

linux-5.10 (5.10.0-4.5) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Packaging] reduce the size required to build packages

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 16 Nov 2020 08:33:54 +0100

linux-5.10 (5.10.0-3.4) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * e1000e: fix issues with S0ix (LP: #1902687)
    - SAUCE: e1000e: fix S0ix flow to allow S0i3.2 subset entry
    - SAUCE: e1000e: allow turning s0ix flows on for systems with ME
    - SAUCE: e1000e: Add Dell's Comet Lake systems into s0ix heuristics
    - SAUCE: e1000e: Add more Dell CML systems into s0ix heuristics
    - [Config] Update CONFIG_E1000E for ppc64el in annotations

  * perf: Add support for Rocket Lake (LP: #1902004)
    - SAUCE: perf/x86/intel: Add Rocket Lake CPU support
    - SAUCE: perf/x86/cstate: Add Rocket Lake CPU support
    - SAUCE: perf/x86/msr: Add Rocket Lake CPU support
    - SAUCE: perf/x86/intel/uncore: Add Rocket Lake support

  * Miscellaneous Ubuntu changes
    - [Config] Disable CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE
    - [Config] update CONFIG_MST_IRQ after rebase to 5.10-rc3
    - [Config] drop obsolete SND_SST_IPC options
    - [Config] re-enable ZFS

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 09 Nov 2020 09:37:08 +0100

linux-5.10 (5.10.0-2.3) hirsute; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] Switch arm64 default cpufreq governor to ondemand
    - [Debian] Include scripts/module.lds from builddir in headers package

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 03 Nov 2020 21:01:52 -0600

linux-5.10 (5.10.0-1.2) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Fix non-working Intel NVMe after S3 (LP: #1900847)
    - SAUCE: PCI: Enable ACS quirk on all CML root ports

  * Miscellaneous Ubuntu changes
    - [Packaging] move to hirsute
    - [Config] Update configs and annotations after rebase to 5.10-rc2
    - [Config] Update numerous configs to conform with policy
    - [Config] Switch default CPUFreq governer for arm64/armhf to schedultil
    - [Config] Temporarily disable DEBUG_INFO_BTF for armhf

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc2

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 02 Nov 2020 13:18:27 -0600

linux-5.10 (5.10.0-0.1) hirsute; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - [Config] Update configs and annotations for v5.10-rc1
    - SAUCE: platform/x86: dell-uart-backlight: rename kzfree() to
      kfree_sensitive()
    - SAUCE: apparmor: rename kzfree() to kfree_sensitive()
    - SAUCE: LSM: change ima_read_file() to use lsmblob
    - SAUCE: LSM: Use lsmblob in smk_netlbl_mls()

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] Change source package name to linux-5.10"
    - s390: correct __bootdata / __bootdata_preserved macros

  [ Upstream Kernel Changes ]

  * Rebase to v5.10-rc1

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 27 Oct 2020 16:57:07 +0100

linux-5.10 (5.10.0-0.0) groovy; urgency=medium

  * Empty entry

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 26 Oct 2020 14:55:48 +0100

linux-5.9 (5.9.0-2.3) groovy; urgency=medium

  * Fix system reboot when disconnecting WiFi (LP: #1899726)
    - iwlwifi: msix: limit max RX queues for 9000 family

  * booting linux-generic-lpae armhf kernel under qemu results in relocation out
    of range, and thus no modules can be loaded (LP: #1899519)
    - [Config] armhf: ARM_MODULE_PLTS=y

  * Fix broken MSI interrupt after HDA controller was suspended (LP: #1899586)
    - ALSA: hda: fix jack detection with Realtek codecs when in D3

  * CVE-2020-16119
    - SAUCE: dccp: avoid double free of ccid on child socket

  * python3-venv is gone (LP: #1896801)
    - SAUCE: doc: remove python3-venv dependency

  * *-tools-common packages descriptions have typo "PGKVER" (LP: #1898903)
    - [Packaging] Fix typo in -tools template s/PGKVER/PKGVER/

  * Enable brightness control on HP DreamColor panel (LP: #1898865)
    - SAUCE: drm/i915/dpcd_bl: Skip testing control capability with force DPCD
      quirk
    - SAUCE: drm/dp: HP DreamColor panel brigntness fix

  * HP Zbook Studio G7 boots into corrupted screen with PSR featured panel
    (LP: #1897501)
    - SAUCE: drm/i915/psr: allow overriding PSR disable param by quirk
    - SAUCE: drm/dp: add DP_QUIRK_FORCE_PSR_CHIP_DEFAULT quirk to CMN prod-ID
      19-15

  * Fix broken e1000e device after S3 (LP: #1897755)
    - SAUCE: e1000e: Increase polling timeout on MDIC ready bit

  * Wakeup the system by touching the touchpad (LP: #1888331)
    - HID: i2c-hid: Enable wakeup capability from Suspend-to-Idle

  * Enable LTR for endpoints behind VMD (LP: #1896598)
    - SAUCE: PCI/ASPM: Enable LTR for endpoints behind VMD

  * [SRU] [Focal/OEM-5.6/Groovy]Fix AMD usb host controller lost after stress S3
    (LP: #1893914)
    - SAUCE: xhci: workaround for S3 issue on AMD SNPS 3.0 xHC

  * debian/rules editconfigs does not work on s390x to change s390x only configs
    (LP: #1863116)
    - [Packaging] kernelconfig -- only update/edit configurations on architectures
      we have compiler support

  * Fix non-working NVMe after S3 (LP: #1895718)
    - SAUCE: PCI: Enable ACS quirk on CML root port

  * Miscellaneous Ubuntu changes
    - SAUCE: bpf: Check CONFIG_BPF option for resolve_btfids
    - SAUCE: tools resolve_btfids: Always force HOSTARCH
    - packaging: arm64: add a 64KB mem pages flavour called 'generic-64k'
    - packaging: arm64: generic-64k: skip ABI, modules and retpoline checks
    - SAUCE: drm/i915/display: Fix null deref in intel_psr_atomic_check()
    - [Config] Update toolchain versions
    - [Config] Refresh annotations
    - Add ubuntu-host module
    - CONFIG_UBUNTU_HOST=m
    - SAUCE: apparmor: drop prefixing abs root labels with '='
    - SAUCE: apparmor: disable showing the mode as part of a secid to secctx
    - SAUCE: apparmor: rename aa_sock() to aa_unix_sk()
    - SAUCE: apparmor: LSM stacking: switch from SK_CTX() to aa_sock()
    - SAUCE: LSM: Infrastructure management of the sock security
    - SAUCE: LSM: Create and manage the lsmblob data structure.
    - SAUCE: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: LSM: Use lsmblob in security_kernel_act_as
    - SAUCE: net: Prepare UDS for security module stacking
    - SAUCE: LSM: Use lsmblob in security_secctx_to_secid
    - SAUCE: LSM: Use lsmblob in security_secid_to_secctx
    - SAUCE: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: LSM: Use lsmblob in security_task_getsecid
    - SAUCE: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: LSM: Use lsmblob in security_cred_getsecid
    - SAUCE: IMA: Change internal interfaces to use lsmblobs
    - SAUCE: LSM: Specify which LSM to display
    - SAUCE: LSM: Ensure the correct LSM context releaser
    - SAUCE: LSM: Use lsmcontext in security_secid_to_secctx
    - SAUCE: LSM: Use lsmcontext in security_inode_getsecctx
    - SAUCE: LSM: security_secid_to_secctx in netlink netfilter
    - SAUCE: NET: Store LSM netlabel data in a lsmblob
    - SAUCE: LSM: Verify LSM display sanity in binder
    - SAUCE: Audit: Add new record for multiple process LSM attributes
    - SAUCE: Audit: Add a new record for multiple object LSM
    - SAUCE: LSM: Add /proc attr entry for full LSM context
    - SAUCE: AppArmor: Remove the exclusive flag
    - SAUCE: Audit: Fix for missing NULL check

  * Miscellaneous upstream changes
    - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()

  [ Upstream Kernel Changes ]

  * Rebase to v5.9

 -- Seth Forshee <seth.forshee@canonical.com>  Wed, 14 Oct 2020 13:31:18 -0500

linux-5.9 (5.9.0-1.2) groovy; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] Update configs after rebase to 5.9-rc6
    - SAUCE: dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX
    - SAUCE: bpf: Use --no-fail option if CONFIG_BPF is not enabled
    - SAUCE: tools resolve_btfids: Always force HOSTARCH

  [ Upstream Kernel Changes ]

  * Rebase to v5.9-rc6

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 21 Sep 2020 14:39:34 -0500

linux-5.9 (5.9.0-0.1) groovy; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] Update configs and annotations for v5.9-rc1
    - SAUCE: i915: Fix build error due to missing struct definition
    - hio -- Update blk_queue_split() calls for changes in 5.9-rc1
    - hio -- Updates for move of make_request_fn to struct block_device_operations
    - [Config] Disable zfs dkms build
    - [Config] Disable nvidia dkms build
    - [Config] Disable nvidia server dkms builds
    - SAUCE: remoteproc: qcom: Use div_u64() for 64-bit division
    - SAUCE: PCI/ASPM: Enable ASPM for links under VMD domain
    - [Packaging] Bind hv_vss_daemon startup to hv_vss device
    - [Packaging] bind hv_fcopy_daemon startup to hv_fcopy device
    - [Config] Re-enable UEFI signing for arm64
    - SAUCE: Revert "UBUNTU: SAUCE: export __get_vm_area_caller() and map_kernel_range()"
    - [Config] Set the default CPU governor to ONDEMAND
    - [Packaging] update variants
    - [Packaging] update helper scripts
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.9-rc5

 -- Seth Forshee <seth.forshee@canonical.com>  Thu, 17 Sep 2020 15:01:21 -0500

linux-5.9 (5.9.0-0.0) groovy; urgency=medium

  * Empty entry

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 18 Aug 2020 16:48:03 -0500

linux (5.8.0-16.17) groovy; urgency=medium

  * groovy/linux: 5.8.0-16.17 -proposed tracker (LP: #1891233)

  * Miscellaneous Ubuntu changes
    - hio -- Update to use bio_{start,end}_io_acct with 5.8+
    - Enable hio driver
    - [Packaging] Temporarily disable building doc package contents

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 11 Aug 2020 15:32:58 -0500

linux (5.8.0-15.16) groovy; urgency=medium

  * groovy/linux: 5.8.0-15.16 -proposed tracker (LP: #1891177)

  * Miscellaneous Ubuntu changes
    - SAUCE: Documentation: import error c_funcptr_sig_re, c_sig_re (sphinx-
      doc/sphinx@0f49e30c)

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 11 Aug 2020 09:29:58 -0500

linux (5.8.0-14.15) groovy; urgency=medium

  * groovy/linux: 5.8.0-14.15 -proposed tracker (LP: #1891085)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * msg_zerocopy.sh in net from ubuntu_kernel_selftests failed (LP: #1812620)
    - selftests/net: relax cpu affinity requirement in msg_zerocopy test

  * Fix missing HDMI/DP Audio on an HP Desktop (LP: #1890441)
    - ALSA: hda/hdmi: Add quirk to force connectivity

  * Add initial audio support for Lenovo ThinkStation P620 (LP: #1890317)
    - ALSA: usb-audio: Add support for Lenovo ThinkStation P620

  * Fix IOMMU error on AMD Radeon Pro W5700 (LP: #1890306)
    - PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken

  * Enlarge hisi_sec2 capability (LP: #1890222)
    - crypto: hisilicon - update SEC driver module parameter

  * Miscellaneous Ubuntu changes
    - [Config] Re-enable signing for ppc64el

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 10 Aug 2020 15:26:46 -0500

linux (5.8.0-13.14) groovy; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] Remove i386 configs
    - SAUCE: apply a workaround to re-enable CONFIG_CRYPTO_AEGIS128_SIMD
    - SAUCE: export __get_vm_area_caller() and map_kernel_range()
    - [Config] drop CONFIG_BINFMT_AOUT enforcement

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] disable CONFIG_CRYPTO_AEGIS128_SIMD"

  [ Upstream Kernel Changes ]

  * Rebase to v5.8

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 04 Aug 2020 09:51:50 +0200

linux (5.8.0-12.13) groovy; urgency=medium

  * groovy/linux: 5.8.0-12.13 -proposed tracker (LP: #1889481)

  * Fix right speaker of HP laptop (LP: #1889375)
    - SAUCE: hda/realtek: Fix right speaker of HP laptop

  * blk_update_request error when mount nvme partition (LP: #1872383)
    - SAUCE: nvme-pci: prevent SK hynix PC400 from using Write Zeroes command

  * Add support for Atlantic NIC firmware v4 (LP: #1886908)
    - Revert "UBUNTU: SAUCE: net: atlantic: Add support for firmware v4"
    - net: atlantic: align return value of ver_match function with function name
    - net: atlantic: add support for FW 4.x

  * Miscellaneous Ubuntu changes
    - [Debian] Fix debian/tests for linux-5.8 -> linux rename
    - SAUCE: selftests/powerpc: return skip code for spectre_v2

 -- Seth Forshee <seth.forshee@canonical.com>  Wed, 29 Jul 2020 16:58:47 -0500

linux (5.8.0-11.12) groovy; urgency=medium

  * groovy/linux: 5.8.0-11.12 -proposed tracker (LP: #1889336)

  * Miscellaneous Ubuntu changes
    - [Packaging] dwarves is not required for linux-libc-dev or stage1

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 28 Jul 2020 22:33:24 -0500

linux (5.8.0-10.11) groovy; urgency=medium

  * groovy/linux: 5.8.0-10.11 -proposed tracker (LP: #1889316)

  * Miscellaneous Ubuntu changes
    - [Packaging] Add more packages to Build-Depends-Indep for docs
    - [Debian] Specify python executable in kmake
    - [Debian] Don't treat warnings as errors during perf builds
    - [Config] Disable signing for ppc64el

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 28 Jul 2020 17:09:52 -0500

linux (5.8.0-9.10) groovy; urgency=medium

  * groovy/linux: 5.8.0-9.10 -proposed tracker (LP: #1889140)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Miscellaneous Ubuntu changes
    - SAUCE: Fix s390x compile error on F32 utils/stat-display.c
    - [Packaging] Add python3-venv to Build-Depends-Indep

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 27 Jul 2020 21:01:46 -0500

linux (5.8.0-8.9) groovy; urgency=medium

  * groovy/linux: 5.8.0-8.9 -proposed tracker (LP: #1889104)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - update dkms package versions
    - [Packaging] update variants

  * Introduce the new NVIDIA 450-server and the 450 UDA series (LP: #1887674)
    - [Packaging] NVIDIA -- Add signed modules for 450 450-server

  * Introduce the new NVIDIA 418-server and 440-server series, and update the
    current NVIDIA drivers (LP: #1881137)
    - [packaging] add signed modules for the 418-server and the 440-server
      flavours

  * Miscellaneous Ubuntu changes
    - SAUCE: Revert "radix-tree: Use local_lock for protection"
    - [Config] CONFIG_DEBUG_INFO_COMPRESSED=n
    - [Config] disable CONFIG_CRYPTO_AEGIS128_SIMD
    - [Config] Enable nvidia dkms build

  * Miscellaneous upstream changes
    - usbip: tools: fix build error for multiple definition

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc7

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 27 Jul 2020 11:18:12 -0500

linux (5.8.0-7.8) groovy; urgency=medium

  * Empty entry

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 27 Jul 2020 09:22:19 +0200

linux-5.8 (5.8.0-7.8) groovy; urgency=medium

  * soc/amd/renoir: detect dmic from acpi table (LP: #1887734)
    - ASoC: amd: add logic to check dmic hardware runtime
    - ASoC: amd: add ACPI dependency check
    - ASoC: amd: fixed kernel warnings

  * linux 4.15.0-109-generic network DoS regression vs -108 (LP: #1886668)
    - SAUCE: Revert "netprio_cgroup: Fix unlimited memory leak of v2 cgroups"

  * Add support for Atlantic NIC firmware v4 (LP: #1886908)
    - SAUCE: net: atlantic: Add support for firmware v4

  * MGA G200e doesn't work under GDM Wayland (LP: #1886140)
    - drm/mgag200: Remove HW cursor
    - drm/mgag200: Clean up mga_set_start_address()
    - drm/mgag200: Clean up mga_crtc_do_set_base()
    - drm/mgag200: Move mode-setting code into separate helper function
    - drm/mgag200: Split MISC register update into PLL selection, SYNC and I/O
    - drm/mgag200: Update mode registers after plane registers
    - drm/mgag200: Set pitch in a separate helper function
    - drm/mgag200: Set primary plane's format in separate helper function
    - drm/mgag200: Move TAGFIFO reset into separate function
    - drm/mgag200: Move hiprilvl setting into separate functions
    - drm/mgag200: Move register initialization into separate function
    - drm/mgag200: Remove out-commented suspend/resume helpers
    - drm/mgag200: Use simple-display data structures
    - drm/mgag200: Convert to simple KMS helper
    - drm/mgag200: Replace VRAM helpers with SHMEM helpers

  * Miscellaneous Ubuntu changes
    - SAUCE: s390/bpf: fix sign extension in branch_ku
    - SAUCE: selftests: net: ip_defrag: modprobe missing nf_defrag_ipv6 support
    - SAUCE: selftests: fib_nexthop_multiprefix: fix cleanup() netns deletion
    - [packaging] debhelper-compat (= 10) (and retire debian/compat)
    - [Config] Update configs after rebase to 5.8-rc6

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 20 Jul 2020 09:55:47 +0200

linux-5.8 (5.8.0-6.7) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * perf build broken after updating to bintuils 2.34.90.20200706-1ubuntu1
    (LP: #1887397)
    - SAUCE: libtraceevent: Strip symbol version from nm output

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 13 Jul 2020 14:07:53 -0500

linux-5.8 (5.8.0-5.6) groovy; urgency=medium

  * linux-libc-dev broken for crossbuilding, Multi-Arch:same violation
    (LP: #1886188)
    - [Packaging] Produce linux-libc-deb package for riscv64
    - [Debian] Disallow building linux-libc-dev from linux-riscv

  * Miscellaneous Ubuntu changes
    - SAUCE: Revert "UBUNTU: SAUCE: test_bpf: remove expected fail for Ctx heavy
      transformations test on s390"
    - SAUCE: Revert "test_bpf: flag tests that cannot be jited on s390"
    - [Config] Update configs (gcc update)

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 13 Jul 2020 08:42:14 +0200

linux-5.8 (5.8.0-4.5) groovy; urgency=medium

  * Add generic LED class support for audio LED (LP: #1885896)
    - ALSA: hda: generic: Always call led-trigger for mic mute LED
    - ALSA: hda: generic: Add a helper for mic-mute LED with LED classdev
    - ALSA: hda/realtek: Convert to cdev-variant of mic-mute LED controls
    - ALSA: hda/conexant: Convert to cdev-variant of mic-mute LED controls
    - ALSA: hda/sigmatel: Convert to cdev-variant of mic-mute LED controls
    - ALSA: hda: generic: Drop unused snd_hda_gen_fixup_micmute_led()
    - ALSA: hda: generic: Drop the old mic-mute LED hook
    - ALSA: hda: generic: Add vmaster mute LED helper
    - ALSA: hda/realtek: Use the new vmaster mute LED helper
    - ALSA: hda/conexant: Use the new vmaster mute LED helper
    - ALSA: hda/sigmatel: Use the new vmaster mute LED helper
    - ALSA: hda/realtek: Unify LED helper code
    - ALSA: hda: Let LED cdev handling suspend/resume

  * seccomp_bpf fails on powerpc (LP: #1885757)
    - SAUCE: selftests/seccomp: fix ptrace tests on powerpc

  * CVE-2020-11935
    - SAUCE: aufs: do not call i_readcount_inc()

  * Miscellaneous Ubuntu changes
    - SAUCE: Update aufs to 5.x-rcN 20200622
    - [Config] Update configs to set CONFIG_SND_HDA_GENERIC_LEDS value
    - [Config] CONFIG_SECURITY_DMESG_RESTRICT=y

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc4

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 06 Jul 2020 08:14:28 -0500

linux-5.8 (5.8.0-3.4) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - update dkms package versions

  * lxc 1:4.0.2-0ubuntu1 ADT test failure with linux-5.8 5.8.0-1.2
    (LP: #1884635)
    - SAUCE: overlayfs: fix faulty rebase

  * shiftfs: O_TMPFILE reports ESTALE (LP: #1872757)
    - SAUCE: shiftfs: prevent ESTALE for LOOKUP_JUMP lookups

  * shiftfs: fix btrfs regression (LP: #1884767)
    - SAUCE: Revert "UBUNTU: SAUCE: shiftfs: fix dentry revalidation"

  * Miscellaneous Ubuntu changes
    - [Config] CONFIG_DEBUG_INFO_COMPRESSED=y
    - SAUCE: regulator: rename da903x to da903x-regulator
    - [Config] Add da903x to modules.ignore
    - [Config] Update configs for rebase to 5.8-rc3

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc3

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 29 Jun 2020 08:48:25 -0500

linux-5.8 (5.8.0-2.3) groovy; urgency=medium

  * Support Audio Mute LED for two new HP laptops (LP: #1884251)
    - ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems

  * CVE-2019-16089
    - SAUCE: nbd_genl_status: null check for nla_nest_start

  * tpm: fix TIS locality timeout problems (LP: #1881710)
    - SAUCE: tpm: fix TIS locality timeout problems

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Miscellaneous Ubuntu changes
    - SAUCE: security,perf: Allow further restriction of perf_event_open
    - [Config] CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y
    - [Config] Update configs and annotations for 5.8-rc2
    - [Config] Enable zfs
    - [Config] Enable CONFIG_DEBUG_INFO_BTF

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc2

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 22 Jun 2020 15:05:54 -0500

linux-5.8 (5.8.0-1.2) groovy; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Debian] Support linux-x.y in udeb package names
    - [Packaging] Use SRCPKGNAME for udeb packages

 -- Seth Forshee <seth.forshee@canonical.com>  Wed, 17 Jun 2020 19:34:32 -0500

linux-5.8 (5.8.0-0.1) groovy; urgency=medium

  * Docker registry doesn't stay up and keeps restarting (LP: #1879690)
    - Revert "UBUNTU: SAUCE: overlayfs: use shiftfs hacks only with shiftfs as underlay"

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Packaging] Update source package name to linux-5.8
    - SAUCE: (lockdown) Add efi_status_to_str() and rework efi_status_to_err().
    - SAUCE: (lockdown) Make get_cert_list() use efi_status_to_str() to print error messages.
    - SAUCE: (lockdown) security: lockdown: expose a hook to lock the kernel down
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
    - SAUCE: (lockdown) efi: Lock down the kernel if booted in secure boot mode
    - SAUCE: (lockdown) s390: Lock down the kernel when the IPL secure flag is set
    - SAUCE: (lockdown) KEYS: Make use of platform keyring for module signature verify
    - SAUCE: (lockdown) arm64: Allow locking down the kernel under EFI secure boot
    - SAUCE: (lockdown) security: lockdown: Make CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic
    - SAUCE: (lockdown) powerpc: lock down kernel in secure boot mode
    - SAUCE: Import aufs driver
    - [Config] Update configs for v5.8-rc1
    - [Config] Update annotations for v5.8-rc1 config changes
    - SAUCE: shiftfs -- Fix build errors from missing fiemap definitions
    - Disable hio driver

  * Miscellaneous upstream changes
    - acpi: disallow loading configfs acpi tables when locked down

  [ Upstream Kernel Changes ]

  * Rebase to v5.8-rc1

 -- Seth Forshee <seth.forshee@canonical.com>  Wed, 17 Jun 2020 11:54:24 -0500

linux-5.8 (5.8.0-0.0) groovy; urgency=medium

  * Empty entry

 -- Seth Forshee <seth.forshee@canonical.com>  Sun, 14 Jun 2020 22:40:35 -0500

linux-5.7 (5.7.0-8.9) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Enforce all config annotations (LP: #1879327)
    - [Config]: do not enforce CONFIG_VERSION_SIGNATURE
    - [Config]: prepare to enforce all
    - [Config]: enforce all config options

  * Miscellaneous Ubuntu changes
    - [Config]: annotations review after 5.7 rebase
    - [Config] annotations: IXP4XX* depends on ARCH_IXP4XX
    - [Config] THERMAL_GOV_POWER_ALLOCATOR=y
    - [Config] annotations: SOC_CAMERA is marked as BROKEN
    - [Config] annotations: NFSD_V4_2_INTER_SSC depends on NFS_FS=y
    - [Config] annotations: CRYPTO_DEV_CHELSIO_TLS depends on legacy (and largely
      unmantained) TLS_TOE
    - [Config] annotations: SERIO_OLPC_APSP depends on ARCH_MMP
    - [Config] RTW88_DEBUG=y
    - [Config] annotations: ISDN_CAPI is a bool, and BT_CMTP depends on  it
    - [Config] annotations SND_SOC_SOF_DEVELOPER_SUPPORT depends on
      SND_SOC_SOF_DEVELOPER_SUPPORT
    - [Config] annotations: SND_SOC_SOF_BAYTRAIL_SUPPORT is mutually exclusive
      with SND_SST_ATOM_HIFI2_PLATFORM_ACPI
    - [Config] annotations: DEBUG_IMX_UART_PORT is defined only any
      DEBUG_IMX*_UART is enabled
    - [Config] annotations: HW_RANDOM_IMX_RNGC depends on SOC_IMX25
    - [Config] annotations: armhf: VIRTUALIZATION support was removed for arm32
    - [Config] annotations: arm64: remove DEBUG_ALIGN_RODATA
    - [Config] annotations: ppc64: DATA_SHIFT defaults to PPC_PAGE_SHIFT
    - [Config] arm64: enforce ARM64_USE_LSE_ATOMICS
    - [Config] s390x: MOST is not set
    - [Config] s390x: BCM84881_PHY is not set
    - [Config] s390x: XILINX_LL_TEMAC is not set
    - [Config] s390x: PHY_INTEL_EMMC requires GENERIC_PHY (off by default on
      s390x)
    - [Config] s390x: CHECK_STACK conflicts with VMAP_STACK
    - [Config] annotations: s390x: NODES_SHIFT=1
    - [Config] annotations: import new symbols
    - [Config] annotations: remove unmatched menu and options

 -- Paolo Pisati <paolo.pisati@canonical.com>  Fri, 12 Jun 2020 12:03:01 +0200

linux-5.7 (5.7.0-7.8) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions
    - [Packaging] update helper scripts

  * [UBUNTU 20.04] s390x/pci: fix linking between PF and VF for multifunction
    devices (LP: #1879704)
    - PCI/IOV: Introduce pci_iov_sysfs_link() function
    - s390/pci: create links between PFs and VFs

  * Miscellaneous Ubuntu changes
    - [Config] Disable UEFI signing for arm64
    - Rebase to v5.7.1

  [ Upstream Kernel Changes ]

  * Rebase to v5.7.1

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 08 Jun 2020 11:16:58 +0200

linux-5.7 (5.7.0-6.7) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - update dkms package versions

  * shiftfs: fix btrfs snapshot deletion (LP: #1879688)
    - SAUCE: shiftfs: let userns root destroy subvolumes from other users

  * seccomp_benchmark times out on eoan (LP: #1881576)
    - SAUCE: selftests/seccomp: use 90s as timeout

  * Realtek 8723DE [10ec:d723] subsystem [10ec:d738]  disconnects unsolicitedly
    when Bluetooth is paired: Reason: 23=IEEE8021X_FAILED (LP: #1878147)
    - SAUCE: Revert "UBUNTU: SAUCE: rtw88: Move driver IQK to set channel before
      association for 11N chip"
    - SAUCE: Revert "UBUNTU: SAUCE: rtw88: fix rate for a while after being
      connected"
    - SAUCE: Revert "UBUNTU: SAUCE: rtw88: No retry and report for auth and assoc"
    - SAUCE: Revert "UBUNTU: SAUCE: rtw88: 8723d: Add coex support"
    - rtw88: 8723d: Add coex support
    - SAUCE: rtw88: coex: 8723d: set antanna control owner
    - SAUCE: rtw88: coex: 8723d: handle BT inquiry cases
    - SAUCE: rtw88: fix EAPOL 4-way failure by finish IQK earlier

  * ASoC/amd: add audio driver for amd renoir (LP: #1881046)
    - ASoC: amd: add Renoir ACP3x IP register header
    - ASoC: amd: add Renoir ACP PCI driver
    - ASoC: amd: add acp init/de-init functions
    - ASoC: amd: create acp3x pdm platform device
    - ASoC: amd: add ACP3x PDM platform driver
    - ASoC: amd: irq handler changes for ACP3x PDM dma driver
    - ASoC: amd: add acp3x pdm driver dma ops
    - ASoC: amd: add ACP PDM DMA driver dai ops
    - ASoC: amd: add Renoir ACP PCI driver PM ops
    - ASoC: amd: add ACP PDM DMA driver pm ops
    - ASoC: amd: enable Renoir acp3x drivers build
    - ASoC: amd: create platform devices for Renoir
    - ASoC: amd: RN machine driver using dmic
    - ASoC: amd: enable build for RN machine driver
    - ASoC: amd: fix kernel warning
    - ASoC: amd: refactoring dai_hw_params() callback
    - ASoC: amd: return error when acp de-init fails
    - [Config]: enable amd renoir ASoC audio

  * Slow send speed with Intel I219-V on Ubuntu 18.04.1 (LP: #1802691)
    - e1000e: Disable TSO for buffer overrun workaround

  * Fix incorrect speed/duplex when I210 device is runtime suspended
    (LP: #1880656)
    - igb: Report speed and duplex as unknown when device is runtime suspended

  * Fix Pericom USB controller OHCI/EHCI PME# defect (LP: #1879321)
    - serial: 8250_pci: Move Pericom IDs to pci_ids.h
    - PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect

  * [UBUNTU 20.04] s390x/pci: enumerate pci functions per physical adapter
    (LP: #1874056)
    - s390/pci: Expose new port attribute for PCIe functions
    - s390/pci: adaptation of iommu to multifunction
    - s390/pci: define kernel parameters for PCI multifunction
    - s390/pci: define RID and RID available
    - s390/pci: create zPCI bus
    - s390/pci: adapt events for zbus
    - s390/pci: Handling multifunctions
    - s390/pci: Do not disable PF when VFs exist
    - s390/pci: Documentation for zPCI
    - s390/pci: removes wrong PCI multifunction assignment

  * add 16-bit width registers support for EEPROM at24 device (LP: #1876699)
    - regmap-i2c: add 16-bit width registers support

  * Miscellaneous Ubuntu changes
    - [Config] Enable virtualbox guest and shared-folder modules

  [ Upstream Kernel Changes ]

  * Rebase to v5.7

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 01 Jun 2020 16:11:24 -0500

linux-5.7 (5.7.0-5.6) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * [UBUNTU 20.04] PSI generates overhead on s390x (LP: #1876044)
    - Ubuntu: [Config] CONFIG_PSI is enabled by default, but creates additional
      overhead on s390x, hence should be disabled by default on s390x only.

  * Miscellaneous Ubuntu changes
    - Rebase to v5.7-rc7
    - [Config] ppc64el: disable STRICT_KERNEL_RWX

  [ Upstream Kernel Changes ]

  * Rebase to v5.7-rc7

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 25 May 2020 11:44:09 +0200

linux-5.7 (5.7.0-4.5) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * update-initramfs complains of missing amdgpu firmware files (LP: #1873325)
    - SAUCE: drm/amdgpu: Remove unreleased arcturus and navi12 firmware from
      modinfo

  * Support DMIC micmute LED on HP platforms (LP: #1876859)
    - ALSA: hda/realtek - Introduce polarity for micmute LED GPIO
    - ALSA: hda/realtek - Enable micmute LED on and HP system
    - ALSA: hda/realtek - Add LED class support for micmute LED
    - ALSA: hda/realtek - Fix unused variable warning w/o
      CONFIG_LEDS_TRIGGER_AUDIO
    - ASoC: SOF: Update correct LED status at the first time usage of
      update_mute_led()

  * Killer(R) Wi-Fi 6 AX1650i 160MHz Wireless Network Adapter (201NGW),
    REV=0x354 [8086:a0f0] subsystem id [1a56:1651] wireless adapter not found
    due to firmware crash (LP: #1874685)
    - SAUCE: iwlwifi: pcie: handle QuZ configs with killer NICs as well

  * rtkit-daemon[*]: Failed to make ourselves RT: Operation not permitted after
    upgrade to 20.04 (LP: #1875665)
    - [Config] Turn off CONFIG_RT_GROUP_SCHED everywhere

  * Unable to handle kernel pointer dereference in virtual kernel address space
    on Eoan (LP: #1876645)
    - SAUCE: overlayfs: fix shitfs special-casing

  * Miscellaneous Ubuntu changes
    - SAUCE: skip building selftest 'runqslower' if kernel not built
    - Rebase to v5.7-rc6
    - [Config] updateconfigs after 5.7-rc6 rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.7-rc6

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 18 May 2020 11:27:25 +0200

linux-5.7 (5.7.0-3.4) groovy; urgency=medium

  [ Upstream Kernel Changes ]

  * Rebase to v5.7-rc5

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * getitimer returns it_value=0 erroneously (LP: #1349028)
    - [Config] CONTEXT_TRACKING_FORCE policy should be unset

  * lockdown on power (LP: #1855668) // Ubuntu Kernel Support for OpenPOWER NV
    Secure & Trusted Boot (LP: #1866909)
    - [Config] Enable configs for OpenPOWER NV Secure & Trusted Boot

  * Miscellaneous Ubuntu changes
    - SAUCE: Import aufs driver
    - [Config] Enable aufs
    - [Config] annotations: remove SND_SOC_SOF_HDA_COMMON_HDMI_CODEC
    - [Config] Remove CONFIG_SND_HDA_INTEL_DETECT_DMIC from annotations
    - [Debian] final-checks -- Do not remove ~* from abi
    - [Config] Enable 5-level page table support for x86
    - [Config] updateconfigs after 5.7-rc5 rebase

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 11 May 2020 10:25:42 +0200

linux-5.7 (5.7.0-2.3) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - update dkms package versions
    - [Packaging] update helper scripts

  * ASUS T100HAN boots to a blank screen with a cursor [i965: Failed to submit
    batchbuffer: Input/output error] (LP: #1860754)
    - [Config] CONFIG_PMIC_OPREGION=y and CONFIG_GPIO_CRYSTAL_COVE=y for amd64

  * ubuntu/focal64 fails to mount Vagrant shared folders  (LP: #1873506)
    - [Packaging] Move virtualbox modules to linux-modules
    - [Packaging] Remove vbox and zfs modules from generic.inclusion-list

  * built-using constraints preventing uploads (LP: #1875601)
    - temporarily drop Built-Using data

  * dkms artifacts may expire from the pool (LP: #1850958)
    - [Packaging] autoreconstruct -- manage executable debian files
    - [packaging] handle downloads from the librarian better

  * Add signed modules for the 435 NVIDIA driver (LP: #1875888)
    - [Packaging] NVIDIA -- add signed modules for the 435 NVIDIA driver

  * [Selftests] Apply various fixes and improvements (LP: #1870543)
    - SAUCE: selftests/seccomp -- Disable timeout for seccomp tests

  * [17.04 FEAT] Integrate kernel message catalogue for s390x into Ubuntu
    distribution (LP: #1628889)
    - SAUCE: s390: kernel message catalog

  * Overlayfs in user namespace leaks directory content of inaccessible
    directories (LP: #1793458) // CVE-2018-6559
    - SAUCE: overlayfs: ensure mounter privileges when reading directories

  * suspend only works once on ThinkPad X1 Carbon gen 7 (LP: #1865570)
    - SAUCE: e1000e: Disable s0ix flow for X1 Carbon 7th

  * [ICL] TC port in legacy/static mode can't be detected due TCCOLD
    (LP: #1868936)
    - drm/i915/display: Move out code to return the digital_port of the aux ch
    - drm/i915/display: Add intel_legacy_aux_to_power_domain()
    - drm/i915/display: Split hsw_power_well_enable() into two
    - drm/i915/tc/icl: Implement TC cold sequences
    - drm/i915/tc: Skip ref held check for TC legacy aux power wells
    - drm/i915/tc/tgl: Implement TC cold sequences
    - drm/i915/tc: Catch TC users accessing FIA registers without enable aux
    - drm/i915/tc: Do not warn when aux power well of static TC ports timeout

  * Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901)
    - Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390
      2-in-1"

  * 'Elan touchpad' not detected on 'Lenovo ThinkBook 15 IIL' (LP: #1861610)
    - SAUCE: Input: elan_i2c - add more hardware ID for Lenovo laptop

  * linux-image-5.0.0-35-generic breaks checkpointing of container
    (LP: #1857257)
    - SAUCE: overlayfs: use shiftfs hacks only with shiftfs as underlay

  * alsa/sof: kernel oops on the machine without Intel hdmi audio codec (a
    regression in the  asoc machine driver) (LP: #1874359)
    - ASoC: intel/skl/hda - fix oops on systems without i915 audio codec

  * Add debian/rules targets to compile/run kernel selftests (LP: #1874286)
    - [Packaging] add support to compile/run selftests

  * 5.4.0-24.28 does not seem to apply rtprio, whereas -21 does. (LP: #1873315)
    - [Config] lowlatency: turn off RT_GROUP_SCHED

  * alsa/sof: external mic can't be deteced on Lenovo and HP laptops
    (LP: #1872569)
    - SAUCE: ASoC: intel/skl/hda - set autosuspend timeout for hda codecs

  * shiftfs: O_TMPFILE reports ESTALE (LP: #1872757)
    - SAUCE: shiftfs: fix dentry revalidation

  * shiftfs: broken shiftfs nesting (LP: #1872094)
    - SAUCE: shiftfs: record correct creator credentials

  * lockdown on power (LP: #1855668)
    - SAUCE: (lockdown) powerpc: lock down kernel in secure boot mode

  * Add support for Realtek 8723DE wireless adapter (LP: #1780590)
    - SAUCE: rtw88: add adaptivity support for EU/JP regulatory
    - SAUCE: rtw88: update tx descriptor of mgmt and rsvd page packets
    - SAUCE: rtw88: sar: dump sar information via debugfs
    - SAUCE: rtw88: 8723d: add IQ calibration
    - SAUCE: rtw88: 8723d: Add power tracking
    - SAUCE: rtw88: 8723d: implement flush queue
    - SAUCE: rtw88: 8723d: set ltecoex register address in chip_info
    - SAUCE: rtw88: 8723d: Add coex support
    - SAUCE: rtw88: 8723d: Add shutdown callback to disable BT USB suspend

  * Fix authentication fail on Realtek WiFi 8723de (LP: #1871300)
    - SAUCE: rtw88: No retry and report for auth and assoc
    - SAUCE: rtw88: fix rate for a while after being connected
    - SAUCE: rtw88: Move driver IQK to set channel before association for 11N chip

  * Miscellaneous Ubuntu changes
    - SAUCE: rtw88: fix 'const' mismatch in power suequence hooks
    - SAUCE: rtw88: fix 'const' mismatch in
      __priority_queue_cfg_legacy()/__priority_queue_cfg()
    - [Config] RTW88=m
    - SAUCE: (lockdown) Revert carried-forward lockdown patches
    - SAUCE: (lockdown) Add efi_status_to_str() and rework efi_status_to_err().
    - SAUCE: (lockdown) Make get_cert_list() use efi_status_to_str() to print
      error messages.
    - SAUCE: (lockdown) security: lockdown: expose a hook to lock the kernel down
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot
      mode
    - SAUCE: (lockdown) efi: Lock down the kernel if booted in secure boot mode
    - SAUCE: (lockdown) s390: Lock down the kernel when the IPL secure flag is set
    - SAUCE: (lockdown) KEYS: Make use of platform keyring for module signature
      verify
    - SAUCE: (lockdown) arm64: Allow locking down the kernel under EFI secure boot
    - SAUCE: (lockdown) security: lockdown: Make
      CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic
    - [Config] Add back CONFIG_LOCK_DOWN_IN_SECURE_BOOT annotation for ppc64el
    - [Config] CONFIG_RT_GROUP_SCHED=y
    - [Packaging] Include modules.builtin.modinfo in linux-modules
    - SAUCE: LSM: Infrastructure management of the sock security
    - SAUCE: Fix-up af_unix mediation for sock infrastructure management
    - SAUCE: Revert "apparmor: Allow filtering based on secmark policy"
    - SAUCE: Revert "apparmor: Parse secmark policy"
    - SAUCE: Revert "apparmor: Add a wildcard secid"
    - SAUCE: Revert "apparmor: fixup secid map conversion to using IDR"
    - SAUCE: Revert "apparmor: Use an IDR to allocate apparmor secids"
    - SAUCE: Revert "apparmor: add support for mapping secids and using secctxes"
    - Update dropped.txt for restored apparmor patches
    - Remove lockdown patches from dropped.txt
    - SAUCE: powerpc/ima: require IMA module signatures only if MODULE_SIG is not
      enabled
    - SAUCE: selftests/ftrace: Use printf instead of echo in kprobe syntax error
      tests
    - SAUCE: selftests/net -- disable l2tp.sh test
    - SAUCE: selftests/net -- disable timeout
    - SAUCE: tools: hv: Update shebang to use python3 instead of python
    - Remove dropped.txt
    - [Packaging] move linux-doc and linux-libc-dev stubs to debian.master
    - [Debian] Support generating configs for riscv64
    - [Config] CONFIG_KMSG_IDS=y for s390x
    - [Packaging] add libcap-dev dependency
    - [Config] CONFIG_AD5770R=m
    - [Config] CONFIG_AL3010=m
    - [Config] CONFIG_APPLE_MFI_FASTCHARGE=m
    - [Config] CONFIG_BAREUDP=m
    - [Config] CONFIG_CRYPTO_DEV_OCTEONTX_CPT=m
    - [Config] CONFIG_CRYPTO_DEV_ZYNQMP_AES=m
    - [Config] CONFIG_DRM_DISPLAY_CONNECTOR=m
    - [Config] CONFIG_DRM_PANEL_BOE_TV101WUM_NL6=m
    - [Config] CONFIG_DRM_PANEL_ELIDA_KD35T133=m
    - [Config] CONFIG_DRM_PANEL_FEIXIN_K101_IM2BA02=m
    - [Config] CONFIG_DRM_PANEL_NOVATEK_NT35510=m
    - [Config] CONFIG_DRM_PANEL_SAMSUNG_S6E88A0_AMS452EF01=m
    - [Config] CONFIG_DRM_PARADE_PS8640=m
    - [Config] CONFIG_DRM_SIMPLE_BRIDGE=m
    - [Config] CONFIG_DRM_TIDSS=m
    - [Config] CONFIG_DRM_TI_TPD12S015=m
    - [Config] CONFIG_DRM_TOSHIBA_TC358768=m
    - [Config] CONFIG_EDAC_DMC520=m
    - [Config] CONFIG_EXFAT_FS=m
    - [Config] CONFIG_GP2AP002=m
    - [Config] CONFIG_GPIO_MLXBF2=m
    - [Config] CONFIG_HID_GLORIOUS=m
    - [Config] CONFIG_HID_MCP2221=m
    - [Config] CONFIG_HMC425=m
    - [Config] CONFIG_ICP10100=m
    - [Config] CONFIG_IMX8MM_THERMAL=m
    - [Config] CONFIG_IMX_SC_THERMAL=m
    - [Config] CONFIG_INTERCONNECT_QCOM_OSM_L3=m
    - [Config] CONFIG_INTERCONNECT_QCOM_SC7180=m
    - [Config] CONFIG_K3_RTI_WATCHDOG=m
    - [Config] CONFIG_MDIO_IPQ8064=m
    - [Config] CONFIG_MDIO_MVUSB=m
    - [Config] CONFIG_MHI_BUS=m
    - [Config] CONFIG_OCTEONTX2_VF=m
    - [Config] CONFIG_PHY_CADENCE_TORRENT=m
    - [Config] CONFIG_PHY_QCOM_USB_HS_28NM=m
    - [Config] CONFIG_PHY_QCOM_USB_SS=m
    - [Config] CONFIG_PINCTRL_DA9062=m
    - [Config] CONFIG_PINCTRL_IPQ6018=m
    - [Config] CONFIG_PTP_1588_CLOCK_IDT82P33=m
    - [Config] CONFIG_PTP_1588_CLOCK_VMW=m
    - [Config] CONFIG_QCOM_IPA=m
    - [Config] CONFIG_REGULATOR_MP5416=m
    - [Config] CONFIG_REGULATOR_MP886X=m
    - [Config] CONFIG_RN5T618_ADC=m
    - [Config] CONFIG_RTC_DRV_MT2712=m
    - [Config] CONFIG_RTC_DRV_RC5T619=m
    - [Config] CONFIG_SC_MSS_7180=m
    - [Config] CONFIG_SENSORS_AXI_FAN_CONTROL=m
    - [Config] CONFIG_SM_GCC_8250=m
    - [Config] CONFIG_SND_BCM63XX_I2S_WHISTLER=m
    - [Config] CONFIG_SND_MESON_AIU=m
    - [Config] CONFIG_SND_MESON_G12A_TOACODEC=m
    - [Config] CONFIG_SND_MESON_GX_SOUND_CARD=m
    - [Config] CONFIG_SND_SOC_AMD_RV_RT5682_MACH=m
    - [Config] CONFIG_SND_SOC_INTEL_SOF_PCM512x_MACH=m
    - [Config] CONFIG_SND_SOC_MESON_T9015=m
    - [Config] CONFIG_SND_SOC_RT5682_SDW=m
    - [Config] CONFIG_SND_SOC_TLV320ADCX140=m
    - [Config] CONFIG_SPI_FSI=m
    - [Config] CONFIG_SPI_MTK_NOR=m
    - [Config] CONFIG_SPI_MUX=m
    - [Config] CONFIG_SPRD_THERMAL=m
    - [Config] CONFIG_SURFACE_3_POWER_OPREGION=m
    - [Config] CONFIG_TINYDRM_ILI9486=m
    - [Config] CONFIG_TI_K3_AM65_CPSW_NUSS=m
    - [Config] CONFIG_TYPEC_MUX_INTEL_PMC=m
    - [Config] CONFIG_UACCE=m
    - [Config] CONFIG_UNIPHIER_XDMAC=m
    - [Config] CONFIG_USB_MAX3420_UDC=m
    - [Config] CONFIG_USB_RAW_GADGET=m
    - [Config] CONFIG_VHOST_VDPA=m
    - [Config] CONFIG_VIDEO_IMX219=m
    - [Config] CONFIG_VIDEO_SUN8I_ROTATE=m
    - [Config] CONFIG_VIRTIO_VDPA=m
    - [Config] CONFIG_MOST_COMPONENTS=m
    - [Config] CONFIG_MFD_IQS62X=m
    - packaging: getabis: switch to ckt-ppa:bootstrap/linux-5.7

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: rtw88: add rtw_read8_mask and rtw_read16_mask"
    - Revert "UBUNTU: SAUCE: drm/i915/fbc: disable framebuffer compression on
      IceLake"
    - Revert "UBUNTU: SAUCE: platform/x86: dell-uart-backlight: move retry block"

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 04 May 2020 10:48:48 +0200

linux-5.7 (5.7.0-1.2) groovy; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Miscellaneous Ubuntu changes
    - SAUCE: hio: pass make_request ptr directly to blk_alloc_queue()
    - SAUCE: hio: locally define disk_map_sector_rcu()
    - SAUCE: hio: Revert "block: unexport disk_map_sector_rcu"
    - SAUCE: hio: include <linux/part_stat.h>
    - [Config] amd64: i386: HIO=m
    - [Config] updateconfigs after 5.7-rc3 rebase

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 27 Apr 2020 11:31:38 +0200

linux-5.7 (5.7.0-0.1) groovy; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs after rebase to 5.7-rc1

  [ Upstream Kernel Changes ]

  * Rebase to v5.7-rc1
  * Rebase to v5.7-rc2

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 16 Apr 2020 11:53:58 +0200

linux-5.7 (5.7.0-0.0) focal; urgency=medium

  * Dummy entry

 -- Paolo Pisati <paolo.pisati@canonical.com>  Thu, 16 Apr 2020 11:53:58 +0200

linux-5.6 (5.6.0-7.7) focal; urgency=medium

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Kernel Oops - general protection fault: 0000 [#1] SMP PTI after
    disconnecting thunderbolt docking station (LP: #1864754)
    - SAUCE: ptp: free ptp clock properly

  * swap storms kills interactive use (LP: #1861359)
    - SAUCE: mm/page_alloc.c: disable memory reclaim watermark boosting by default

  * sysfs: incorrect network device permissions on network namespace change
    (LP: #1865359)
    - sysfs: add sysfs_file_change_owner()
    - sysfs: add sysfs_link_change_owner()
    - sysfs: add sysfs_group{s}_change_owner()
    - sysfs: add sysfs_change_owner()
    - device: add device_change_owner()
    - drivers/base/power: add dpm_sysfs_change_owner()
    - net-sysfs: add netdev_change_owner()
    - net-sysfs: add queue_change_owner()
    - net: fix sysfs permssions when device changes network namespace
    - sysfs: fix static inline declaration of sysfs_groups_change_owner()

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs after rebase to 5.6

  [ Upstream Kernel Changes ]

  * Rebase to v5.6

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 31 Mar 2020 10:45:09 +0200

linux-5.6 (5.6.0-6.6) focal; urgency=medium

  * suspend only works once on ThinkPad X1 Carbon gen 7 (LP: #1865570)
    - SAUCE: e1000e: Disable s0ix flow for X1 Carbon 7th

  *  Make Dell WD19 dock more reliable after suspend (LP: #1868217)
    - xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
    - xhci: Wait until link state trainsits to U0 after setting USB_SS_PORT_LS_U0
    - xhci: Finetune host initiated USB3 rootport link suspend and resume

  * update-version-dkms doesn't add a BugLink (LP: #1867790)
    - [Packaging] Add BugLink to update-version-dkms commit

  * Add support for Realtek 8723DE wireless adapter (LP: #1780590)
    - SAUCE: rtw88: add regulatory process strategy for different chipset
    - SAUCE: rtw88: support dynamic user regulatory setting
    - SAUCE: rtw88: Use secondary channel offset enumeration
    - SAUCE: rtw88: 8822c: modify rf protection setting
    - SAUCE: rtw88: disable TX-AMSDU on 2.4G band
    - SAUCE: Revert "rtw88: disable TX-AMSDU on 2.4G band"
    - SAUCE: rtw88: disable TX-AMSDU on 2.4G band
    - SAUCE: rtw88: remove unused parameter vif in rtw_lps_pg_info_get()
    - SAUCE: rtw88: add rtw_read8_mask and rtw_read16_mask
    - SAUCE: rtw88: pci: 8822c should set clock delay to zero
    - SAUCE: rtw88: move rtw_enter_ips() to the last when config
    - SAUCE: rtw88: avoid holding mutex for cancel_delayed_work_sync()
    - SAUCE: rtw88: add ciphers to suppress error message
    - SAUCE: rtw88: 8822c: update power sequence to v16
    - SAUCE: rtw88: Fix incorrect beamformee role setting
    - SAUCE: rtw88: don't hold all IRQs disabled for PS operations
    - SAUCE: rtw88: extract alloc rsvd_page and h2c skb routines
    - SAUCE: rtw88: associate reserved pages with each vif
    - SAUCE: rtw88: add adaptivity support for EU/JP regulatory
    - SAUCE: rtw88: 8723d: Add basic chip capabilities
    - SAUCE: rtw88: 8723d: add beamform wrapper functions
    - SAUCE: rtw88: 8723d: Add power sequence
    - SAUCE: rtw88: 8723d: Add RF read/write ops
    - SAUCE: rtw88: 8723d: Add mac/bb/rf/agc/power_limit tables
    - SAUCE: rtw88: 8723d: Add cfg_ldo25 to control LDO25
    - SAUCE: rtw88: 8723d: Add new chip op efuse_grant() to control efuse access
    - SAUCE: rtw88: 8723d: Add read_efuse to recognize efuse info from map
    - SAUCE: rtw88: add legacy firmware download for 8723D devices
    - SAUCE: rtw88: no need to send additional information to legacy firmware
    - SAUCE: rtw88: 8723d: Add mac power-on/-off function
    - SAUCE: rtw88: decompose while(1) loop of power sequence polling command
    - SAUCE: rtw88: 8723d: 11N chips don't support H2C queue
    - SAUCE: rtw88: 8723d: implement set_tx_power_index ops
    - SAUCE: rtw88: 8723d: Organize chip TX/RX FIFO
    - SAUCE: rtw88: 8723d: initialize mac/bb/rf basic functions
    - SAUCE: rtw88: 8723d: Add DIG parameter
    - SAUCE: rtw88: 8723d: Add query_rx_desc
    - SAUCE: rtw88: 8723d: Add set_channel
    - SAUCE: rtw88: handle C2H_CCX_TX_RPT to know if packet TX'ed successfully
    - SAUCE: rtw88: 8723d: 11N chips don't support LDPC
    - SAUCE: rtw88: set default port to firmware
    - SAUCE: rtw88: update tx descriptor of mgmt and rsvd page packets
    - SAUCE: rtw88: sar: add SAR of TX power limit
    - SAUCE: rtw88: sar: Load static SAR table from ACPI WRDS method
    - SAUCE: rtw88: sar: Load dynamic SAR table from ACPI methods
    - SAUCE: rtw88: sar: apply dynamic SAR table to tx power limit
    - SAUCE: rtw88: sar: add sar_work to poll if dynamic SAR table is changed
    - SAUCE: rtw88: sar: dump sar information via debugfs
    - SAUCE: rtw88: 8723d: Add chip_ops::false_alarm_statistics
    - SAUCE: rtw88: 8723d: Set IG register for CCK rate
    - SAUCE: rtw88: 8723d: add interface configurations table
    - SAUCE: rtw88: 8723d: Add LC calibration
    - SAUCE: rtw88: 8723d: add IQ calibration
    - SAUCE: rtw88: 8723d: Add power tracking
    - SAUCE: rtw88: 8723d: Add shutdown callback to disable BT USB suspend
    - SAUCE: rtw88: 8723d: implement flush queue
    - SAUCE: rtw88: 8723d: set ltecoex register address in chip_info
    - SAUCE: rtw88: 8723d: Add coex support
    - SAUCE: rtw88: fill zeros to words 0x06 and 0x07 of security cam entry
    - SAUCE: rtw88: 8723d: Add 8723DE to Kconfig and Makefile
    - [Config] CONFIG_RTW88_8723DE=y

  * [Ubuntu 20.04] Unset HIBERNATION and PM kernel config options for focal
    (LP: #1867753)
    - [Config] CONFIG_HIBERNATION=n and CONFIG_PM=n for s390x

  * [20.04 FEAT] Base KVM setup for secure guests - kernel part (LP: #1835531)
    - s390/protvirt: introduce host side setup
    - s390/protvirt: add ultravisor initialization
    - s390/mm: provide memory management functions for protected KVM guests
    - s390/mm: add (non)secure page access exceptions handlers
    - s390/protvirt: Add sysfs firmware interface for Ultravisor information
    - KVM: s390/interrupt: do not pin adapter interrupt pages
    - KVM: s390: protvirt: Add UV debug trace
    - KVM: s390: add new variants of UV CALL
    - KVM: s390: protvirt: Add initial vm and cpu lifecycle handling
    - KVM: s390: protvirt: Secure memory is not mergeable
    - KVM: s390/mm: Make pages accessible before destroying the guest
    - KVM: s390: protvirt: Handle SE notification interceptions
    - KVM: s390: protvirt: Instruction emulation
    - KVM: s390: protvirt: Implement interrupt injection
    - KVM: s390: protvirt: Add SCLP interrupt handling
    - KVM: s390: protvirt: Handle spec exception loops
    - KVM: s390: protvirt: Add new gprs location handling
    - KVM: S390: protvirt: Introduce instruction data area bounce buffer
    - KVM: s390: protvirt: handle secure guest prefix pages
    - KVM: s390/mm: handle guest unpin events
    - KVM: s390: protvirt: Write sthyi data to instruction data area
    - KVM: s390: protvirt: STSI handling
    - KVM: s390: protvirt: disallow one_reg
    - KVM: s390: protvirt: Do only reset registers that are accessible
    - KVM: s390: protvirt: Only sync fmt4 registers
    - KVM: s390: protvirt: Add program exception injection
    - KVM: s390: protvirt: UV calls in support of diag308 0, 1
    - KVM: s390: protvirt: Report CPU state to Ultravisor
    - KVM: s390: protvirt: Support cmd 5 operation state
    - KVM: s390: protvirt: Mask PSW interrupt bits for interception 104 and 112
    - KVM: s390: protvirt: do not inject interrupts after start
    - KVM: s390: protvirt: Add UV cpu reset calls
    - DOCUMENTATION: Protected virtual machine introduction and IPL
    - KVM: s390: protvirt: introduce and enable KVM_CAP_S390_PROTECTED
    - KVM: s390: protvirt: Add KVM api documentation
    - mm/gup/writeback: add callbacks for inaccessible pages

  * All PS/2 ports on PS/2 Serial add-in bracket are not working after S3
    (LP: #1866734)
    - SAUCE: Input: i8042 - fix the selftest retry logic

  * Sys oopsed with sysfs test in ubuntu_stress_smoke_test on X-hwe ARM64
    (LP: #1866772)
    - ACPI: sysfs: copy ACPI data using io memory copying

  * Miscellaneous Ubuntu changes
    - hio -- remove duplicated MODULE_DEVICE_TABLE declaration
    - SAUCE: r8169: disable ASPM L1.1
    - [Config] update annotations from configs
    - [Config] update configs after annotation file review
    - SAUCE: Revert "tools/power turbostat: Fix 32-bit capabilities warning"

  * Miscellaneous upstream changes
    - drm/i915: Fix eDP DPCD aux max backlight calculations
    - drm/dp: Introduce EDID-based quirks
    - drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED panel
    - drm/i915: Force DPCD backlight mode for some Dell CML 2020 panels

  [ Upstream Kernel Changes ]

  * Rebase to v5.6-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 25 Mar 2020 18:09:13 +0100

linux-5.6 (5.6.0-5.5) focal; urgency=medium

  * please help enable CONFIG_EROFS_FS_ZIP (LP: #1867099)
    - [Config] CONFIG_EROFS_FS_ZIP=y
    - [Config] CONFIG_EROFS_FS_CLUSTER_PAGE_LIMIT=1

  * Miscellaneous Ubuntu changes
    - Config: Fix SND_HDA_PREALLOC_SIZE annotations
    - Config: Fix DATA_SHIFT annotations
    - Config: remove ANDROID_VSOC from annotations
    - Config: remove arm arch from annotations
    - Config: Update SOC_R8A7796X annotations
    - Config: Update CLK_R8A7796X annotations
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.6-rc6

  [ Upstream Kernel Changes ]

  * Rebase to v5.6-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 18 Mar 2020 17:25:30 +0100

linux-5.6 (5.6.0-4.4) focal; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
    - [Packaging] update helper scripts

  * Add sysfs attribute to show remapped NVMe (LP: #1863621)
    - SAUCE: ata: ahci: Add sysfs attribute to show remapped NVMe device count

  * [20.04 FEAT] Compression improvements in Linux kernel (LP: #1830208)
    - [Config] Introducing s390x specific kernel config option CONFIG_ZLIB_DFLTCC

  * [UBUNTU 20.04] s390x/pci: increase CONFIG_PCI_NR_FUNCTIONS to 512 in kernel
    config (LP: #1866056)
    - [Config] Increase CONFIG_PCI_NR_FUNCTIONS from 64 to 512 starting with focal
      on s390x

  * CONFIG_IP_MROUTE_MULTIPLE_TABLES is not set (LP: #1865332)
    - [Config] CONFIG_IP_MROUTE_MULTIPLE_TABLES=y

  * [UBUNTU 20.04] Enable CONFIG_NET_SWITCHDEV in kernel config for s390x
    starting with focal (LP: #1865452)
    - [Config] Enable CONFIG_NET_SWITCHDEV in kernel config for s390x starting
      with focal

  * Miscellaneous Ubuntu changes
    - SAUCE: Revert "UBUNTU: SAUCE: blk/core: Gracefully handle unset
      make_request_fn"
    - [Packaging] prevent duplicated entries in modules.ignore
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.6-rc5

  [ Upstream Kernel Changes ]

  * Rebase to v5.6-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 09 Mar 2020 09:42:06 +0100

linux-5.6 (5.6.0-3.3) focal; urgency=medium

  * nsleep-lat / set-timer-lat / inconsistency-check / raw_skew from timer in
    ubuntu_kernel_selftests timeout on 5.3 / 5.4 (LP: #1864626)
    - selftests/timers: Turn off timeout setting

  * Update kernel options CONFIG_NR_CPUS and CONFIG_NUMA_EMU for focal
    (LP: #1864198)
    - Ubuntu: [Config] Update kernel options CONFIG_NR_CPUS and CONFIG_NUMA_EMU

  * alsa/hda/realtek: fix a mute led regression on Lenovo X1 Carbon
    (LP: #1864576)
    - SAUCE: ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1

  * r8152 init may take up to 40 seconds at initialization with Dell WD19/WD19DC
    during hotplug (LP: #1864284)
    - UBUNTU SAUCE: r8151: check disconnect status after long sleep

  * Another Dell AIO backlight issue (LP: #1863880)
    - SAUCE: platform/x86: dell-uart-backlight: move retry block

  * Backport GetFB2 ioctl (LP: #1863874)
    - SAUCE: drm: Add getfb2 ioctl

  * Focal Fossa (20.04) feature request - Enable CONFIG_X86_UV (LP: #1863810)
    - [Config] CONFIG_X86_UV=y

  * Miscellaneous Ubuntu changes
    - debian: remove snapdragon config, rules and flavour
    - remove snapdragon abi files
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.6-rc4

  * Miscellaneous upstream changes
    - updateconfigs following snapdragon removal

  [ Upstream Kernel Changes ]

  * Rebase to v5.6-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 04 Mar 2020 08:21:10 +0100

linux-5.6 (5.6.0-2.2) focal; urgency=medium

  * Sometimes can't adjust brightness on Dell AIO (LP: #1862885)
    - SAUCE: platform/x86: dell-uart-backlight: increase retry times

  * Dell XPS 13 (7390) Display Flickering - 19.10  (LP: #1849947)
    - SAUCE: drm/i915: Disable PSR by default on all platforms

  * Miscellaneous Ubuntu changes
    - [debian] ignore missing wireguard module
    - SAUCE: (lockdown) Add efi_status_to_str() and rework efi_status_to_err().
    - SAUCE: (lockdown) security: lockdown: expose a hook to lock the kernel down
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot
      mode
    - SAUCE: (lockdown) efi: Lock down the kernel if booted in secure boot mode
    - SAUCE: (lockdown) s390: Lock down the kernel when the IPL secure flag is set
    - SAUCE: (lockdown) KEYS: Make use of platform keyring for module signature
      verify
    - SAUCE: (lockdown) arm64: Allow locking down the kernel under EFI secure boot
    - SAUCE: (lockdown) security: lockdown: Make
      CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic
    - [Config] CONFIG_LOCK_DOWN_IN_SECURE_BOOT=y
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.6-rc3

  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: (lockdown) s390/ipl: lockdown kernel when booted
      secure"
    - Revert "UBUNTU: SAUCE: (lockdown) KEYS: Make use of platform keyring for
      module signature verify"
    - Revert "UBUNTU: SAUCE: (lockdown) Add a SysRq option to lift kernel
      lockdown"
    - Revert "UBUNTU: SAUCE: (lockdown) security: lockdown: expose a hook to lock
      the kernel down"
    - Revert "UBUNTU: SAUCE: (lockdown) Add efi_status_to_str() and rework
      efi_status_to_err()."

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 24 Feb 2020 18:57:22 +0100

linux-5.6 (5.6.0-1.1) focal; urgency=medium

  *  Integrate Intel SGX driver into linux-azure (LP: #1844245)
    - [Packaging] Add systemd service to load intel_sgx

  * QAT drivers for C3XXX and C62X not included as modules (LP: #1845959)
    - [Config] CRYPTO_DEV_QAT_C3XXX=m, CRYPTO_DEV_QAT_C62X=m and
      CRYPTO_DEV_QAT_DH895xCC=m

  * 5.4.0-11 crash on cryptsetup open (LP: #1860231)
    - SAUCE: blk/core: Gracefully handle unset make_request_fn

  * multi-zone raid0 corruption (LP: #1850540)
    - SAUCE: md/raid0: Use kernel specific layout

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - update dropped.txt after rebase to v5.6-rc1
    - [Config] updateconfigs after rebase to 5.6-rc1
    - hio -- proc_create() requires a "struct proc_ops" in 5.6
    - SAUCE: arm: fix build error in kvm tracepoint

  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Config] Disable the uselib system call"
    - Revert "UBUNTU: [Config] Disable legacy PTY naming"
    - Revert "UBUNTU: [Config] Enforce filtered access to iomem"
    - Revert "UBUNTU: [Config] Enable notifier call chain validations"
    - Revert "UBUNTU: [Config] Enable scatterlist validation"
    - Revert "UBUNTU: [Config] Enable cred sanity checks"
    - Revert "UBUNTU: [Config] Enable linked list manipulation checks"

  [ Upstream Kernel Changes ]

  * Rebase to v5.6-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 13 Feb 2020 17:20:27 +0100

linux-5.6 (5.6.0-0.0) focal; urgency=medium

  * Dummy entry

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 10 Feb 2020 11:06:18 +0100

linux-5.5 (5.5.0-7.8) focal; urgency=medium

  * CONFIG_USELIB should be disabled (LP: #1855341)
    - [Config] Disable the uselib system call

  * CONFIG_LEGACY_PTYS should be disabled (LP: #1855339)
    - [Config] Disable legacy PTY naming

  * CONFIG_IO_STRICT_DEVMEM should be enabled (LP: #1855338)
    - [Config] Enforce filtered access to iomem

  * CONFIG_DEBUG_NOTIFIERS should be enabled (LP: #1855337)
    - [Config] Enable notifier call chain validations

  * CONFIG_DEBUG_SG should be enabled (LP: #1855336)
    - [Config] Enable scatterlist validation

  * CONFIG_DEBUG_CREDENTIALS should be enabled (LP: #1855335)
    - [Config] Enable cred sanity checks

  * CONFIG_DEBUG_LIST should be enabled (LP: #1855334)
    - [Config] Enable linked list manipulation checks

  * shiftfs: prevent lower dentries from going negative during unlink
    (LP: #1860041)
    - SAUCE: shiftfs: prevent lower dentries from going negative during unlink

  * [SRU][B/OEM-B/OEM-OSP1/D/E/Unstable] UBUNTU: SAUCE: Use native backlight on
    Lenovo E41-25/45 (LP: #1859561)
    - SAUCE: ACPI: video: Use native backlight on Lenovo E41-25/45

  * USB key cannot be detected by hotplug on Sunix USB Type-A 3.1 Gen 2 card
    [1b21:2142]  (LP: #1858988)
    - SAUCE: PCI: Avoid ASMedia XHCI USB PME# from D0 defect

  * Dell AIO can't adjust brightness (LP: #1858761)
    - SAUCE: platform/x86: dell-uart-backlight: add retry for get scalar status

  * Miscellaneous Ubuntu changes
    - [Config] Fix typo in annotations file
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.5

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 27 Jan 2020 11:39:38 +0100

linux-5.5 (5.5.0-6.7) focal; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Packaging] Update ubuntu-regression-suite dependency to python2
    - [Packaging] Fix ubuntu-regression-suite python dependency for hwe kernel
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.5-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 20 Jan 2020 10:16:01 +0100

linux-5.5 (5.5.0-5.6) focal; urgency=medium

  * Miscellaneous Ubuntu changes
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.5-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 13 Jan 2020 15:50:12 +0100

linux-5.5 (5.5.0-4.5) focal; urgency=medium

  * linux build and autopkg tests need to use python2 instead of python
    (LP: #1858487)
    - [Packaging] Remove python-dev build dependency

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 08 Jan 2020 16:00:26 +0100

linux-5.5 (5.5.0-3.4) focal; urgency=medium

  * [SRU][B/OEM-B/OEM-OSP1/D/E/F] Add LG I2C touchscreen multitouch support
    (LP: #1857541)
    - SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support

  * Make vfio-pci built-in or xhci_hcd optional (LP: #1770845)
    - [Config]: built-in VFIO_PCI for amd64

  * multi-zone raid0 corruption (LP: #1850540)
    - SAUCE: md/raid0: Link to wiki with guidance on multi-zone RAID0 layout
      migration

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Packaging] Change source package to linux-5.5
    - [Packaging] Don't use SRCPKGNAME for linux-libc-dev
    - [Packaging] Remove linux-source-3 Provides: from linux-source
    - [Packaging] Fix linux-doc in linux-image Suggests:
    - [Debian] Read variants list into a variable
    - [Packaging] Generate linux-libc-dev package only for primary variant
    - [Packaging] Generate linux-doc for only the primary variant
    - [Debian] Update linux source package name in debian/tests/*
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.5-rc3
    - [Config] disable PCI_MESON
    - [Config] Add pinctrl-equilibrium to modules.ignore

  [ Upstream Kernel Changes ]

  * Rebase to v5.5-rc5

 -- Andrea Righi <andrea.righi@canonical.com>  Wed, 08 Jan 2020 11:28:43 +0100

linux-5.5 (5.5.0-2.3) focal; urgency=medium

  * Empty entry.

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 17 Dec 2019 22:33:59 -0600

linux (5.5.0-2.3) focal; urgency=medium

  * Support DPCD aux brightness control (LP: #1856134)
    - SAUCE: drm/i915: Fix eDP DPCD aux max backlight calculations
    - SAUCE: drm/i915: Assume 100% brightness when not in DPCD control mode
    - SAUCE: drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight()
    - SAUCE: drm/i915: Auto detect DPCD backlight support by default
    - SAUCE: drm/i915: Force DPCD backlight mode on X1 Extreme 2nd Gen 4K AMOLED
      panel
    - USUNTU: SAUCE: drm/i915: Force DPCD backlight mode on Dell Precision 4K sku

  * change kconfig of the soundwire bus driver from y to m (LP: #1855685)
    - [Config]: SOUNDWIRE=m

  * Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
    - SAUCE: USB: core: Make port power cycle a seperate helper function
    - SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state

  * Miscellaneous Ubuntu changes
    - [Debian] add python depends to ubuntu-regression-suite
    - SAUCE: selftests: net: tls: remove recv_rcvbuf test
    - update dkms package versions

  * Miscellaneous upstream changes
    - [Config] updateconfigs after rebase to 5.5-rc2

 -- Andrea Righi <andrea.righi@canonical.com>  Tue, 17 Dec 2019 16:02:43 +0100

linux (5.5.0-1.2) focal; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] disable nvidia dkms build
    - [Config] disable virtualbox dkms build
    - [Config] disable zfs dkms build
    - update dropped.txt after rebase to v5.5-rc1
    - SAUCE: (lockdown) Make get_cert_list() not complain about cert lists that
      aren't present.
    - SAUCE: (lockdown) Add efi_status_to_str() and rework efi_status_to_err().
    - SAUCE: (lockdown) Make get_cert_list() use efi_status_to_str() to print
      error messages.
    - SAUCE: (lockdown) security: lockdown: expose a hook to lock the kernel down
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot
      mode
    - SAUCE: (lockdown) efi: Lock down the kernel if booted in secure boot mode
    - SAUCE: (lockdown) Add a SysRq option to lift kernel lockdown
    - SAUCE: (lockdown) KEYS: Make use of platform keyring for module signature
      verify
    - SAUCE: (lockdown) arm64: Allow locking down the kernel under EFI secure boot
    - SAUCE: (lockdown) security: lockdown: Make
      CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic
    - SAUCE: (lockdown) s390/ipl: lockdown kernel when booted secure
    - [Config] Enable lockdown under secure boot
    - update dkms package versions

 -- Andrea Righi <andrea.righi@canonical.com>  Thu, 12 Dec 2019 16:54:41 +0100

linux (5.5.0-0.1) focal; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs after rebase to 5.5-rc1

   [ Upstream Kernel Changes ]

   * Rebase to v5.5-rc1

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 09 Dec 2019 19:03:35 +0100

linux (5.5.0-0.0) focal; urgency=medium

  * Dummy entry.

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 09 Dec 2019 15:14:37 +0100

linux (5.4.0-8.11) focal; urgency=medium

  * focal/linux: 5.4.0-8.9 -proposed tracker (LP: #1855448)

  * update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
    - SAUCE: net: ena: fix issues in setting interrupt moderation params in
      ethtool
    - SAUCE: net: ena: fix too long default tx interrupt moderation interval

  * Kernel build log filled with "/bin/bash: line 5: warning: command
    substitution: ignored null byte in input" (LP: #1853843)
    - [Debian] Fix warnings when checking for modules signatures

  * hwe-edge kernel 5.3.0-23.25 kernel does not boot on Precision 5720 AIO
    (LP: #1852581)
    - [Packaging] Fix module signing with older modinfo

  * Fix MST support on Ice Lake (LP: #1854432)
    - drm/i915: fix port checks for MST support on gen >= 11

  * headphone has noise as not mute on dell machines with alc236/256
    (LP: #1854401)
    - SAUCE: ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236

  * [CML-S62] Need enable intel_pmc_core driver patch for Comet lake- S 6+2
    (LP: #1847450)
    - SAUCE: platform/x86: intel_pmc_core: Add Comet Lake (CML) platform support
      to intel_pmc_core driver

  * CVE-2019-14901
    - SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()

  * CVE-2019-14896 // CVE-2019-14897
    - SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor

  * CVE-2019-14895
    - SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()

  * [CML-S62] Need enable intel_rapl patch support for Comet lake- S 6+2
    (LP: #1847454)
    - powercap/intel_rapl: add support for CometLake Mobile
    - powercap/intel_rapl: add support for Cometlake desktop

  * External microphone can't work on some dell machines with the codec alc256
    or alc236 (LP: #1853791)
    - SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
    - SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table

  * remount of multilower moved pivoted-root overlayfs root, results in I/O
    errors on some modified files (LP: #1824407)
    - SAUCE: ovl: fix lookup failure on multi lower squashfs

  * [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2
    (LP: #1847451)
    - SAUCE: tools/power turbostat: Add Cometlake support

  * CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222)
    - [Config] Enable ROCKCHIP support for arm64

  * [broadwell-rt286, playback] Since Linux 5.2rc2 audio playback no longer
    works on Dell Venue 11 Pro 7140 (LP: #1846539)
    - SAUCE: ASoC: SOF: Intel: Broadwell: clarify mutual exclusion with legacy
      driver

  * i40e: general protection fault in i40e_config_vf_promiscuous_mode
    (LP: #1852663)
    - SAUCE: i40e Fix GPF when deleting VMs

  * libbpf check_abi fails on ppc64el (LP: #1854974)
    - libbpf: Fix readelf output parsing on powerpc with recent binutils

  * CVE-2019-19050
    - crypto: user - fix memory leak in crypto_reportstat

  * Make hotplugging docking station to Thunderbolt port more reliable
    (LP: #1853991)
    - PCI/PM: Add pcie_wait_for_link_delay()
    - PCI/PM: Add missing link delays required by the PCIe spec

  * i915: Display flickers (monitor loses signal briefly) during "flickerfree"
    boot, while showing the BIOS logo on a black background (LP: #1836858)
    - [Config] FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER=y

  * [CML] New device id's for CMP-H (LP: #1846335)
    - i2c: i801: Add support for Intel Comet Lake PCH-H
    - mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial flash
    - mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs

  * Focal update: v5.4.2 upstream stable release (LP: #1855326)
    - io_uring: async workers should inherit the user creds
    - net: separate out the msghdr copy from ___sys_{send,recv}msg()
    - net: disallow ancillary data for __sys_{send,recv}msg_file()
    - crypto: inside-secure - Fix stability issue with Macchiatobin
    - driver core: platform: use the correct callback type for bus_find_device
    - usb: dwc2: use a longer core rest timeout in dwc2_core_reset()
    - staging: wilc1000: fix illegal memory access in wilc_parse_join_bss_param()
    - staging: rtl8192e: fix potential use after free
    - staging: rtl8723bs: Drop ACPI device ids
    - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
    - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
    - mei: bus: prefix device names on bus with the bus name
    - mei: me: add comet point V device id
    - thunderbolt: Power cycle the router if NVM authentication fails
    - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx
    - gve: Fix the queue page list allocated pages count
    - macvlan: schedule bc_work even if error
    - mdio_bus: don't use managed reset-controller
    - net: dsa: sja1105: fix sja1105_parse_rgmii_delays()
    - net: macb: add missed tasklet_kill
    - net: psample: fix skb_over_panic
    - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues
    - openvswitch: fix flow command message size
    - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
    - slip: Fix use-after-free Read in slip_open
    - sctp: cache netns in sctp_ep_common
    - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
    - openvswitch: remove another BUG_ON()
    - net/tls: take into account that bpf_exec_tx_verdict() may free the record
    - net/tls: free the record on encryption error
    - net: skmsg: fix TLS 1.3 crash with full sk_msg
    - selftests/tls: add a test for fragmented messages
    - net/tls: remove the dead inplace_crypto code
    - net/tls: use sg_next() to walk sg entries
    - selftests: bpf: test_sockmap: handle file creation failures gracefully
    - selftests: bpf: correct perror strings
    - tipc: fix link name length check
    - selftests: pmtu: use -oneline for ip route list cache
    - r8169: fix jumbo configuration for RTL8168evl
    - r8169: fix resume on cable plug-in
    - ext4: add more paranoia checking in ext4_expand_extra_isize handling
    - Revert "jffs2: Fix possible null-pointer dereferences in
      jffs2_add_frag_to_fragtree()"
    - crypto: talitos - Fix build error by selecting LIB_DES
    - HID: core: check whether Usage Page item is after Usage ID items
    - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
    - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size
    - Linux 5.4.2

  * no HDMI video output since GDM greeter after linux-oem-osp1 version
    5.0.0-1026 (LP: #1852386)
    - drm/i915: Add new CNL PCH ID seen on a CML platform
    - SAUCE: drm/i915: Fix detection for a CMP-V PCH

  * Please add patch fixing RK818 ID detection (LP: #1853192)
    - SAUCE: mfd: rk808: Fix RK818 ID template

  * Raydium Touchscreen on ThinkPad L390 does not work (LP: #1849721)
    - HID: i2c-hid: fix no irq after reset on raydium 3118

  * Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901)
    - Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390
      2-in-1"
    - lib: devres: add a helper function for ioremap_uc
    - mfd: intel-lpss: Use devm_ioremap_uc for MMIO

  * Lenovo dock MAC Address pass through doesn't work in Ubuntu  (LP: #1827961)
    - r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2

  * Disable unreliable HPET on CFL-H system (LP: #1852216)
    - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - [Config] Enable virtualbox dkms build
    - [Config] update annotations to match current configs
    - SAUCE: Add exfat module to signature inclusion list

  * Miscellaneous upstream changes
    - Bluetooth: Fix invalid-free in bcsp_close()
    - ath9k_hw: fix uninitialized variable data
    - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
    - ath10k: Fix HOST capability QMI incompatibility
    - ath10k: restore QCA9880-AR1A (v1) detection
    - Revert "Bluetooth: hci_ll: set operational frequency earlier"
    - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
    - md/raid10: prevent access of uninitialized resync_pages offset
    - x86/insn: Fix awk regexp warnings
    - x86/speculation: Fix incorrect MDS/TAA mitigation status
    - x86/speculation: Fix redundant MDS mitigation message
    - nbd: prevent memory leak
    - x86/stackframe/32: Repair 32-bit Xen PV
    - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout
    - x86/xen/32: Simplify ring check in xen_iret_crit_fixup()
    - x86/doublefault/32: Fix stack canaries in the double fault handler
    - x86/pti/32: Size initial_page_table correctly
    - x86/cpu_entry_area: Add guard page for entry stack on 32bit
    - x86/entry/32: Fix IRET exception
    - x86/entry/32: Use %ss segment where required
    - x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL
    - x86/entry/32: Unwind the ESPFIX stack earlier on exception entry
    - x86/entry/32: Fix NMI vs ESPFIX
    - selftests/x86/mov_ss_trap: Fix the SYSENTER test
    - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel
    - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make
      the CPU_ENTRY_AREA_PAGES assert precise
    - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
    - futex: Prevent robust futex exit race
    - ALSA: usb-audio: Fix NULL dereference at parsing BADD
    - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data
    - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
    - media: vivid: Fix wrong locking that causes race conditions on streaming
      stop
    - media: usbvision: Fix invalid accesses after device disconnect
    - media: usbvision: Fix races among open, close, and disconnect
    - cpufreq: Add NULL checks to show() and store() methods of cpufreq
    - futex: Move futex exit handling into futex code
    - futex: Replace PF_EXITPIDONE with a state
    - exit/exec: Seperate mm_release()
    - futex: Split futex_mm_release() for exit/exec
    - futex: Set task::futex_state to DEAD right after handling futex exit
    - futex: Mark the begin of futex exit explicitly
    - futex: Sanitize exit state handling
    - futex: Provide state handling for exec() as well
    - futex: Add mutex around futex exit
    - futex: Provide distinct return value when owner is exiting
    - futex: Prevent exit livelock
    - media: uvcvideo: Fix error path in control parsing failure
    - media: b2c2-flexcop-usb: add sanity checking
    - media: cxusb: detect cxusb_ctrl_msg error in query
    - media: imon: invalid dereference in imon_touch_event
    - media: mceusb: fix out of bounds read in MCE receiver buffer
    - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs
    - USBIP: add config dependency for SGL_ALLOC
    - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
    - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
    - usb-serial: cp201x: support Mark-10 digital force gauge
    - USB: chaoskey: fix error case of a timeout
    - appledisplay: fix error handling in the scheduled work
    - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
    - USB: serial: mos7720: fix remote wakeup
    - USB: serial: mos7840: fix remote wakeup
    - USB: serial: option: add support for DW5821e with eSIM support
    - USB: serial: option: add support for Foxconn T77W968 LTE modules
    - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
    - powerpc/book3s64: Fix link stack flush on context switch
    - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
    - Linux 5.4.1

 -- Seth Forshee <seth.forshee@canonical.com>  Fri, 06 Dec 2019 15:53:53 -0600

linux (5.4.0-7.8) focal; urgency=medium

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests/bpf: Comment out BPF_CORE_READ's which cause clang to
      segfault
    - Update nvidia-430 to nvidia-440
    - [Config] Enable nvidia dkms build
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 25 Nov 2019 15:02:30 +0100

linux (5.4.0-6.7) focal; urgency=medium

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.4-rc8

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc7

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 18 Nov 2019 12:08:01 +0100

linux (5.4.0-5.6) focal; urgency=medium

  * refcount underflow and type confusion in shiftfs (LP: #1850867) //
    CVE-2019-15793
    - SAUCE: shiftfs: Correct id translation for lower fs operations

  * refcount underflow and type confusion in shiftfs (LP: #1850867) //
    CVE-2019-15792
    - SAUCE: shiftfs: prevent type confusion

  * refcount underflow and type confusion in shiftfs (LP: #1850867) //
    CVE-2019-15791
    - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling

  * Some EFI systems fail to boot in efi_init() when booted via maas
    (LP: #1851810)
    - SAUCE: efi: efi_get_memory_map -- increase map headroom

  * seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test (LP: #1849281)
    - SAUCE: seccomp: rework define for SECCOMP_USER_NOTIF_FLAG_CONTINUE
    - SAUCE: seccomp: avoid overflow in implicit constant conversion

  * dkms artifacts may expire from the pool (LP: #1850958)
    - [Packaging] dkms -- try launchpad librarian for pool downloads
    - [Packaging] dkms -- dkms-build quieten wget verbiage

  * tsc marked unstable after entered PC10 on Intel CoffeeLake (LP: #1840239)
    - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake platforms
    - SAUCE: x86/intel: Disable HPET on Intel Ice Lake platforms

  * shiftfs: prevent exceeding project quotas (LP: #1849483)
    - SAUCE: shiftfs: drop CAP_SYS_RESOURCE from effective capabilities

  * shiftfs: fix fallocate() (LP: #1849482)
    - SAUCE: shiftfs: setup correct s_maxbytes limit

  * The alsa hda driver is not loaded due to the missing of PCIID for Comet
    Lake-S [8086:a3f0] (LP: #1852070)
    - SAUCE: ALSA: hda: Add Cometlake-S PCI ID

  * Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877)
    - SAUCE: platform/x86: dell-uart-backlight: add missing status command
    - SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status
    - SAUCE: platform/x86: dell-uart-backlight: add force parameter
    - SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms

  * s_iflags overlap prevents unprivileged overlayfs mounts (LP: #1851677)
    - SAUCE: fs: Move SB_I_NOSUID to the top of s_iflags

  * ubuntu-aufs-modified mmap_region() breaks refcounting in overlayfs/shiftfs
    error path (LP: #1850994) // CVE-2019-15794
    - SAUCE: shiftfs: Restore vm_file value when lower fs mmap fails
    - SAUCE: ovl: Restore vm_file value when lower fs mmap fails

  * Miscellaneous Ubuntu changes
    - [Debian] Convert update-aufs.sh to use aufs5
    - SAUCE: import aufs driver
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc7

 -- Seth Forshee <seth.forshee@canonical.com>  Wed, 13 Nov 2019 11:56:35 -0800

linux (5.4.0-4.5) focal; urgency=medium

  * High power consumption using 5.0.0-25-generic (LP: #1840835)
    - PCI: Add a helper to check Power Resource Requirements _PR3 existence
    - ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a
      driver
    - PCI: Fix missing inline for pci_pr3_present()

  * Fix signing of staging modules in eoan (LP: #1850234)
    - [Packaging] Leave unsigned modules unsigned after adding .gnu_debuglink

  * [20.04 FEAT] Set Architecture Level (ALS) to z13 (LP: #1837525)
    - [Config] s390x bump march to z13, with tune to z15

  * Miscellaneous Ubuntu changes
    - [Debian]: do not skip tests for linux-hwe-edge
    - update dkms package versions
    - [Config] re-enable zfs
    - [Config] rename module virtio_fs to virtiofs

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc6

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 04 Nov 2019 15:12:02 +0100

linux (5.4.0-3.4) focal; urgency=medium

  * seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test (LP: #1849281)
    - SAUCE: seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test

  * cloudimg: no iavf/i40evf module so no network available with SR-IOV enabled
    cloud (LP: #1848481)
    - [Packaging] include iavf/i40evf in generic

  * CVE-2019-17666
    - SAUCE: rtlwifi: Fix potential overflow on P2P code

  * Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
    to no (LP: #1848492)
    - [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
      from yes to no

  * Add Intel Comet Lake ethernet support (LP: #1848555)
    - SAUCE: e1000e: Add support for Comet Lake

  * seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE    (LP: #1847744)
    - SAUCE: seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE
    - SAUCE: seccomp: test SECCOMP_USER_NOTIF_FLAG_CONTINUE

  * drm/i915: Fix the issue of "azx_get_response timeout" for hdmi audio on ICL
    platforms (LP: #1847192)
    - SAUCE: drm/i915: Fix audio power up sequence for gen10+ display
    - SAUCE: drm/i915: extend audio CDCLK>=2*BCLK constraint to more platforms

  * PM / hibernate: fix potential memory corruption (LP: #1847118)
    - SAUCE: PM / hibernate: memory_bm_find_bit -- tighten node optimisation

  * [regression] NoNewPrivileges incompatible with Apparmor (LP: #1844186)
    - SAUCE: apparmor: fix nnp subset test for unconfined

  * overlayfs: allow with shiftfs as underlay (LP: #1846272)
    - SAUCE: overlayfs: allow with shiftfs as underlay

  * eoan: alsa/sof: Enable SOF_HDA link and codec (LP: #1848490)
    - [Config] Fix SOF Kconfig options

  * linux won't build when new virtualbox version is present on the archive
    (LP: #1848788)
    - [Packaging]: download virtualbox from sources

  * Miscellaneous Ubuntu changes
    - [Config] update annotations from configs
    - [Config] updateconfigs after rebase to 5.4-rc5
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc5

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 29 Oct 2019 12:01:27 -0500

linux (5.4.0-2.3) eoan; urgency=medium

  * Add installer support for iwlmvm adapters (LP: #1848236)
    - d-i: Add iwlmvm to nic-modules

  * shiftfs: rework how shiftfs opens files (LP: #1846265)
    - SAUCE: shiftfs: rework how shiftfs opens files

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.4-rc4

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc4

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 21 Oct 2019 17:31:26 +0200

linux (5.4.0-1.2) eoan; urgency=medium

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - [Config] updateconfigs after rebase to 5.4-rc3
    - [Config] add flexfb, fbtft_device and rio500 to modules.ignore
    - [Config] amd64: ignore fbtft and all dependent modules

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc3

 -- Andrea Righi <andrea.righi@canonical.com>  Mon, 14 Oct 2019 19:48:52 +0200

linux (5.4.0-0.1) eoan; urgency=medium

  * Enable the Dragonboards out of Eoan/master arm64 kernel (LP: #1846704)
    - [Packaging] arm64: snapdragon: introduce a snapdragon flavour
    - [Packaging] arm64: snapdragon: switch kernel format to Image
    - [Config] arm64: snapdragon: CONFIG_PINCTRL_MSM8916=y
    - [Config] arm64: snapdragon: CONFIG_PINCTRL_MSM8994=y
    - [Config] arm64: snapdragon: CONFIG_PINCTRL_MSM8996=y
    - [Config] arm64: snapdragon: CONFIG_PINCTRL_MSM8998=y
    - [Config] arm64: snapdragon: CONFIG_REGULATOR_QCOM_RPMH=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_BAM_DMA=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_HIDMA_MGMT=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_HIDMA=y
    - [Config] arm64: snapdragon: CONFIG_COMMON_CLK_QCOM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_CLK_RPMH=y
    - [Config] arm64: snapdragon: CONFIG_MSM_GCC_8916=y
    - [Config] arm64: snapdragon: CONFIG_MSM_GCC_8994=y
    - [Config] arm64: snapdragon: CONFIG_MSM_MMCC_8996=y
    - [Config] arm64: snapdragon: CONFIG_MSM_GCC_8998=y
    - [Config] arm64: snapdragon: CONFIG_HWSPINLOCK_QCOM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_APCS_IPC=y
    - [Config] arm64: snapdragon: CONFIG_RPMSG_QCOM_GLINK_RPM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_GENI_SE=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_SMEM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_SMD_RPM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_SMP2P=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_SMSM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_QFPROM=y
    - [Config] arm64: snapdragon: CONFIG_SERIAL_QCOM_GENI=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_TSENS=y
    - [Config] arm64: snapdragon: CONFIG_REGULATOR_QCOM_SMD_RPM=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_CLK_SMD_RPM=y
    - [Config] arm64: snapdragon: CONFIG_RPMSG_QCOM_SMD=y
    - [Config] arm64: snapdragon: CONFIG_MFD_QCOM_RPM=y
    - [Config] arm64: snapdragon: CONFIG_SCSI_UFSHCD=y
    - [Config] arm64: snapdragon: CONFIG_SCSI_UFSHCD_PLATFORM=y
    - [Config] arm64: snapdragon: CONFIG_SCSI_UFS_HISI=y
    - [Config] arm64: snapdragon: CONFIG_MMC_SDHCI=y
    - [Config] arm64: snapdragon: CONFIG_MMC_SDHCI_PLTFM=y
    - [Config] arm64: snapdragon: CONFIG_MMC_SDHCI_MSM=y
    - [Config] arm64: snapdragon: CONFIG_REGULATOR_QCOM_SPMI=y
    - [Config] arm64: snapdragon: CONFIG_PINCTRL_QCOM_SPMI_PMIC=y
    - [Config] arm64: snapdragon: CONFIG_PHY_QCOM_USB_HS=y
    - [Config] arm64: snapdragon: CONFIG_PHY_QCOM_QMP=y
    - [Config] arm64: snapdragon: CONFIG_PHY_QCOM_UFS=y
    - [Config] arm64: snapdragon: CONFIG_PHY_QCOM_USB_HSIC=y
    - [Config] arm64: snapdragon: CONFIG_USB_CHIPIDEA_OF=y
    - [Config] arm64: snapdragon: CONFIG_USB_EHCI_HCD_PLATFORM=y
    - [Config] arm64: snapdragon: CONFIG_EXTCON_USB_GPIO=y
    - [Config] arm64: snapdragon: CONFIG_REGULATOR_FIXED_VOLTAGE=y
    - [Config] arm64: snapdragon: CONFIG_LEDS_GPIO=y
    - [Config] arm64: snapdragon: CONFIG_USB_HSIC_USB3503=y
    - [Config] arm64: snapdragon: CONFIG_USB_NET_DRIVERS=y
    - [Config] arm64: snapdragon: CONFIG_USB_OTG=y
    - [Config] arm64: snapdragon: CONFIG_USB_XHCI_PLATFORM=y
    - [Config] arm64: snapdragon: CONFIG_USB_OHCI_HCD_PLATFORM=y
    - [Config] arm64: snapdragon: CONFIG_USB_MUSB_HDRC=y
    - [Config] arm64: snapdragon: CONFIG_USB_DWC3=y
    - [Config] arm64: snapdragon: CONFIG_USB_DWC3_PCI=y
    - [Config] arm64: snapdragon: CONFIG_USB_DWC3_OF_SIMPLE=y
    - [Config] arm64: snapdragon: CONFIG_USB_DWC3_QCOM=y
    - [Config] arm64: snapdragon: CONFIG_LEDS_PWM=y
    - [Config] arm64: snapdragon: CONFIG_LEDS_TRIGGER_HEARTBEAT=y
    - [Config] arm64: snapdragon: CONFIG_LEDS_TRIGGER_DEFAULT_ON=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_A53PLL=y
    - [Config] arm64: snapdragon: CONFIG_QCOM_CLK_APCS_MSM8916=y
    - [Config] arm64: snapdragon: CONFIG_NLS_ISO8859_1=y
    - [Config] arm64: snapdragon: CONFIG_USB_USBNET=y
    - [Config] arm64: snapdragon: CONFIG_CRYPTO_DEV_QCOM_RNG=y
    - [Config] arm64: snapdragon: CONFIG_POWER_RESET_QCOM_PON=y
    - [Config] arm64: snapdragon: CONFIG_INPUT_PM8941_PWRKEY=y
    - [Config] arm64: snapdragon: CONFIG_KEYBOARD_GPIO=y
    - [Config] arm64: snapdragon: CONFIG_RTC_DRV_PM8XXX=y

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs after rebase to 5.4-rc2
    - SAUCE: (lockdown) Make get_cert_list() not complain about cert lists that
      aren't present.
    - SAUCE: (lockdown) Add efi_status_to_str() and rework efi_status_to_err().
    - SAUCE: (lockdown) Make get_cert_list() use efi_status_to_str() to print
      error messages.
    - SAUCE: (lockdown) security: lockdown: expose a hook to lock the kernel down
    - SAUCE: (lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure boot
      mode
    - SAUCE: (lockdown) efi: Lock down the kernel if booted in secure boot mode
    - SAUCE: (lockdown) Add a SysRq option to lift kernel lockdown
    - SAUCE: (lockdown) KEYS: Make use of platform keyring for module signature
      verify
    - SAUCE: (lockdown) arm64: Allow locking down the kernel under EFI secure boot
    - SAUCE: (lockdown) security: lockdown: Make
      CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT more generic
    - SAUCE: (lockdown) s390/ipl: lockdown kernel when booted secure
    - [Config] Enable lockdown under secure boot
    - SAUCE: import aufs driver
    - SAUCE: aufs: rwsem owner changed to atmoic_long_t in 5.3
    - SAUCE: aufs: add "WITH Linux-syscall-note" to SPDX tag of uapi headers
    - [Config] enable aufs
    - update dkms package versions
    - [Config] disable zfs
    - [Config] disable nvidia dkms build
    - [Config] disable virtualbox dkms build
    - [Debian] Generate stub reconstruct for -rc kernels
    - Revert "UBUNTU: SAUCE: (namespace) block_dev: Forbid unprivileged mounting
      when device is opened for writing"
    - Revert "UBUNTU: SAUCE: (namespace) ext4: Add module parameter to enable user
      namespace mounts"
    - Revert "UBUNTU: SAUCE: (namespace) ext4: Add support for unprivileged mounts
      from user namespaces"
    - Revert "UBUNTU: SAUCE: (namespace) mtd: Check permissions towards mtd block
      device inode when mounting"
    - Revert "UBUNTU: SAUCE: (namespace) block_dev: Check permissions towards
      block device inode when mounting"
    - Revert "UBUNTU: SAUCE: (namespace) block_dev: Support checking inode
      permissions in lookup_bdev()"

  [ Upstream Kernel Changes ]

  * Rebase to v5.4-rc2

 -- Seth Forshee <seth.forshee@canonical.com>  Fri, 11 Oct 2019 16:42:41 -0500

linux (5.4.0-0.0) eoan; urgency=medium

  * Dummy entry.

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 08 Oct 2019 09:59:00 -0500

linux (5.3.0-17.18) eoan; urgency=medium

  * eoan/linux: 5.3.0-17.18 -proposed tracker (LP: #1846641)

  * CVE-2019-17056
    - nfc: enforce CAP_NET_RAW for raw sockets

  * CVE-2019-17055
    - mISDN: enforce CAP_NET_RAW for raw sockets

  * CVE-2019-17054
    - appletalk: enforce CAP_NET_RAW for raw sockets

  * CVE-2019-17053
    - ieee802154: enforce CAP_NET_RAW for raw sockets

  * CVE-2019-17052
    - ax25: enforce CAP_NET_RAW for raw sockets

  * CVE-2019-15098
    - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()

  * xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
    (LP: #1846470)
    - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect

  * Re-enable linux-libc-dev build on i386 (LP: #1846508)
    - [Packaging] Build only linux-libc-dev for i386
    - [Debian] final-checks -- ignore archtictures with no binaries

  * arm64: loop on boot after installing linux-generic-hwe-18.04-edge/bionic-
    proposed (LP: #1845820)
    - [Config] Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT

  * Revert ESE DASD discard support (LP: #1846219)
    - SAUCE: Revert "s390/dasd: Add discard support for ESE volumes"

  * Miscellaneous Ubuntu changes
    - update dkms package versions

 -- Seth Forshee <seth.forshee@canonical.com>  Thu, 03 Oct 2019 16:57:05 -0500

linux (5.3.0-16.17) eoan; urgency=medium

  * eoan/linux: 5.3.0-16.17 -proposed tracker (LP: #1846204)

  * zfs fails to build on s390x  with debug symbols enabled (LP: #1846143)
    - SAUCE: s390: Mark atomic const ops always inline

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 01 Oct 2019 07:46:43 -0500

linux (5.3.0-15.16) eoan; urgency=medium

  * eoan/linux: 5.3.0-15.16 -proposed tracker (LP: #1845987)

  * Drop i386 build for 19.10 (LP: #1845714)
    - [Packaging] Remove x32 arch references from control files
    - [Debian] final-checks -- Get arch list from debian/control

  * ZFS kernel modules lack debug symbols (LP: #1840704)
    - [Debian] Fix conditional for setting zfs debug package path

  * Use pyhon3-sphinx instead of python-sphinx for building html docs
    (LP: #1845808)
    - [Packaging] Update sphinx build dependencies to python3 packages

  * Kernel panic with 19.10 beta image (LP: #1845454)
    - efi/tpm: Don't access event->count when it isn't mapped.
    - efi/tpm: don't traverse an event log with no events
    - efi/tpm: only set efi_tpm_final_log_size after successful event log parsing

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 30 Sep 2019 11:57:20 -0500

linux (5.3.0-14.15) eoan; urgency=medium

  * eoan/linux: 5.3.0-14.15 -proposed tracker (LP: #1845728)

  * Drop i386 build for 19.10 (LP: #1845714)
    - [Debian] Remove support for producing i386 kernels
    - [Debian] Don't use CROSS_COMPILE for i386 configs

  * udevadm trigger will fail when trying to add /sys/devices/vio/
    (LP: #1845572)
    - SAUCE: powerpc/vio: drop bus_type from parent device

  * Trying to online dasd drive results in invalid input/output from the kernel
    on z/VM (LP: #1845323)
    - SAUCE: s390/dasd: Fix error handling during online processing

  * intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
    - SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1

  * Support Hi1620 zip hw accelerator (LP: #1845355)
    - [Config] Enable HiSilicon QM/ZIP as modules
    - crypto: hisilicon - add queue management driver for HiSilicon QM module
    - crypto: hisilicon - add hardware SGL support
    - crypto: hisilicon - add HiSilicon ZIP accelerator support
    - crypto: hisilicon - add SRIOV support for ZIP
    - Documentation: Add debugfs doc for hisi_zip
    - crypto: hisilicon - add debugfs for ZIP and QM
    - MAINTAINERS: add maintainer for HiSilicon QM and ZIP controller driver
    - crypto: hisilicon - fix kbuild warnings
    - crypto: hisilicon - add dependency for CRYPTO_DEV_HISI_ZIP
    - crypto: hisilicon - init curr_sgl_dma to fix compile warning
    - crypto: hisilicon - add missing single_release
    - crypto: hisilicon - fix error handle in hisi_zip_create_req_q
    - crypto: hisilicon - Fix warning on printing %p with dma_addr_t
    - crypto: hisilicon - Fix return value check in hisi_zip_acompress()
    - crypto: hisilicon - avoid unused function warning

  * SafeSetID LSM should be built but disabled by default (LP: #1845391)
    - LSM: SafeSetID: Stop releasing uninitialized ruleset
    - [Config] Build SafeSetID LSM but don't enable it by default

  * CONFIG_LSM should not specify loadpin since it is not built (LP: #1845383)
    - [Config] loadpin shouldn't be in CONFIG_LSM

  * Add new pci-id's for CML-S, ICL (LP: #1845317)
    - drm/i915/icl: Add missing device ID
    - drm/i915/cml: Add Missing PCI IDs

  * Thunderbolt support for ICL (LP: #1844680)
    - thunderbolt: Correct path indices for PCIe tunnel
    - thunderbolt: Move NVM upgrade support flag to struct icm
    - thunderbolt: Use 32-bit writes when writing ring producer/consumer
    - thunderbolt: Do not fail adding switch if some port is not implemented
    - thunderbolt: Hide switch attributes that are not set
    - thunderbolt: Expose active parts of NVM even if upgrade is not supported
    - thunderbolt: Add support for Intel Ice Lake
    - ACPI / property: Add two new Thunderbolt property GUIDs to the list

  * Ubuntu 19.10 -  Additional PCI patch and fix (LP: #1844668)
    - s390/pci: fix MSI message data

  * Enhanced Hardware Support - Finalize Naming (LP: #1842774)
    - s390: add support for IBM z15 machines
    - [Config] CONFIG_MARCH_Z15=n, CONFIG_TUNE_Z15=n

  * Eoan update: v5.3.1 upstream stable release (LP: #1845642)
    - USB: usbcore: Fix slab-out-of-bounds bug during device reset
    - media: tm6000: double free if usb disconnect while streaming
    - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
    - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
    - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc
    - net_sched: let qdisc_put() accept NULL pointer
    - udp: correct reuseport selection with connected sockets
    - xen-netfront: do not assume sk_buff_head list is empty in error handling
    - net: dsa: Fix load order between DSA drivers and taggers
    - net: stmmac: Hold rtnl lock in suspend/resume callbacks
    - KVM: coalesced_mmio: add bounds checking
    - Documentation: sphinx: Add missing comma to list of strings
    - firmware: google: check if size is valid when decoding VPD data
    - serial: sprd: correct the wrong sequence of arguments
    - tty/serial: atmel: reschedule TX after RX was started
    - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
    - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
    - ovl: fix regression caused by overlapping layers detection
    - phy: qcom-qmp: Correct ready status, again
    - floppy: fix usercopy direction
    - media: technisat-usb2: break out of loop at end of buffer
    - Linux 5.3.1

  * ZFS kernel modules lack debug symbols (LP: #1840704)
    - [Debian]: Remove hardcoded $(pkgdir) in debug symbols handling
    - [Debian]: Handle debug symbols for modules in extras too
    - [Debian]: Check/link modules with debug symbols after DKMS modules
    - [Debian]: Warn about modules without debug symbols
    - [Debian]: dkms-build: new parameter for debug package directory
    - [Debian]: dkms-build: zfs: support for debug symbols
    - [Debian]: dkms-build: Avoid executing post-processor scripts twice
    - [Debian]: dkms-build: Move zfs special-casing into configure script

  * /proc/self/maps paths missing on live session (was vlc won't start; eoan
    19.10 & bionic 18.04 ubuntu/lubuntu/kubuntu/xubuntu/ubuntu-mate dailies)
    (LP: #1842382)
    - SAUCE: Revert "UBUNTU: SAUCE: shiftfs: enable overlayfs on shiftfs"

 -- Seth Forshee <seth.forshee@canonical.com>  Fri, 27 Sep 2019 16:08:06 -0500

linux (5.3.0-13.14) eoan; urgency=medium

  * eoan/linux: 5.3.0-13.14 -proposed tracker (LP: #1845105)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Miscellaneous Ubuntu changes
    - [Debian] Remove binutils-dev build dependency

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 23 Sep 2019 19:26:43 -0500

linux (5.3.0-12.13) eoan; urgency=medium

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Packaging] Add lz4 build dependency for s390x

  * Miscellaneous Ubuntu changes
    - SAUCE: Remove spl and zfs source

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 17 Sep 2019 13:36:26 +0200

linux (5.3.0-11.12) eoan; urgency=medium

  * eoan/linux: 5.3.0-11.12 -proposed tracker (LP: #1844144)

  *  Suspend to RAM(S3) does not wake up for latest megaraid and mpt3sas
    adapters(SAS3.5 onwards) (LP: #1838751)
    - PCI: Restore Resizable BAR size bits correctly for 1MB BARs

  * s390/setup: Actually init kernel lock down (LP: #1843961)
    - SAUCE: (lockdown) s390/setup: Actually init kernel lock down

  * cherrypick has_sipl fix (LP: #1843960)
    - SAUCE: s390/sclp: Fix bit checked for has_sipl

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Config]: Switch kernel compression from LZO to LZ4 on s390x

  * Installation fails on eoan/PowerVM : missing /dev/nvram (LP: #1837726)
    - [Config] CONFIG_NVRAM=y for ppc64el

  * Miscellaneous Ubuntu changes
    - [Config]: remove nvram from ppc64el modules ABI
    - [Config] Update annotations for recent config changes
    - SAUCE: sched: Add __ASSEMBLY__ guards around struct clone_args
    - SAUCE: i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630
    - SAUCE: arm64: dts: qcom: Add Lenovo Yoga C630
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.3

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 16 Sep 2019 16:18:27 +0200

linux (5.3.0-10.11) eoan; urgency=medium

  * eoan/linux: 5.3.0-10.11 -proposed tracker (LP: #1843232)

  * No sound inputs from the external microphone and headset on a Dell machine
    (LP: #1842265)
    - SAUCE: ALSA: hda - Expand pin_match function to match upcoming new tbls
    - SAUCE: ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family

  * Horizontal corrupted line at top of screen caused by framebuffer compression
    (LP: #1840236)
    - SAUCE: drm/i915/fbc: disable framebuffer compression on IceLake

  * Add bpftool to linux-tools-common (LP: #1774815)
    - [Debian] package bpftool in linux-tools-common

  * Miscellaneous Ubuntu changes
    - update dkms package versions

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc8

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 09 Sep 2019 10:00:41 +0200

linux (5.3.0-9.10) eoan; urgency=medium

  * eoan/linux: 5.3.0-9.10 -proposed tracker (LP: #1842393)

  * shiftfs: mark kmem_cache as reclaimable (LP: #1842059)
    - SAUCE: shiftfs: mark slab objects SLAB_RECLAIM_ACCOUNT

  * shiftfs: drop entries from cache on unlink (LP: #1841977)
    - SAUCE: shiftfs: fix buggy unlink logic

  * Fix touchpad IRQ storm after S3 (LP: #1841396)
    - pinctrl: intel: remap the pin number to gpio offset for irq enabled pin

  * Please include DTBs for arm64 laptops (LP: #1842050)
    - arm64: dts: qcom: Add Lenovo Miix 630
    - arm64: dts: qcom: Add HP Envy x2
    - arm64: dts: qcom: Add Asus NovaGo TP370QL

  * Miscellaneous Ubuntu changes
    - SAUCE: import aufs driver
    - [Packaging]: ignore vbox modules when vbox is disabled

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc7

 -- Paolo Pisati <paolo.pisati@canonical.com>  Tue, 03 Sep 2019 10:27:33 +0200

linux (5.3.0-8.9) eoan; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis

  * Change kernel compression method to improve boot speed (LP: #1840934)
    - [Config] change kernel compression method to improve boot speed
    - [Packaging] add build dependencies for compression algorithms

  * realtek r8822be kernel module fails after update to linux kernel-headers
    5.0.0-21 (LP: #1838133)
    - rtw88: Fix misuse of GENMASK macro
    - rtw88: pci: Rearrange the memory usage for skb in RX ISR
    - rtw88: pci: Use DMA sync instead of remapping in RX ISR
    - rtw88: debug: dump tx power indexes in use
    - rtw88: use txpwr_lmt_cfg_pair struct, not arrays
    - rtw88: pci: remove set but not used variable 'ip_sel'
    - rtw88: allow c2h operation in irq context
    - rtw88: enclose c2h cmd handle with mutex
    - rtw88: add BT co-existence support
    - SAUCE: rtw88: pci: enable MSI interrupt

  * VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
    - [Config] Enable VIMC module

  * Goodix touchpad may drop first input event (LP: #1840075)
    - Revert "UBUNTU: SAUCE: i2c: designware: add G3 3590 into i2c quirk"
    - Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron 7591 into i2c quirk"
    - Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c
      quirk"
    - Revert "UBUNTU: SAUCE: i2c: designware: Add disable runtime pm quirk"
    - mfd: intel-lpss: Remove D3cold delay

  * Include Sunix serial/parallel driver (LP: #1826716)
    - serial: 8250_pci: Add support for Sunix serial boards
    - parport: parport_serial: Add support for Sunix Multi I/O boards

  * enable lockdown on s390x when Secure IPL is performed (LP: #1839622)
    - SAUCE: (lockdown) s390/ipl: lockdown kernel when booted secure
    - Ubuntu: [Config] Enable CONFIG_LOCK_DOWN_KERNEL on s390x.

  * UBUNTU: SAUCE: shiftfs: pass correct point down (LP: #1837231)
    - SAUCE: shiftfs: pass correct point down

  * shiftfs: add O_DIRECT support (LP: #1837223)
    - SAUCE: shiftfs: add O_DIRECT support

  * Miscellaneous Ubuntu changes
    - [Config] enable secureboot signing on s390x
    - [Config] CONFIG_TEST_BLACKHOLE_DEV=m
    - SAUCE: selftests: fib_tests: assign address to dummy1 for rp_filter tests
    - [Debian] disable dkms builds for autopktest rebuilds
    - update dkms package versions
    - [Config] updateconfigs after v5.3-rc6 rebase

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc5

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 26 Aug 2019 10:09:42 +0200

linux (5.3.0-7.8) eoan; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs after v5.3-rc5 rebase
    - remove missing module after updateconfigs

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc5

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 19 Aug 2019 15:31:24 +0200

linux (5.3.0-6.7) eoan; urgency=medium

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests/bpf: prevent headers to be compiled as C code

 -- Seth Forshee <seth.forshee@canonical.com>  Wed, 14 Aug 2019 13:25:01 -0500

linux (5.3.0-5.6) eoan; urgency=medium

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - [Config] enable zfs build

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 13 Aug 2019 09:16:06 -0500

linux (5.3.0-4.5) eoan; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
    - [Packaging] update helper scripts

  * bcache: bch_allocator_thread(): hung task timeout (LP: #1784665) // Tight
    timeout for bcache removal causes spurious failures (LP: #1796292)
    - SAUCE: bcache: fix deadlock in bcache_allocator

  * shiftfs: allow overlayfs (LP: #1838677)
    - SAUCE: shiftfs: enable overlayfs on shiftfs

  * Miscellaneous Ubuntu changes
    - SAUCE: Revert "kbuild: modpost: do not parse unnecessary rules for vmlinux
      modpost"
    - update dkms package versions
    - enable nvidia dkms build

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc4

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 12 Aug 2019 10:41:27 -0500

linux (5.3.0-3.4) eoan; urgency=medium

  * Miscellaneous Ubuntu changes
    - update dkms package versions
    - SAUCE: aufs: add "WITH Linux-syscall-note" to SPDX tag of uapi headers
    - [Config] add mux-* to modules.ignore

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc3

 -- Paolo Pisati <paolo.pisati@canonical.com>  Mon, 05 Aug 2019 18:17:09 +0200

linux (5.3.0-2.3) eoan; urgency=medium

  * Miscellaneous Ubuntu changes
    - [Packaging] add build dependincy on fontconfig

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 29 Jul 2019 12:18:46 -0400

linux (5.3.0-1.2) eoan; urgency=medium

  * System does not auto detect disconnection of external monitor (LP: #1835001)
    - SAUCE: drm/i915: Add support for retrying hotplug
    - SAUCE: drm/i915: Enable hotplug retry

  * Please enable CONFIG_SCSI_UFS_QCOM as a module on arm64 (LP: #1837332)
    - [Config] Enable CONFIG_SCSI_UFS_QCOM as a module on arm64.

  * Add arm64 CONFIG_ARCH_MESON=y and related configs Edit (LP: #1820530)
    - [Config] enable ARCH_MESON
    - remove missing module
    - [Config] update annotations after enabling ARCH_MESON for arm64

  * Miscellaneous Ubuntu changes
    - SAUCE: KVM: PPC: comment implicit fallthrough
    - update dkms package versions
    - [Config] enable vbox dkms build

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc2

 -- Seth Forshee <seth.forshee@canonical.com>  Sun, 28 Jul 2019 23:10:16 -0400

linux (5.3.0-0.1) eoan; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log

  * Miscellaneous Ubuntu changes
    - SAUCE: (efi-lockdown) Add the ability to lock down access to the running
      kernel image
    - SAUCE: (efi-lockdown) Enforce module signatures if the kernel is locked down
    - SAUCE: (efi-lockdown) Restrict /dev/{mem,kmem,port} when the kernel is
      locked down
    - SAUCE: (efi-lockdown) kexec_load: Disable at runtime if the kernel is locked
      down
    - SAUCE: (efi-lockdown) Copy secure_boot flag in boot params across kexec
      reboot
    - SAUCE: (efi-lockdown) kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and
      KEXEC_SIG_FORCE
    - SAUCE: (efi-lockdown) kexec_file: Restrict at runtime if the kernel is
      locked down
    - SAUCE: (efi-lockdown) hibernate: Disable when the kernel is locked down
    - SAUCE: (efi-lockdown) uswsusp: Disable when the kernel is locked down
    - SAUCE: (efi-lockdown) PCI: Lock down BAR access when the kernel is locked
      down
    - SAUCE: (efi-lockdown) x86: Lock down IO port access when the kernel is
      locked down
    - SAUCE: (efi-lockdown) x86/msr: Restrict MSR access when the kernel is locked
      down
    - SAUCE: (efi-lockdown) ACPI: Limit access to custom_method when the kernel is
      locked down
    - SAUCE: (efi-lockdown) acpi: Ignore acpi_rsdp kernel param when the kernel
      has been locked down
    - SAUCE: (efi-lockdown) acpi: Disable ACPI table override if the kernel is
      locked down
    - SAUCE: (efi-lockdown) acpi: Disable APEI error injection if the kernel is
      locked down
    - SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is locked
      down
    - SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
    - SAUCE: (efi-lockdown) Lock down module params that specify hardware
      parameters (eg. ioport)
    - SAUCE: (efi-lockdown) x86/mmiotrace: Lock down the testmmiotrace module
    - SAUCE: (efi-lockdown) Lock down /proc/kcore
    - SAUCE: (efi-lockdown) Lock down kprobes
    - SAUCE: (efi-lockdown) bpf: Restrict kernel image access functions when the
      kernel is locked down
    - SAUCE: (efi-lockdown) Lock down perf
    - SAUCE: (efi-lockdown) debugfs: Restrict debugfs when the kernel is locked
      down
    - SAUCE: (efi-lockdown) lockdown: Print current->comm in restriction messages
    - SAUCE: (efi-lockdown) kexec: Allow kexec_file() with appropriate IMA policy
      when locked down
    - SAUCE: (efi-lockdown) Add a SysRq option to lift kernel lockdown
    - SAUCE: (efi-lockdown) debugfs: avoid EPERM when no open file operation
      defined
    - SAUCE: (efi-lockdown) Make get_cert_list() not complain about cert lists
      that aren't present.
    - SAUCE: (efi-lockdown) Add efi_status_to_str() and rework
      efi_status_to_err().
    - SAUCE: (efi-lockdown) Make get_cert_list() use efi_status_to_str() to print
      error messages.
    - SAUCE: (efi-lockdown) efi: Add an EFI_SECURE_BOOT flag to indicate secure
      boot mode
    - SAUCE: (efi-lockdown) efi: Lock down the kernel if booted in secure boot
      mode
    - SAUCE: (efi-lockdown) KEYS: Make use of platform keyring for module
      signature verify
    - SAUCE: (efi-lockdown) efi: Sanitize boot_params in efi stub
    - SAUCE: (efi-lockdown) furter KEXEC_VERIFY_SIG -> KEXEC_SIG updates
    - SAUCE: (efi-lockdown) arm64: add kernel config option to lock down when in
      Secure Boot mode
    - SAUCE: import aufs driver
    - SAUCE: aufs: rwsem owner changed to atmoic_long_t in 5.3
    - [Config] disable zfs dkms build
    - [Config] disable nvidia dkms build
    - [Config] disable vbox dkms build
    - SAUCE: perf diff: use llabs for s64 vaules

  [ Upstream Kernel Changes ]

  * Rebase to v5.3-rc1

 -- Seth Forshee <seth.forshee@canonical.com>  Tue, 23 Jul 2019 21:45:44 -0500

linux (5.3.0-0.0) eoan; urgency=medium

  * Dummy entry.

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 22 Jul 2019 10:19:04 -0500

linux (5.2.0-9.10) eoan; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * input/mouse: alps trackpoint-only device doesn't work (LP: #1836752)
    - SAUCE: Input: alps - don't handle ALPS cs19 trackpoint-only device
    - SAUCE: Input: alps - fix a mismatch between a condition check and its
      comment

  * System does not auto detect disconnection of external monitor (LP: #1835001)
    - SAUCE: drm/i915: Add support for retrying hotplug
    - SAUCE: drm/i915: Enable hotplug retry

  * alsa/hdmi: add icelake hdmi audio support for a Dell machine (LP: #1836916)
    - SAUCE: ALSA: hda/hdmi - Remove duplicated define
    - SAUCE: ALSA: hda/hdmi - Fix i915 reverse port/pin mapping

  * First click on Goodix touchpad doesn't be recognized after runtime suspended
    (LP: #1836836)
    - SAUCE: i2c: designware: add G3 3590 into i2c quirk

  * ixgbe{vf} - Physical Function gets IRQ when VF checks link state
    (LP: #1836760)
    - ixgbevf: Use cached link state instead of re-reading the value for ethtool

  * Doing multiple squashfs (and other loop?) mounts in parallel breaks
    (LP: #1836914)
    - SAUCE: Revert "loop: Don't change loop device under exclusive opener"

  * hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
    - SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
    - [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
    - [Config] add hibmc-drm to modules.ignore

  * hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
    - ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine

  * Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64
    (LP: #1835054)
    - [Config] Enable Armada SOCs and MVPP2 NIC driver for disco/generic arm64

  * Unhide Nvidia HDA audio controller (LP: #1836308)
    - PCI: Enable NVIDIA HDA controllers

  * Intel ethernet I219 may wrongly detect connection speed as 10Mbps
    (LP: #1836177)
    - e1000e: Make watchdog use delayed work

  * Sometimes touchpad(goodix) can't use tap function (LP: #1836020)
    - SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c quirk
    - SAUCE: i2c: designware: add Inpiron 7591 into i2c quirk

  * Intel ethernet I219 has slow RX speed (LP: #1836152)
    - e1000e: add workaround for possible stalled packet
    - e1000e: disable force K1-off feature

  * bcache: risk of data loss on I/O errors in backing or caching devices
    (LP: #1829563)
    - Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"

  * bnx2x driver causes 100% CPU load (LP: #1832082)
    - bnx2x: Prevent ptp_task to be rescheduled indefinitely

  * fcf-protection=none patch with new version
    - Revert "UBUNTU: SAUCE: kbuild: add -fcf-protection=none to retpoline flags"
    - SAUCE: kbuild: add -fcf-protection=none when using retpoline flags

  * CVE-2019-12614
    - powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()

  * Eoan update: v5.2.1 upstream stable release (LP: #1836622)
    - crypto: lrw - use correct alignmask
    - crypto: talitos - rename alternative AEAD algos.
    - fscrypt: don't set policy for a dead directory
    - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
    - media: stv0297: fix frequency range limit
    - ALSA: usb-audio: Fix parse of UAC2 Extension Units
    - ALSA: hda/realtek - Headphone Mic can't record after S3
    - tpm: Actually fail on TPM errors during "get random"
    - tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
    - block: fix .bi_size overflow
    - block, bfq: NULL out the bic when it's no longer valid
    - perf intel-pt: Fix itrace defaults for perf script
    - perf auxtrace: Fix itrace defaults for perf script
    - perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
    - perf pmu: Fix uncore PMU alias list for ARM64
    - perf thread-stack: Fix thread stack return from kernel for kernel-only case
    - perf header: Assign proper ff->ph in perf_event__synthesize_features()
    - x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
    - x86/tls: Fix possible spectre-v1 in do_get_thread_area()
    - Documentation: Add section about CPU vulnerabilities for Spectre
    - Documentation/admin: Remove the vsyscall=native documentation
    - mwifiex: Don't abort on small, spec-compliant vendor IEs
    - USB: serial: ftdi_sio: add ID for isodebug v1
    - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
    - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
    - p54usb: Fix race between disconnect and firmware loading
    - usb: gadget: f_fs: data_len used before properly set
    - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
    - usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
    - usb: renesas_usbhs: add a workaround for a race condition of workqueue
    - drivers/usb/typec/tps6598x.c: fix portinfo width
    - drivers/usb/typec/tps6598x.c: fix 4CC cmd write
    - p54: fix crash during initialization
    - staging: comedi: dt282x: fix a null pointer deref on interrupt
    - staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
    - staging: bcm2835-camera: Restore return behavior of ctrl_set_bitrate()
    - staging: comedi: amplc_pci230: fix null pointer deref on interrupt
    - staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
    - HID: Add another Primax PIXART OEM mouse quirk
    - lkdtm: support llvm-objcopy
    - binder: fix memory leak in error path
    - binder: return errors from buffer copy functions
    - iio: adc: stm32-adc: add missing vdda-supply
    - coresight: Potential uninitialized variable in probe()
    - coresight: etb10: Do not call smp_processor_id from preemptible
    - coresight: tmc-etr: Do not call smp_processor_id() from preemptible
    - coresight: tmc-etr: alloc_perf_buf: Do not call smp_processor_id from
      preemptible
    - coresight: tmc-etf: Do not call smp_processor_id from preemptible
    - carl9170: fix misuse of device driver API
    - Revert "x86/build: Move _etext to actual end of .text"
    - VMCI: Fix integer overflow in VMCI handle arrays
    - staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
    - staging: vchiq: make wait events interruptible
    - staging: vchiq: revert "switch to wait_for_completion_killable"
    - staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
    - staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
    - staging: bcm2835-camera: Ensure all buffers are returned on disable
    - staging: bcm2835-camera: Remove check of the number of buffers supplied
    - staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
    - staging: rtl8712: reduce stack usage, again
    - Linux 5.2.1
    - [Config] updateconfigs after v5.2.1 stable update

  * fcf-protection=none patch with upstream version
    - Revert "UBUNTU: SAUCE: add -fcf-protection=none to retpoline flags"
    - SAUCE: kbuild: add -fcf-protection=none to retpoline flags

  * Miscellaneous Ubuntu changes
    - SAUCE: selftests/ftrace: avoid failure when trying to probe a notrace
      function
    - SAUCE: selftests/powerpc/ptrace: fix build failure
    - update dkms package versions
    - [Packaging] add zlua to zfs-modules.ignore
    - update dkms package versions

 -- Seth Forshee <seth.forshee@canonical.com>  Fri, 19 Jul 2019 15:04:45 -0500

linux (5.2.0-8.9) eoan; urgency=medium

  * linux: 5.2.0-8.9 -proposed tracker (LP: #1835700)

  * Miscellaneous Ubuntu changes
    - [Packaging] replace zfs and spl build with zfs 0.8.1-1ubuntu1
    - SAUCE: test_bpf: remove expected fail for Ctx heavy transformations test on
      s390
    - SAUCE: add -fcf-protection=none to retpoline flags
    - SAUCE: usbip: ensure strings copied using strncpy are null-terminated
    - SAUCE: usbip: add -Wno-address-of-packed-member to EXTRA_CFLAGS
    - SAUCE: perf jvmti: ensure strncpy result is null-terminated
    - update dkms package versions
    - add removed zfs modules to modules.ignore

  [ Upstream Kernel Changes ]

  * Rebase to v5.2

 -- Seth Forshee <seth.forshee@canonical.com>  Mon, 08 Jul 2019 07:13:41 -0500

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog linux-buildinfo-6.8.0-1056-nvidia`.
