вторник

[Bug 2139669] Re: linux-6.18.0-9 fails with oops

** Tags added: kernel-daily-bug

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139669

Title:
linux-6.18.0-9 fails with oops

Status in linux package in Ubuntu:
New

Bug description:
while 6.18.0-8-generic works, the new -9 gives an oops on boot-up.
This might cause modules-load to hang which blocks the whole boot
process.

```
Feb 03 10:07:39 systemd-modules-load[465]: Using 5 probe threads
Feb 03 10:07:39 systemd-modules-load[465]: Module 'i2c_dev' is built in
Feb 03 10:07:39 systemd-modules-load[465]: Inserted module 'msr'
Feb 03 10:07:39 systemd-modules-load[465]: Inserted module 'parport_pc'
Feb 03 10:09:09 systemd[1]: systemd-modules-load.service: start operation timed out. Terminating.
```

```
Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] SMP PTI
CPU: 5 UID: 0 PID: 476 Comm: systemd-modules Not tainted 6.18.0-9-generic #9-Ubuntu PREEMPT(voluntary)
Hardware name: LENOVO 20EQS6LJ00/20EQS6LJ00, BIOS N1EETA2W (1.75 ) 03/18/2024
RIP: 0010:parport_register_dev_model+0x2b4/0x3a0 [parport]
Code: 89 ff 49 c7 87 b0 03 00 00 00 00 00 00 49 89 87 90 03 00 00 48 8b 83 e0 04 00 00 49 c7 87 a8 03 00 00 00 00 00 00 48 8b 40 50 <2e> 2e 2e ff d0 f0 48 0f ba ab 10 05 00 00 00 72 5c 4c 89 bb 18 05
RSP: 0018:ffffc9d8409ef9b8 EFLAGS: 00010246
RAX: 6b6b6b6b6b6b6b6b RBX: ffff89af50d90800 RCX: 0000000000000000
RDX: ffffffffc05f4c00 RSI: ffff89af417e2d90 RDI: ffff89af46251000
RBP: ffffc9d8409ef9f0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9d8409efa08
R13: ffff89af50d90840 R14: ffff89af46251050 R15: ffff89af46251000
FS: 0000744f11bfe6c0(0000) GS:ffff89b71a0f0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007bca28ce30f0 CR3: 0000000102580006 CR4: 00000000003706f0
Call Trace:
<TASK>
lp_register+0x88/0x1d0 [lp]
? __pfx_lp_preempt+0x10/0x10 [lp]
? __pfx_port_check+0x10/0x10 [parport]
lp_attach+0x94/0x130 [lp]
? __pfx_port_detect+0x10/0x10 [parport]
port_check+0x2b/0x40 [parport]
bus_for_each_dev+0x8a/0xe0
__parport_register_driver+0x8f/0xd0 [parport]
lp_init+0x240/0x2b0 [lp]
? __pfx_lp_init_module+0x10/0x10 [lp]
lp_init_module+0x181/0xd30 [lp]
? __pfx_lp_init_module+0x10/0x10 [lp]
do_one_initcall+0x59/0x330
do_init_module+0x8b/0x290
load_module+0x817/0x910
init_module_from_file+0x9b/0x100
idempotent_init_module+0x10e/0x300
__x64_sys_finit_module+0x73/0xf0
x64_sys_call+0x1f04/0x2350
do_syscall_64+0x81/0x10d0
? rseq_get_rseq_cs.isra.0+0x16/0x240
? __rseq_handle_notify_resume+0xbb/0x1a0
? restore_fpregs_from_fpstate+0x46/0xe0
? switch_fpu_return+0x5c/0xf0
? arch_exit_to_user_mode_prepare.isra.0+0xc5/0xe0
? do_syscall_64+0xb9/0x10d0
? do_syscall_64+0xb9/0x10d0
? exc_page_fault+0x90/0x1b0
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x744f12d3488d
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 53 c5 0d 00 f7 d8 64 89 01 48
RSP: 002b:0000744f11bfcb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
RAX: ffffffffffffffda RBX: 0000744f04008950 RCX: 0000744f12d3488d
RDX: 0000000000000004 RSI: 0000744f135da336 RDI: 000000000000000b
RBP: 0000744f11bfcbd0 R08: 0000000000000000 R09: 0000744f04008c30
R10: 0000000000000000 R11: 0000000000000246 R12: 0000744f135da336
R13: 0000000000020000 R14: 0000744f04008a70 R15: 0000000000000000
</TASK>
Modules linked in: lp(+) parport_pc ppdev(+) msr parport nvme_fabrics efi_pstore nfnetlink dmi_sysfs autofs4 btrfs blake2b_generic xor raid6_pq dm_crypt hid_plantronics hid_generic usbhid hid rtsx_pci_sdmmc thinkpad_acpi nvram snd soundcore psmouse polyval_clmulni platform_profile ghash_clmulni_intel sparse_keymap serio_raw rtsx_pci nvme video nvme_core nvme_keyring nvme_auth hkdf e1000e ahci wmi libahci aesni_intel
---[ end trace 0000000000000000 ]---
RIP: 0010:parport_register_dev_model+0x2b4/0x3a0 [parport]
Code: 89 ff 49 c7 87 b0 03 00 00 00 00 00 00 49 89 87 90 03 00 00 48 8b 83 e0 04 00 00 49 c7 87 a8 03 00 00 00 00 00 00 48 8b 40 50 <2e> 2e 2e ff d0 f0 48 0f ba ab 10 05 00 00 00 72 5c 4c 89 bb 18 05
RSP: 0018:ffffc9d8409ef9b8 EFLAGS: 00010246
RAX: 6b6b6b6b6b6b6b6b RBX: ffff89af50d90800 RCX: 0000000000000000
RDX: ffffffffc05f4c00 RSI: ffff89af417e2d90 RDI: ffff89af46251000
RBP: ffffc9d8409ef9f0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9d8409efa08
R13: ffff89af50d90840 R14: ffff89af46251050 R15: ffff89af46251000
FS: 0000744f11bfe6c0(0000) GS:ffff89b71a0f0000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007bca28ce30f0 CR3: 0000000102580006 CR4: 00000000003706f0
```

ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: linux-image-6.18.0-9-generic 6.18.0-9.9
ProcVersionSignature: Ubuntu 6.18.0-8.8-generic 6.18.0
Uname: Linux 6.18.0-8-generic x86_64
ApportVersion: 2.33.1-0ubuntu3
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/controlC2: sommer 3121 F.... wireplumber
/dev/snd/controlC0: sommer 3121 F.... wireplumber
/dev/snd/controlC1: sommer 3121 F.... wireplumber
/dev/snd/seq: sommer 3097 F.... pipewire
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Tue Feb 3 10:14:30 2026
InstallationDate: Installed on 2023-04-24 (1016 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Release amd64 (20220419)
IwDevWlp4s0Link: Not connected.
MachineType: LENOVO 20EQS6LJ00
ProcFB: 0 simpledrmdrmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-6.18.0-8-generic root=/dev/mapper/vgubuntu-root ro quiet systemd.show_status=auto panic=10 mitigations=off kaslr pti=on slab_nomerge page_poison=1 slub_debug=FPZ
PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
RelatedPackageVersions:
firmware-sof N/A
linux-firmware 20260108.gitd86b47f7-0ubuntu1
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 03/18/2024
dmi.bios.release: 1.75
dmi.bios.vendor: LENOVO
dmi.bios.version: N1EETA2W (1.75 )
dmi.board.asset.tag: Not Available
dmi.board.name: 20EQS6LJ00
dmi.board.vendor: LENOVO
dmi.board.version: SDK0J40697 WIN
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: None
dmi.ec.firmware.release: 1.18
dmi.modalias: dmi:bvnLENOVO:bvrN1EETA2W(1.75):bd03/18/2024:br1.75:efr1.18:svnLENOVO:pn20EQS6LJ00:pvrThinkPadP50:rvnLENOVO:rn20EQS6LJ00:rvrSDK0J40697WIN:cvnLENOVO:ct10:cvrNone:skuLENOVO_MT_20EQ_BU_Think_FM_ThinkPadP50:
dmi.product.family: ThinkPad P50
dmi.product.name: 20EQS6LJ00
dmi.product.sku: LENOVO_MT_20EQ_BU_Think_FM_ThinkPad P50
dmi.product.version: ThinkPad P50
dmi.sys.vendor: LENOVO

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139669/+subscriptions

[Bug 2139670] Re: tpm tpm0: Operation Timed out

** Tags added: kernel-daily-bug

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139670

Title:
tpm tpm0: Operation Timed out

Status in linux package in Ubuntu:
New

Bug description:
This problem is not new, but I didn't report it before, sorry.

The kernel reports on boot-up

```
tpm tpm0: Operation Timed out
tpm tpm0: Operation Timed out
tpm_crb MSFT0101:00: probe with driver tpm_crb failed with error -62
```

and this causes

```
dev-tpm0.device: Job dev-tpm0.device/start timed out.
Timed out waiting for device dev-tpm0.device - /dev/tpm0.
dev-tpm0.device: Job dev-tpm0.device/start failed with result 'timeout'.
```

which slows down the boot process.

As a workaround I added

```
DefaultDeviceTimeoutSec=15s
```

to /etc/systemd/system.conf

ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: linux-image-generic 6.18.0-9.9+1
ProcVersionSignature: Ubuntu 6.18.0-8.8-generic 6.18.0
Uname: Linux 6.18.0-8-generic x86_64
ApportVersion: 2.33.1-0ubuntu3
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/controlC2: sommer 3121 F.... wireplumber
/dev/snd/controlC0: sommer 3121 F.... wireplumber
/dev/snd/controlC1: sommer 3121 F.... wireplumber
/dev/snd/seq: sommer 3097 F.... pipewire
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Tue Feb 3 11:00:32 2026
InstallationDate: Installed on 2023-04-24 (1016 days ago)
InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Release amd64 (20220419)
IwDevWlp4s0Link: Not connected.
MachineType: LENOVO 20EQS6LJ00
ProcFB: 0 simpledrmdrmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-6.18.0-8-generic root=/dev/mapper/vgubuntu-root ro quiet systemd.show_status=auto panic=10 mitigations=off kaslr pti=on slab_nomerge page_poison=1 slub_debug=FPZ
PulseList: Error: command ['pacmd', 'list'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
RelatedPackageVersions:
firmware-sof N/A
linux-firmware 20260108.gitd86b47f7-0ubuntu1
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 03/18/2024
dmi.bios.release: 1.75
dmi.bios.vendor: LENOVO
dmi.bios.version: N1EETA2W (1.75 )
dmi.board.asset.tag: Not Available
dmi.board.name: 20EQS6LJ00
dmi.board.vendor: LENOVO
dmi.board.version: SDK0J40697 WIN
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: None
dmi.ec.firmware.release: 1.18
dmi.modalias: dmi:bvnLENOVO:bvrN1EETA2W(1.75):bd03/18/2024:br1.75:efr1.18:svnLENOVO:pn20EQS6LJ00:pvrThinkPadP50:rvnLENOVO:rn20EQS6LJ00:rvrSDK0J40697WIN:cvnLENOVO:ct10:cvrNone:skuLENOVO_MT_20EQ_BU_Think_FM_ThinkPadP50:
dmi.product.family: ThinkPad P50
dmi.product.name: 20EQS6LJ00
dmi.product.sku: LENOVO_MT_20EQ_BU_Think_FM_ThinkPad P50
dmi.product.version: ThinkPad P50
dmi.sys.vendor: LENOVO

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139670/+subscriptions

[Bug 2139686] Re: ubuntu_bpf failed to build on Noble ( error: ‘XDP_UMEM_TX_METADATA_LEN’ undeclared )

** Tags added: kernel-daily-bug

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139686

Title:
ubuntu_bpf failed to build on Noble ( error:
'XDP_UMEM_TX_METADATA_LEN' undeclared )

Status in ubuntu-kernel-tests:
New
Status in linux package in Ubuntu:
New
Status in linux source package in Noble:
Triaged

Bug description:
After resolving bug #2112357 the build now fails with:

39656 BINARY xdp_hw_metadata
39657 make[1]: Leaving directory '/home/ubuntu/autotest/client/tmp/ubuntu_bpf/src/linux/tools/testing/selftests/bpf'
39658 make: Leaving directory '/home/ubuntu/autotest/client/tmp/ubuntu_bpf/src/linux/tools/testing/selftests'
39659 stderr:
39660 Warning: Kernel ABI header at 'tools/include/uapi/linux/bpf.h' differs from latest version at 'include/uapi/linux/bpf.h'
39661 Warning: Kernel ABI header at 'tools/include/uapi/linux/if_xdp.h' differs from latest version at 'include/uapi/linux/if_xdp.h'
39662 warning: the compiler differs from the one used to build the kernel
39663 The kernel was built by: x86_64-linux-gnu-gcc-13 (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0
39664 You are using: gcc-13 (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0
39665 Skipping BTF generation for /home/ubuntu/autotest/client/tmp/ubuntu_bpf/src/linux/tools/testing/selftests/bpf/bpf_testmod/bpf_testmod.ko due to unavailability of vmlinux
39666 xdp_hw_metadata.c: In function 'open_xsk':
39667 xdp_hw_metadata.c:82:26: error: 'XDP_UMEM_TX_METADATA_LEN' undeclared (first use in this function)
39668 82 | .flags = XDP_UMEM_TX_METADATA_LEN,
39669 | ^~~~~~~~~~~~~~~~~~~~~~~~
39670 xdp_hw_metadata.c:82:26: note: each undeclared identifier is reported only once for each function it appears in
39671 make[1]: *** [Makefile:690: /home/ubuntu/autotest/client/tmp/ubuntu_bpf/src/linux/tools/testing/selftests/bpf/xdp_hw_metadata] Error 1
39672 make: *** [Makefile:181: all] Error 2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/2139686/+subscriptions

[Bug 2139704] Re: Jammy update: v5.15.198 upstream stable release

** Tags added: kernel-daily-bug

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139704

Title:
Jammy update: v5.15.198 upstream stable release

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v5.15.198 upstream stable release
from git://git.kernel.org/

xfrm: delete x->tunnel as we delete x
Revert "xfrm: destroy xfrm_state synchronously on net exit path"
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
xfrm: flush all states in xfrm_state_fini
dpaa2-mac: bail if the dpmacs fwnode is not found
drm/i915/selftests: Fix inconsistent IS_ERR and PTR_ERR
leds: Replace all non-returning strlcpy with strscpy
leds: spi-byte: Use devm_led_classdev_register_ext()
Documentation: process: Also mention Sasha Levin as stable tree maintainer
jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
ext4: refresh inline data size before write operations
locking/spinlock/debug: Fix data-race in do_raw_write_lock
ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
USB: serial: option: add Foxconn T99W760
USB: serial: option: add Telit Cinterion FE910C04 new compositions
USB: serial: option: move Telit 0x10c7 composition in the right place
USB: serial: ftdi_sio: match on interface number for jtag
serial: add support of CPCI cards
USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
spi: xilinx: increase number of retries before declaring stall
spi: imx: keep dma request disabled before dma transfer setup
bfs: Reconstruct file type when loading from disk
pinctrl: qcom: msm: Fix deadlock in pinmux configuration
platform/x86: acer-wmi: Ignore backlight event
platform/x86: huawei-wmi: add keys for HONOR models
HID: elecom: Add support for ELECOM M-XT3URBK (018F)
comedi: c6xdigio: Fix invalid PNP driver unregistration
comedi: multiq3: sanitize config options in multiq3_attach()
comedi: check device's attached status in compat ioctls
staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
smack: fix bug: unprivileged task can create labels
gpu: host1x: Fix race in syncpt alloc/free
drm/panel: visionox-rm69299: Don't clear all mode flags
drm/vgem-fence: Fix potential deadlock on release
USB: Fix descriptor count when handling invalid MBIM extended descriptor
irqchip/qcom-irq-combiner: Fix section mismatch
ntfs3: fix uninit memory after failed mi_read in mi_format_new
ntfs3: Fix uninit buffer allocated by __getname()
rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
iio: imu: st_lsm6dsx: introduce st_lsm6dsx_device_set_enable routine
iio: imu: st_lsm6dsx: discard samples during filters settling time
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
crypto: hisilicon/qm - restore original qos values
s390/smp: Fix fallback CPU detection
s390/ap: Don't leak debug feature files if AP instructions are not available
firmware: imx: scu-irq: fix OF node leak in
phy: mscc: Fix PTP for VSC8574 and VSC8572
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
compiler-gcc.h: Define __SANITIZE_ADDRESS__ under hwaddress sanitizer
kmsan: introduce __no_sanitize_memory and __no_kmsan_checks
x86: kmsan: don't instrument stack walking functions
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
pinctrl: stm32: fix hwspinlock resource leak in probe function
i3c: fix refcount inconsistency in i3c_master_register
i3c: master: svc: Prevent incomplete IBI transaction
power: supply: wm831x: Check wm831x_set_bits() return value
power: supply: apm_power: only unset own apm_get_power_status
scsi: target: Do not write NUL characters into ASCII configfs output
spi: tegra210-quad: use device_reset method
spi: tegra210-quad: add new chips to compatible
spi: tegra210-quad: combined sequence mode
spi: tegra210-quad: modify chip select (CS) deactivation
spi: tegra210-quad: Fix timeout handling
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
ext4: minor defrag code improvements
ext4: correct the checking of quota files before moving extents
perf/x86/intel: Correct large PEBS flag check
regulator: core: disable supply if enabling main regulator fails
nbd: clean up return value checking of sock_xmit()
nbd: partition nbd_read_stat() into nbd_read_reply() and nbd_handle_reply()
nbd: defer config put in recv_work
scsi: stex: Fix reboot_notifier leak in probe error path
dt-bindings: PCI: convert amlogic,meson-pcie.txt to dt-schema
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
RDMA/rtrs: server: Fix error handling in get_or_create_srv
ntfs3: init run lock for extend inode
powerpc/32: Fix unpaired stwcx. on interrupt exit
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
nbd: defer config unlock in nbd_genl_connect
coresight: etm4x: Save restore TRFCR_EL1
coresight: etm4x: Use Trace Filtering controls dynamically
coresight-etm4x: add isb() before reading the TRCSTATR
coresight: etm4x: Extract the trace unit controlling
coresight: etm4x: Add context synchronization before enabling trace
clk: renesas: r9a06g032: Fix memory leak in error path
lib/vsprintf: Check pointer before dereferencing in time_and_date()
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
PCI: keystone: Exit ks_pcie_probe() for invalid mode
ps3disk: use memcpy_{from,to}_bvec index
selftests/bpf: Fix failure paths in send_signal test
watchdog: wdat_wdt: Stop watchdog when uninstalling module
watchdog: wdat_wdt: Fix ACPI table leak in probe function
NFSD/blocklayout: Fix minlength check in proc_layoutget
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
fs/ntfs3: Remove unused mi_mark_free
fs/ntfs3: Add new argument is_mft to ntfs_mark_rec_free
fs/ntfs3: Make ni_ins_new_attr return error
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
ima: Handle error code returned by ima_filter_rule_match()
usb: chaoskey: fix locking for O_NONBLOCK
usb: dwc2: disable platform lowlevel hw resources during shutdown
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
crypto: ccree - Correctly handle return of sg_nents_for_len
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
wifi: ieee80211: correct FILS status codes
backlight: led_bl: Take led_access lock when required
backlight: led-bl: Add devlink to supplier LEDs
backlight: lp855x: Fix lp855x.h kernel-doc warnings
iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
ASoC: fsl_xcvr: Add Counter registers
ASoC: fsl_xcvr: Add support for i.MX93 platform
ASoC: fsl_xcvr: clear the channel status control memory
drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
ext4: remove unused return value of __mb_check_buddy
ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
vdpa: Introduce and use vdpa device get, set config helpers
vdpa: Introduce query of device config layout
vdpa: Sync calls set/get config/status with cf_mutex
virtio_vdpa: fix misleading return in void function
virtio: fix virtqueue_set_affinity() docs
ASoC: Intel: catpt: Fix error path in hw_params()
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
netfilter: nf_conncount: reduce unnecessary GC
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
net: stmmac: fix rx limit check in stmmac_rx_zc()
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
perf tools: Fix split kallsyms DSO counting
pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
pinctrl: single: Fix incorrect type for error return variable
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
NFS: Label the dentry with a verifier in nfs_rmdir() and nfs_unlink()
NFS: don't unhash dentry during unlink/rename
NFS: Avoid changing nlink when file removes and attribute updates race
fs/nls: Fix utf16 to utf8 conversion
NFSv4: Add some support for case insensitive filesystems
NFS: Fix the verifier for case sensitive filesystem in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
fs_context: drop the unused lsm_flags member
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
blk-mq: Abort suspend when wakeup events are pending
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
ALSA: uapi: Fix typo in asound.h comment
ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
dm-raid: fix possible NULL dereference with undefined raid type
dm log-writes: Add missing set_freezable() for freezable kthread
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
ocfs2: fix memory leak in ocfs2_merge_rec_left()
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
usb: phy: Initialize struct usb_phy list_head
ALSA: dice: fix buffer overflow in detect_stream_formats()
ASoC: fsl_xcvr: get channel status data when PHY is not exists
NFS: Fix missing unlock in nfs_unlink()
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
coresight: etm4x: Correct polling IDLE bit
spi: tegra210-quad: Fix validate combined sequence
spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
bpf, arm64: Do not audit capability check in do_jit()
btrfs: fix memory leak of fs_devices in degraded seed device path
sched/deadline: only set free_cpus for online runqueues
x86/ptrace: Always inline trivial accessors
ACPICA: Avoid walking the Namespace if start_node is NULL
ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
cpufreq: s5pv210: fix refcount leak
livepatch: Match old_sympos 0 and 1 in klp_find_func()
fs/ntfs3: Support timestamps prior to epoch
hfsplus: fix volume corruption issue for generic/070
hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
hfsplus: Verify inode mode when loading from disk
hfsplus: fix volume corruption issue for generic/073
btrfs: scrub: always update btrfs_scrub_progress::last_physical
Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
netrom: Fix memory leak in nr_sendmsg()
net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
mlxsw: spectrum_router: Fix neighbour use-after-free
mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
net: openvswitch: fix middle attribute validation in push_nsh() action
broadcom: b44: prevent uninitialized value usage
netfilter: nf_conncount: fix leaked ct in error paths
ipvs: fix ipv4 null-ptr-deref in route error path
caif: fix integer underflow in cffrml_receive()
net/sched: ets: Remove drr class from the active list if it changes to strict
nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
ethtool: use phydev variable
net/ethtool/ioctl: remove if n_stats checks from ethtool_get_phy_stats
net/ethtool/ioctl: split ethtool_get_phy_stats into multiple helpers
ethtool: Avoid overflowing userspace buffer on stats query
net/mlx5: fw_tracer, Add support for unrecognized string
net/mlx5: fw_tracer, Validate format string parameters
net/mlx5: fw_tracer, Handle escaped percent properly
net: hns3: using the num_tqps in the vf driver to apply for resources
net: hns3: Align type of some variables with their print type
net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx
net: hns3: add VLAN id validation before using
HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
ACPI: CPPC: Fix missing PCC check for guaranteed_perf
spi: fsl-cpm: Check length parity before switching to 16 bit mode
mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
ALSA: usb-mixer: us16x08: validate meter packet indices
ipmi: Fix the race between __scan_channels() and deliver_response()
ipmi: Fix __scan_channels() failing to rescan channels
firmware: imx: scu-irq: Init workqueue before request mbox channel
ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
powerpc/addnote: Fix overflow on 32-bit builds
scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
via_wdt: fix critical boot hang due to unnamed resource allocation
exfat: fix remount failure in different process environments
usbip: Fix locking bug in RT-enabled kernels
usb: typec: ucsi: Handle incorrect num_connectors capability
usb: xhci: limit run_graceperiod for only usb 3.0 devices
usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
nvme-fc: don't hold rport lock when putting ctrl
platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
vhost/vsock: improve RCU read sections around vhost_vsock_get()
KEYS: trusted: Fix a memory leak in tpm2_load_cmd
mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
block: rate-limit capacity change info log
floppy: fix for PAGE_SIZE != 4KB
fs/ntfs3: fix mount failure for sparse runs in run_unpack()
ktest.pl: Fix uninitialized var in config-bisect.pl
ext4: xattr: fix null pointer deref in ext4_raw_inode()
ext4: clear i_state_flags when alloc inode
ext4: fix incorrect group number assertion in mb_check_buddy
ext4: align max orphan file size with e2fsprogs limit
jbd2: use a weaker annotation in journal handling
media: v4l2-mem2mem: Fix outdated documentation
usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
media: pvrusb2: Fix incorrect variable used in trace message
phy: broadcom: bcm63xx-usbh: fix section mismatches
USB: lpc32xx_udc: Fix error handling in probe
usb: phy: isp1301: fix non-OF device reference imbalance
usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
char: applicom: fix NULL pointer dereference in ac_ioctl
intel_th: Fix error handling in intel_th_output_open
cpufreq: nforce2: fix reference count leak in nforce2
scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
scsi: aic94xx: fix use-after-free in device removal path
NFSD: use correct reservation type in nfsd4_scsi_fence_client
scsi: target: Reset t_task_cdb pointer in error case
f2fs: invalidate dentry cache on failed whiteout creation
f2fs: fix return value of f2fs_recover_fsync_data()
tools/testing/nvdimm: Use per-DIMM device handle
media: vidtv: initialize local pointers upon transfer of memory ownership
ocfs2: fix kernel BUG in ocfs2_find_victim_chain
platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
scs: fix a wrong parameter in __scs_magic
parisc: Do not reprogram affinitiy on ASP chip
libceph: make decode_pool() more resilient against corrupted osdmaps
KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
tracing: Do not register unsupported perf events
PM: runtime: Do not clear needs_force_resume with enabled runtime PM
fsnotify: do not generate ACCESS/MODIFY events on child for special files
nfsd: Mark variable __maybe_unused to avoid W=1 build break
svcrdma: return 0 on success from svc_rdma_copy_inline_range
io_uring: fix filename leak in __io_openat_prep()
drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
amba: tegra-ahb: Fix device leak on SMMU enable
soc: qcom: ocmem: fix device leak on lookup
soc: amlogic: canvas: fix device leak on lookup
rpmsg: glink: fix rpmsg device leak
i2c: amd-mp2: fix reference leak in MP2 PCI device
hwmon: (max16065) Use local variable to avoid TOCTOU
hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
i40e: fix scheduling in set_rx_mode
i40e: Refactor argument of several client notification functions
i40e: Refactor argument of i40e_detect_recover_hung()
i40e: validate ring_len parameter against hardware-specific values
iavf: fix off-by-one issues in iavf_config_rss_reg()
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
Bluetooth: btusb: revert use of devm_kzalloc in btusb
net: mdio: aspeed: move reg accessing part into separate functions
net: mdio: aspeed: add dummy read to avoid read-after-write issue
net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
ip6_gre: make ip6gre_header() robust
platform/x86: msi-laptop: add missing sysfs_remove_group()
platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
team: fix check for port enabled in team_queue_override_port_prio_changed()
net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
smc91x: fix broken irq-context in PREEMPT_RT
genalloc.h: fix htmldocs warning
firewire: nosy: Fix dma_free_coherent() size
net: dsa: b53: skip multicast entries for fdb_dump()
net: usb: asix: validate PHY address before use
net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
ipv4: Fix reference count leak when using error routes with nexthop objects
net: rose: fix invalid array index in rose_kill_by_device()
RDMA/irdma: avoid invalid read in irdma_net_event
RDMA/efa: Remove possible negative shift
RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
RDMA/bnxt_re: Fix to use correct page size for PDE table
RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
RDMA/bnxt_re: fix dma_free_coherent() pointer
selftests/ftrace: traceonoff_triggers: strip off names
ASoC: stm32: sai: fix device leak on probe
ASoC: qcom: q6asm-dai: perform correct state check before closing
ASoC: qcom: q6adm: the the copp device only during last instance
ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
iommu/apple-dart: fix device leak on of_xlate()
iommu/exynos: fix device leak on of_xlate()
iommu/ipmmu-vmsa: fix device leak on of_xlate()
iommu/mediatek-v1: fix device leak on probe_device()
iommu/mediatek: fix device leak on of_xlate()
iommu/omap: fix device leaks on probe_device()
iommu/sun50i: fix device leak on of_xlate()
iommu/tegra: fix device leak on probe_device()
HID: logitech-dj: Remove duplicate error logging
PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
leds: leds-lp50xx: Allow LED 0 to be added to module bank
leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
mfd: max77620: Fix potential IRQ chip conflict when probing two devices
media: rc: st_rc: Fix reset control resource leak
parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
dm-ebs: Mark full buffer dirty even on partial write
fbdev: gbefb: fix to use physical address instead of dma address
fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
fbdev: tcx.c fix mem_map to correct smem_start offset
media: cec: Fix debugfs leak on bus_register() failure
media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
media: TDA1997x: Remove redundant cancel_delayed_work in probe
media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
idr: fix idr_alloc() returning an ID out of range
RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
RDMA/cm: Fix leaking the multicast GID table reference
e1000: fix OOB in e1000_tbi_should_accept()
fjes: Add missing iounmap in fjes_hw_init()
nfsd: Drop the client reference in client_states_open()
net: usb: sr9700: fix incorrect command used to write single register
net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
drm/ttm: Avoid NULL pointer deref for evicted BOs
drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem
mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
kbuild: Use CRC32 and a 1MiB dictionary for XZ compressed modules
virtio_console: fix order of fields cols and rows
drm/vmwgfx: Fix a null-ptr access in the cursor snooper
usb: xhci: move link chain bit quirk checks into one helper function.
usb: xhci: Apply the link chain quirk on NEC isoc endpoints
usb: gadget: udc: fix use-after-free in usb_gadget_state_work
xhci: dbgtty: use IDR to support several dbc instances.
xhci: dbgtty: fix device unregister
jbd2: fix the inconsistency between checksum and data in memory for journal sb
tpm: Cap the number of PCR banks
btrfs: don't rewrite ret from inode_permission
wifi: mt76: Fix DTS power-limits on little endian systems
ALSA: wavefront: Clear substream pointers on close
ALSA: wavefront: Use standard print API
ALSA: wavefront: Fix integer overflow in sample size validation
NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
xfs: fix a memory leak in xfs_buf_item_init()
f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
f2fs: use global inline_xattr_slab instead of per-sb slab cache
f2fs: fix to propagate error from f2fs_enable_checkpoint()
f2fs: fix to avoid updating zero-sized extent in extent cache
usb: dwc3: keep susphy enabled during exit to avoid controller faults
mptcp: pm: ignore unknown endpoint flags
usb: ohci-nxp: Use helper function devm_clk_get_enabled()
usb: ohci-nxp: fix device leak on probe failure
fuse: fix readahead reclaim deadlock
ARM: dts: microchip: sama7g5: fix uart fifo size to 32
svcrdma: bound check rq_pages index in inline path
crypto: af_alg - zero initialize memory allocated via sock_kmalloc
KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
media: vpif_capture: fix section mismatch
media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
NFSD: NFSv4 file creation neglects setting ACL
media: samsung: exynos4-is: fix potential ABBA deadlock on init
media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
PCI: brcmstb: Fix disabling L0s capability
powerpc/64s/slb: Fix SLB multihit issue during SLB preload
iommu/qcom: fix device leak on of_xlate()
r8169: fix RTL8117 Wake-on-Lan in DASH mode
ASoC: stm: Use dev_err_probe() helper
ASoC: stm32: sai: Use the devm_clk_get_optional() helper
ASoC: stm32: sai: fix clk prepare imbalance on probe failure
mm/balloon_compaction: make balloon page compaction callbacks static
mm/balloon_compaction: we cannot have isolated pages in the balloon list
mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
lockd: fix vfs_test_lock() calls
ASoC: stm32: sai: fix OF node leak on probe
wifi: mac80211: Discard Beacon frames to non-broadcast address
drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
mmc: core: use sysfs_emit() instead of sprintf()
drm/i915/selftests: fix subtraction overflow bug
page_pool: Fix use-after-free in page_pool_recycle_in_ring
KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
HID: core: Harden s32ton() against conversion to 0 bits
KVM: arm64: sys_regs: disable -Wuninitialized-const-pointer warning
ipv6: Fix potential uninit-value access in __ip6_make_skb()
ipv4: Fix uninit-value access in __ip_make_skb()
x86: remove __range_not_ok()
pwm: stm32: Always program polarity
ext4: filesystems without casefold feature cannot be mounted with siphash
ext4: factor out ext4_hash_info_init()
ext4: fix error message when rejecting the default hash
firmware: arm_scmi: Fix unused notifier-block in unregister
Revert "iommu/amd: Skip enabling command/event buffers for kdump"
net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
usb: gadget: lpc32xx_udc: fix clock imbalance in error path
atm: Fix dma_free_coherent() size
net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
mei: me: add nova lake point S DID
lib/crypto: aes: Fix missing MMU protection for AES S-box
drm/pl111: Fix error handling in pl111_amba_probe
wifi: avoid kernel-infoleak from struct iw_point
libceph: prevent potential out-of-bounds reads in handle_auth_done()
libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
libceph: make free_choose_arg_map() resilient to partial allocation
libceph: return the handler error from mon_handle_auth_done()
libceph: make calc_target() set t->paused, not just clear it
ext4: introduce ITAIL helper
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
csky: fix csky_cmpxchg_fixup not working
ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
alpha: don't reference obsolete termio struct for TC* constants
NFSv4: ensure the open stateid seqid doesn't go backwards
NFS: Fix up the automount fs_context to use the correct cred
scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"
arm64: dts: add off-on-delay-us for usdhc2 regulator
ARM: dts: imx6q-ba16: fix RTC interrupt level
netfilter: nft_synproxy: avoid possible data-race on update operation
netfilter: nf_tables: fix memory leak in nf_tables_newrule()
netfilter: nf_conncount: update last_gc only when GC has been performed
net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
net: mscc: ocelot: Fix crash when adding interface under a lag
inet: ping: Fix icmp out counting
net: sock: fix hardened usercopy panic in sock_recv_errqueue
netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
net/mlx5e: Don't print error message due to invalid module
eth: bnxt: move and rename reset helpers
bnxt_en: Fix potential data corruption with HW GRO/LRO
HID: quirks: work around VID/PID conflict for appledisplay
net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
net: usb: pegasus: fix memory leak in update_eth_regs_async()
net: enetc: fix build warning when PAGE_SIZE is greater than 128K
arp: do not assume dev_hard_header() does not change skb->head
NFS: trace: show TIMEDOUT instead of 0x6e
nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
NFSD: Remove NFSERR_EAGAIN
nfsd: provide locking for v4_end_grace
counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
pinctrl: qcom: lpass-lpi: Remove duplicate assignment of of_gpio_n_cells
pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
blk-throttle: Set BIO_THROTTLED when bio has been throttled
powercap: fix race condition in register_control_type()
powercap: fix sscanf() error return value handling
can: j1939: make j1939_session_activate() fail if device is no longer registered
ASoC: fsl_sai: Add missing registers to cache default
scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
firmware: imx: scu-irq: Set mu_resource_id before get handle
efi/cper: Fix cper_bits_to_str buffer handling and return value
NFS: unlink/rmdir shouldn't call d_delete() twice on ENOENT
NFS: add barriers when testing for NFS_FSDATA_BLOCKED
Linux 5.15.198
UBUNTU: Upstream stable to v5.15.198

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139704/+subscriptions

[Bug 2139960] Re: Questing update: v6.17.13 upstream stable release

** Tags added: kernel-daily-bug

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139960

Title:
Questing update: v6.17.13 upstream stable release

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Questing:
In Progress

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

smack: deduplicate "does access rule request transmutation"
smack: fix bug: SMACK64TRANSMUTE set on non-directory
smack: deduplicate xattr setting in smack_inode_init_security()
smack: always "instantiate" inode in smack_inode_init_security()
smack: fix bug: invalid label of unix socket file
smack: fix bug: unprivileged task can create labels
smack: fix bug: setting task label silently ignores input garbage
gpu: host1x: Fix race in syncpt alloc/free
accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
drm/panel: visionox-rm69299: Don't clear all mode flags
accel/ivpu: Rework bind/unbind of imported buffers
accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
accel/ivpu: Make function parameter names consistent
accel/ivpu: Fix DCT active percent format
drm/vgem-fence: Fix potential deadlock on release
bpf: Cleanup unused func args in rqspinlock implementation
tools/nolibc: handle NULL wstatus argument to waitpid()
USB: Fix descriptor count when handling invalid MBIM extended descriptor
perf bpf_counter: Fix opening of "any"(-1) CPU events
ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
pinctrl: renesas: rzg2l: Fix PMC restore
clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
clk: renesas: cpg-mssr: Read back reset registers to assure values latched
drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
objtool: Fix standalone --hacks=jump_label
objtool: Fix weak symbol detection
accel/ivpu: Fix race condition when mapping dmabuf
perf parse-events: Fix legacy cache events if event is duplicated in a PMU
wifi: ath10k: move recovery check logic into a new work
wifi: ath11k: restore register window after global reset
wifi: ath12k: Fix MSDU buffer types handling in RX error path
wifi: ath12k: fix VHT MCS assignment
wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
sched/fair: Forfeit vruntime on yield
irqchip/bcm2712-mip: Fix OF node reference imbalance
irqchip/bcm2712-mip: Fix section mismatch
irqchip/irq-bcm7038-l1: Fix section mismatch
irqchip/irq-bcm7120-l2: Fix section mismatch
irqchip/irq-brcmstb-l2: Fix section mismatch
irqchip/imx-mu-msi: Fix section mismatch
irqchip/renesas-rzg2l: Fix section mismatch
irqchip/starfive-jh8100: Fix section mismatch
irqchip/qcom-irq-combiner: Fix section mismatch
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
ntfs3: fix uninit memory after failed mi_read in mi_format_new
ntfs3: Fix uninit buffer allocated by __getname()
dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
crypto: aead - Fix reqsize handling
block/mq-deadline: Introduce dd_start_request()
block/mq-deadline: Switch back to a single dispatch list
arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
arm64: dts: imx8mp-venice-gw702x: remove off-board uart
arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
perf annotate: Check return value of evsel__get_arch() properly
arm64: dts: exynos: gs101: fix sysreg_apm reg property
PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
tty: introduce tty_port_tty guard()
tty: serial: imx: Only configure the wake register when device is set as wakeup source
clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
clk: qcom: camcc-sm6350: Fix PLL config of PLL2
clk: qcom: camcc-sm7150: Fix PLL config of PLL2
soc: qcom: gsbi: fix double disable caused by devm
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
crypto: hisilicon/qm - restore original qos values
wifi: ath11k: fix VHT MCS assignment
wifi: ath11k: fix peer HE MCS assignment
s390/smp: Fix fallback CPU detection
scsi: ufs: core: Move the ufshcd_enable_intr() declaration
s390/ap: Don't leak debug feature files if AP instructions are not available
tools/power turbostat: Regression fix Uncore MHz printed in hex
wifi: ath12k: restore register window after global reset
leds: upboard: Fix module alias
PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
firmware: imx: scu-irq: fix OF node leak in
arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
arm64: dts: qcom: starqltechn: remove extra empty line
arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
arm64: dts: qcom: sm8650: set ufs as dma coherent
arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
perf hwmon_pmu: Fix uninitialized variable warning
phy: mscc: Fix PTP for VSC8574 and VSC8572
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
arm64: dts: qcom: qcm2290: Add CCI node
arm64: dts: qcom: qcm2290: Fix camss register prop ordering
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
ARM: dts: renesas: gose: Remove superfluous port property
ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
drm/amdgpu: add userq object va track helpers
drm/amdgpu/userq: fix SDMA and compute validation
wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
Revert "mtd: rawnand: marvell: fix layouts"
mtd: nand: relax ECC parameter validation check
mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
perf: Remove get_perf_callchain() init_nr argument
bpf: Refactor stack map trace depth calculation into helper function
bpf: Fix stackmap overflow check in __bpf_get_stackid()
perf/x86/intel/cstate: Remove PC3 support from LunarLake
task_work: Fix NMI race condition
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
accel/ivpu: Remove skip of dma unmap for imported buffers
tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
tools/nolibc/dirent: avoid errno in readdir_r
clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
soc: qcom: smem: fix hwspinlock resource leak in probe error paths
pinctrl: stm32: fix hwspinlock resource leak in probe function
drm: nova: select NOVA_CORE
UBUNTU: [Config] select NOVA_CORE
gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
accel/ivpu: Fix race condition when unbinding BOs
pidfs: add missing PIDFD_INFO_SIZE_VER1
pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
i3c: fix refcount inconsistency in i3c_master_register
i3c: master: svc: Prevent incomplete IBI transaction
random: use offstack cpumask when necessary
wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
wifi: ath12k: fix reusing m3 memory
wifi: ath12k: fix error handling in creating hardware group
wifi: ath12k: unassign arvif on scan vdev create failure
interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
accel/amdxdna: Fix incorrect command state for timed out job
interconnect: debugfs: Fix incorrect error handling for NULL path
arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
perf lock contention: Load kernel map before lookup
perf record: skip synthesize event when open evsel failed
timers/migration: Convert "while" loops to use "for"
timers/migration: Remove locking on group connection
timers/migration: Fix imbalanced NUMA trees
power: supply: rt5033_charger: Fix device node reference leaks
power: supply: cw2015: Check devm_delayed_work_autocancel() return code
power: supply: max17040: Check iio_read_channel_processed() return code
power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
power: supply: wm831x: Check wm831x_set_bits() return value
power: supply: apm_power: only unset own apm_get_power_status
scsi: target: Do not write NUL characters into ASCII configfs output
scsi: target: Fix LUN/device R/W and total command stats
fs/9p: Don't open remote file with APPEND mode when writeback cache is used
drm/panthor: Handle errors returned by drm_sched_entity_init()
drm/panthor: Fix group_free_queue() for partially initialized queues
drm/panthor: Fix UAF race between device unplug and FW event processing
drm/panthor: Fix race with suspend during unplug
drm/panthor: Fix UAF on kernel BO VA nodes
firmware: ti_sci: Set IO Isolation only if the firmware is capable
iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
cleanup: fix scoped_class()
spi: tegra210-quad: Fix timeout handling
libbpf: Fix parsing of multi-split BTF
ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
entry,unwind/deferred: Fix unwind_reset_info() placement
coresight: ETR: Fix ETR buffer use-after-free issue
x86/boot: Fix page table access in 5-level to 4-level paging transition
efi/libstub: Fix page table access in 5-level to 4-level paging transition
locktorture: Fix memory leak in param_set_cpumask()
wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
wifi: ath12k: Fix timeout error during beacon stats retrieval
ext4: correct the checking of quota files before moving extents
accel/amdxdna: Fix dma_fence leak when job is canceled
io_uring: use WRITE_ONCE for user shared memory
perf/x86: Fix NULL event access and potential PEBS record loss
perf/x86/intel: Correct large PEBS flag check
regulator: core: disable supply if enabling main regulator fails
md: delete mddev kobj before deleting gendisk kobj
md: fix rcu protection in md_wakeup_thread
md: avoid repeated calls to del_gendisk
nbd: defer config put in recv_work
scsi: stex: Fix reboot_notifier leak in probe error path
scsi: smartpqi: Fix device resources accessed after device removal
staging: most: remove broken i2c driver
UBUNTU: [Config] remove most i2c driver
iio: imu: bmi270: fix dev_err_probe error msg
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
RDMA/rtrs: server: Fix error handling in get_or_create_srv
ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
coresight: tmc: add the handle of the event to the path
ntfs3: init run lock for extend inode
drm/panthor: Fix potential memleak of vma structure
scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
md: delete md_redundancy_group when array is becoming inactive
cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
powerpc/kdump: Fix size calculation for hot-removed memory ranges
powerpc/32: Fix unpaired stwcx. on interrupt exit
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
nbd: defer config unlock in nbd_genl_connect
coresight: Change device mode to atomic type
coresight: etm4x: Always set tracer's device mode on target CPU
coresight: etm3x: Always set tracer's device mode on target CPU
coresight: etm4x: Correct polling IDLE bit
coresight: etm4x: Add context synchronization before enabling trace
coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
perf tools: Fix missing feature check for inherit + SAMPLE_READ
drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
clk: renesas: r9a09g077: Propagate rate changes to parent clocks
clk: renesas: r9a06g032: Fix memory leak in error path
lib/vsprintf: Check pointer before dereferencing in time_and_date()
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ocfs2: use correct endian in ocfs2_dinode_has_extents
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
accel/amdxdna: Clear mailbox interrupt register during channel creation
accel/amdxdna: Fix deadlock between context destroy and job timeout
bpf: Free special fields when update [lru_,]percpu_hash maps
PCI: keystone: Exit ks_pcie_probe() for invalid mode
arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
crypto: iaa - Fix incorrect return value in save_iaa_wq()
s390/fpu: Fix false-positive kmsan report in fpu_vstl()
arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
ps3disk: use memcpy_{from,to}_bvec index
PCI: Prevent resource tree corruption when BAR resize fails
bpf: Prevent nesting overflow in bpf_try_get_buffers
bpf: Handle return value of ftrace_set_filter_ip in register_fentry
selftests/bpf: Fix failure paths in send_signal test
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
mshv: Fix deposit memory in MSHV_ROOT_HVCALL
mshv: Fix create memory region overlap check
watchdog: wdat_wdt: Fix ACPI table leak in probe function
watchdog: starfive: Fix resource leak in probe error path
fuse_ctl_add_conn(): fix nlink breakage in case of early failure
tracefs: fix a leak in eventfs_create_events_dir()
NFSD/blocklayout: Fix minlength check in proc_layoutget
arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
block/blk-throttle: Fix throttle slice time for SSDs
drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
drm/msm/a2xx: stop over-complaining about the legacy firmware
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
net: stmmac: dwmac-sophgo: Add phy interface filter
bpf: Fix invalid prog->stats access when update_effective_progs fails
powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
drm/msm/a6xx: Flush LRZ cache before PT switch
drm/msm/a6xx: Fix the gemnoc workaround
drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
spi: sophgo: Fix incorrect use of bus width value macros
ipv6: clear RA flags when adding a static route
perf arm_spe: Fix memset subclass in operation
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
scsi: qla2xxx: Fix improper freeing of purex item
net: phy: realtek: create rtl8211f_config_rgmii_delay()
iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
wifi: mac80211: fix CMAC functions not handling errors
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
of/fdt: Consolidate duplicate code into helper functions
of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
phy: freescale: Initialize priv->lock
phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
ASoC: SDCA: Fix missing dash in HIDE DisCo property
selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
net: phy: adin1100: Fix software power-down ready condition
cpuset: Treat cpusets in attaching as populated
clk: spacemit: Set clk_hw_onecell_data::num before using flex array
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
RAS: Report all ARM processor CPER information to userspace
ima: Handle error code returned by ima_filter_rule_match()
usb: chaoskey: fix locking for O_NONBLOCK
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
regulator: pca9450: Fix error code in probe()
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: ccree - Correctly handle return of sg_nents_for_len
PM / devfreq: hisi: Fix potential UAF in OPP handling
RISC-V: KVM: Fix guest page fault within HLV* instructions
erofs: correct FSDAX detection
erofs: limit the level of fs stacking for file-backed mounts
RDMA/bnxt_re: Fix the inline size for GenP7 devices
RDMA/bnxt_re: Pass correct flag for dma mr creation
crypto: ahash - Fix crypto_ahash_import with partial block data
crypto: ahash - Zero positive err value in ahash_update_finish
ASoC: tas2781: correct the wrong period
wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
wifi: mt76: mt7921: add MBSSID support
Revert "wifi: mt76: mt792x: improve monitor interface handling"
wifi: mt76: mt7996: fix max nss value when getting rx chainmask
wifi: mt76: mt7996: fix implicit beamforming support for mt7992
wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
wifi: mt76: mt7996: fix teardown command for an MLD peer
wifi: mt76: mt7996: set link_valid field when initializing wcid
wifi: mt76: mt7996: fix MLD group index assignment
wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
wifi: mt76: mt7996: skip deflink accounting for offchannel links
wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
btrfs: fix double free of qgroup record after failure to add delayed ref head
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
btrfs: fix leaf leak in an error path in btrfs_del_items()
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
drm/nouveau: restrict the flush page to a 32-bit address
um: Don't rename vmap to kernel_vmap
iomap: always run error completions in user context
wifi: ieee80211: correct FILS status codes
backlight: led-bl: Add devlink to supplier LEDs
backlight: lp855x: Fix lp855x.h kernel-doc warnings
iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
drm/panthor: Avoid adding of kernel BOs to extobj list
clocksource/drivers/ralink: Fix resource leaks in init error path
clocksource/drivers/stm: Fix double deregistration on probe failure
clocksource/drivers/nxp-stm: Fix section mismatches
clocksource/drivers/nxp-stm: Prevent driver unbind
ASoC: nau8325: use simple i2c probe function
ASoC: nau8325: add missing build config
UBUNTU: [Config] enable NAU8325 codec
gfs2: Prevent recursive memory reclaim
ASoC: fsl_xcvr: clear the channel status control memory
firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
UBUNTU: [Config] enable AMCC QT2025 PHY driver
greybus: gb-beagleplay: Fix timeout handling in bootloader functions
misc: rp1: Fix an error handling path in rp1_probe()
drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
hwmon: sy7636a: Fix regulator_enable resource leak on error path
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
ublk: prevent invalid access with DEBUG
ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
virtio_vdpa: fix misleading return in void function
virtio: fix typo in virtio_device_ready() comment
virtio: fix whitespace in virtio_config_ops
virtio: fix grammar in virtio_queue_info docs
virtio: fix virtqueue_set_affinity() docs
vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
vhost: Fix kthread worker cgroup failure handling
vdpa/pds: use %pe for ERR_PTR() in event handler registration
virtio: clean up features qword/dword terms
ASoC: Intel: catpt: Fix error path in hw_params()
spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
iavf: Implement settime64 with -EOPNOTSUPP
net: stmmac: fix rx limit check in stmmac_rx_zc()
mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
vfio/pci: Use RCU for error/request triggers to avoid circular locking
net: phy: aquantia: check for NVMEM deferral
selftests: bonding: add delay before each xvlan_over_bond connectivity check
net: netpoll: initialize work queue before error checks
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
rqspinlock: Enclose lock/unlock within lock entry acquisitions
rqspinlock: Use trylock fallback when per-CPU rqnode is busy
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
md/raid5: fix IO hang when array is broken with IO inflight
clk: keystone: fix compile testing
net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
net: dsa: b53: fix extracting VID from entry for BCM5325/65
net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
net: dsa: b53: move reading ARL entries into their own function
net: dsa: b53: move writing ARL entries into their own functions
net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
net: dsa: b53: split reading search entry into their own functions
net: dsa: b53: move ARL entry functions into ops struct
net: dsa: b53: add support for 5389/5397/5398 ARL entry format
net: dsa: b53: use same ARL search result offset for BCM5325/65
net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
net: dsa: b53: add support for bcm63xx ARL entry format
net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
net: dsa: b53: fix BCM5325/65 ARL entry VIDs
net: hsr: create an API to get hsr port type
net: dsa: xrs700x: reject unsupported HSR configurations
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
perf jitdump: Add sym/str-tables to build-ID generation
perf tools: Mark split kallsyms DSOs as loaded
perf tools: Fix split kallsyms DSO counting
perf hist: In init, ensure mem_info is put on error paths
pinctrl: single: Fix incorrect type for error return variable
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
9p: fix cache/debug options printing in v9fs_show_options
sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
sched/core: Fix psi_dequeue() for Proxy Execution
platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
rtc: amlogic-a4: fix double free caused by devm
kbuild: install-extmod-build: Fix when given dir outside the build dir
kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
NFS: Avoid changing nlink when file removes and attribute updates race
fs/nls: Fix utf16 to utf8 conversion
NFS: Initialise verifiers for visible dentries in readdir and lookup
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
panthor: save task pid and comm in panthor_group
drm/panthor: Prevent potential UAF in group creation
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
NFS: Fix inheritance of the block sizes when automounting
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
ASoC: amd: acp: Audio is not resuming after s0ix
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
f2fs: revert summary entry count from 2048 to 512 in 16kb block support
blk-mq: Abort suspend when wakeup events are pending
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
block: fix memory leak in __blkdev_issue_zero_pages
nvme-auth: use kvfree() for memory allocated with kvcalloc()
drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
regulator: fixed: Rely on the core freeing the enable GPIO
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
drm/nouveau: refactor deprecated strcpy
drm/nouveau: fix circular dep oops from vendored i2c encoder
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
docs: hwmon: fix link to g762 devicetree binding
i2c: spacemit: fix detect issue
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
ALSA: uapi: Fix typo in asound.h comment
drm/amdkfd: Use huge page size to check split svm range alignment
rtc: gamecube: Check the return value of ioremap()
rtc: max31335: Fix ignored return value in set_alarm
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
drm/xe/fbdev: use the same 64-byte stride alignment as i915
drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
ASoC: amd: acp: update tdm channels for specific DAI
dm-raid: fix possible NULL dereference with undefined raid type
dm log-writes: Add missing set_freezable() for freezable kthread
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
perf/core: Fix missing read event generation on task exit
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
ocfs2: fix memory leak in ocfs2_merge_rec_left()
perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
usb: phy: Initialize struct usb_phy list_head
usb: typec: ucsi: fix use-after-free caused by uec->work
usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
ALSA: dice: fix buffer overflow in detect_stream_formats()
ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
ALSA: wavefront: Fix integer overflow in sample size validation
ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
UBUNTU: Upstream stable to v6.17.13

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139960/+subscriptions

[Bug 2137213] Re: Ryzen 5 5600U graphics driver broken in kernel 5.15.0-164

Glad to hear that! I can close this bug as Fix Released, the only reason
we might reopen is if we see the same issue on another kernel version,
there's no additional work we could do if we found out where exactly the
bug came from at this point.

** Changed in: linux (Ubuntu)
Status: Confirmed => Fix Released

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2137213

Title:
Ryzen 5 5600U graphics driver broken in kernel 5.15.0-164

Status in linux package in Ubuntu:
Fix Released

Bug description:
When I updated Xubuntu 22.04.05 LTS from kernel 5.15.0-153 to
5.15.0-164, the screen would stay black after boot. Setting nomodeset
at boot time seemingly fixed the issue except that Xubuntu showed the
default desktop background instead of the one I set in preferences.
Later, it also turned out that when trying to play SuperTuxKart, it
would stop updating its screen just when a race was supposed to start.

Reverting to kernel 5.15.0-153 fixed the issue and using a live CD of
Xubuntu 24.04 with a 6.8-series kernel also worked without a hitch.

As per inxi, the CPU is:
CPU: 6-core AMD Ryzen 5 5600U with Radeon Graphics (-MT MCP-)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2137213/+subscriptions

[Bug 2139960] [NEW] Questing update: v6.17.13 upstream stable release

Public bug reported:


SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

smack: deduplicate "does access rule request transmutation"
smack: fix bug: SMACK64TRANSMUTE set on non-directory
smack: deduplicate xattr setting in smack_inode_init_security()
smack: always "instantiate" inode in smack_inode_init_security()
smack: fix bug: invalid label of unix socket file
smack: fix bug: unprivileged task can create labels
smack: fix bug: setting task label silently ignores input garbage
gpu: host1x: Fix race in syncpt alloc/free
accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
drm/panel: visionox-rm69299: Don't clear all mode flags
accel/ivpu: Rework bind/unbind of imported buffers
accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
accel/ivpu: Make function parameter names consistent
accel/ivpu: Fix DCT active percent format
drm/vgem-fence: Fix potential deadlock on release
bpf: Cleanup unused func args in rqspinlock implementation
tools/nolibc: handle NULL wstatus argument to waitpid()
USB: Fix descriptor count when handling invalid MBIM extended descriptor
perf bpf_counter: Fix opening of "any"(-1) CPU events
ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
pinctrl: renesas: rzg2l: Fix PMC restore
clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
clk: renesas: cpg-mssr: Read back reset registers to assure values latched
drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
objtool: Fix standalone --hacks=jump_label
objtool: Fix weak symbol detection
accel/ivpu: Fix race condition when mapping dmabuf
perf parse-events: Fix legacy cache events if event is duplicated in a PMU
wifi: ath10k: move recovery check logic into a new work
wifi: ath11k: restore register window after global reset
wifi: ath12k: Fix MSDU buffer types handling in RX error path
wifi: ath12k: fix VHT MCS assignment
wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
sched/fair: Forfeit vruntime on yield
irqchip/bcm2712-mip: Fix OF node reference imbalance
irqchip/bcm2712-mip: Fix section mismatch
irqchip/irq-bcm7038-l1: Fix section mismatch
irqchip/irq-bcm7120-l2: Fix section mismatch
irqchip/irq-brcmstb-l2: Fix section mismatch
irqchip/imx-mu-msi: Fix section mismatch
irqchip/renesas-rzg2l: Fix section mismatch
irqchip/starfive-jh8100: Fix section mismatch
irqchip/qcom-irq-combiner: Fix section mismatch
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
ntfs3: fix uninit memory after failed mi_read in mi_format_new
ntfs3: Fix uninit buffer allocated by __getname()
dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
crypto: aead - Fix reqsize handling
block/mq-deadline: Introduce dd_start_request()
block/mq-deadline: Switch back to a single dispatch list
arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
arm64: dts: imx8mp-venice-gw702x: remove off-board uart
arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
perf annotate: Check return value of evsel__get_arch() properly
arm64: dts: exynos: gs101: fix sysreg_apm reg property
PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
tty: introduce tty_port_tty guard()
tty: serial: imx: Only configure the wake register when device is set as wakeup source
clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
clk: qcom: camcc-sm6350: Fix PLL config of PLL2
clk: qcom: camcc-sm7150: Fix PLL config of PLL2
soc: qcom: gsbi: fix double disable caused by devm
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
crypto: hisilicon/qm - restore original qos values
wifi: ath11k: fix VHT MCS assignment
wifi: ath11k: fix peer HE MCS assignment
s390/smp: Fix fallback CPU detection
scsi: ufs: core: Move the ufshcd_enable_intr() declaration
s390/ap: Don't leak debug feature files if AP instructions are not available
tools/power turbostat: Regression fix Uncore MHz printed in hex
wifi: ath12k: restore register window after global reset
leds: upboard: Fix module alias
PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
firmware: imx: scu-irq: fix OF node leak in
arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
arm64: dts: qcom: starqltechn: remove extra empty line
arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
arm64: dts: qcom: sm8650: set ufs as dma coherent
arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
perf hwmon_pmu: Fix uninitialized variable warning
phy: mscc: Fix PTP for VSC8574 and VSC8572
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
arm64: dts: qcom: qcm2290: Add CCI node
arm64: dts: qcom: qcm2290: Fix camss register prop ordering
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
ARM: dts: renesas: gose: Remove superfluous port property
ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
drm/amdgpu: add userq object va track helpers
drm/amdgpu/userq: fix SDMA and compute validation
wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
Revert "mtd: rawnand: marvell: fix layouts"
mtd: nand: relax ECC parameter validation check
mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
perf: Remove get_perf_callchain() init_nr argument
bpf: Refactor stack map trace depth calculation into helper function
bpf: Fix stackmap overflow check in __bpf_get_stackid()
perf/x86/intel/cstate: Remove PC3 support from LunarLake
task_work: Fix NMI race condition
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
accel/ivpu: Remove skip of dma unmap for imported buffers
tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
tools/nolibc/dirent: avoid errno in readdir_r
clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
soc: qcom: smem: fix hwspinlock resource leak in probe error paths
pinctrl: stm32: fix hwspinlock resource leak in probe function
drm: nova: select NOVA_CORE
UBUNTU: [Config] select NOVA_CORE
gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
accel/ivpu: Fix race condition when unbinding BOs
pidfs: add missing PIDFD_INFO_SIZE_VER1
pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
i3c: fix refcount inconsistency in i3c_master_register
i3c: master: svc: Prevent incomplete IBI transaction
random: use offstack cpumask when necessary
wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
wifi: ath12k: fix reusing m3 memory
wifi: ath12k: fix error handling in creating hardware group
wifi: ath12k: unassign arvif on scan vdev create failure
interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
accel/amdxdna: Fix incorrect command state for timed out job
interconnect: debugfs: Fix incorrect error handling for NULL path
arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
perf lock contention: Load kernel map before lookup
perf record: skip synthesize event when open evsel failed
timers/migration: Convert "while" loops to use "for"
timers/migration: Remove locking on group connection
timers/migration: Fix imbalanced NUMA trees
power: supply: rt5033_charger: Fix device node reference leaks
power: supply: cw2015: Check devm_delayed_work_autocancel() return code
power: supply: max17040: Check iio_read_channel_processed() return code
power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
power: supply: wm831x: Check wm831x_set_bits() return value
power: supply: apm_power: only unset own apm_get_power_status
scsi: target: Do not write NUL characters into ASCII configfs output
scsi: target: Fix LUN/device R/W and total command stats
fs/9p: Don't open remote file with APPEND mode when writeback cache is used
drm/panthor: Handle errors returned by drm_sched_entity_init()
drm/panthor: Fix group_free_queue() for partially initialized queues
drm/panthor: Fix UAF race between device unplug and FW event processing
drm/panthor: Fix race with suspend during unplug
drm/panthor: Fix UAF on kernel BO VA nodes
firmware: ti_sci: Set IO Isolation only if the firmware is capable
iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
cleanup: fix scoped_class()
spi: tegra210-quad: Fix timeout handling
libbpf: Fix parsing of multi-split BTF
ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
entry,unwind/deferred: Fix unwind_reset_info() placement
coresight: ETR: Fix ETR buffer use-after-free issue
x86/boot: Fix page table access in 5-level to 4-level paging transition
efi/libstub: Fix page table access in 5-level to 4-level paging transition
locktorture: Fix memory leak in param_set_cpumask()
wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
wifi: ath12k: Fix timeout error during beacon stats retrieval
ext4: correct the checking of quota files before moving extents
accel/amdxdna: Fix dma_fence leak when job is canceled
io_uring: use WRITE_ONCE for user shared memory
perf/x86: Fix NULL event access and potential PEBS record loss
perf/x86/intel: Correct large PEBS flag check
regulator: core: disable supply if enabling main regulator fails
md: delete mddev kobj before deleting gendisk kobj
md: fix rcu protection in md_wakeup_thread
md: avoid repeated calls to del_gendisk
nbd: defer config put in recv_work
scsi: stex: Fix reboot_notifier leak in probe error path
scsi: smartpqi: Fix device resources accessed after device removal
staging: most: remove broken i2c driver
UBUNTU: [Config] remove most i2c driver
iio: imu: bmi270: fix dev_err_probe error msg
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
RDMA/rtrs: server: Fix error handling in get_or_create_srv
ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
coresight: tmc: add the handle of the event to the path
ntfs3: init run lock for extend inode
drm/panthor: Fix potential memleak of vma structure
scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
md: delete md_redundancy_group when array is becoming inactive
cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
powerpc/kdump: Fix size calculation for hot-removed memory ranges
powerpc/32: Fix unpaired stwcx. on interrupt exit
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
nbd: defer config unlock in nbd_genl_connect
coresight: Change device mode to atomic type
coresight: etm4x: Always set tracer's device mode on target CPU
coresight: etm3x: Always set tracer's device mode on target CPU
coresight: etm4x: Correct polling IDLE bit
coresight: etm4x: Add context synchronization before enabling trace
coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
perf tools: Fix missing feature check for inherit + SAMPLE_READ
drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
clk: renesas: r9a09g077: Propagate rate changes to parent clocks
clk: renesas: r9a06g032: Fix memory leak in error path
lib/vsprintf: Check pointer before dereferencing in time_and_date()
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ocfs2: use correct endian in ocfs2_dinode_has_extents
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
accel/amdxdna: Clear mailbox interrupt register during channel creation
accel/amdxdna: Fix deadlock between context destroy and job timeout
bpf: Free special fields when update [lru_,]percpu_hash maps
PCI: keystone: Exit ks_pcie_probe() for invalid mode
arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
crypto: iaa - Fix incorrect return value in save_iaa_wq()
s390/fpu: Fix false-positive kmsan report in fpu_vstl()
arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
ps3disk: use memcpy_{from,to}_bvec index
PCI: Prevent resource tree corruption when BAR resize fails
bpf: Prevent nesting overflow in bpf_try_get_buffers
bpf: Handle return value of ftrace_set_filter_ip in register_fentry
selftests/bpf: Fix failure paths in send_signal test
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
mshv: Fix deposit memory in MSHV_ROOT_HVCALL
mshv: Fix create memory region overlap check
watchdog: wdat_wdt: Fix ACPI table leak in probe function
watchdog: starfive: Fix resource leak in probe error path
fuse_ctl_add_conn(): fix nlink breakage in case of early failure
tracefs: fix a leak in eventfs_create_events_dir()
NFSD/blocklayout: Fix minlength check in proc_layoutget
arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
block/blk-throttle: Fix throttle slice time for SSDs
drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
drm/msm/a2xx: stop over-complaining about the legacy firmware
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
net: stmmac: dwmac-sophgo: Add phy interface filter
bpf: Fix invalid prog->stats access when update_effective_progs fails
powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
drm/msm/a6xx: Flush LRZ cache before PT switch
drm/msm/a6xx: Fix the gemnoc workaround
drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
spi: sophgo: Fix incorrect use of bus width value macros
ipv6: clear RA flags when adding a static route
perf arm_spe: Fix memset subclass in operation
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
scsi: qla2xxx: Fix improper freeing of purex item
net: phy: realtek: create rtl8211f_config_rgmii_delay()
iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
wifi: mac80211: fix CMAC functions not handling errors
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
of/fdt: Consolidate duplicate code into helper functions
of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
phy: freescale: Initialize priv->lock
phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
ASoC: SDCA: Fix missing dash in HIDE DisCo property
selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
net: phy: adin1100: Fix software power-down ready condition
cpuset: Treat cpusets in attaching as populated
clk: spacemit: Set clk_hw_onecell_data::num before using flex array
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
RAS: Report all ARM processor CPER information to userspace
ima: Handle error code returned by ima_filter_rule_match()
usb: chaoskey: fix locking for O_NONBLOCK
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
regulator: pca9450: Fix error code in probe()
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: ccree - Correctly handle return of sg_nents_for_len
PM / devfreq: hisi: Fix potential UAF in OPP handling
RISC-V: KVM: Fix guest page fault within HLV* instructions
erofs: correct FSDAX detection
erofs: limit the level of fs stacking for file-backed mounts
RDMA/bnxt_re: Fix the inline size for GenP7 devices
RDMA/bnxt_re: Pass correct flag for dma mr creation
crypto: ahash - Fix crypto_ahash_import with partial block data
crypto: ahash - Zero positive err value in ahash_update_finish
ASoC: tas2781: correct the wrong period
wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
wifi: mt76: mt7921: add MBSSID support
Revert "wifi: mt76: mt792x: improve monitor interface handling"
wifi: mt76: mt7996: fix max nss value when getting rx chainmask
wifi: mt76: mt7996: fix implicit beamforming support for mt7992
wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
wifi: mt76: mt7996: fix teardown command for an MLD peer
wifi: mt76: mt7996: set link_valid field when initializing wcid
wifi: mt76: mt7996: fix MLD group index assignment
wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
wifi: mt76: mt7996: skip deflink accounting for offchannel links
wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
btrfs: fix double free of qgroup record after failure to add delayed ref head
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
btrfs: fix leaf leak in an error path in btrfs_del_items()
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
drm/nouveau: restrict the flush page to a 32-bit address
um: Don't rename vmap to kernel_vmap
iomap: always run error completions in user context
wifi: ieee80211: correct FILS status codes
backlight: led-bl: Add devlink to supplier LEDs
backlight: lp855x: Fix lp855x.h kernel-doc warnings
iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
drm/panthor: Avoid adding of kernel BOs to extobj list
clocksource/drivers/ralink: Fix resource leaks in init error path
clocksource/drivers/stm: Fix double deregistration on probe failure
clocksource/drivers/nxp-stm: Fix section mismatches
clocksource/drivers/nxp-stm: Prevent driver unbind
ASoC: nau8325: use simple i2c probe function
ASoC: nau8325: add missing build config
UBUNTU: [Config] enable NAU8325 codec
gfs2: Prevent recursive memory reclaim
ASoC: fsl_xcvr: clear the channel status control memory
firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
UBUNTU: [Config] enable AMCC QT2025 PHY driver
greybus: gb-beagleplay: Fix timeout handling in bootloader functions
misc: rp1: Fix an error handling path in rp1_probe()
drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
hwmon: sy7636a: Fix regulator_enable resource leak on error path
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
ublk: prevent invalid access with DEBUG
ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
virtio_vdpa: fix misleading return in void function
virtio: fix typo in virtio_device_ready() comment
virtio: fix whitespace in virtio_config_ops
virtio: fix grammar in virtio_queue_info docs
virtio: fix virtqueue_set_affinity() docs
vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
vhost: Fix kthread worker cgroup failure handling
vdpa/pds: use %pe for ERR_PTR() in event handler registration
virtio: clean up features qword/dword terms
ASoC: Intel: catpt: Fix error path in hw_params()
spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
iavf: Implement settime64 with -EOPNOTSUPP
net: stmmac: fix rx limit check in stmmac_rx_zc()
mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
vfio/pci: Use RCU for error/request triggers to avoid circular locking
net: phy: aquantia: check for NVMEM deferral
selftests: bonding: add delay before each xvlan_over_bond connectivity check
net: netpoll: initialize work queue before error checks
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
rqspinlock: Enclose lock/unlock within lock entry acquisitions
rqspinlock: Use trylock fallback when per-CPU rqnode is busy
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
md/raid5: fix IO hang when array is broken with IO inflight
clk: keystone: fix compile testing
net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
net: dsa: b53: fix extracting VID from entry for BCM5325/65
net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
net: dsa: b53: move reading ARL entries into their own function
net: dsa: b53: move writing ARL entries into their own functions
net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
net: dsa: b53: split reading search entry into their own functions
net: dsa: b53: move ARL entry functions into ops struct
net: dsa: b53: add support for 5389/5397/5398 ARL entry format
net: dsa: b53: use same ARL search result offset for BCM5325/65
net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
net: dsa: b53: add support for bcm63xx ARL entry format
net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
net: dsa: b53: fix BCM5325/65 ARL entry VIDs
net: hsr: create an API to get hsr port type
net: dsa: xrs700x: reject unsupported HSR configurations
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
perf jitdump: Add sym/str-tables to build-ID generation
perf tools: Mark split kallsyms DSOs as loaded
perf tools: Fix split kallsyms DSO counting
perf hist: In init, ensure mem_info is put on error paths
pinctrl: single: Fix incorrect type for error return variable
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
9p: fix cache/debug options printing in v9fs_show_options
sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
sched/core: Fix psi_dequeue() for Proxy Execution
platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
rtc: amlogic-a4: fix double free caused by devm
kbuild: install-extmod-build: Fix when given dir outside the build dir
kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
NFS: Avoid changing nlink when file removes and attribute updates race
fs/nls: Fix utf16 to utf8 conversion
NFS: Initialise verifiers for visible dentries in readdir and lookup
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
panthor: save task pid and comm in panthor_group
drm/panthor: Prevent potential UAF in group creation
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
NFS: Fix inheritance of the block sizes when automounting
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
ASoC: amd: acp: Audio is not resuming after s0ix
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
f2fs: revert summary entry count from 2048 to 512 in 16kb block support
blk-mq: Abort suspend when wakeup events are pending
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
block: fix memory leak in __blkdev_issue_zero_pages
nvme-auth: use kvfree() for memory allocated with kvcalloc()
drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
regulator: fixed: Rely on the core freeing the enable GPIO
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
drm/nouveau: refactor deprecated strcpy
drm/nouveau: fix circular dep oops from vendored i2c encoder
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
docs: hwmon: fix link to g762 devicetree binding
i2c: spacemit: fix detect issue
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
ALSA: uapi: Fix typo in asound.h comment
drm/amdkfd: Use huge page size to check split svm range alignment
rtc: gamecube: Check the return value of ioremap()
rtc: max31335: Fix ignored return value in set_alarm
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
drm/xe/fbdev: use the same 64-byte stride alignment as i915
drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
ASoC: amd: acp: update tdm channels for specific DAI
dm-raid: fix possible NULL dereference with undefined raid type
dm log-writes: Add missing set_freezable() for freezable kthread
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
perf/core: Fix missing read event generation on task exit
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
ocfs2: fix memory leak in ocfs2_merge_rec_left()
perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
usb: phy: Initialize struct usb_phy list_head
usb: typec: ucsi: fix use-after-free caused by uec->work
usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
ALSA: dice: fix buffer overflow in detect_stream_formats()
ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
ALSA: wavefront: Fix integer overflow in sample size validation
ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
UBUNTU: Upstream stable to v6.17.13

** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid

** Affects: linux (Ubuntu Questing)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
Status: New => Confirmed

** Also affects: linux (Ubuntu Questing)
Importance: Undecided
Status: New

** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Questing)
Importance: Undecided => Medium

** Changed in: linux (Ubuntu Questing)
Status: New => In Progress

** Changed in: linux (Ubuntu Questing)
Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:


SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

-
+ smack: deduplicate "does access rule request transmutation"
+ smack: fix bug: SMACK64TRANSMUTE set on non-directory
+ smack: deduplicate xattr setting in smack_inode_init_security()
+ smack: always "instantiate" inode in smack_inode_init_security()
+ smack: fix bug: invalid label of unix socket file
+ smack: fix bug: unprivileged task can create labels
+ smack: fix bug: setting task label silently ignores input garbage
+ gpu: host1x: Fix race in syncpt alloc/free
+ accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
+ drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
+ drm/panel: visionox-rm69299: Don't clear all mode flags
+ accel/ivpu: Rework bind/unbind of imported buffers
+ accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
+ accel/ivpu: Make function parameter names consistent
+ accel/ivpu: Fix DCT active percent format
+ drm/vgem-fence: Fix potential deadlock on release
+ bpf: Cleanup unused func args in rqspinlock implementation
+ tools/nolibc: handle NULL wstatus argument to waitpid()
+ USB: Fix descriptor count when handling invalid MBIM extended descriptor
+ perf bpf_counter: Fix opening of "any"(-1) CPU events
+ ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
+ pinctrl: renesas: rzg2l: Fix PMC restore
+ clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
+ clk: renesas: cpg-mssr: Read back reset registers to assure values latched
+ drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
+ HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
+ remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
+ objtool: Fix standalone --hacks=jump_label
+ objtool: Fix weak symbol detection
+ accel/ivpu: Fix race condition when mapping dmabuf
+ perf parse-events: Fix legacy cache events if event is duplicated in a PMU
+ wifi: ath10k: move recovery check logic into a new work
+ wifi: ath11k: restore register window after global reset
+ wifi: ath12k: Fix MSDU buffer types handling in RX error path
+ wifi: ath12k: fix VHT MCS assignment
+ wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
+ sched/fair: Forfeit vruntime on yield
+ irqchip/bcm2712-mip: Fix OF node reference imbalance
+ irqchip/bcm2712-mip: Fix section mismatch
+ irqchip/irq-bcm7038-l1: Fix section mismatch
+ irqchip/irq-bcm7120-l2: Fix section mismatch
+ irqchip/irq-brcmstb-l2: Fix section mismatch
+ irqchip/imx-mu-msi: Fix section mismatch
+ irqchip/renesas-rzg2l: Fix section mismatch
+ irqchip/starfive-jh8100: Fix section mismatch
+ irqchip/qcom-irq-combiner: Fix section mismatch
+ crypto: authenc - Correctly pass EINPROGRESS back up to the caller
+ ntfs3: fix uninit memory after failed mi_read in mi_format_new
+ ntfs3: Fix uninit buffer allocated by __getname()
+ dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
+ clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
+ rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
+ inet: Avoid ehash lookup race in inet_ehash_insert()
+ inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
+ iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
+ firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
+ crypto: aead - Fix reqsize handling
+ block/mq-deadline: Introduce dd_start_request()
+ block/mq-deadline: Switch back to a single dispatch list
+ arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
+ arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
+ arm64: dts: imx8mp-venice-gw702x: remove off-board uart
+ arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
+ arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
+ perf annotate: Check return value of evsel__get_arch() properly
+ arm64: dts: exynos: gs101: fix sysreg_apm reg property
+ PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
+ uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
+ tty: introduce tty_port_tty guard()
+ tty: serial: imx: Only configure the wake register when device is set as wakeup source
+ clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
+ clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
+ clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
+ clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
+ clk: qcom: camcc-sm6350: Fix PLL config of PLL2
+ clk: qcom: camcc-sm7150: Fix PLL config of PLL2
+ soc: qcom: gsbi: fix double disable caused by devm
+ crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
+ crypto: hisilicon/qm - restore original qos values
+ wifi: ath11k: fix VHT MCS assignment
+ wifi: ath11k: fix peer HE MCS assignment
+ s390/smp: Fix fallback CPU detection
+ scsi: ufs: core: Move the ufshcd_enable_intr() declaration
+ s390/ap: Don't leak debug feature files if AP instructions are not available
+ tools/power turbostat: Regression fix Uncore MHz printed in hex
+ wifi: ath12k: restore register window after global reset
+ leds: upboard: Fix module alias
+ PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
+ arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
+ firmware: imx: scu-irq: fix OF node leak in
+ arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
+ arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
+ arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
+ arm64: dts: qcom: starqltechn: remove extra empty line
+ arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
+ arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
+ arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
+ arm64: dts: qcom: sm8650: set ufs as dma coherent
+ arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
+ arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
+ perf hwmon_pmu: Fix uninitialized variable warning
+ phy: mscc: Fix PTP for VSC8574 and VSC8572
+ sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
+ arm64: dts: qcom: qcm2290: Add CCI node
+ arm64: dts: qcom: qcm2290: Fix camss register prop ordering
+ RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
+ ARM: dts: renesas: gose: Remove superfluous port property
+ ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
+ drm/amdgpu: add userq object va track helpers
+ drm/amdgpu/userq: fix SDMA and compute validation
+ wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
+ Revert "mtd: rawnand: marvell: fix layouts"
+ mtd: nand: relax ECC parameter validation check
+ mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
+ perf: Remove get_perf_callchain() init_nr argument
+ bpf: Refactor stack map trace depth calculation into helper function
+ bpf: Fix stackmap overflow check in __bpf_get_stackid()
+ perf/x86/intel/cstate: Remove PC3 support from LunarLake
+ task_work: Fix NMI race condition
+ x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
+ accel/ivpu: Remove skip of dma unmap for imported buffers
+ tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
+ tools/nolibc/dirent: avoid errno in readdir_r
+ clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
+ soc: qcom: smem: fix hwspinlock resource leak in probe error paths
+ pinctrl: stm32: fix hwspinlock resource leak in probe function
+ drm: nova: select NOVA_CORE
+ UBUNTU: [Config] select NOVA_CORE
+ gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
+ accel/ivpu: Fix race condition when unbinding BOs
+ pidfs: add missing PIDFD_INFO_SIZE_VER1
+ pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
+ i3c: fix refcount inconsistency in i3c_master_register
+ i3c: master: svc: Prevent incomplete IBI transaction
+ random: use offstack cpumask when necessary
+ wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
+ wifi: ath12k: fix reusing m3 memory
+ wifi: ath12k: fix error handling in creating hardware group
+ wifi: ath12k: unassign arvif on scan vdev create failure
+ interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
+ arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
+ accel/amdxdna: Fix incorrect command state for timed out job
+ interconnect: debugfs: Fix incorrect error handling for NULL path
+ arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
+ drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
+ perf lock contention: Load kernel map before lookup
+ perf record: skip synthesize event when open evsel failed
+ timers/migration: Convert "while" loops to use "for"
+ timers/migration: Remove locking on group connection
+ timers/migration: Fix imbalanced NUMA trees
+ power: supply: rt5033_charger: Fix device node reference leaks
+ power: supply: cw2015: Check devm_delayed_work_autocancel() return code
+ power: supply: max17040: Check iio_read_channel_processed() return code
+ power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
+ power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
+ power: supply: wm831x: Check wm831x_set_bits() return value
+ power: supply: apm_power: only unset own apm_get_power_status
+ scsi: target: Do not write NUL characters into ASCII configfs output
+ scsi: target: Fix LUN/device R/W and total command stats
+ fs/9p: Don't open remote file with APPEND mode when writeback cache is used
+ drm/panthor: Handle errors returned by drm_sched_entity_init()
+ drm/panthor: Fix group_free_queue() for partially initialized queues
+ drm/panthor: Fix UAF race between device unplug and FW event processing
+ drm/panthor: Fix race with suspend during unplug
+ drm/panthor: Fix UAF on kernel BO VA nodes
+ firmware: ti_sci: Set IO Isolation only if the firmware is capable
+ iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
+ cleanup: fix scoped_class()
+ spi: tegra210-quad: Fix timeout handling
+ libbpf: Fix parsing of multi-split BTF
+ ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
+ ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
+ ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
+ entry,unwind/deferred: Fix unwind_reset_info() placement
+ coresight: ETR: Fix ETR buffer use-after-free issue
+ x86/boot: Fix page table access in 5-level to 4-level paging transition
+ efi/libstub: Fix page table access in 5-level to 4-level paging transition
+ locktorture: Fix memory leak in param_set_cpumask()
+ wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
+ wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
+ mfd: da9055: Fix missing regmap_del_irq_chip() in error path
+ wifi: ath12k: Fix timeout error during beacon stats retrieval
+ ext4: correct the checking of quota files before moving extents
+ accel/amdxdna: Fix dma_fence leak when job is canceled
+ io_uring: use WRITE_ONCE for user shared memory
+ perf/x86: Fix NULL event access and potential PEBS record loss
+ perf/x86/intel: Correct large PEBS flag check
+ regulator: core: disable supply if enabling main regulator fails
+ md: delete mddev kobj before deleting gendisk kobj
+ md: fix rcu protection in md_wakeup_thread
+ md: avoid repeated calls to del_gendisk
+ nbd: defer config put in recv_work
+ scsi: stex: Fix reboot_notifier leak in probe error path
+ scsi: smartpqi: Fix device resources accessed after device removal
+ staging: most: remove broken i2c driver
+ UBUNTU: [Config] remove most i2c driver
+ iio: imu: bmi270: fix dev_err_probe error msg
+ dt-bindings: PCI: amlogic: Fix the register name of the DBI region
+ RDMA/rtrs: server: Fix error handling in get_or_create_srv
+ ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
+ coresight: tmc: add the handle of the event to the path
+ ntfs3: init run lock for extend inode
+ drm/panthor: Fix potential memleak of vma structure
+ scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
+ md: delete md_redundancy_group when array is becoming inactive
+ cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
+ powerpc/kdump: Fix size calculation for hot-removed memory ranges
+ powerpc/32: Fix unpaired stwcx. on interrupt exit
+ macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
+ wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
+ nbd: defer config unlock in nbd_genl_connect
+ coresight: Change device mode to atomic type
+ coresight: etm4x: Always set tracer's device mode on target CPU
+ coresight: etm3x: Always set tracer's device mode on target CPU
+ coresight: etm4x: Correct polling IDLE bit
+ coresight: etm4x: Add context synchronization before enabling trace
+ coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
+ perf tools: Fix missing feature check for inherit + SAMPLE_READ
+ drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
+ drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
+ clk: renesas: r9a09g077: Propagate rate changes to parent clocks
+ clk: renesas: r9a06g032: Fix memory leak in error path
+ lib/vsprintf: Check pointer before dereferencing in time_and_date()
+ ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
+ ocfs2: use correct endian in ocfs2_dinode_has_extents
+ ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
+ scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
+ leds: netxbig: Fix GPIO descriptor leak in error paths
+ accel/amdxdna: Clear mailbox interrupt register during channel creation
+ accel/amdxdna: Fix deadlock between context destroy and job timeout
+ bpf: Free special fields when update [lru_,]percpu_hash maps
+ PCI: keystone: Exit ks_pcie_probe() for invalid mode
+ arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
+ arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
+ arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
+ crypto: iaa - Fix incorrect return value in save_iaa_wq()
+ s390/fpu: Fix false-positive kmsan report in fpu_vstl()
+ arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
+ drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
+ ps3disk: use memcpy_{from,to}_bvec index
+ PCI: Prevent resource tree corruption when BAR resize fails
+ bpf: Prevent nesting overflow in bpf_try_get_buffers
+ bpf: Handle return value of ftrace_set_filter_ip in register_fentry
+ selftests/bpf: Fix failure paths in send_signal test
+ bpf: Check skb->transport_header is set in bpf_skb_check_mtu
+ mshv: Fix deposit memory in MSHV_ROOT_HVCALL
+ mshv: Fix create memory region overlap check
+ watchdog: wdat_wdt: Fix ACPI table leak in probe function
+ watchdog: starfive: Fix resource leak in probe error path
+ fuse_ctl_add_conn(): fix nlink breakage in case of early failure
+ tracefs: fix a leak in eventfs_create_events_dir()
+ NFSD/blocklayout: Fix minlength check in proc_layoutget
+ arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
+ arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
+ block/blk-throttle: Fix throttle slice time for SSDs
+ drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
+ drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
+ drm/msm/a2xx: stop over-complaining about the legacy firmware
+ wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
+ net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
+ net: stmmac: dwmac-sophgo: Add phy interface filter
+ bpf: Fix invalid prog->stats access when update_effective_progs fails
+ powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
+ powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
+ net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
+ fs/ntfs3: out1 also needs to put mi
+ fs/ntfs3: Prevent memory leaks in add sub record
+ drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
+ drm/msm/a6xx: Flush LRZ cache before PT switch
+ drm/msm/a6xx: Fix the gemnoc workaround
+ drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
+ spi: sophgo: Fix incorrect use of bus width value macros
+ ipv6: clear RA flags when adding a static route
+ perf arm_spe: Fix memset subclass in operation
+ pwm: bcm2835: Make sure the channel is enabled after pwm_request()
+ scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
+ scsi: qla2xxx: Fix improper freeing of purex item
+ net: phy: realtek: create rtl8211f_config_rgmii_delay()
+ iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
+ wifi: mac80211: fix CMAC functions not handling errors
+ mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
+ mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
+ of/fdt: Consolidate duplicate code into helper functions
+ of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
+ leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
+ phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
+ phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
+ phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
+ phy: freescale: Initialize priv->lock
+ phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
+ phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
+ phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
+ ASoC: SDCA: Fix missing dash in HIDE DisCo property
+ selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
+ net: phy: adin1100: Fix software power-down ready condition
+ cpuset: Treat cpusets in attaching as populated
+ clk: spacemit: Set clk_hw_onecell_data::num before using flex array
+ wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
+ RAS: Report all ARM processor CPER information to userspace
+ ima: Handle error code returned by ima_filter_rule_match()
+ usb: chaoskey: fix locking for O_NONBLOCK
+ usb: dwc2: fix hang during shutdown if set as peripheral
+ usb: dwc2: fix hang during suspend if set as peripheral
+ usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
+ regulator: pca9450: Fix error code in probe()
+ selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
+ selftests/bpf: Improve reliability of test_perf_branches_no_hw()
+ crypto: starfive - Correctly handle return of sg_nents_for_len
+ crypto: ccree - Correctly handle return of sg_nents_for_len
+ PM / devfreq: hisi: Fix potential UAF in OPP handling
+ RISC-V: KVM: Fix guest page fault within HLV* instructions
+ erofs: correct FSDAX detection
+ erofs: limit the level of fs stacking for file-backed mounts
+ RDMA/bnxt_re: Fix the inline size for GenP7 devices
+ RDMA/bnxt_re: Pass correct flag for dma mr creation
+ crypto: ahash - Fix crypto_ahash_import with partial block data
+ crypto: ahash - Zero positive err value in ahash_update_finish
+ ASoC: tas2781: correct the wrong period
+ wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
+ wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
+ wifi: mt76: mt7921: add MBSSID support
+ Revert "wifi: mt76: mt792x: improve monitor interface handling"
+ wifi: mt76: mt7996: fix max nss value when getting rx chainmask
+ wifi: mt76: mt7996: fix implicit beamforming support for mt7992
+ wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
+ wifi: mt76: mt7996: fix teardown command for an MLD peer
+ wifi: mt76: mt7996: set link_valid field when initializing wcid
+ wifi: mt76: mt7996: fix MLD group index assignment
+ wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
+ wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
+ wifi: mt76: mt7996: skip deflink accounting for offchannel links
+ wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
+ mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
+ firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
+ staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
+ iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
+ btrfs: fix double free of qgroup record after failure to add delayed ref head
+ btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
+ btrfs: fix leaf leak in an error path in btrfs_del_items()
+ PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
+ drm/nouveau: restrict the flush page to a 32-bit address
+ um: Don't rename vmap to kernel_vmap
+ iomap: always run error completions in user context
+ wifi: ieee80211: correct FILS status codes
+ backlight: led-bl: Add devlink to supplier LEDs
+ backlight: lp855x: Fix lp855x.h kernel-doc warnings
+ iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
+ RDMA/irdma: Fix data race in irdma_sc_ccq_arm
+ RDMA/irdma: Fix data race in irdma_free_pble
+ RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
+ drm/panthor: Avoid adding of kernel BOs to extobj list
+ clocksource/drivers/ralink: Fix resource leaks in init error path
+ clocksource/drivers/stm: Fix double deregistration on probe failure
+ clocksource/drivers/nxp-stm: Fix section mismatches
+ clocksource/drivers/nxp-stm: Prevent driver unbind
+ ASoC: nau8325: use simple i2c probe function
+ ASoC: nau8325: add missing build config
+ UBUNTU: [Config] enable NAU8325 codec
+ gfs2: Prevent recursive memory reclaim
+ ASoC: fsl_xcvr: clear the channel status control memory
+ firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
+ UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
+ UBUNTU: [Config] enable AMCC QT2025 PHY driver
+ greybus: gb-beagleplay: Fix timeout handling in bootloader functions
+ misc: rp1: Fix an error handling path in rp1_probe()
+ drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
+ hwmon: sy7636a: Fix regulator_enable resource leak on error path
+ ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
+ ublk: prevent invalid access with DEBUG
+ ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
+ selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
+ of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
+ virtio_vdpa: fix misleading return in void function
+ virtio: fix typo in virtio_device_ready() comment
+ virtio: fix whitespace in virtio_config_ops
+ virtio: fix grammar in virtio_queue_info docs
+ virtio: fix virtqueue_set_affinity() docs
+ vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
+ vhost: Fix kthread worker cgroup failure handling
+ vdpa/pds: use %pe for ERR_PTR() in event handler registration
+ virtio: clean up features qword/dword terms
+ ASoC: Intel: catpt: Fix error path in hw_params()
+ spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
+ ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
+ ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
+ ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
+ ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
+ regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
+ Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
+ netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
+ netfilter: nf_conncount: rework API to use sk_buff directly
+ netfilter: nft_connlimit: update the count if add was skipped
+ iavf: Implement settime64 with -EOPNOTSUPP
+ net: stmmac: fix rx limit check in stmmac_rx_zc()
+ mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
+ spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
+ vfio/pci: Use RCU for error/request triggers to avoid circular locking
+ net: phy: aquantia: check for NVMEM deferral
+ selftests: bonding: add delay before each xvlan_over_bond connectivity check
+ net: netpoll: initialize work queue before error checks
+ mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
+ rqspinlock: Enclose lock/unlock within lock entry acquisitions
+ rqspinlock: Use trylock fallback when per-CPU rqnode is busy
+ remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
+ md/raid5: fix IO hang when array is broken with IO inflight
+ clk: keystone: fix compile testing
+ net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
+ net: dsa: b53: fix extracting VID from entry for BCM5325/65
+ net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
+ net: dsa: b53: move reading ARL entries into their own function
+ net: dsa: b53: move writing ARL entries into their own functions
+ net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
+ net: dsa: b53: split reading search entry into their own functions
+ net: dsa: b53: move ARL entry functions into ops struct
+ net: dsa: b53: add support for 5389/5397/5398 ARL entry format
+ net: dsa: b53: use same ARL search result offset for BCM5325/65
+ net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
+ net: dsa: b53: add support for bcm63xx ARL entry format
+ net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
+ net: dsa: b53: fix BCM5325/65 ARL entry VIDs
+ net: hsr: create an API to get hsr port type
+ net: dsa: xrs700x: reject unsupported HSR configurations
+ net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
+ perf jitdump: Add sym/str-tables to build-ID generation
+ perf tools: Mark split kallsyms DSOs as loaded
+ perf tools: Fix split kallsyms DSO counting
+ perf hist: In init, ensure mem_info is put on error paths
+ pinctrl: single: Fix incorrect type for error return variable
+ fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
+ 9p: fix cache/debug options printing in v9fs_show_options
+ sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
+ sched/core: Fix psi_dequeue() for Proxy Execution
+ platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
+ f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
+ rtc: amlogic-a4: fix double free caused by devm
+ kbuild: install-extmod-build: Fix when given dir outside the build dir
+ kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
+ NFS: Avoid changing nlink when file removes and attribute updates race
+ fs/nls: Fix utf16 to utf8 conversion
+ NFS: Initialise verifiers for visible dentries in readdir and lookup
+ NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
+ NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
+ NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
+ panthor: save task pid and comm in panthor_group
+ drm/panthor: Prevent potential UAF in group creation
+ Revert "nfs: ignore SB_RDONLY when remounting nfs"
+ Revert "nfs: clear SB_RDONLY before getting superblock"
+ Revert "nfs: ignore SB_RDONLY when mounting nfs"
+ NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
+ NFS: Fix inheritance of the block sizes when automounting
+ fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
+ platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
+ ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
+ ASoC: amd: acp: Audio is not resuming after s0ix
+ ASoC: ak4458: Disable regulator when error happens
+ ASoC: ak5558: Disable regulator when error happens
+ f2fs: revert summary entry count from 2048 to 512 in 16kb block support
+ blk-mq: Abort suspend when wakeup events are pending
+ block: fix comment for op_is_zone_mgmt() to include RESET_ALL
+ block: fix memory leak in __blkdev_issue_zero_pages
+ nvme-auth: use kvfree() for memory allocated with kvcalloc()
+ drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
+ regulator: fixed: Rely on the core freeing the enable GPIO
+ ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
+ drm/nouveau: refactor deprecated strcpy
+ drm/nouveau: fix circular dep oops from vendored i2c encoder
+ cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
+ cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
+ docs: hwmon: fix link to g762 devicetree binding
+ i2c: spacemit: fix detect issue
+ dma/pool: eliminate alloc_pages warning in atomic_pool_expand
+ ALSA: uapi: Fix typo in asound.h comment
+ drm/amdkfd: Use huge page size to check split svm range alignment
+ rtc: gamecube: Check the return value of ioremap()
+ rtc: max31335: Fix ignored return value in set_alarm
+ ALSA: firewire-motu: add bounds check in put_user loop for DSP events
+ ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
+ drm/xe/fbdev: use the same 64-byte stride alignment as i915
+ drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
+ drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
+ drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
+ drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
+ block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
+ ASoC: amd: acp: update tdm channels for specific DAI
+ dm-raid: fix possible NULL dereference with undefined raid type
+ dm log-writes: Add missing set_freezable() for freezable kthread
+ efi/cper: Add a new helper function to print bitmasks
+ efi/cper: Adjust infopfx size to accept an extra space
+ efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
+ scsi: imm: Fix use-after-free bug caused by unfinished delayed work
+ perf/core: Fix missing read event generation on task exit
+ irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
+ cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
+ ocfs2: fix memory leak in ocfs2_merge_rec_left()
+ perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
+ usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
+ usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
+ usb: phy: Initialize struct usb_phy list_head
+ usb: typec: ucsi: fix use-after-free caused by uec->work
+ usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
+ ALSA: dice: fix buffer overflow in detect_stream_formats()
+ ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
+ ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
+ ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
+ ALSA: wavefront: Fix integer overflow in sample size validation
+ ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
- ASoC: codecs: nau8325: Silence uninitialized variables warnings
- ALSA: wavefront: Fix integer overflow in sample size validation
- ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
- ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
- ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
- ALSA: dice: fix buffer overflow in detect_stream_formats()
- usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
- usb: typec: ucsi: fix use-after-free caused by uec->work
- usb: phy: Initialize struct usb_phy list_head
- usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
- usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
- perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
- ocfs2: fix memory leak in ocfs2_merge_rec_left()
- cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
- irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
- perf/core: Fix missing read event generation on task exit
- scsi: imm: Fix use-after-free bug caused by unfinished delayed work
- efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
- efi/cper: Adjust infopfx size to accept an extra space
- efi/cper: Add a new helper function to print bitmasks
- dm log-writes: Add missing set_freezable() for freezable kthread
- dm-raid: fix possible NULL dereference with undefined raid type
- ASoC: amd: acp: update tdm channels for specific DAI
- block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
- drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
- drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
- drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
- drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
- drm/xe/fbdev: use the same 64-byte stride alignment as i915
- ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
- ALSA: firewire-motu: add bounds check in put_user loop for DSP events
- rtc: max31335: Fix ignored return value in set_alarm
- rtc: gamecube: Check the return value of ioremap()
- drm/amdkfd: Use huge page size to check split svm range alignment
- ALSA: uapi: Fix typo in asound.h comment
- dma/pool: eliminate alloc_pages warning in atomic_pool_expand
- i2c: spacemit: fix detect issue
- docs: hwmon: fix link to g762 devicetree binding
- cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
- cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
- drm/nouveau: fix circular dep oops from vendored i2c encoder
- drm/nouveau: refactor deprecated strcpy
- ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
- regulator: fixed: Rely on the core freeing the enable GPIO
- drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
- nvme-auth: use kvfree() for memory allocated with kvcalloc()
- block: fix memory leak in __blkdev_issue_zero_pages
- block: fix comment for op_is_zone_mgmt() to include RESET_ALL
- blk-mq: Abort suspend when wakeup events are pending
- f2fs: revert summary entry count from 2048 to 512 in 16kb block support
- ASoC: ak5558: Disable regulator when error happens
- ASoC: ak4458: Disable regulator when error happens
- ASoC: amd: acp: Audio is not resuming after s0ix
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
- fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
- NFS: Fix inheritance of the block sizes when automounting
- NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
- Revert "nfs: ignore SB_RDONLY when mounting nfs"
- Revert "nfs: clear SB_RDONLY before getting superblock"
- Revert "nfs: ignore SB_RDONLY when remounting nfs"
- drm/panthor: Prevent potential UAF in group creation
- panthor: save task pid and comm in panthor_group
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
- NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
- NFS: Initialise verifiers for visible dentries in readdir and lookup
- fs/nls: Fix utf16 to utf8 conversion
- NFS: Avoid changing nlink when file removes and attribute updates race
- kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
- kbuild: install-extmod-build: Fix when given dir outside the build dir
- rtc: amlogic-a4: fix double free caused by devm
- f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
- sched/core: Fix psi_dequeue() for Proxy Execution
- sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
- 9p: fix cache/debug options printing in v9fs_show_options
- fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
- pinctrl: single: Fix incorrect type for error return variable
- perf hist: In init, ensure mem_info is put on error paths
- perf tools: Fix split kallsyms DSO counting
- perf tools: Mark split kallsyms DSOs as loaded
- perf jitdump: Add sym/str-tables to build-ID generation
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
- net: dsa: xrs700x: reject unsupported HSR configurations
- net: hsr: create an API to get hsr port type
- net: dsa: b53: fix BCM5325/65 ARL entry VIDs
- net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
- net: dsa: b53: add support for bcm63xx ARL entry format
- net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
- net: dsa: b53: use same ARL search result offset for BCM5325/65
- net: dsa: b53: add support for 5389/5397/5398 ARL entry format
- net: dsa: b53: move ARL entry functions into ops struct
- net: dsa: b53: split reading search entry into their own functions
- net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
- net: dsa: b53: move writing ARL entries into their own functions
- net: dsa: b53: move reading ARL entries into their own function
- net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
- net: dsa: b53: fix extracting VID from entry for BCM5325/65
- net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
- clk: keystone: fix compile testing
- md/raid5: fix IO hang when array is broken with IO inflight
- remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
- rqspinlock: Use trylock fallback when per-CPU rqnode is busy
- rqspinlock: Enclose lock/unlock within lock entry acquisitions
- mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
- net: netpoll: initialize work queue before error checks
- selftests: bonding: add delay before each xvlan_over_bond connectivity check
- net: phy: aquantia: check for NVMEM deferral
- vfio/pci: Use RCU for error/request triggers to avoid circular locking
- spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
- mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
- net: stmmac: fix rx limit check in stmmac_rx_zc()
- iavf: Implement settime64 with -EOPNOTSUPP
- netfilter: nft_connlimit: update the count if add was skipped
- netfilter: nf_conncount: rework API to use sk_buff directly
- netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
- ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
- ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
- ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
- spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
- ASoC: Intel: catpt: Fix error path in hw_params()
- virtio: clean up features qword/dword terms
- vdpa/pds: use %pe for ERR_PTR() in event handler registration
- vhost: Fix kthread worker cgroup failure handling
- vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
- virtio: fix virtqueue_set_affinity() docs
- virtio: fix grammar in virtio_queue_info docs
- virtio: fix whitespace in virtio_config_ops
- virtio: fix typo in virtio_device_ready() comment
- virtio_vdpa: fix misleading return in void function
- of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
- selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
- ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
- ublk: prevent invalid access with DEBUG
- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
- hwmon: sy7636a: Fix regulator_enable resource leak on error path
- drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
- misc: rp1: Fix an error handling path in rp1_probe()
- greybus: gb-beagleplay: Fix timeout handling in bootloader functions
- firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
- ASoC: fsl_xcvr: clear the channel status control memory
- gfs2: Prevent recursive memory reclaim
- ASoC: nau8325: add missing build config
- ASoC: nau8325: use simple i2c probe function
- clocksource/drivers/nxp-stm: Prevent driver unbind
- clocksource/drivers/nxp-stm: Fix section mismatches
- clocksource/drivers/stm: Fix double deregistration on probe failure
- clocksource/drivers/ralink: Fix resource leaks in init error path
- drm/panthor: Avoid adding of kernel BOs to extobj list
- RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
- RDMA/irdma: Fix data race in irdma_free_pble
- RDMA/irdma: Fix data race in irdma_sc_ccq_arm
- iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
- backlight: lp855x: Fix lp855x.h kernel-doc warnings
- backlight: led-bl: Add devlink to supplier LEDs
- wifi: ieee80211: correct FILS status codes
- iomap: always run error completions in user context
- um: Don't rename vmap to kernel_vmap
- drm/nouveau: restrict the flush page to a 32-bit address
- PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
- btrfs: fix leaf leak in an error path in btrfs_del_items()
- btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
- btrfs: fix double free of qgroup record after failure to add delayed ref head
- iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
- staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
- firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
- mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
- wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
- wifi: mt76: mt7996: skip deflink accounting for offchannel links
- wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
- wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
- wifi: mt76: mt7996: fix MLD group index assignment
- wifi: mt76: mt7996: set link_valid field when initializing wcid
- wifi: mt76: mt7996: fix teardown command for an MLD peer
- wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
- wifi: mt76: mt7996: fix implicit beamforming support for mt7992
- wifi: mt76: mt7996: fix max nss value when getting rx chainmask
- Revert "wifi: mt76: mt792x: improve monitor interface handling"
- wifi: mt76: mt7921: add MBSSID support
- wifi: mt76: mt7925: add MBSSID support
- wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
- wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
- ASoC: tas2781: correct the wrong period
- crypto: ahash - Zero positive err value in ahash_update_finish
- crypto: ahash - Fix crypto_ahash_import with partial block data
- RDMA/bnxt_re: Pass correct flag for dma mr creation
- RDMA/bnxt_re: Fix the inline size for GenP7 devices
- erofs: limit the level of fs stacking for file-backed mounts
- erofs: correct FSDAX detection
- RISC-V: KVM: Fix guest page fault within HLV* instructions
- PM / devfreq: hisi: Fix potential UAF in OPP handling
- crypto: ccree - Correctly handle return of sg_nents_for_len
- crypto: starfive - Correctly handle return of sg_nents_for_len
- selftests/bpf: Improve reliability of test_perf_branches_no_hw()
- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
- regulator: pca9450: Fix error code in probe()
- usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
- usb: dwc2: fix hang during suspend if set as peripheral
- usb: dwc2: fix hang during shutdown if set as peripheral
- usb: chaoskey: fix locking for O_NONBLOCK
- ima: Handle error code returned by ima_filter_rule_match()
- RAS: Report all ARM processor CPER information to userspace
- wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
- clk: spacemit: Set clk_hw_onecell_data::num before using flex array
- cpuset: Treat cpusets in attaching as populated
- net: phy: adin1100: Fix software power-down ready condition
- selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
- ASoC: SDCA: Fix missing dash in HIDE DisCo property
- phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
- phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
- phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
- phy: freescale: Initialize priv->lock
- phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
- phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
- phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
- leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
- of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
- of/fdt: Consolidate duplicate code into helper functions
- mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
- mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
- wifi: mac80211: fix CMAC functions not handling errors
- iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
- net: phy: realtek: create rtl8211f_config_rgmii_delay()
- scsi: qla2xxx: Fix improper freeing of purex item
- scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
- pwm: bcm2835: Make sure the channel is enabled after pwm_request()
- perf arm_spe: Fix memset subclass in operation
- ipv6: clear RA flags when adding a static route
- spi: sophgo: Fix incorrect use of bus width value macros
- drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
- drm/msm/a6xx: Fix the gemnoc workaround
- drm/msm/a6xx: Flush LRZ cache before PT switch
- drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
- fs/ntfs3: Prevent memory leaks in add sub record
- fs/ntfs3: out1 also needs to put mi
- net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
- powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
- powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
- bpf: Fix invalid prog->stats access when update_effective_progs fails
- net: stmmac: dwmac-sophgo: Add phy interface filter
- net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
- wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
- drm/msm/a2xx: stop over-complaining about the legacy firmware
- drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
- drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
- block/blk-throttle: Fix throttle slice time for SSDs
- arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
- arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
- NFSD/blocklayout: Fix minlength check in proc_layoutget
- tracefs: fix a leak in eventfs_create_events_dir()
- fuse_ctl_add_conn(): fix nlink breakage in case of early failure
- watchdog: starfive: Fix resource leak in probe error path
- watchdog: wdat_wdt: Fix ACPI table leak in probe function
- mshv: Fix create memory region overlap check
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL
- bpf: Check skb->transport_header is set in bpf_skb_check_mtu
- selftests/bpf: Fix failure paths in send_signal test
- bpf: Handle return value of ftrace_set_filter_ip in register_fentry
- bpf: Prevent nesting overflow in bpf_try_get_buffers
- PCI: Prevent resource tree corruption when BAR resize fails
- ps3disk: use memcpy_{from,to}_bvec index
- drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
- arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
- s390/fpu: Fix false-positive kmsan report in fpu_vstl()
- crypto: iaa - Fix incorrect return value in save_iaa_wq()
- arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
- arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
- arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
- PCI: keystone: Exit ks_pcie_probe() for invalid mode
- bpf: Free special fields when update [lru_,]percpu_hash maps
- accel/amdxdna: Fix deadlock between context destroy and job timeout
- accel/amdxdna: Clear mailbox interrupt register during channel creation
- leds: netxbig: Fix GPIO descriptor leak in error paths
- scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
- ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
- ocfs2: use correct endian in ocfs2_dinode_has_extents
- ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
- lib/vsprintf: Check pointer before dereferencing in time_and_date()
- clk: renesas: r9a06g032: Fix memory leak in error path
- clk: renesas: r9a09g077: Propagate rate changes to parent clocks
- drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
- drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
- perf tools: Fix missing feature check for inherit + SAMPLE_READ
- coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
- coresight: etm4x: Add context synchronization before enabling trace
- coresight: etm4x: Correct polling IDLE bit
- coresight: etm3x: Always set tracer's device mode on target CPU
- coresight: etm4x: Always set tracer's device mode on target CPU
- coresight: Change device mode to atomic type
- nbd: defer config unlock in nbd_genl_connect
- wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
- macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
- powerpc/32: Fix unpaired stwcx. on interrupt exit
- powerpc/kdump: Fix size calculation for hot-removed memory ranges
- cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
- md: delete md_redundancy_group when array is becoming inactive
- scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
- drm/panthor: Fix potential memleak of vma structure
- ntfs3: init run lock for extend inode
- coresight: tmc: add the handle of the event to the path
- ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
- RDMA/rtrs: server: Fix error handling in get_or_create_srv
- dt-bindings: PCI: amlogic: Fix the register name of the DBI region
- iio: imu: bmi270: fix dev_err_probe error msg
- staging: most: remove broken i2c driver
- scsi: smartpqi: Fix device resources accessed after device removal
- scsi: stex: Fix reboot_notifier leak in probe error path
- nbd: defer config put in recv_work
- md: avoid repeated calls to del_gendisk
- md: fix rcu protection in md_wakeup_thread
- md: delete mddev kobj before deleting gendisk kobj
- regulator: core: disable supply if enabling main regulator fails
- perf/x86/intel: Correct large PEBS flag check
- perf/x86: Fix NULL event access and potential PEBS record loss
- io_uring: use WRITE_ONCE for user shared memory
- accel/amdxdna: Fix dma_fence leak when job is canceled
- ext4: correct the checking of quota files before moving extents
- wifi: ath12k: Fix timeout error during beacon stats retrieval
- mfd: da9055: Fix missing regmap_del_irq_chip() in error path
- wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
- wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
- locktorture: Fix memory leak in param_set_cpumask()
- efi/libstub: Fix page table access in 5-level to 4-level paging transition
- x86/boot: Fix page table access in 5-level to 4-level paging transition
- coresight: ETR: Fix ETR buffer use-after-free issue
- entry,unwind/deferred: Fix unwind_reset_info() placement
- ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
- ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
- ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
- libbpf: Fix parsing of multi-split BTF
- spi: tegra210-quad: Fix timeout handling
- cleanup: fix scoped_class()
- iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
- firmware: ti_sci: Set IO Isolation only if the firmware is capable
- drm/panthor: Fix UAF on kernel BO VA nodes
- drm/panthor: Fix race with suspend during unplug
- drm/panthor: Fix UAF race between device unplug and FW event processing
- drm/panthor: Fix group_free_queue() for partially initialized queues
- drm/panthor: Handle errors returned by drm_sched_entity_init()
- fs/9p: Don't open remote file with APPEND mode when writeback cache is used
- scsi: target: Fix LUN/device R/W and total command stats
- scsi: target: Do not write NUL characters into ASCII configfs output
- power: supply: apm_power: only unset own apm_get_power_status
- power: supply: wm831x: Check wm831x_set_bits() return value
- power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
- power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
- power: supply: max17040: Check iio_read_channel_processed() return code
- power: supply: cw2015: Check devm_delayed_work_autocancel() return code
- power: supply: rt5033_charger: Fix device node reference leaks
- timers/migration: Fix imbalanced NUMA trees
- timers/migration: Remove locking on group connection
- timers/migration: Convert "while" loops to use "for"
- perf record: skip synthesize event when open evsel failed
- perf lock contention: Load kernel map before lookup
- drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
- arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
- interconnect: debugfs: Fix incorrect error handling for NULL path
- accel/amdxdna: Fix incorrect command state for timed out job
- arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
- interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
- wifi: ath12k: unassign arvif on scan vdev create failure
- wifi: ath12k: fix error handling in creating hardware group
- wifi: ath12k: fix reusing m3 memory
- wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
- random: use offstack cpumask when necessary
- i3c: master: svc: Prevent incomplete IBI transaction
- i3c: fix refcount inconsistency in i3c_master_register
- pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
- pidfs: add missing PIDFD_INFO_SIZE_VER1
- accel/ivpu: Fix race condition when unbinding BOs
- drm: nova: select NOVA_CORE
- pinctrl: stm32: fix hwspinlock resource leak in probe function
- soc: qcom: smem: fix hwspinlock resource leak in probe error paths
- clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
- tools/nolibc/dirent: avoid errno in readdir_r
- tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
- accel/ivpu: Remove skip of dma unmap for imported buffers
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- task_work: Fix NMI race condition
- perf/x86/intel/cstate: Remove PC3 support from LunarLake
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
- bpf: Refactor stack map trace depth calculation into helper function
- perf: Remove get_perf_callchain() init_nr argument
- mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
- mtd: nand: relax ECC parameter validation check
- Revert "mtd: rawnand: marvell: fix layouts"
- wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
- drm/amdgpu/userq: fix SDMA and compute validation
- drm/amdgpu: add userq object va track helpers
- ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
- ARM: dts: renesas: gose: Remove superfluous port property
- RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
- arm64: dts: qcom: qcm2290: Fix camss register prop ordering
- arm64: dts: qcom: qcm2290: Add CCI node
- sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
- phy: mscc: Fix PTP for VSC8574 and VSC8572
- perf hwmon_pmu: Fix uninitialized variable warning
- arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
- arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
- arm64: dts: qcom: sm8650: set ufs as dma coherent
- arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
- arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
- arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
- arm64: dts: qcom: starqltechn: remove extra empty line
- arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
- arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
- arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
- firmware: imx: scu-irq: fix OF node leak in
- arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
- PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
- leds: upboard: Fix module alias
- wifi: ath12k: restore register window after global reset
- tools/power turbostat: Regression fix Uncore MHz printed in hex
- s390/ap: Don't leak debug feature files if AP instructions are not available
- scsi: ufs: core: Move the ufshcd_enable_intr() declaration
- s390/smp: Fix fallback CPU detection
- wifi: ath11k: fix peer HE MCS assignment
- wifi: ath11k: fix VHT MCS assignment
- crypto: hisilicon/qm - restore original qos values
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
- soc: qcom: gsbi: fix double disable caused by devm
- clk: qcom: camcc-sm7150: Fix PLL config of PLL2
- clk: qcom: camcc-sm6350: Fix PLL config of PLL2
- clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
- clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
- clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
- clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
- tty: serial: imx: Only configure the wake register when device is set as wakeup source
- tty: introduce tty_port_tty guard()
- uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
- PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
- arm64: dts: exynos: gs101: fix sysreg_apm reg property
- perf annotate: Check return value of evsel__get_arch() properly
- arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
- arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
- arm64: dts: imx8mp-venice-gw702x: remove off-board uart
- arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
- arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
- block/mq-deadline: Switch back to a single dispatch list
- block/mq-deadline: Introduce dd_start_request()
- crypto: aead - Fix reqsize handling
- firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
- iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
- inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
- inet: Avoid ehash lookup race in inet_ehash_insert()
- rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
- clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
- dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
- ntfs3: Fix uninit buffer allocated by __getname()
- ntfs3: fix uninit memory after failed mi_read in mi_format_new
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller
- irqchip/qcom-irq-combiner: Fix section mismatch
- irqchip/starfive-jh8100: Fix section mismatch
- irqchip/renesas-rzg2l: Fix section mismatch
- irqchip/imx-mu-msi: Fix section mismatch
- irqchip/irq-brcmstb-l2: Fix section mismatch
- irqchip/irq-bcm7120-l2: Fix section mismatch
- irqchip/irq-bcm7038-l1: Fix section mismatch
- irqchip/bcm2712-mip: Fix section mismatch
- irqchip/bcm2712-mip: Fix OF node reference imbalance
- sched/fair: Forfeit vruntime on yield
- wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
- wifi: ath12k: fix VHT MCS assignment
- wifi: ath12k: Fix MSDU buffer types handling in RX error path
- wifi: ath11k: restore register window after global reset
- wifi: ath10k: move recovery check logic into a new work
- perf parse-events: Fix legacy cache events if event is duplicated in a PMU
- accel/ivpu: Fix race condition when mapping dmabuf
- objtool: Fix weak symbol detection
- objtool: Fix standalone --hacks=jump_label
- remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
- HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
- drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
- clk: renesas: cpg-mssr: Read back reset registers to assure values latched
- clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
- pinctrl: renesas: rzg2l: Fix PMC restore
- ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
- perf bpf_counter: Fix opening of "any"(-1) CPU events
- USB: Fix descriptor count when handling invalid MBIM extended descriptor
- tools/nolibc: handle NULL wstatus argument to waitpid()
- bpf: Cleanup unused func args in rqspinlock implementation
- drm/vgem-fence: Fix potential deadlock on release
- accel/ivpu: Fix DCT active percent format
- accel/ivpu: Make function parameter names consistent
- accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
- accel/ivpu: Rework bind/unbind of imported buffers
- drm/panel: visionox-rm69299: Don't clear all mode flags
- drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
- accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
- gpu: host1x: Fix race in syncpt alloc/free
- smack: fix bug: setting task label silently ignores input garbage
- smack: fix bug: unprivileged task can create labels
- smack: fix bug: invalid label of unix socket file
- smack: always "instantiate" inode in smack_inode_init_security()
- smack: deduplicate xattr setting in smack_inode_init_security()
- smack: fix bug: SMACK64TRANSMUTE set on non-directory
- smack: deduplicate "does access rule request transmutation"
+ UBUNTU: Upstream stable to v6.17.13

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139960

Title:
Questing update: v6.17.13 upstream stable release

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Questing:
In Progress

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

smack: deduplicate "does access rule request transmutation"
smack: fix bug: SMACK64TRANSMUTE set on non-directory
smack: deduplicate xattr setting in smack_inode_init_security()
smack: always "instantiate" inode in smack_inode_init_security()
smack: fix bug: invalid label of unix socket file
smack: fix bug: unprivileged task can create labels
smack: fix bug: setting task label silently ignores input garbage
gpu: host1x: Fix race in syncpt alloc/free
accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
drm/panel: visionox-rm69299: Don't clear all mode flags
accel/ivpu: Rework bind/unbind of imported buffers
accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
accel/ivpu: Make function parameter names consistent
accel/ivpu: Fix DCT active percent format
drm/vgem-fence: Fix potential deadlock on release
bpf: Cleanup unused func args in rqspinlock implementation
tools/nolibc: handle NULL wstatus argument to waitpid()
USB: Fix descriptor count when handling invalid MBIM extended descriptor
perf bpf_counter: Fix opening of "any"(-1) CPU events
ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
pinctrl: renesas: rzg2l: Fix PMC restore
clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
clk: renesas: cpg-mssr: Read back reset registers to assure values latched
drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
objtool: Fix standalone --hacks=jump_label
objtool: Fix weak symbol detection
accel/ivpu: Fix race condition when mapping dmabuf
perf parse-events: Fix legacy cache events if event is duplicated in a PMU
wifi: ath10k: move recovery check logic into a new work
wifi: ath11k: restore register window after global reset
wifi: ath12k: Fix MSDU buffer types handling in RX error path
wifi: ath12k: fix VHT MCS assignment
wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
sched/fair: Forfeit vruntime on yield
irqchip/bcm2712-mip: Fix OF node reference imbalance
irqchip/bcm2712-mip: Fix section mismatch
irqchip/irq-bcm7038-l1: Fix section mismatch
irqchip/irq-bcm7120-l2: Fix section mismatch
irqchip/irq-brcmstb-l2: Fix section mismatch
irqchip/imx-mu-msi: Fix section mismatch
irqchip/renesas-rzg2l: Fix section mismatch
irqchip/starfive-jh8100: Fix section mismatch
irqchip/qcom-irq-combiner: Fix section mismatch
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
ntfs3: fix uninit memory after failed mi_read in mi_format_new
ntfs3: Fix uninit buffer allocated by __getname()
dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
crypto: aead - Fix reqsize handling
block/mq-deadline: Introduce dd_start_request()
block/mq-deadline: Switch back to a single dispatch list
arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
arm64: dts: imx8mp-venice-gw702x: remove off-board uart
arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
perf annotate: Check return value of evsel__get_arch() properly
arm64: dts: exynos: gs101: fix sysreg_apm reg property
PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
tty: introduce tty_port_tty guard()
tty: serial: imx: Only configure the wake register when device is set as wakeup source
clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
clk: qcom: camcc-sm6350: Fix PLL config of PLL2
clk: qcom: camcc-sm7150: Fix PLL config of PLL2
soc: qcom: gsbi: fix double disable caused by devm
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
crypto: hisilicon/qm - restore original qos values
wifi: ath11k: fix VHT MCS assignment
wifi: ath11k: fix peer HE MCS assignment
s390/smp: Fix fallback CPU detection
scsi: ufs: core: Move the ufshcd_enable_intr() declaration
s390/ap: Don't leak debug feature files if AP instructions are not available
tools/power turbostat: Regression fix Uncore MHz printed in hex
wifi: ath12k: restore register window after global reset
leds: upboard: Fix module alias
PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
firmware: imx: scu-irq: fix OF node leak in
arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
arm64: dts: qcom: starqltechn: remove extra empty line
arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
arm64: dts: qcom: sm8650: set ufs as dma coherent
arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
perf hwmon_pmu: Fix uninitialized variable warning
phy: mscc: Fix PTP for VSC8574 and VSC8572
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
arm64: dts: qcom: qcm2290: Add CCI node
arm64: dts: qcom: qcm2290: Fix camss register prop ordering
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
ARM: dts: renesas: gose: Remove superfluous port property
ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
drm/amdgpu: add userq object va track helpers
drm/amdgpu/userq: fix SDMA and compute validation
wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
Revert "mtd: rawnand: marvell: fix layouts"
mtd: nand: relax ECC parameter validation check
mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
perf: Remove get_perf_callchain() init_nr argument
bpf: Refactor stack map trace depth calculation into helper function
bpf: Fix stackmap overflow check in __bpf_get_stackid()
perf/x86/intel/cstate: Remove PC3 support from LunarLake
task_work: Fix NMI race condition
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
accel/ivpu: Remove skip of dma unmap for imported buffers
tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
tools/nolibc/dirent: avoid errno in readdir_r
clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
soc: qcom: smem: fix hwspinlock resource leak in probe error paths
pinctrl: stm32: fix hwspinlock resource leak in probe function
drm: nova: select NOVA_CORE
UBUNTU: [Config] select NOVA_CORE
gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
accel/ivpu: Fix race condition when unbinding BOs
pidfs: add missing PIDFD_INFO_SIZE_VER1
pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
i3c: fix refcount inconsistency in i3c_master_register
i3c: master: svc: Prevent incomplete IBI transaction
random: use offstack cpumask when necessary
wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
wifi: ath12k: fix reusing m3 memory
wifi: ath12k: fix error handling in creating hardware group
wifi: ath12k: unassign arvif on scan vdev create failure
interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
accel/amdxdna: Fix incorrect command state for timed out job
interconnect: debugfs: Fix incorrect error handling for NULL path
arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
perf lock contention: Load kernel map before lookup
perf record: skip synthesize event when open evsel failed
timers/migration: Convert "while" loops to use "for"
timers/migration: Remove locking on group connection
timers/migration: Fix imbalanced NUMA trees
power: supply: rt5033_charger: Fix device node reference leaks
power: supply: cw2015: Check devm_delayed_work_autocancel() return code
power: supply: max17040: Check iio_read_channel_processed() return code
power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
power: supply: wm831x: Check wm831x_set_bits() return value
power: supply: apm_power: only unset own apm_get_power_status
scsi: target: Do not write NUL characters into ASCII configfs output
scsi: target: Fix LUN/device R/W and total command stats
fs/9p: Don't open remote file with APPEND mode when writeback cache is used
drm/panthor: Handle errors returned by drm_sched_entity_init()
drm/panthor: Fix group_free_queue() for partially initialized queues
drm/panthor: Fix UAF race between device unplug and FW event processing
drm/panthor: Fix race with suspend during unplug
drm/panthor: Fix UAF on kernel BO VA nodes
firmware: ti_sci: Set IO Isolation only if the firmware is capable
iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
cleanup: fix scoped_class()
spi: tegra210-quad: Fix timeout handling
libbpf: Fix parsing of multi-split BTF
ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
entry,unwind/deferred: Fix unwind_reset_info() placement
coresight: ETR: Fix ETR buffer use-after-free issue
x86/boot: Fix page table access in 5-level to 4-level paging transition
efi/libstub: Fix page table access in 5-level to 4-level paging transition
locktorture: Fix memory leak in param_set_cpumask()
wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
wifi: ath12k: Fix timeout error during beacon stats retrieval
ext4: correct the checking of quota files before moving extents
accel/amdxdna: Fix dma_fence leak when job is canceled
io_uring: use WRITE_ONCE for user shared memory
perf/x86: Fix NULL event access and potential PEBS record loss
perf/x86/intel: Correct large PEBS flag check
regulator: core: disable supply if enabling main regulator fails
md: delete mddev kobj before deleting gendisk kobj
md: fix rcu protection in md_wakeup_thread
md: avoid repeated calls to del_gendisk
nbd: defer config put in recv_work
scsi: stex: Fix reboot_notifier leak in probe error path
scsi: smartpqi: Fix device resources accessed after device removal
staging: most: remove broken i2c driver
UBUNTU: [Config] remove most i2c driver
iio: imu: bmi270: fix dev_err_probe error msg
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
RDMA/rtrs: server: Fix error handling in get_or_create_srv
ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
coresight: tmc: add the handle of the event to the path
ntfs3: init run lock for extend inode
drm/panthor: Fix potential memleak of vma structure
scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
md: delete md_redundancy_group when array is becoming inactive
cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
powerpc/kdump: Fix size calculation for hot-removed memory ranges
powerpc/32: Fix unpaired stwcx. on interrupt exit
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
nbd: defer config unlock in nbd_genl_connect
coresight: Change device mode to atomic type
coresight: etm4x: Always set tracer's device mode on target CPU
coresight: etm3x: Always set tracer's device mode on target CPU
coresight: etm4x: Correct polling IDLE bit
coresight: etm4x: Add context synchronization before enabling trace
coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
perf tools: Fix missing feature check for inherit + SAMPLE_READ
drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
clk: renesas: r9a09g077: Propagate rate changes to parent clocks
clk: renesas: r9a06g032: Fix memory leak in error path
lib/vsprintf: Check pointer before dereferencing in time_and_date()
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ocfs2: use correct endian in ocfs2_dinode_has_extents
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
accel/amdxdna: Clear mailbox interrupt register during channel creation
accel/amdxdna: Fix deadlock between context destroy and job timeout
bpf: Free special fields when update [lru_,]percpu_hash maps
PCI: keystone: Exit ks_pcie_probe() for invalid mode
arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
crypto: iaa - Fix incorrect return value in save_iaa_wq()
s390/fpu: Fix false-positive kmsan report in fpu_vstl()
arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
ps3disk: use memcpy_{from,to}_bvec index
PCI: Prevent resource tree corruption when BAR resize fails
bpf: Prevent nesting overflow in bpf_try_get_buffers
bpf: Handle return value of ftrace_set_filter_ip in register_fentry
selftests/bpf: Fix failure paths in send_signal test
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
mshv: Fix deposit memory in MSHV_ROOT_HVCALL
mshv: Fix create memory region overlap check
watchdog: wdat_wdt: Fix ACPI table leak in probe function
watchdog: starfive: Fix resource leak in probe error path
fuse_ctl_add_conn(): fix nlink breakage in case of early failure
tracefs: fix a leak in eventfs_create_events_dir()
NFSD/blocklayout: Fix minlength check in proc_layoutget
arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
block/blk-throttle: Fix throttle slice time for SSDs
drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
drm/msm/a2xx: stop over-complaining about the legacy firmware
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
net: stmmac: dwmac-sophgo: Add phy interface filter
bpf: Fix invalid prog->stats access when update_effective_progs fails
powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
drm/msm/a6xx: Flush LRZ cache before PT switch
drm/msm/a6xx: Fix the gemnoc workaround
drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
spi: sophgo: Fix incorrect use of bus width value macros
ipv6: clear RA flags when adding a static route
perf arm_spe: Fix memset subclass in operation
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
scsi: qla2xxx: Fix improper freeing of purex item
net: phy: realtek: create rtl8211f_config_rgmii_delay()
iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
wifi: mac80211: fix CMAC functions not handling errors
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
of/fdt: Consolidate duplicate code into helper functions
of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
phy: freescale: Initialize priv->lock
phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
ASoC: SDCA: Fix missing dash in HIDE DisCo property
selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
net: phy: adin1100: Fix software power-down ready condition
cpuset: Treat cpusets in attaching as populated
clk: spacemit: Set clk_hw_onecell_data::num before using flex array
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
RAS: Report all ARM processor CPER information to userspace
ima: Handle error code returned by ima_filter_rule_match()
usb: chaoskey: fix locking for O_NONBLOCK
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
regulator: pca9450: Fix error code in probe()
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: ccree - Correctly handle return of sg_nents_for_len
PM / devfreq: hisi: Fix potential UAF in OPP handling
RISC-V: KVM: Fix guest page fault within HLV* instructions
erofs: correct FSDAX detection
erofs: limit the level of fs stacking for file-backed mounts
RDMA/bnxt_re: Fix the inline size for GenP7 devices
RDMA/bnxt_re: Pass correct flag for dma mr creation
crypto: ahash - Fix crypto_ahash_import with partial block data
crypto: ahash - Zero positive err value in ahash_update_finish
ASoC: tas2781: correct the wrong period
wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
wifi: mt76: mt7921: add MBSSID support
Revert "wifi: mt76: mt792x: improve monitor interface handling"
wifi: mt76: mt7996: fix max nss value when getting rx chainmask
wifi: mt76: mt7996: fix implicit beamforming support for mt7992
wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
wifi: mt76: mt7996: fix teardown command for an MLD peer
wifi: mt76: mt7996: set link_valid field when initializing wcid
wifi: mt76: mt7996: fix MLD group index assignment
wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
wifi: mt76: mt7996: skip deflink accounting for offchannel links
wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
btrfs: fix double free of qgroup record after failure to add delayed ref head
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
btrfs: fix leaf leak in an error path in btrfs_del_items()
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
drm/nouveau: restrict the flush page to a 32-bit address
um: Don't rename vmap to kernel_vmap
iomap: always run error completions in user context
wifi: ieee80211: correct FILS status codes
backlight: led-bl: Add devlink to supplier LEDs
backlight: lp855x: Fix lp855x.h kernel-doc warnings
iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
drm/panthor: Avoid adding of kernel BOs to extobj list
clocksource/drivers/ralink: Fix resource leaks in init error path
clocksource/drivers/stm: Fix double deregistration on probe failure
clocksource/drivers/nxp-stm: Fix section mismatches
clocksource/drivers/nxp-stm: Prevent driver unbind
ASoC: nau8325: use simple i2c probe function
ASoC: nau8325: add missing build config
UBUNTU: [Config] enable NAU8325 codec
gfs2: Prevent recursive memory reclaim
ASoC: fsl_xcvr: clear the channel status control memory
firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
UBUNTU: [Config] enable AMCC QT2025 PHY driver
greybus: gb-beagleplay: Fix timeout handling in bootloader functions
misc: rp1: Fix an error handling path in rp1_probe()
drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
hwmon: sy7636a: Fix regulator_enable resource leak on error path
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
ublk: prevent invalid access with DEBUG
ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
virtio_vdpa: fix misleading return in void function
virtio: fix typo in virtio_device_ready() comment
virtio: fix whitespace in virtio_config_ops
virtio: fix grammar in virtio_queue_info docs
virtio: fix virtqueue_set_affinity() docs
vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
vhost: Fix kthread worker cgroup failure handling
vdpa/pds: use %pe for ERR_PTR() in event handler registration
virtio: clean up features qword/dword terms
ASoC: Intel: catpt: Fix error path in hw_params()
spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
iavf: Implement settime64 with -EOPNOTSUPP
net: stmmac: fix rx limit check in stmmac_rx_zc()
mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
vfio/pci: Use RCU for error/request triggers to avoid circular locking
net: phy: aquantia: check for NVMEM deferral
selftests: bonding: add delay before each xvlan_over_bond connectivity check
net: netpoll: initialize work queue before error checks
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
rqspinlock: Enclose lock/unlock within lock entry acquisitions
rqspinlock: Use trylock fallback when per-CPU rqnode is busy
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
md/raid5: fix IO hang when array is broken with IO inflight
clk: keystone: fix compile testing
net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
net: dsa: b53: fix extracting VID from entry for BCM5325/65
net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
net: dsa: b53: move reading ARL entries into their own function
net: dsa: b53: move writing ARL entries into their own functions
net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
net: dsa: b53: split reading search entry into their own functions
net: dsa: b53: move ARL entry functions into ops struct
net: dsa: b53: add support for 5389/5397/5398 ARL entry format
net: dsa: b53: use same ARL search result offset for BCM5325/65
net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
net: dsa: b53: add support for bcm63xx ARL entry format
net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
net: dsa: b53: fix BCM5325/65 ARL entry VIDs
net: hsr: create an API to get hsr port type
net: dsa: xrs700x: reject unsupported HSR configurations
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
perf jitdump: Add sym/str-tables to build-ID generation
perf tools: Mark split kallsyms DSOs as loaded
perf tools: Fix split kallsyms DSO counting
perf hist: In init, ensure mem_info is put on error paths
pinctrl: single: Fix incorrect type for error return variable
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
9p: fix cache/debug options printing in v9fs_show_options
sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
sched/core: Fix psi_dequeue() for Proxy Execution
platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
rtc: amlogic-a4: fix double free caused by devm
kbuild: install-extmod-build: Fix when given dir outside the build dir
kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
NFS: Avoid changing nlink when file removes and attribute updates race
fs/nls: Fix utf16 to utf8 conversion
NFS: Initialise verifiers for visible dentries in readdir and lookup
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
panthor: save task pid and comm in panthor_group
drm/panthor: Prevent potential UAF in group creation
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
NFS: Fix inheritance of the block sizes when automounting
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
ASoC: amd: acp: Audio is not resuming after s0ix
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
f2fs: revert summary entry count from 2048 to 512 in 16kb block support
blk-mq: Abort suspend when wakeup events are pending
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
block: fix memory leak in __blkdev_issue_zero_pages
nvme-auth: use kvfree() for memory allocated with kvcalloc()
drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
regulator: fixed: Rely on the core freeing the enable GPIO
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
drm/nouveau: refactor deprecated strcpy
drm/nouveau: fix circular dep oops from vendored i2c encoder
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
docs: hwmon: fix link to g762 devicetree binding
i2c: spacemit: fix detect issue
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
ALSA: uapi: Fix typo in asound.h comment
drm/amdkfd: Use huge page size to check split svm range alignment
rtc: gamecube: Check the return value of ioremap()
rtc: max31335: Fix ignored return value in set_alarm
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
drm/xe/fbdev: use the same 64-byte stride alignment as i915
drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
ASoC: amd: acp: update tdm channels for specific DAI
dm-raid: fix possible NULL dereference with undefined raid type
dm log-writes: Add missing set_freezable() for freezable kthread
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
perf/core: Fix missing read event generation on task exit
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
ocfs2: fix memory leak in ocfs2_merge_rec_left()
perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
usb: phy: Initialize struct usb_phy list_head
usb: typec: ucsi: fix use-after-free caused by uec->work
usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
ALSA: dice: fix buffer overflow in detect_stream_formats()
ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
ALSA: wavefront: Fix integer overflow in sample size validation
ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
UBUNTU: Upstream stable to v6.17.13

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139960/+subscriptions