[Bug 2139960] [NEW] Questing update: v6.17.13 upstream stable release

Public bug reported:


SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

smack: deduplicate "does access rule request transmutation"
smack: fix bug: SMACK64TRANSMUTE set on non-directory
smack: deduplicate xattr setting in smack_inode_init_security()
smack: always "instantiate" inode in smack_inode_init_security()
smack: fix bug: invalid label of unix socket file
smack: fix bug: unprivileged task can create labels
smack: fix bug: setting task label silently ignores input garbage
gpu: host1x: Fix race in syncpt alloc/free
accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
drm/panel: visionox-rm69299: Don't clear all mode flags
accel/ivpu: Rework bind/unbind of imported buffers
accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
accel/ivpu: Make function parameter names consistent
accel/ivpu: Fix DCT active percent format
drm/vgem-fence: Fix potential deadlock on release
bpf: Cleanup unused func args in rqspinlock implementation
tools/nolibc: handle NULL wstatus argument to waitpid()
USB: Fix descriptor count when handling invalid MBIM extended descriptor
perf bpf_counter: Fix opening of "any"(-1) CPU events
ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
pinctrl: renesas: rzg2l: Fix PMC restore
clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
clk: renesas: cpg-mssr: Read back reset registers to assure values latched
drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
objtool: Fix standalone --hacks=jump_label
objtool: Fix weak symbol detection
accel/ivpu: Fix race condition when mapping dmabuf
perf parse-events: Fix legacy cache events if event is duplicated in a PMU
wifi: ath10k: move recovery check logic into a new work
wifi: ath11k: restore register window after global reset
wifi: ath12k: Fix MSDU buffer types handling in RX error path
wifi: ath12k: fix VHT MCS assignment
wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
sched/fair: Forfeit vruntime on yield
irqchip/bcm2712-mip: Fix OF node reference imbalance
irqchip/bcm2712-mip: Fix section mismatch
irqchip/irq-bcm7038-l1: Fix section mismatch
irqchip/irq-bcm7120-l2: Fix section mismatch
irqchip/irq-brcmstb-l2: Fix section mismatch
irqchip/imx-mu-msi: Fix section mismatch
irqchip/renesas-rzg2l: Fix section mismatch
irqchip/starfive-jh8100: Fix section mismatch
irqchip/qcom-irq-combiner: Fix section mismatch
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
ntfs3: fix uninit memory after failed mi_read in mi_format_new
ntfs3: Fix uninit buffer allocated by __getname()
dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
crypto: aead - Fix reqsize handling
block/mq-deadline: Introduce dd_start_request()
block/mq-deadline: Switch back to a single dispatch list
arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
arm64: dts: imx8mp-venice-gw702x: remove off-board uart
arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
perf annotate: Check return value of evsel__get_arch() properly
arm64: dts: exynos: gs101: fix sysreg_apm reg property
PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
tty: introduce tty_port_tty guard()
tty: serial: imx: Only configure the wake register when device is set as wakeup source
clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
clk: qcom: camcc-sm6350: Fix PLL config of PLL2
clk: qcom: camcc-sm7150: Fix PLL config of PLL2
soc: qcom: gsbi: fix double disable caused by devm
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
crypto: hisilicon/qm - restore original qos values
wifi: ath11k: fix VHT MCS assignment
wifi: ath11k: fix peer HE MCS assignment
s390/smp: Fix fallback CPU detection
scsi: ufs: core: Move the ufshcd_enable_intr() declaration
s390/ap: Don't leak debug feature files if AP instructions are not available
tools/power turbostat: Regression fix Uncore MHz printed in hex
wifi: ath12k: restore register window after global reset
leds: upboard: Fix module alias
PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
firmware: imx: scu-irq: fix OF node leak in
arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
arm64: dts: qcom: starqltechn: remove extra empty line
arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
arm64: dts: qcom: sm8650: set ufs as dma coherent
arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
perf hwmon_pmu: Fix uninitialized variable warning
phy: mscc: Fix PTP for VSC8574 and VSC8572
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
arm64: dts: qcom: qcm2290: Add CCI node
arm64: dts: qcom: qcm2290: Fix camss register prop ordering
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
ARM: dts: renesas: gose: Remove superfluous port property
ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
drm/amdgpu: add userq object va track helpers
drm/amdgpu/userq: fix SDMA and compute validation
wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
Revert "mtd: rawnand: marvell: fix layouts"
mtd: nand: relax ECC parameter validation check
mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
perf: Remove get_perf_callchain() init_nr argument
bpf: Refactor stack map trace depth calculation into helper function
bpf: Fix stackmap overflow check in __bpf_get_stackid()
perf/x86/intel/cstate: Remove PC3 support from LunarLake
task_work: Fix NMI race condition
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
accel/ivpu: Remove skip of dma unmap for imported buffers
tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
tools/nolibc/dirent: avoid errno in readdir_r
clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
soc: qcom: smem: fix hwspinlock resource leak in probe error paths
pinctrl: stm32: fix hwspinlock resource leak in probe function
drm: nova: select NOVA_CORE
UBUNTU: [Config] select NOVA_CORE
gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
accel/ivpu: Fix race condition when unbinding BOs
pidfs: add missing PIDFD_INFO_SIZE_VER1
pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
i3c: fix refcount inconsistency in i3c_master_register
i3c: master: svc: Prevent incomplete IBI transaction
random: use offstack cpumask when necessary
wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
wifi: ath12k: fix reusing m3 memory
wifi: ath12k: fix error handling in creating hardware group
wifi: ath12k: unassign arvif on scan vdev create failure
interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
accel/amdxdna: Fix incorrect command state for timed out job
interconnect: debugfs: Fix incorrect error handling for NULL path
arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
perf lock contention: Load kernel map before lookup
perf record: skip synthesize event when open evsel failed
timers/migration: Convert "while" loops to use "for"
timers/migration: Remove locking on group connection
timers/migration: Fix imbalanced NUMA trees
power: supply: rt5033_charger: Fix device node reference leaks
power: supply: cw2015: Check devm_delayed_work_autocancel() return code
power: supply: max17040: Check iio_read_channel_processed() return code
power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
power: supply: wm831x: Check wm831x_set_bits() return value
power: supply: apm_power: only unset own apm_get_power_status
scsi: target: Do not write NUL characters into ASCII configfs output
scsi: target: Fix LUN/device R/W and total command stats
fs/9p: Don't open remote file with APPEND mode when writeback cache is used
drm/panthor: Handle errors returned by drm_sched_entity_init()
drm/panthor: Fix group_free_queue() for partially initialized queues
drm/panthor: Fix UAF race between device unplug and FW event processing
drm/panthor: Fix race with suspend during unplug
drm/panthor: Fix UAF on kernel BO VA nodes
firmware: ti_sci: Set IO Isolation only if the firmware is capable
iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
cleanup: fix scoped_class()
spi: tegra210-quad: Fix timeout handling
libbpf: Fix parsing of multi-split BTF
ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
entry,unwind/deferred: Fix unwind_reset_info() placement
coresight: ETR: Fix ETR buffer use-after-free issue
x86/boot: Fix page table access in 5-level to 4-level paging transition
efi/libstub: Fix page table access in 5-level to 4-level paging transition
locktorture: Fix memory leak in param_set_cpumask()
wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
wifi: ath12k: Fix timeout error during beacon stats retrieval
ext4: correct the checking of quota files before moving extents
accel/amdxdna: Fix dma_fence leak when job is canceled
io_uring: use WRITE_ONCE for user shared memory
perf/x86: Fix NULL event access and potential PEBS record loss
perf/x86/intel: Correct large PEBS flag check
regulator: core: disable supply if enabling main regulator fails
md: delete mddev kobj before deleting gendisk kobj
md: fix rcu protection in md_wakeup_thread
md: avoid repeated calls to del_gendisk
nbd: defer config put in recv_work
scsi: stex: Fix reboot_notifier leak in probe error path
scsi: smartpqi: Fix device resources accessed after device removal
staging: most: remove broken i2c driver
UBUNTU: [Config] remove most i2c driver
iio: imu: bmi270: fix dev_err_probe error msg
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
RDMA/rtrs: server: Fix error handling in get_or_create_srv
ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
coresight: tmc: add the handle of the event to the path
ntfs3: init run lock for extend inode
drm/panthor: Fix potential memleak of vma structure
scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
md: delete md_redundancy_group when array is becoming inactive
cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
powerpc/kdump: Fix size calculation for hot-removed memory ranges
powerpc/32: Fix unpaired stwcx. on interrupt exit
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
nbd: defer config unlock in nbd_genl_connect
coresight: Change device mode to atomic type
coresight: etm4x: Always set tracer's device mode on target CPU
coresight: etm3x: Always set tracer's device mode on target CPU
coresight: etm4x: Correct polling IDLE bit
coresight: etm4x: Add context synchronization before enabling trace
coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
perf tools: Fix missing feature check for inherit + SAMPLE_READ
drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
clk: renesas: r9a09g077: Propagate rate changes to parent clocks
clk: renesas: r9a06g032: Fix memory leak in error path
lib/vsprintf: Check pointer before dereferencing in time_and_date()
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ocfs2: use correct endian in ocfs2_dinode_has_extents
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
accel/amdxdna: Clear mailbox interrupt register during channel creation
accel/amdxdna: Fix deadlock between context destroy and job timeout
bpf: Free special fields when update [lru_,]percpu_hash maps
PCI: keystone: Exit ks_pcie_probe() for invalid mode
arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
crypto: iaa - Fix incorrect return value in save_iaa_wq()
s390/fpu: Fix false-positive kmsan report in fpu_vstl()
arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
ps3disk: use memcpy_{from,to}_bvec index
PCI: Prevent resource tree corruption when BAR resize fails
bpf: Prevent nesting overflow in bpf_try_get_buffers
bpf: Handle return value of ftrace_set_filter_ip in register_fentry
selftests/bpf: Fix failure paths in send_signal test
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
mshv: Fix deposit memory in MSHV_ROOT_HVCALL
mshv: Fix create memory region overlap check
watchdog: wdat_wdt: Fix ACPI table leak in probe function
watchdog: starfive: Fix resource leak in probe error path
fuse_ctl_add_conn(): fix nlink breakage in case of early failure
tracefs: fix a leak in eventfs_create_events_dir()
NFSD/blocklayout: Fix minlength check in proc_layoutget
arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
block/blk-throttle: Fix throttle slice time for SSDs
drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
drm/msm/a2xx: stop over-complaining about the legacy firmware
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
net: stmmac: dwmac-sophgo: Add phy interface filter
bpf: Fix invalid prog->stats access when update_effective_progs fails
powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
drm/msm/a6xx: Flush LRZ cache before PT switch
drm/msm/a6xx: Fix the gemnoc workaround
drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
spi: sophgo: Fix incorrect use of bus width value macros
ipv6: clear RA flags when adding a static route
perf arm_spe: Fix memset subclass in operation
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
scsi: qla2xxx: Fix improper freeing of purex item
net: phy: realtek: create rtl8211f_config_rgmii_delay()
iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
wifi: mac80211: fix CMAC functions not handling errors
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
of/fdt: Consolidate duplicate code into helper functions
of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
phy: freescale: Initialize priv->lock
phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
ASoC: SDCA: Fix missing dash in HIDE DisCo property
selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
net: phy: adin1100: Fix software power-down ready condition
cpuset: Treat cpusets in attaching as populated
clk: spacemit: Set clk_hw_onecell_data::num before using flex array
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
RAS: Report all ARM processor CPER information to userspace
ima: Handle error code returned by ima_filter_rule_match()
usb: chaoskey: fix locking for O_NONBLOCK
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
regulator: pca9450: Fix error code in probe()
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: ccree - Correctly handle return of sg_nents_for_len
PM / devfreq: hisi: Fix potential UAF in OPP handling
RISC-V: KVM: Fix guest page fault within HLV* instructions
erofs: correct FSDAX detection
erofs: limit the level of fs stacking for file-backed mounts
RDMA/bnxt_re: Fix the inline size for GenP7 devices
RDMA/bnxt_re: Pass correct flag for dma mr creation
crypto: ahash - Fix crypto_ahash_import with partial block data
crypto: ahash - Zero positive err value in ahash_update_finish
ASoC: tas2781: correct the wrong period
wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
wifi: mt76: mt7921: add MBSSID support
Revert "wifi: mt76: mt792x: improve monitor interface handling"
wifi: mt76: mt7996: fix max nss value when getting rx chainmask
wifi: mt76: mt7996: fix implicit beamforming support for mt7992
wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
wifi: mt76: mt7996: fix teardown command for an MLD peer
wifi: mt76: mt7996: set link_valid field when initializing wcid
wifi: mt76: mt7996: fix MLD group index assignment
wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
wifi: mt76: mt7996: skip deflink accounting for offchannel links
wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
btrfs: fix double free of qgroup record after failure to add delayed ref head
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
btrfs: fix leaf leak in an error path in btrfs_del_items()
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
drm/nouveau: restrict the flush page to a 32-bit address
um: Don't rename vmap to kernel_vmap
iomap: always run error completions in user context
wifi: ieee80211: correct FILS status codes
backlight: led-bl: Add devlink to supplier LEDs
backlight: lp855x: Fix lp855x.h kernel-doc warnings
iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
drm/panthor: Avoid adding of kernel BOs to extobj list
clocksource/drivers/ralink: Fix resource leaks in init error path
clocksource/drivers/stm: Fix double deregistration on probe failure
clocksource/drivers/nxp-stm: Fix section mismatches
clocksource/drivers/nxp-stm: Prevent driver unbind
ASoC: nau8325: use simple i2c probe function
ASoC: nau8325: add missing build config
UBUNTU: [Config] enable NAU8325 codec
gfs2: Prevent recursive memory reclaim
ASoC: fsl_xcvr: clear the channel status control memory
firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
UBUNTU: [Config] enable AMCC QT2025 PHY driver
greybus: gb-beagleplay: Fix timeout handling in bootloader functions
misc: rp1: Fix an error handling path in rp1_probe()
drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
hwmon: sy7636a: Fix regulator_enable resource leak on error path
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
ublk: prevent invalid access with DEBUG
ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
virtio_vdpa: fix misleading return in void function
virtio: fix typo in virtio_device_ready() comment
virtio: fix whitespace in virtio_config_ops
virtio: fix grammar in virtio_queue_info docs
virtio: fix virtqueue_set_affinity() docs
vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
vhost: Fix kthread worker cgroup failure handling
vdpa/pds: use %pe for ERR_PTR() in event handler registration
virtio: clean up features qword/dword terms
ASoC: Intel: catpt: Fix error path in hw_params()
spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
iavf: Implement settime64 with -EOPNOTSUPP
net: stmmac: fix rx limit check in stmmac_rx_zc()
mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
vfio/pci: Use RCU for error/request triggers to avoid circular locking
net: phy: aquantia: check for NVMEM deferral
selftests: bonding: add delay before each xvlan_over_bond connectivity check
net: netpoll: initialize work queue before error checks
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
rqspinlock: Enclose lock/unlock within lock entry acquisitions
rqspinlock: Use trylock fallback when per-CPU rqnode is busy
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
md/raid5: fix IO hang when array is broken with IO inflight
clk: keystone: fix compile testing
net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
net: dsa: b53: fix extracting VID from entry for BCM5325/65
net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
net: dsa: b53: move reading ARL entries into their own function
net: dsa: b53: move writing ARL entries into their own functions
net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
net: dsa: b53: split reading search entry into their own functions
net: dsa: b53: move ARL entry functions into ops struct
net: dsa: b53: add support for 5389/5397/5398 ARL entry format
net: dsa: b53: use same ARL search result offset for BCM5325/65
net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
net: dsa: b53: add support for bcm63xx ARL entry format
net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
net: dsa: b53: fix BCM5325/65 ARL entry VIDs
net: hsr: create an API to get hsr port type
net: dsa: xrs700x: reject unsupported HSR configurations
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
perf jitdump: Add sym/str-tables to build-ID generation
perf tools: Mark split kallsyms DSOs as loaded
perf tools: Fix split kallsyms DSO counting
perf hist: In init, ensure mem_info is put on error paths
pinctrl: single: Fix incorrect type for error return variable
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
9p: fix cache/debug options printing in v9fs_show_options
sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
sched/core: Fix psi_dequeue() for Proxy Execution
platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
rtc: amlogic-a4: fix double free caused by devm
kbuild: install-extmod-build: Fix when given dir outside the build dir
kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
NFS: Avoid changing nlink when file removes and attribute updates race
fs/nls: Fix utf16 to utf8 conversion
NFS: Initialise verifiers for visible dentries in readdir and lookup
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
panthor: save task pid and comm in panthor_group
drm/panthor: Prevent potential UAF in group creation
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
NFS: Fix inheritance of the block sizes when automounting
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
ASoC: amd: acp: Audio is not resuming after s0ix
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
f2fs: revert summary entry count from 2048 to 512 in 16kb block support
blk-mq: Abort suspend when wakeup events are pending
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
block: fix memory leak in __blkdev_issue_zero_pages
nvme-auth: use kvfree() for memory allocated with kvcalloc()
drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
regulator: fixed: Rely on the core freeing the enable GPIO
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
drm/nouveau: refactor deprecated strcpy
drm/nouveau: fix circular dep oops from vendored i2c encoder
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
docs: hwmon: fix link to g762 devicetree binding
i2c: spacemit: fix detect issue
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
ALSA: uapi: Fix typo in asound.h comment
drm/amdkfd: Use huge page size to check split svm range alignment
rtc: gamecube: Check the return value of ioremap()
rtc: max31335: Fix ignored return value in set_alarm
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
drm/xe/fbdev: use the same 64-byte stride alignment as i915
drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
ASoC: amd: acp: update tdm channels for specific DAI
dm-raid: fix possible NULL dereference with undefined raid type
dm log-writes: Add missing set_freezable() for freezable kthread
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
perf/core: Fix missing read event generation on task exit
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
ocfs2: fix memory leak in ocfs2_merge_rec_left()
perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
usb: phy: Initialize struct usb_phy list_head
usb: typec: ucsi: fix use-after-free caused by uec->work
usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
ALSA: dice: fix buffer overflow in detect_stream_formats()
ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
ALSA: wavefront: Fix integer overflow in sample size validation
ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
UBUNTU: Upstream stable to v6.17.13

** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid

** Affects: linux (Ubuntu Questing)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
Status: New => Confirmed

** Also affects: linux (Ubuntu Questing)
Importance: Undecided
Status: New

** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Questing)
Importance: Undecided => Medium

** Changed in: linux (Ubuntu Questing)
Status: New => In Progress

** Changed in: linux (Ubuntu Questing)
Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:


SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

-
+ smack: deduplicate "does access rule request transmutation"
+ smack: fix bug: SMACK64TRANSMUTE set on non-directory
+ smack: deduplicate xattr setting in smack_inode_init_security()
+ smack: always "instantiate" inode in smack_inode_init_security()
+ smack: fix bug: invalid label of unix socket file
+ smack: fix bug: unprivileged task can create labels
+ smack: fix bug: setting task label silently ignores input garbage
+ gpu: host1x: Fix race in syncpt alloc/free
+ accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
+ drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
+ drm/panel: visionox-rm69299: Don't clear all mode flags
+ accel/ivpu: Rework bind/unbind of imported buffers
+ accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
+ accel/ivpu: Make function parameter names consistent
+ accel/ivpu: Fix DCT active percent format
+ drm/vgem-fence: Fix potential deadlock on release
+ bpf: Cleanup unused func args in rqspinlock implementation
+ tools/nolibc: handle NULL wstatus argument to waitpid()
+ USB: Fix descriptor count when handling invalid MBIM extended descriptor
+ perf bpf_counter: Fix opening of "any"(-1) CPU events
+ ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
+ pinctrl: renesas: rzg2l: Fix PMC restore
+ clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
+ clk: renesas: cpg-mssr: Read back reset registers to assure values latched
+ drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
+ HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
+ remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
+ objtool: Fix standalone --hacks=jump_label
+ objtool: Fix weak symbol detection
+ accel/ivpu: Fix race condition when mapping dmabuf
+ perf parse-events: Fix legacy cache events if event is duplicated in a PMU
+ wifi: ath10k: move recovery check logic into a new work
+ wifi: ath11k: restore register window after global reset
+ wifi: ath12k: Fix MSDU buffer types handling in RX error path
+ wifi: ath12k: fix VHT MCS assignment
+ wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
+ sched/fair: Forfeit vruntime on yield
+ irqchip/bcm2712-mip: Fix OF node reference imbalance
+ irqchip/bcm2712-mip: Fix section mismatch
+ irqchip/irq-bcm7038-l1: Fix section mismatch
+ irqchip/irq-bcm7120-l2: Fix section mismatch
+ irqchip/irq-brcmstb-l2: Fix section mismatch
+ irqchip/imx-mu-msi: Fix section mismatch
+ irqchip/renesas-rzg2l: Fix section mismatch
+ irqchip/starfive-jh8100: Fix section mismatch
+ irqchip/qcom-irq-combiner: Fix section mismatch
+ crypto: authenc - Correctly pass EINPROGRESS back up to the caller
+ ntfs3: fix uninit memory after failed mi_read in mi_format_new
+ ntfs3: Fix uninit buffer allocated by __getname()
+ dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
+ clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
+ rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
+ inet: Avoid ehash lookup race in inet_ehash_insert()
+ inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
+ iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
+ firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
+ crypto: aead - Fix reqsize handling
+ block/mq-deadline: Introduce dd_start_request()
+ block/mq-deadline: Switch back to a single dispatch list
+ arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
+ arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
+ arm64: dts: imx8mp-venice-gw702x: remove off-board uart
+ arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
+ arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
+ perf annotate: Check return value of evsel__get_arch() properly
+ arm64: dts: exynos: gs101: fix sysreg_apm reg property
+ PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
+ uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
+ tty: introduce tty_port_tty guard()
+ tty: serial: imx: Only configure the wake register when device is set as wakeup source
+ clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
+ clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
+ clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
+ clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
+ clk: qcom: camcc-sm6350: Fix PLL config of PLL2
+ clk: qcom: camcc-sm7150: Fix PLL config of PLL2
+ soc: qcom: gsbi: fix double disable caused by devm
+ crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
+ crypto: hisilicon/qm - restore original qos values
+ wifi: ath11k: fix VHT MCS assignment
+ wifi: ath11k: fix peer HE MCS assignment
+ s390/smp: Fix fallback CPU detection
+ scsi: ufs: core: Move the ufshcd_enable_intr() declaration
+ s390/ap: Don't leak debug feature files if AP instructions are not available
+ tools/power turbostat: Regression fix Uncore MHz printed in hex
+ wifi: ath12k: restore register window after global reset
+ leds: upboard: Fix module alias
+ PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
+ arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
+ firmware: imx: scu-irq: fix OF node leak in
+ arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
+ arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
+ arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
+ arm64: dts: qcom: starqltechn: remove extra empty line
+ arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
+ arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
+ arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
+ arm64: dts: qcom: sm8650: set ufs as dma coherent
+ arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
+ arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
+ perf hwmon_pmu: Fix uninitialized variable warning
+ phy: mscc: Fix PTP for VSC8574 and VSC8572
+ sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
+ arm64: dts: qcom: qcm2290: Add CCI node
+ arm64: dts: qcom: qcm2290: Fix camss register prop ordering
+ RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
+ ARM: dts: renesas: gose: Remove superfluous port property
+ ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
+ drm/amdgpu: add userq object va track helpers
+ drm/amdgpu/userq: fix SDMA and compute validation
+ wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
+ Revert "mtd: rawnand: marvell: fix layouts"
+ mtd: nand: relax ECC parameter validation check
+ mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
+ perf: Remove get_perf_callchain() init_nr argument
+ bpf: Refactor stack map trace depth calculation into helper function
+ bpf: Fix stackmap overflow check in __bpf_get_stackid()
+ perf/x86/intel/cstate: Remove PC3 support from LunarLake
+ task_work: Fix NMI race condition
+ x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
+ accel/ivpu: Remove skip of dma unmap for imported buffers
+ tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
+ tools/nolibc/dirent: avoid errno in readdir_r
+ clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
+ soc: qcom: smem: fix hwspinlock resource leak in probe error paths
+ pinctrl: stm32: fix hwspinlock resource leak in probe function
+ drm: nova: select NOVA_CORE
+ UBUNTU: [Config] select NOVA_CORE
+ gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
+ accel/ivpu: Fix race condition when unbinding BOs
+ pidfs: add missing PIDFD_INFO_SIZE_VER1
+ pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
+ i3c: fix refcount inconsistency in i3c_master_register
+ i3c: master: svc: Prevent incomplete IBI transaction
+ random: use offstack cpumask when necessary
+ wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
+ wifi: ath12k: fix reusing m3 memory
+ wifi: ath12k: fix error handling in creating hardware group
+ wifi: ath12k: unassign arvif on scan vdev create failure
+ interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
+ arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
+ accel/amdxdna: Fix incorrect command state for timed out job
+ interconnect: debugfs: Fix incorrect error handling for NULL path
+ arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
+ drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
+ perf lock contention: Load kernel map before lookup
+ perf record: skip synthesize event when open evsel failed
+ timers/migration: Convert "while" loops to use "for"
+ timers/migration: Remove locking on group connection
+ timers/migration: Fix imbalanced NUMA trees
+ power: supply: rt5033_charger: Fix device node reference leaks
+ power: supply: cw2015: Check devm_delayed_work_autocancel() return code
+ power: supply: max17040: Check iio_read_channel_processed() return code
+ power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
+ power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
+ power: supply: wm831x: Check wm831x_set_bits() return value
+ power: supply: apm_power: only unset own apm_get_power_status
+ scsi: target: Do not write NUL characters into ASCII configfs output
+ scsi: target: Fix LUN/device R/W and total command stats
+ fs/9p: Don't open remote file with APPEND mode when writeback cache is used
+ drm/panthor: Handle errors returned by drm_sched_entity_init()
+ drm/panthor: Fix group_free_queue() for partially initialized queues
+ drm/panthor: Fix UAF race between device unplug and FW event processing
+ drm/panthor: Fix race with suspend during unplug
+ drm/panthor: Fix UAF on kernel BO VA nodes
+ firmware: ti_sci: Set IO Isolation only if the firmware is capable
+ iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
+ cleanup: fix scoped_class()
+ spi: tegra210-quad: Fix timeout handling
+ libbpf: Fix parsing of multi-split BTF
+ ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
+ ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
+ ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
+ entry,unwind/deferred: Fix unwind_reset_info() placement
+ coresight: ETR: Fix ETR buffer use-after-free issue
+ x86/boot: Fix page table access in 5-level to 4-level paging transition
+ efi/libstub: Fix page table access in 5-level to 4-level paging transition
+ locktorture: Fix memory leak in param_set_cpumask()
+ wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
+ wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
+ mfd: da9055: Fix missing regmap_del_irq_chip() in error path
+ wifi: ath12k: Fix timeout error during beacon stats retrieval
+ ext4: correct the checking of quota files before moving extents
+ accel/amdxdna: Fix dma_fence leak when job is canceled
+ io_uring: use WRITE_ONCE for user shared memory
+ perf/x86: Fix NULL event access and potential PEBS record loss
+ perf/x86/intel: Correct large PEBS flag check
+ regulator: core: disable supply if enabling main regulator fails
+ md: delete mddev kobj before deleting gendisk kobj
+ md: fix rcu protection in md_wakeup_thread
+ md: avoid repeated calls to del_gendisk
+ nbd: defer config put in recv_work
+ scsi: stex: Fix reboot_notifier leak in probe error path
+ scsi: smartpqi: Fix device resources accessed after device removal
+ staging: most: remove broken i2c driver
+ UBUNTU: [Config] remove most i2c driver
+ iio: imu: bmi270: fix dev_err_probe error msg
+ dt-bindings: PCI: amlogic: Fix the register name of the DBI region
+ RDMA/rtrs: server: Fix error handling in get_or_create_srv
+ ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
+ coresight: tmc: add the handle of the event to the path
+ ntfs3: init run lock for extend inode
+ drm/panthor: Fix potential memleak of vma structure
+ scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
+ md: delete md_redundancy_group when array is becoming inactive
+ cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
+ powerpc/kdump: Fix size calculation for hot-removed memory ranges
+ powerpc/32: Fix unpaired stwcx. on interrupt exit
+ macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
+ wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
+ nbd: defer config unlock in nbd_genl_connect
+ coresight: Change device mode to atomic type
+ coresight: etm4x: Always set tracer's device mode on target CPU
+ coresight: etm3x: Always set tracer's device mode on target CPU
+ coresight: etm4x: Correct polling IDLE bit
+ coresight: etm4x: Add context synchronization before enabling trace
+ coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
+ perf tools: Fix missing feature check for inherit + SAMPLE_READ
+ drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
+ drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
+ clk: renesas: r9a09g077: Propagate rate changes to parent clocks
+ clk: renesas: r9a06g032: Fix memory leak in error path
+ lib/vsprintf: Check pointer before dereferencing in time_and_date()
+ ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
+ ocfs2: use correct endian in ocfs2_dinode_has_extents
+ ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
+ scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
+ leds: netxbig: Fix GPIO descriptor leak in error paths
+ accel/amdxdna: Clear mailbox interrupt register during channel creation
+ accel/amdxdna: Fix deadlock between context destroy and job timeout
+ bpf: Free special fields when update [lru_,]percpu_hash maps
+ PCI: keystone: Exit ks_pcie_probe() for invalid mode
+ arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
+ arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
+ arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
+ crypto: iaa - Fix incorrect return value in save_iaa_wq()
+ s390/fpu: Fix false-positive kmsan report in fpu_vstl()
+ arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
+ drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
+ ps3disk: use memcpy_{from,to}_bvec index
+ PCI: Prevent resource tree corruption when BAR resize fails
+ bpf: Prevent nesting overflow in bpf_try_get_buffers
+ bpf: Handle return value of ftrace_set_filter_ip in register_fentry
+ selftests/bpf: Fix failure paths in send_signal test
+ bpf: Check skb->transport_header is set in bpf_skb_check_mtu
+ mshv: Fix deposit memory in MSHV_ROOT_HVCALL
+ mshv: Fix create memory region overlap check
+ watchdog: wdat_wdt: Fix ACPI table leak in probe function
+ watchdog: starfive: Fix resource leak in probe error path
+ fuse_ctl_add_conn(): fix nlink breakage in case of early failure
+ tracefs: fix a leak in eventfs_create_events_dir()
+ NFSD/blocklayout: Fix minlength check in proc_layoutget
+ arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
+ arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
+ block/blk-throttle: Fix throttle slice time for SSDs
+ drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
+ drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
+ drm/msm/a2xx: stop over-complaining about the legacy firmware
+ wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
+ net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
+ net: stmmac: dwmac-sophgo: Add phy interface filter
+ bpf: Fix invalid prog->stats access when update_effective_progs fails
+ powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
+ powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
+ net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
+ fs/ntfs3: out1 also needs to put mi
+ fs/ntfs3: Prevent memory leaks in add sub record
+ drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
+ drm/msm/a6xx: Flush LRZ cache before PT switch
+ drm/msm/a6xx: Fix the gemnoc workaround
+ drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
+ spi: sophgo: Fix incorrect use of bus width value macros
+ ipv6: clear RA flags when adding a static route
+ perf arm_spe: Fix memset subclass in operation
+ pwm: bcm2835: Make sure the channel is enabled after pwm_request()
+ scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
+ scsi: qla2xxx: Fix improper freeing of purex item
+ net: phy: realtek: create rtl8211f_config_rgmii_delay()
+ iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
+ wifi: mac80211: fix CMAC functions not handling errors
+ mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
+ mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
+ of/fdt: Consolidate duplicate code into helper functions
+ of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
+ leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
+ phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
+ phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
+ phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
+ phy: freescale: Initialize priv->lock
+ phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
+ phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
+ phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
+ ASoC: SDCA: Fix missing dash in HIDE DisCo property
+ selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
+ net: phy: adin1100: Fix software power-down ready condition
+ cpuset: Treat cpusets in attaching as populated
+ clk: spacemit: Set clk_hw_onecell_data::num before using flex array
+ wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
+ RAS: Report all ARM processor CPER information to userspace
+ ima: Handle error code returned by ima_filter_rule_match()
+ usb: chaoskey: fix locking for O_NONBLOCK
+ usb: dwc2: fix hang during shutdown if set as peripheral
+ usb: dwc2: fix hang during suspend if set as peripheral
+ usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
+ regulator: pca9450: Fix error code in probe()
+ selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
+ selftests/bpf: Improve reliability of test_perf_branches_no_hw()
+ crypto: starfive - Correctly handle return of sg_nents_for_len
+ crypto: ccree - Correctly handle return of sg_nents_for_len
+ PM / devfreq: hisi: Fix potential UAF in OPP handling
+ RISC-V: KVM: Fix guest page fault within HLV* instructions
+ erofs: correct FSDAX detection
+ erofs: limit the level of fs stacking for file-backed mounts
+ RDMA/bnxt_re: Fix the inline size for GenP7 devices
+ RDMA/bnxt_re: Pass correct flag for dma mr creation
+ crypto: ahash - Fix crypto_ahash_import with partial block data
+ crypto: ahash - Zero positive err value in ahash_update_finish
+ ASoC: tas2781: correct the wrong period
+ wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
+ wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
+ wifi: mt76: mt7921: add MBSSID support
+ Revert "wifi: mt76: mt792x: improve monitor interface handling"
+ wifi: mt76: mt7996: fix max nss value when getting rx chainmask
+ wifi: mt76: mt7996: fix implicit beamforming support for mt7992
+ wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
+ wifi: mt76: mt7996: fix teardown command for an MLD peer
+ wifi: mt76: mt7996: set link_valid field when initializing wcid
+ wifi: mt76: mt7996: fix MLD group index assignment
+ wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
+ wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
+ wifi: mt76: mt7996: skip deflink accounting for offchannel links
+ wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
+ mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
+ firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
+ staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
+ iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
+ btrfs: fix double free of qgroup record after failure to add delayed ref head
+ btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
+ btrfs: fix leaf leak in an error path in btrfs_del_items()
+ PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
+ drm/nouveau: restrict the flush page to a 32-bit address
+ um: Don't rename vmap to kernel_vmap
+ iomap: always run error completions in user context
+ wifi: ieee80211: correct FILS status codes
+ backlight: led-bl: Add devlink to supplier LEDs
+ backlight: lp855x: Fix lp855x.h kernel-doc warnings
+ iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
+ RDMA/irdma: Fix data race in irdma_sc_ccq_arm
+ RDMA/irdma: Fix data race in irdma_free_pble
+ RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
+ drm/panthor: Avoid adding of kernel BOs to extobj list
+ clocksource/drivers/ralink: Fix resource leaks in init error path
+ clocksource/drivers/stm: Fix double deregistration on probe failure
+ clocksource/drivers/nxp-stm: Fix section mismatches
+ clocksource/drivers/nxp-stm: Prevent driver unbind
+ ASoC: nau8325: use simple i2c probe function
+ ASoC: nau8325: add missing build config
+ UBUNTU: [Config] enable NAU8325 codec
+ gfs2: Prevent recursive memory reclaim
+ ASoC: fsl_xcvr: clear the channel status control memory
+ firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
+ UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
+ UBUNTU: [Config] enable AMCC QT2025 PHY driver
+ greybus: gb-beagleplay: Fix timeout handling in bootloader functions
+ misc: rp1: Fix an error handling path in rp1_probe()
+ drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
+ hwmon: sy7636a: Fix regulator_enable resource leak on error path
+ ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
+ ublk: prevent invalid access with DEBUG
+ ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
+ selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
+ of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
+ virtio_vdpa: fix misleading return in void function
+ virtio: fix typo in virtio_device_ready() comment
+ virtio: fix whitespace in virtio_config_ops
+ virtio: fix grammar in virtio_queue_info docs
+ virtio: fix virtqueue_set_affinity() docs
+ vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
+ vhost: Fix kthread worker cgroup failure handling
+ vdpa/pds: use %pe for ERR_PTR() in event handler registration
+ virtio: clean up features qword/dword terms
+ ASoC: Intel: catpt: Fix error path in hw_params()
+ spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
+ ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
+ ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
+ ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
+ ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
+ regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
+ Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
+ netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
+ netfilter: nf_conncount: rework API to use sk_buff directly
+ netfilter: nft_connlimit: update the count if add was skipped
+ iavf: Implement settime64 with -EOPNOTSUPP
+ net: stmmac: fix rx limit check in stmmac_rx_zc()
+ mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
+ spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
+ vfio/pci: Use RCU for error/request triggers to avoid circular locking
+ net: phy: aquantia: check for NVMEM deferral
+ selftests: bonding: add delay before each xvlan_over_bond connectivity check
+ net: netpoll: initialize work queue before error checks
+ mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
+ rqspinlock: Enclose lock/unlock within lock entry acquisitions
+ rqspinlock: Use trylock fallback when per-CPU rqnode is busy
+ remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
+ md/raid5: fix IO hang when array is broken with IO inflight
+ clk: keystone: fix compile testing
+ net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
+ net: dsa: b53: fix extracting VID from entry for BCM5325/65
+ net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
+ net: dsa: b53: move reading ARL entries into their own function
+ net: dsa: b53: move writing ARL entries into their own functions
+ net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
+ net: dsa: b53: split reading search entry into their own functions
+ net: dsa: b53: move ARL entry functions into ops struct
+ net: dsa: b53: add support for 5389/5397/5398 ARL entry format
+ net: dsa: b53: use same ARL search result offset for BCM5325/65
+ net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
+ net: dsa: b53: add support for bcm63xx ARL entry format
+ net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
+ net: dsa: b53: fix BCM5325/65 ARL entry VIDs
+ net: hsr: create an API to get hsr port type
+ net: dsa: xrs700x: reject unsupported HSR configurations
+ net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
+ perf jitdump: Add sym/str-tables to build-ID generation
+ perf tools: Mark split kallsyms DSOs as loaded
+ perf tools: Fix split kallsyms DSO counting
+ perf hist: In init, ensure mem_info is put on error paths
+ pinctrl: single: Fix incorrect type for error return variable
+ fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
+ 9p: fix cache/debug options printing in v9fs_show_options
+ sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
+ sched/core: Fix psi_dequeue() for Proxy Execution
+ platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
+ f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
+ rtc: amlogic-a4: fix double free caused by devm
+ kbuild: install-extmod-build: Fix when given dir outside the build dir
+ kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
+ NFS: Avoid changing nlink when file removes and attribute updates race
+ fs/nls: Fix utf16 to utf8 conversion
+ NFS: Initialise verifiers for visible dentries in readdir and lookup
+ NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
+ NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
+ NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
+ panthor: save task pid and comm in panthor_group
+ drm/panthor: Prevent potential UAF in group creation
+ Revert "nfs: ignore SB_RDONLY when remounting nfs"
+ Revert "nfs: clear SB_RDONLY before getting superblock"
+ Revert "nfs: ignore SB_RDONLY when mounting nfs"
+ NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
+ NFS: Fix inheritance of the block sizes when automounting
+ fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
+ platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
+ ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
+ ASoC: amd: acp: Audio is not resuming after s0ix
+ ASoC: ak4458: Disable regulator when error happens
+ ASoC: ak5558: Disable regulator when error happens
+ f2fs: revert summary entry count from 2048 to 512 in 16kb block support
+ blk-mq: Abort suspend when wakeup events are pending
+ block: fix comment for op_is_zone_mgmt() to include RESET_ALL
+ block: fix memory leak in __blkdev_issue_zero_pages
+ nvme-auth: use kvfree() for memory allocated with kvcalloc()
+ drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
+ regulator: fixed: Rely on the core freeing the enable GPIO
+ ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
+ drm/nouveau: refactor deprecated strcpy
+ drm/nouveau: fix circular dep oops from vendored i2c encoder
+ cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
+ cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
+ docs: hwmon: fix link to g762 devicetree binding
+ i2c: spacemit: fix detect issue
+ dma/pool: eliminate alloc_pages warning in atomic_pool_expand
+ ALSA: uapi: Fix typo in asound.h comment
+ drm/amdkfd: Use huge page size to check split svm range alignment
+ rtc: gamecube: Check the return value of ioremap()
+ rtc: max31335: Fix ignored return value in set_alarm
+ ALSA: firewire-motu: add bounds check in put_user loop for DSP events
+ ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
+ drm/xe/fbdev: use the same 64-byte stride alignment as i915
+ drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
+ drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
+ drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
+ drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
+ block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
+ ASoC: amd: acp: update tdm channels for specific DAI
+ dm-raid: fix possible NULL dereference with undefined raid type
+ dm log-writes: Add missing set_freezable() for freezable kthread
+ efi/cper: Add a new helper function to print bitmasks
+ efi/cper: Adjust infopfx size to accept an extra space
+ efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
+ scsi: imm: Fix use-after-free bug caused by unfinished delayed work
+ perf/core: Fix missing read event generation on task exit
+ irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
+ cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
+ ocfs2: fix memory leak in ocfs2_merge_rec_left()
+ perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
+ usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
+ usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
+ usb: phy: Initialize struct usb_phy list_head
+ usb: typec: ucsi: fix use-after-free caused by uec->work
+ usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
+ ALSA: dice: fix buffer overflow in detect_stream_formats()
+ ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
+ ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
+ ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
+ ALSA: wavefront: Fix integer overflow in sample size validation
+ ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
- ASoC: codecs: nau8325: Silence uninitialized variables warnings
- ALSA: wavefront: Fix integer overflow in sample size validation
- ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
- ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
- ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
- ALSA: dice: fix buffer overflow in detect_stream_formats()
- usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
- usb: typec: ucsi: fix use-after-free caused by uec->work
- usb: phy: Initialize struct usb_phy list_head
- usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
- usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
- perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
- ocfs2: fix memory leak in ocfs2_merge_rec_left()
- cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
- irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
- perf/core: Fix missing read event generation on task exit
- scsi: imm: Fix use-after-free bug caused by unfinished delayed work
- efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
- efi/cper: Adjust infopfx size to accept an extra space
- efi/cper: Add a new helper function to print bitmasks
- dm log-writes: Add missing set_freezable() for freezable kthread
- dm-raid: fix possible NULL dereference with undefined raid type
- ASoC: amd: acp: update tdm channels for specific DAI
- block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
- drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
- drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
- drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
- drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
- drm/xe/fbdev: use the same 64-byte stride alignment as i915
- ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
- ALSA: firewire-motu: add bounds check in put_user loop for DSP events
- rtc: max31335: Fix ignored return value in set_alarm
- rtc: gamecube: Check the return value of ioremap()
- drm/amdkfd: Use huge page size to check split svm range alignment
- ALSA: uapi: Fix typo in asound.h comment
- dma/pool: eliminate alloc_pages warning in atomic_pool_expand
- i2c: spacemit: fix detect issue
- docs: hwmon: fix link to g762 devicetree binding
- cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
- cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
- drm/nouveau: fix circular dep oops from vendored i2c encoder
- drm/nouveau: refactor deprecated strcpy
- ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
- regulator: fixed: Rely on the core freeing the enable GPIO
- drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
- nvme-auth: use kvfree() for memory allocated with kvcalloc()
- block: fix memory leak in __blkdev_issue_zero_pages
- block: fix comment for op_is_zone_mgmt() to include RESET_ALL
- blk-mq: Abort suspend when wakeup events are pending
- f2fs: revert summary entry count from 2048 to 512 in 16kb block support
- ASoC: ak5558: Disable regulator when error happens
- ASoC: ak4458: Disable regulator when error happens
- ASoC: amd: acp: Audio is not resuming after s0ix
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
- fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
- NFS: Fix inheritance of the block sizes when automounting
- NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
- Revert "nfs: ignore SB_RDONLY when mounting nfs"
- Revert "nfs: clear SB_RDONLY before getting superblock"
- Revert "nfs: ignore SB_RDONLY when remounting nfs"
- drm/panthor: Prevent potential UAF in group creation
- panthor: save task pid and comm in panthor_group
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
- NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
- NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
- NFS: Initialise verifiers for visible dentries in readdir and lookup
- fs/nls: Fix utf16 to utf8 conversion
- NFS: Avoid changing nlink when file removes and attribute updates race
- kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
- kbuild: install-extmod-build: Fix when given dir outside the build dir
- rtc: amlogic-a4: fix double free caused by devm
- f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
- sched/core: Fix psi_dequeue() for Proxy Execution
- sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
- 9p: fix cache/debug options printing in v9fs_show_options
- fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
- pinctrl: single: Fix incorrect type for error return variable
- perf hist: In init, ensure mem_info is put on error paths
- perf tools: Fix split kallsyms DSO counting
- perf tools: Mark split kallsyms DSOs as loaded
- perf jitdump: Add sym/str-tables to build-ID generation
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
- net: dsa: xrs700x: reject unsupported HSR configurations
- net: hsr: create an API to get hsr port type
- net: dsa: b53: fix BCM5325/65 ARL entry VIDs
- net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
- net: dsa: b53: add support for bcm63xx ARL entry format
- net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
- net: dsa: b53: use same ARL search result offset for BCM5325/65
- net: dsa: b53: add support for 5389/5397/5398 ARL entry format
- net: dsa: b53: move ARL entry functions into ops struct
- net: dsa: b53: split reading search entry into their own functions
- net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
- net: dsa: b53: move writing ARL entries into their own functions
- net: dsa: b53: move reading ARL entries into their own function
- net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
- net: dsa: b53: fix extracting VID from entry for BCM5325/65
- net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
- clk: keystone: fix compile testing
- md/raid5: fix IO hang when array is broken with IO inflight
- remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
- rqspinlock: Use trylock fallback when per-CPU rqnode is busy
- rqspinlock: Enclose lock/unlock within lock entry acquisitions
- mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
- net: netpoll: initialize work queue before error checks
- selftests: bonding: add delay before each xvlan_over_bond connectivity check
- net: phy: aquantia: check for NVMEM deferral
- vfio/pci: Use RCU for error/request triggers to avoid circular locking
- spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
- mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
- net: stmmac: fix rx limit check in stmmac_rx_zc()
- iavf: Implement settime64 with -EOPNOTSUPP
- netfilter: nft_connlimit: update the count if add was skipped
- netfilter: nf_conncount: rework API to use sk_buff directly
- netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
- ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
- ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
- ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
- ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
- spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
- ASoC: Intel: catpt: Fix error path in hw_params()
- virtio: clean up features qword/dword terms
- vdpa/pds: use %pe for ERR_PTR() in event handler registration
- vhost: Fix kthread worker cgroup failure handling
- vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
- virtio: fix virtqueue_set_affinity() docs
- virtio: fix grammar in virtio_queue_info docs
- virtio: fix whitespace in virtio_config_ops
- virtio: fix typo in virtio_device_ready() comment
- virtio_vdpa: fix misleading return in void function
- of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
- selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
- ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
- ublk: prevent invalid access with DEBUG
- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
- hwmon: sy7636a: Fix regulator_enable resource leak on error path
- drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
- misc: rp1: Fix an error handling path in rp1_probe()
- greybus: gb-beagleplay: Fix timeout handling in bootloader functions
- firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
- ASoC: fsl_xcvr: clear the channel status control memory
- gfs2: Prevent recursive memory reclaim
- ASoC: nau8325: add missing build config
- ASoC: nau8325: use simple i2c probe function
- clocksource/drivers/nxp-stm: Prevent driver unbind
- clocksource/drivers/nxp-stm: Fix section mismatches
- clocksource/drivers/stm: Fix double deregistration on probe failure
- clocksource/drivers/ralink: Fix resource leaks in init error path
- drm/panthor: Avoid adding of kernel BOs to extobj list
- RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
- RDMA/irdma: Fix data race in irdma_free_pble
- RDMA/irdma: Fix data race in irdma_sc_ccq_arm
- iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
- backlight: lp855x: Fix lp855x.h kernel-doc warnings
- backlight: led-bl: Add devlink to supplier LEDs
- wifi: ieee80211: correct FILS status codes
- iomap: always run error completions in user context
- um: Don't rename vmap to kernel_vmap
- drm/nouveau: restrict the flush page to a 32-bit address
- PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
- btrfs: fix leaf leak in an error path in btrfs_del_items()
- btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
- btrfs: fix double free of qgroup record after failure to add delayed ref head
- iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
- staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
- firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
- mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
- wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
- wifi: mt76: mt7996: skip deflink accounting for offchannel links
- wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
- wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
- wifi: mt76: mt7996: fix MLD group index assignment
- wifi: mt76: mt7996: set link_valid field when initializing wcid
- wifi: mt76: mt7996: fix teardown command for an MLD peer
- wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
- wifi: mt76: mt7996: fix implicit beamforming support for mt7992
- wifi: mt76: mt7996: fix max nss value when getting rx chainmask
- Revert "wifi: mt76: mt792x: improve monitor interface handling"
- wifi: mt76: mt7921: add MBSSID support
- wifi: mt76: mt7925: add MBSSID support
- wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
- wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
- ASoC: tas2781: correct the wrong period
- crypto: ahash - Zero positive err value in ahash_update_finish
- crypto: ahash - Fix crypto_ahash_import with partial block data
- RDMA/bnxt_re: Pass correct flag for dma mr creation
- RDMA/bnxt_re: Fix the inline size for GenP7 devices
- erofs: limit the level of fs stacking for file-backed mounts
- erofs: correct FSDAX detection
- RISC-V: KVM: Fix guest page fault within HLV* instructions
- PM / devfreq: hisi: Fix potential UAF in OPP handling
- crypto: ccree - Correctly handle return of sg_nents_for_len
- crypto: starfive - Correctly handle return of sg_nents_for_len
- selftests/bpf: Improve reliability of test_perf_branches_no_hw()
- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
- regulator: pca9450: Fix error code in probe()
- usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
- usb: dwc2: fix hang during suspend if set as peripheral
- usb: dwc2: fix hang during shutdown if set as peripheral
- usb: chaoskey: fix locking for O_NONBLOCK
- ima: Handle error code returned by ima_filter_rule_match()
- RAS: Report all ARM processor CPER information to userspace
- wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
- clk: spacemit: Set clk_hw_onecell_data::num before using flex array
- cpuset: Treat cpusets in attaching as populated
- net: phy: adin1100: Fix software power-down ready condition
- selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
- ASoC: SDCA: Fix missing dash in HIDE DisCo property
- phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
- phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
- phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
- phy: freescale: Initialize priv->lock
- phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
- phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
- phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
- leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
- of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
- of/fdt: Consolidate duplicate code into helper functions
- mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
- mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
- wifi: mac80211: fix CMAC functions not handling errors
- iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
- net: phy: realtek: create rtl8211f_config_rgmii_delay()
- scsi: qla2xxx: Fix improper freeing of purex item
- scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
- pwm: bcm2835: Make sure the channel is enabled after pwm_request()
- perf arm_spe: Fix memset subclass in operation
- ipv6: clear RA flags when adding a static route
- spi: sophgo: Fix incorrect use of bus width value macros
- drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
- drm/msm/a6xx: Fix the gemnoc workaround
- drm/msm/a6xx: Flush LRZ cache before PT switch
- drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
- fs/ntfs3: Prevent memory leaks in add sub record
- fs/ntfs3: out1 also needs to put mi
- net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
- powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
- powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
- bpf: Fix invalid prog->stats access when update_effective_progs fails
- net: stmmac: dwmac-sophgo: Add phy interface filter
- net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
- wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
- drm/msm/a2xx: stop over-complaining about the legacy firmware
- drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
- drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
- block/blk-throttle: Fix throttle slice time for SSDs
- arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
- arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
- NFSD/blocklayout: Fix minlength check in proc_layoutget
- tracefs: fix a leak in eventfs_create_events_dir()
- fuse_ctl_add_conn(): fix nlink breakage in case of early failure
- watchdog: starfive: Fix resource leak in probe error path
- watchdog: wdat_wdt: Fix ACPI table leak in probe function
- mshv: Fix create memory region overlap check
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL
- bpf: Check skb->transport_header is set in bpf_skb_check_mtu
- selftests/bpf: Fix failure paths in send_signal test
- bpf: Handle return value of ftrace_set_filter_ip in register_fentry
- bpf: Prevent nesting overflow in bpf_try_get_buffers
- PCI: Prevent resource tree corruption when BAR resize fails
- ps3disk: use memcpy_{from,to}_bvec index
- drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
- arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
- s390/fpu: Fix false-positive kmsan report in fpu_vstl()
- crypto: iaa - Fix incorrect return value in save_iaa_wq()
- arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
- arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
- arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
- PCI: keystone: Exit ks_pcie_probe() for invalid mode
- bpf: Free special fields when update [lru_,]percpu_hash maps
- accel/amdxdna: Fix deadlock between context destroy and job timeout
- accel/amdxdna: Clear mailbox interrupt register during channel creation
- leds: netxbig: Fix GPIO descriptor leak in error paths
- scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
- ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
- ocfs2: use correct endian in ocfs2_dinode_has_extents
- ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
- lib/vsprintf: Check pointer before dereferencing in time_and_date()
- clk: renesas: r9a06g032: Fix memory leak in error path
- clk: renesas: r9a09g077: Propagate rate changes to parent clocks
- drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
- drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
- perf tools: Fix missing feature check for inherit + SAMPLE_READ
- coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
- coresight: etm4x: Add context synchronization before enabling trace
- coresight: etm4x: Correct polling IDLE bit
- coresight: etm3x: Always set tracer's device mode on target CPU
- coresight: etm4x: Always set tracer's device mode on target CPU
- coresight: Change device mode to atomic type
- nbd: defer config unlock in nbd_genl_connect
- wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
- macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
- powerpc/32: Fix unpaired stwcx. on interrupt exit
- powerpc/kdump: Fix size calculation for hot-removed memory ranges
- cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
- md: delete md_redundancy_group when array is becoming inactive
- scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
- drm/panthor: Fix potential memleak of vma structure
- ntfs3: init run lock for extend inode
- coresight: tmc: add the handle of the event to the path
- ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
- RDMA/rtrs: server: Fix error handling in get_or_create_srv
- dt-bindings: PCI: amlogic: Fix the register name of the DBI region
- iio: imu: bmi270: fix dev_err_probe error msg
- staging: most: remove broken i2c driver
- scsi: smartpqi: Fix device resources accessed after device removal
- scsi: stex: Fix reboot_notifier leak in probe error path
- nbd: defer config put in recv_work
- md: avoid repeated calls to del_gendisk
- md: fix rcu protection in md_wakeup_thread
- md: delete mddev kobj before deleting gendisk kobj
- regulator: core: disable supply if enabling main regulator fails
- perf/x86/intel: Correct large PEBS flag check
- perf/x86: Fix NULL event access and potential PEBS record loss
- io_uring: use WRITE_ONCE for user shared memory
- accel/amdxdna: Fix dma_fence leak when job is canceled
- ext4: correct the checking of quota files before moving extents
- wifi: ath12k: Fix timeout error during beacon stats retrieval
- mfd: da9055: Fix missing regmap_del_irq_chip() in error path
- wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
- wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
- locktorture: Fix memory leak in param_set_cpumask()
- efi/libstub: Fix page table access in 5-level to 4-level paging transition
- x86/boot: Fix page table access in 5-level to 4-level paging transition
- coresight: ETR: Fix ETR buffer use-after-free issue
- entry,unwind/deferred: Fix unwind_reset_info() placement
- ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
- ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
- ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
- libbpf: Fix parsing of multi-split BTF
- spi: tegra210-quad: Fix timeout handling
- cleanup: fix scoped_class()
- iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
- firmware: ti_sci: Set IO Isolation only if the firmware is capable
- drm/panthor: Fix UAF on kernel BO VA nodes
- drm/panthor: Fix race with suspend during unplug
- drm/panthor: Fix UAF race between device unplug and FW event processing
- drm/panthor: Fix group_free_queue() for partially initialized queues
- drm/panthor: Handle errors returned by drm_sched_entity_init()
- fs/9p: Don't open remote file with APPEND mode when writeback cache is used
- scsi: target: Fix LUN/device R/W and total command stats
- scsi: target: Do not write NUL characters into ASCII configfs output
- power: supply: apm_power: only unset own apm_get_power_status
- power: supply: wm831x: Check wm831x_set_bits() return value
- power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
- power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
- power: supply: max17040: Check iio_read_channel_processed() return code
- power: supply: cw2015: Check devm_delayed_work_autocancel() return code
- power: supply: rt5033_charger: Fix device node reference leaks
- timers/migration: Fix imbalanced NUMA trees
- timers/migration: Remove locking on group connection
- timers/migration: Convert "while" loops to use "for"
- perf record: skip synthesize event when open evsel failed
- perf lock contention: Load kernel map before lookup
- drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
- arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
- interconnect: debugfs: Fix incorrect error handling for NULL path
- accel/amdxdna: Fix incorrect command state for timed out job
- arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
- interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
- wifi: ath12k: unassign arvif on scan vdev create failure
- wifi: ath12k: fix error handling in creating hardware group
- wifi: ath12k: fix reusing m3 memory
- wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
- random: use offstack cpumask when necessary
- i3c: master: svc: Prevent incomplete IBI transaction
- i3c: fix refcount inconsistency in i3c_master_register
- pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
- pidfs: add missing PIDFD_INFO_SIZE_VER1
- accel/ivpu: Fix race condition when unbinding BOs
- drm: nova: select NOVA_CORE
- pinctrl: stm32: fix hwspinlock resource leak in probe function
- soc: qcom: smem: fix hwspinlock resource leak in probe error paths
- clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
- tools/nolibc/dirent: avoid errno in readdir_r
- tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
- accel/ivpu: Remove skip of dma unmap for imported buffers
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- task_work: Fix NMI race condition
- perf/x86/intel/cstate: Remove PC3 support from LunarLake
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
- bpf: Refactor stack map trace depth calculation into helper function
- perf: Remove get_perf_callchain() init_nr argument
- mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
- mtd: nand: relax ECC parameter validation check
- Revert "mtd: rawnand: marvell: fix layouts"
- wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
- drm/amdgpu/userq: fix SDMA and compute validation
- drm/amdgpu: add userq object va track helpers
- ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
- ARM: dts: renesas: gose: Remove superfluous port property
- RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
- arm64: dts: qcom: qcm2290: Fix camss register prop ordering
- arm64: dts: qcom: qcm2290: Add CCI node
- sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
- phy: mscc: Fix PTP for VSC8574 and VSC8572
- perf hwmon_pmu: Fix uninitialized variable warning
- arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
- arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
- arm64: dts: qcom: sm8650: set ufs as dma coherent
- arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
- arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
- arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
- arm64: dts: qcom: starqltechn: remove extra empty line
- arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
- arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
- arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
- firmware: imx: scu-irq: fix OF node leak in
- arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
- PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
- leds: upboard: Fix module alias
- wifi: ath12k: restore register window after global reset
- tools/power turbostat: Regression fix Uncore MHz printed in hex
- s390/ap: Don't leak debug feature files if AP instructions are not available
- scsi: ufs: core: Move the ufshcd_enable_intr() declaration
- s390/smp: Fix fallback CPU detection
- wifi: ath11k: fix peer HE MCS assignment
- wifi: ath11k: fix VHT MCS assignment
- crypto: hisilicon/qm - restore original qos values
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
- soc: qcom: gsbi: fix double disable caused by devm
- clk: qcom: camcc-sm7150: Fix PLL config of PLL2
- clk: qcom: camcc-sm6350: Fix PLL config of PLL2
- clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
- clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
- clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
- clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
- tty: serial: imx: Only configure the wake register when device is set as wakeup source
- tty: introduce tty_port_tty guard()
- uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
- PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
- arm64: dts: exynos: gs101: fix sysreg_apm reg property
- perf annotate: Check return value of evsel__get_arch() properly
- arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
- arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
- arm64: dts: imx8mp-venice-gw702x: remove off-board uart
- arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
- arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
- block/mq-deadline: Switch back to a single dispatch list
- block/mq-deadline: Introduce dd_start_request()
- crypto: aead - Fix reqsize handling
- firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
- iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
- inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
- inet: Avoid ehash lookup race in inet_ehash_insert()
- rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
- clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
- dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
- ntfs3: Fix uninit buffer allocated by __getname()
- ntfs3: fix uninit memory after failed mi_read in mi_format_new
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller
- irqchip/qcom-irq-combiner: Fix section mismatch
- irqchip/starfive-jh8100: Fix section mismatch
- irqchip/renesas-rzg2l: Fix section mismatch
- irqchip/imx-mu-msi: Fix section mismatch
- irqchip/irq-brcmstb-l2: Fix section mismatch
- irqchip/irq-bcm7120-l2: Fix section mismatch
- irqchip/irq-bcm7038-l1: Fix section mismatch
- irqchip/bcm2712-mip: Fix section mismatch
- irqchip/bcm2712-mip: Fix OF node reference imbalance
- sched/fair: Forfeit vruntime on yield
- wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
- wifi: ath12k: fix VHT MCS assignment
- wifi: ath12k: Fix MSDU buffer types handling in RX error path
- wifi: ath11k: restore register window after global reset
- wifi: ath10k: move recovery check logic into a new work
- perf parse-events: Fix legacy cache events if event is duplicated in a PMU
- accel/ivpu: Fix race condition when mapping dmabuf
- objtool: Fix weak symbol detection
- objtool: Fix standalone --hacks=jump_label
- remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
- HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
- drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
- clk: renesas: cpg-mssr: Read back reset registers to assure values latched
- clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
- pinctrl: renesas: rzg2l: Fix PMC restore
- ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
- perf bpf_counter: Fix opening of "any"(-1) CPU events
- USB: Fix descriptor count when handling invalid MBIM extended descriptor
- tools/nolibc: handle NULL wstatus argument to waitpid()
- bpf: Cleanup unused func args in rqspinlock implementation
- drm/vgem-fence: Fix potential deadlock on release
- accel/ivpu: Fix DCT active percent format
- accel/ivpu: Make function parameter names consistent
- accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
- accel/ivpu: Rework bind/unbind of imported buffers
- drm/panel: visionox-rm69299: Don't clear all mode flags
- drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
- accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
- gpu: host1x: Fix race in syncpt alloc/free
- smack: fix bug: setting task label silently ignores input garbage
- smack: fix bug: unprivileged task can create labels
- smack: fix bug: invalid label of unix socket file
- smack: always "instantiate" inode in smack_inode_init_security()
- smack: deduplicate xattr setting in smack_inode_init_security()
- smack: fix bug: SMACK64TRANSMUTE set on non-directory
- smack: deduplicate "does access rule request transmutation"
+ UBUNTU: Upstream stable to v6.17.13

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2139960

Title:
Questing update: v6.17.13 upstream stable release

Status in linux package in Ubuntu:
Invalid
Status in linux source package in Questing:
In Progress

Bug description:

SRU Justification

Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:

v6.17.13 upstream stable release
from git://git.kernel.org/

smack: deduplicate "does access rule request transmutation"
smack: fix bug: SMACK64TRANSMUTE set on non-directory
smack: deduplicate xattr setting in smack_inode_init_security()
smack: always "instantiate" inode in smack_inode_init_security()
smack: fix bug: invalid label of unix socket file
smack: fix bug: unprivileged task can create labels
smack: fix bug: setting task label silently ignores input garbage
gpu: host1x: Fix race in syncpt alloc/free
accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail
drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq
drm/panel: visionox-rm69299: Don't clear all mode flags
accel/ivpu: Rework bind/unbind of imported buffers
accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()
accel/ivpu: Make function parameter names consistent
accel/ivpu: Fix DCT active percent format
drm/vgem-fence: Fix potential deadlock on release
bpf: Cleanup unused func args in rqspinlock implementation
tools/nolibc: handle NULL wstatus argument to waitpid()
USB: Fix descriptor count when handling invalid MBIM extended descriptor
perf bpf_counter: Fix opening of "any"(-1) CPU events
ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
pinctrl: renesas: rzg2l: Fix PMC restore
clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
clk: renesas: cpg-mssr: Read back reset registers to assure values latched
drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler()
HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
remoteproc: imx_rproc: Fix runtime PM cleanup and improve remove path
objtool: Fix standalone --hacks=jump_label
objtool: Fix weak symbol detection
accel/ivpu: Fix race condition when mapping dmabuf
perf parse-events: Fix legacy cache events if event is duplicated in a PMU
wifi: ath10k: move recovery check logic into a new work
wifi: ath11k: restore register window after global reset
wifi: ath12k: Fix MSDU buffer types handling in RX error path
wifi: ath12k: fix VHT MCS assignment
wifi: ath12k: fix TX and RX MCS rate configurations in HE mode
sched/fair: Forfeit vruntime on yield
irqchip/bcm2712-mip: Fix OF node reference imbalance
irqchip/bcm2712-mip: Fix section mismatch
irqchip/irq-bcm7038-l1: Fix section mismatch
irqchip/irq-bcm7120-l2: Fix section mismatch
irqchip/irq-brcmstb-l2: Fix section mismatch
irqchip/imx-mu-msi: Fix section mismatch
irqchip/renesas-rzg2l: Fix section mismatch
irqchip/starfive-jh8100: Fix section mismatch
irqchip/qcom-irq-combiner: Fix section mismatch
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
ntfs3: fix uninit memory after failed mi_read in mi_format_new
ntfs3: Fix uninit buffer allocated by __getname()
dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
inet: Avoid ehash lookup race in inet_ehash_insert()
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc
crypto: aead - Fix reqsize handling
block/mq-deadline: Introduce dd_start_request()
block/mq-deadline: Switch back to a single dispatch list
arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
arm64: dts: imx8mp-venice-gw702x: remove off-board uart
arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
arm64: dts: imx95-15x15-evk: add fan-supply property for pwm-fan
perf annotate: Check return value of evsel__get_arch() properly
arm64: dts: exynos: gs101: fix sysreg_apm reg property
PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
tty: introduce tty_port_tty guard()
tty: serial: imx: Only configure the wake register when device is set as wakeup source
clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other
clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
clk: qcom: gcc-sm8750: Add a new frequency for sdcc2 clock
clk: qcom: gcc-ipq5424: Correct the icc_first_node_id
clk: qcom: camcc-sm6350: Fix PLL config of PLL2
clk: qcom: camcc-sm7150: Fix PLL config of PLL2
soc: qcom: gsbi: fix double disable caused by devm
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
crypto: hisilicon/qm - restore original qos values
wifi: ath11k: fix VHT MCS assignment
wifi: ath11k: fix peer HE MCS assignment
s390/smp: Fix fallback CPU detection
scsi: ufs: core: Move the ufshcd_enable_intr() declaration
s390/ap: Don't leak debug feature files if AP instructions are not available
tools/power turbostat: Regression fix Uncore MHz printed in hex
wifi: ath12k: restore register window after global reset
leds: upboard: Fix module alias
PCI: endpoint: pci-epf-test: Fix sleeping function being called from atomic context
arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
firmware: imx: scu-irq: fix OF node leak in
arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller
arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller
arm64: dts: qcom: sdm845-starqltechn: remove (address|size)-cells
arm64: dts: qcom: starqltechn: remove extra empty line
arm64: dts: qcom: sdm845-starqltechn: fix max77705 interrupts
arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
arm64: dts: qcom: qcm6490-fairphone-fp5: Add supplies to simple-fb node
arm64: dts: qcom: sm8650: set ufs as dma coherent
arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory
arm64: dts: qcom: sdm845-starqltechn: Fix i2c-gpio node name
perf hwmon_pmu: Fix uninitialized variable warning
phy: mscc: Fix PTP for VSC8574 and VSC8572
sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
arm64: dts: qcom: qcm2290: Add CCI node
arm64: dts: qcom: qcm2290: Fix camss register prop ordering
RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
ARM: dts: renesas: gose: Remove superfluous port property
ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
drm/amdgpu: add userq object va track helpers
drm/amdgpu/userq: fix SDMA and compute validation
wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload()
Revert "mtd: rawnand: marvell: fix layouts"
mtd: nand: relax ECC parameter validation check
mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
perf: Remove get_perf_callchain() init_nr argument
bpf: Refactor stack map trace depth calculation into helper function
bpf: Fix stackmap overflow check in __bpf_get_stackid()
perf/x86/intel/cstate: Remove PC3 support from LunarLake
task_work: Fix NMI race condition
x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
accel/ivpu: Remove skip of dma unmap for imported buffers
tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
tools/nolibc/dirent: avoid errno in readdir_r
clk: qcom: gcc-qcs615: Update the SDCC clock to use shared_floor_ops
soc: qcom: smem: fix hwspinlock resource leak in probe error paths
pinctrl: stm32: fix hwspinlock resource leak in probe function
drm: nova: select NOVA_CORE
UBUNTU: [Config] select NOVA_CORE
gpu: nova-core: select RUST_FW_LOADER_ABSTRACTIONS
accel/ivpu: Fix race condition when unbinding BOs
pidfs: add missing PIDFD_INFO_SIZE_VER1
pidfs: add missing BUILD_BUG_ON() assert on struct pidfd_info
i3c: fix refcount inconsistency in i3c_master_register
i3c: master: svc: Prevent incomplete IBI transaction
random: use offstack cpumask when necessary
wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload()
wifi: ath12k: fix reusing m3 memory
wifi: ath12k: fix error handling in creating hardware group
wifi: ath12k: unassign arvif on scan vdev create failure
interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
accel/amdxdna: Fix incorrect command state for timed out job
interconnect: debugfs: Fix incorrect error handling for NULL path
arm64: dts: renesas: sparrow-hawk: Fix full-size DP connector node name and labels
drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource()
perf lock contention: Load kernel map before lookup
perf record: skip synthesize event when open evsel failed
timers/migration: Convert "while" loops to use "for"
timers/migration: Remove locking on group connection
timers/migration: Fix imbalanced NUMA trees
power: supply: rt5033_charger: Fix device node reference leaks
power: supply: cw2015: Check devm_delayed_work_autocancel() return code
power: supply: max17040: Check iio_read_channel_processed() return code
power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
power: supply: wm831x: Check wm831x_set_bits() return value
power: supply: apm_power: only unset own apm_get_power_status
scsi: target: Do not write NUL characters into ASCII configfs output
scsi: target: Fix LUN/device R/W and total command stats
fs/9p: Don't open remote file with APPEND mode when writeback cache is used
drm/panthor: Handle errors returned by drm_sched_entity_init()
drm/panthor: Fix group_free_queue() for partially initialized queues
drm/panthor: Fix UAF race between device unplug and FW event processing
drm/panthor: Fix race with suspend during unplug
drm/panthor: Fix UAF on kernel BO VA nodes
firmware: ti_sci: Set IO Isolation only if the firmware is capable
iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show
cleanup: fix scoped_class()
spi: tegra210-quad: Fix timeout handling
libbpf: Fix parsing of multi-split BTF
ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
entry,unwind/deferred: Fix unwind_reset_info() placement
coresight: ETR: Fix ETR buffer use-after-free issue
x86/boot: Fix page table access in 5-level to 4-level paging transition
efi/libstub: Fix page table access in 5-level to 4-level paging transition
locktorture: Fix memory leak in param_set_cpumask()
wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler()
wifi: rtw89: usb: fix leak in rtw89_usb_write_port()
mfd: da9055: Fix missing regmap_del_irq_chip() in error path
wifi: ath12k: Fix timeout error during beacon stats retrieval
ext4: correct the checking of quota files before moving extents
accel/amdxdna: Fix dma_fence leak when job is canceled
io_uring: use WRITE_ONCE for user shared memory
perf/x86: Fix NULL event access and potential PEBS record loss
perf/x86/intel: Correct large PEBS flag check
regulator: core: disable supply if enabling main regulator fails
md: delete mddev kobj before deleting gendisk kobj
md: fix rcu protection in md_wakeup_thread
md: avoid repeated calls to del_gendisk
nbd: defer config put in recv_work
scsi: stex: Fix reboot_notifier leak in probe error path
scsi: smartpqi: Fix device resources accessed after device removal
staging: most: remove broken i2c driver
UBUNTU: [Config] remove most i2c driver
iio: imu: bmi270: fix dev_err_probe error msg
dt-bindings: PCI: amlogic: Fix the register name of the DBI region
RDMA/rtrs: server: Fix error handling in get_or_create_srv
ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
coresight: tmc: add the handle of the event to the path
ntfs3: init run lock for extend inode
drm/panthor: Fix potential memleak of vma structure
scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
md: delete md_redundancy_group when array is becoming inactive
cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
powerpc/kdump: Fix size calculation for hot-removed memory ranges
powerpc/32: Fix unpaired stwcx. on interrupt exit
macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
nbd: defer config unlock in nbd_genl_connect
coresight: Change device mode to atomic type
coresight: etm4x: Always set tracer's device mode on target CPU
coresight: etm3x: Always set tracer's device mode on target CPU
coresight: etm4x: Correct polling IDLE bit
coresight: etm4x: Add context synchronization before enabling trace
coresight: etm4x: Properly control filter in CPU idle with FEAT_TRF
perf tools: Fix missing feature check for inherit + SAMPLE_READ
drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features
drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook
clk: renesas: r9a09g077: Propagate rate changes to parent clocks
clk: renesas: r9a06g032: Fix memory leak in error path
lib/vsprintf: Check pointer before dereferencing in time_and_date()
ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
ocfs2: use correct endian in ocfs2_dinode_has_extents
ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
leds: netxbig: Fix GPIO descriptor leak in error paths
accel/amdxdna: Clear mailbox interrupt register during channel creation
accel/amdxdna: Fix deadlock between context destroy and job timeout
bpf: Free special fields when update [lru_,]percpu_hash maps
PCI: keystone: Exit ks_pcie_probe() for invalid mode
arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C
crypto: iaa - Fix incorrect return value in save_iaa_wq()
s390/fpu: Fix false-positive kmsan report in fpu_vstl()
arm64: dts: qcom: qrb2210-rb1: Fix UART3 wakeup IRQ storm
drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
ps3disk: use memcpy_{from,to}_bvec index
PCI: Prevent resource tree corruption when BAR resize fails
bpf: Prevent nesting overflow in bpf_try_get_buffers
bpf: Handle return value of ftrace_set_filter_ip in register_fentry
selftests/bpf: Fix failure paths in send_signal test
bpf: Check skb->transport_header is set in bpf_skb_check_mtu
mshv: Fix deposit memory in MSHV_ROOT_HVCALL
mshv: Fix create memory region overlap check
watchdog: wdat_wdt: Fix ACPI table leak in probe function
watchdog: starfive: Fix resource leak in probe error path
fuse_ctl_add_conn(): fix nlink breakage in case of early failure
tracefs: fix a leak in eventfs_create_events_dir()
NFSD/blocklayout: Fix minlength check in proc_layoutget
arm64: dts: imx95-tqma9596sa: fix TPM5 pinctrl node name
arm64: dts: imx95-tqma9596sa: reduce maximum FlexSPI frequency to 66MHz
block/blk-throttle: Fix throttle slice time for SSDs
drm/msm: Fix NULL pointer dereference in crashstate_get_vm_logs()
drm/msm: fix missing NULL check after kcalloc in crashstate_get_bos()
drm/msm/a2xx: stop over-complaining about the legacy firmware
wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
net: phy: Add helper for fixing RGMII PHY mode based on internal mac delay
net: stmmac: dwmac-sophgo: Add phy interface filter
bpf: Fix invalid prog->stats access when update_effective_progs fails
powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
net: stmmac: Fix VLAN 0 deletion in vlan_del_hw_rx_fltr()
fs/ntfs3: out1 also needs to put mi
fs/ntfs3: Prevent memory leaks in add sub record
drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
drm/msm/a6xx: Flush LRZ cache before PT switch
drm/msm/a6xx: Fix the gemnoc workaround
drm/msm/a6xx: Improve MX rail fallback in RPMH vote init
spi: sophgo: Fix incorrect use of bus width value macros
ipv6: clear RA flags when adding a static route
perf arm_spe: Fix memset subclass in operation
pwm: bcm2835: Make sure the channel is enabled after pwm_request()
scsi: ufs: rockchip: Reset controller on PRE_CHANGE of hce enable notify
scsi: qla2xxx: Fix improper freeing of purex item
net: phy: realtek: create rtl8211f_config_rgmii_delay()
iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb
wifi: mac80211: fix CMAC functions not handling errors
mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
of/fdt: Consolidate duplicate code into helper functions
of/fdt: Fix incorrect use of dt_root_addr_cells in early_init_dt_check_kho()
leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
phy: rockchip: naneng-combphy: Add SoC prefix to register definitions
phy: rockchip: naneng-combphy: Fix PCIe L1ss support RK3562
phy: freescale: Initialize priv->lock
phy: rockchip: samsung-hdptx: Fix reported clock rate in high bpc mode
phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth
phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits
ASoC: SDCA: Fix missing dash in HIDE DisCo property
selftests/bpf: Use ASSERT_STRNEQ to factor in long slab cache names
net: phy: adin1100: Fix software power-down ready condition
cpuset: Treat cpusets in attaching as populated
clk: spacemit: Set clk_hw_onecell_data::num before using flex array
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
RAS: Report all ARM processor CPER information to userspace
ima: Handle error code returned by ima_filter_rule_match()
usb: chaoskey: fix locking for O_NONBLOCK
usb: dwc2: fix hang during shutdown if set as peripheral
usb: dwc2: fix hang during suspend if set as peripheral
usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
regulator: pca9450: Fix error code in probe()
selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
selftests/bpf: Improve reliability of test_perf_branches_no_hw()
crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: ccree - Correctly handle return of sg_nents_for_len
PM / devfreq: hisi: Fix potential UAF in OPP handling
RISC-V: KVM: Fix guest page fault within HLV* instructions
erofs: correct FSDAX detection
erofs: limit the level of fs stacking for file-backed mounts
RDMA/bnxt_re: Fix the inline size for GenP7 devices
RDMA/bnxt_re: Pass correct flag for dma mr creation
crypto: ahash - Fix crypto_ahash_import with partial block data
crypto: ahash - Zero positive err value in ahash_update_finish
ASoC: tas2781: correct the wrong period
wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()
wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks
wifi: mt76: mt7921: add MBSSID support
Revert "wifi: mt76: mt792x: improve monitor interface handling"
wifi: mt76: mt7996: fix max nss value when getting rx chainmask
wifi: mt76: mt7996: fix implicit beamforming support for mt7992
wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv()
wifi: mt76: mt7996: fix teardown command for an MLD peer
wifi: mt76: mt7996: set link_valid field when initializing wcid
wifi: mt76: mt7996: fix MLD group index assignment
wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart()
wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event()
wifi: mt76: mt7996: skip deflink accounting for offchannel links
wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work()
mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables
btrfs: fix double free of qgroup record after failure to add delayed ref head
btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
btrfs: fix leaf leak in an error path in btrfs_del_items()
PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
drm/nouveau: restrict the flush page to a 32-bit address
um: Don't rename vmap to kernel_vmap
iomap: always run error completions in user context
wifi: ieee80211: correct FILS status codes
backlight: led-bl: Add devlink to supplier LEDs
backlight: lp855x: Fix lp855x.h kernel-doc warnings
iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
RDMA/irdma: Fix data race in irdma_sc_ccq_arm
RDMA/irdma: Fix data race in irdma_free_pble
RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
drm/panthor: Avoid adding of kernel BOs to extobj list
clocksource/drivers/ralink: Fix resource leaks in init error path
clocksource/drivers/stm: Fix double deregistration on probe failure
clocksource/drivers/nxp-stm: Fix section mismatches
clocksource/drivers/nxp-stm: Prevent driver unbind
ASoC: nau8325: use simple i2c probe function
ASoC: nau8325: add missing build config
UBUNTU: [Config] enable NAU8325 codec
gfs2: Prevent recursive memory reclaim
ASoC: fsl_xcvr: clear the channel status control memory
firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER
UBUNTU: [Config] enable RUST_FW_LOADER_ABSTRACTIONS
UBUNTU: [Config] enable AMCC QT2025 PHY driver
greybus: gb-beagleplay: Fix timeout handling in bootloader functions
misc: rp1: Fix an error handling path in rp1_probe()
drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
hwmon: sy7636a: Fix regulator_enable resource leak on error path
ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
ublk: prevent invalid access with DEBUG
ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
selftests/net: packetdrill: pass send_omit_free to MSG_ZEROCOPY tests
of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node
virtio_vdpa: fix misleading return in void function
virtio: fix typo in virtio_device_ready() comment
virtio: fix whitespace in virtio_config_ops
virtio: fix grammar in virtio_queue_info docs
virtio: fix virtqueue_set_affinity() docs
vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues
vhost: Fix kthread worker cgroup failure handling
vdpa/pds: use %pe for ERR_PTR() in event handler registration
virtio: clean up features qword/dword terms
ASoC: Intel: catpt: Fix error path in hw_params()
spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND
ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
netfilter: nf_conncount: rework API to use sk_buff directly
netfilter: nft_connlimit: update the count if add was skipped
iavf: Implement settime64 with -EOPNOTSUPP
net: stmmac: fix rx limit check in stmmac_rx_zc()
mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
spi: ch341: fix out-of-bounds memory access in ch341_transfer_one
vfio/pci: Use RCU for error/request triggers to avoid circular locking
net: phy: aquantia: check for NVMEM deferral
selftests: bonding: add delay before each xvlan_over_bond connectivity check
net: netpoll: initialize work queue before error checks
mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
rqspinlock: Enclose lock/unlock within lock entry acquisitions
rqspinlock: Use trylock fallback when per-CPU rqnode is busy
remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
md/raid5: fix IO hang when array is broken with IO inflight
clk: keystone: fix compile testing
net: dsa: b53: fix VLAN_ID_IDX write size for BCM5325/65
net: dsa: b53: fix extracting VID from entry for BCM5325/65
net: dsa: b53: b53_arl_read{,25}(): use the entry for comparision
net: dsa: b53: move reading ARL entries into their own function
net: dsa: b53: move writing ARL entries into their own functions
net: dsa: b53: provide accessors for accessing ARL_SRCH_CTL
net: dsa: b53: split reading search entry into their own functions
net: dsa: b53: move ARL entry functions into ops struct
net: dsa: b53: add support for 5389/5397/5398 ARL entry format
net: dsa: b53: use same ARL search result offset for BCM5325/65
net: dsa: b53: fix CPU port unicast ARL entries for BCM5325/65
net: dsa: b53: add support for bcm63xx ARL entry format
net: dsa: b53: fix BCM5325/65 ARL entry multicast port masks
net: dsa: b53: fix BCM5325/65 ARL entry VIDs
net: hsr: create an API to get hsr port type
net: dsa: xrs700x: reject unsupported HSR configurations
net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
perf jitdump: Add sym/str-tables to build-ID generation
perf tools: Mark split kallsyms DSOs as loaded
perf tools: Fix split kallsyms DSO counting
perf hist: In init, ensure mem_info is put on error paths
pinctrl: single: Fix incorrect type for error return variable
fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
9p: fix cache/debug options printing in v9fs_show_options
sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out
sched/core: Fix psi_dequeue() for Proxy Execution
platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
f2fs: maintain one time GC mode is enabled during whole zoned GC cycle
rtc: amlogic-a4: fix double free caused by devm
kbuild: install-extmod-build: Fix when given dir outside the build dir
kbuild: install-extmod-build: Properly fix CC expansion when ccache is used
NFS: Avoid changing nlink when file removes and attribute updates race
fs/nls: Fix utf16 to utf8 conversion
NFS: Initialise verifiers for visible dentries in readdir and lookup
NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state
NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
panthor: save task pid and comm in panthor_group
drm/panthor: Prevent potential UAF in group creation
Revert "nfs: ignore SB_RDONLY when remounting nfs"
Revert "nfs: clear SB_RDONLY before getting superblock"
Revert "nfs: ignore SB_RDONLY when mounting nfs"
NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
NFS: Fix inheritance of the block sizes when automounting
fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
ASoC: amd: acp: Audio is not resuming after s0ix
ASoC: ak4458: Disable regulator when error happens
ASoC: ak5558: Disable regulator when error happens
f2fs: revert summary entry count from 2048 to 512 in 16kb block support
blk-mq: Abort suspend when wakeup events are pending
block: fix comment for op_is_zone_mgmt() to include RESET_ALL
block: fix memory leak in __blkdev_issue_zero_pages
nvme-auth: use kvfree() for memory allocated with kvcalloc()
drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties()
regulator: fixed: Rely on the core freeing the enable GPIO
ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
drm/nouveau: refactor deprecated strcpy
drm/nouveau: fix circular dep oops from vendored i2c encoder
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2
docs: hwmon: fix link to g762 devicetree binding
i2c: spacemit: fix detect issue
dma/pool: eliminate alloc_pages warning in atomic_pool_expand
ALSA: uapi: Fix typo in asound.h comment
drm/amdkfd: Use huge page size to check split svm range alignment
rtc: gamecube: Check the return value of ioremap()
rtc: max31335: Fix ignored return value in set_alarm
ALSA: firewire-motu: add bounds check in put_user loop for DSP events
ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
drm/xe/fbdev: use the same 64-byte stride alignment as i915
drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit
drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc()
drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init
drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation
block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
ASoC: amd: acp: update tdm channels for specific DAI
dm-raid: fix possible NULL dereference with undefined raid type
dm log-writes: Add missing set_freezable() for freezable kthread
efi/cper: Add a new helper function to print bitmasks
efi/cper: Adjust infopfx size to accept an extra space
efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
perf/core: Fix missing read event generation on task exit
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
cpu: Make atomic hotplug callbacks run with interrupts disabled on UP
ocfs2: fix memory leak in ocfs2_merge_rec_left()
perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
usb: typec: ucsi: fix probe failure in gaokun_ucsi_probe()
usb: phy: Initialize struct usb_phy list_head
usb: typec: ucsi: fix use-after-free caused by uec->work
usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required
ALSA: dice: fix buffer overflow in detect_stream_formats()
ALSA: hda/realtek: Add match for ASUS Xbox Ally projects
ALSA: hda/tas2781: fix speaker id retrieval for multiple probes
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
ALSA: wavefront: Fix integer overflow in sample size validation
ASoC: codecs: nau8325: Silence uninitialized variables warnings
Linux 6.17.13
UBUNTU: Upstream stable to v6.17.13

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2139960/+subscriptions