Ubuntu
linux-oem-6.11 package

MT7925 controller timeout during Suspend stress test

Oracular (24.10)
Bug #2095279

Bug #2095279 reported by En-Wei Wu on 2025-01-20

This bug affects 1 person

	Status	Importance	Assigned to
HWE Next	New	Undecided	Unassigned
linux (Ubuntu)	Status tracked in Plucky
Noble	Invalid	Undecided	Unassigned
Oracular	New	Undecided	Unassigned
Plucky	Invalid	Undecided	Unassigned
linux-firmware (Ubuntu)	Status tracked in Plucky
Noble	Fix Released	Undecided	En-Wei Wu
Oracular	Fix Released	Undecided	Unassigned
Plucky	Fix Released	Undecided	Unassigned
linux-oem-6.11 (Ubuntu)	Status tracked in Plucky
Noble	Fix Released	Undecided	En-Wei Wu
Oracular	New	Undecided	Unassigned
Plucky	New	Undecided	Unassigned

Bug Description

[Impact]
When doing suspend test, the system will fail to be suspended since the MT7925 controller couldn't be suspended. The root cause is caused by the command timeout issued from mt7925 driver.

[Fix]
Cherry-pick the following two patches from linux-next:

1b97fc8443ae wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend
8f6571ad470f wifi: mt76: mt7925: add handler to hif suspend/resume event

Also, cherry-pick the following commits from linux-firmware:

47c8a6053c64 linux-firmware: update firmware for MT7925 WiFi device
62ee1c4b2d35 linux-firmware: update firmware for MT7925 WiFi device

[Test Plan]
1. Install Ubuntu image and boot into the OS
2. Run the suspend test by $ fwts s3 --s3-device-check --s3-device-check-delay=60 --s3-multiple=1 --s3-sleep-delay=60, and see if the error occurred.

[Where problems could occur]
Due to the new FW, there might be a unexpected behavior of the MT7925 hardware.

See original description

Tags:

CVE References

En-Wei Wu (rickywu) on 2025-01-20

Changed in linux (Ubuntu):
status:	New → Invalid
Changed in linux (Ubuntu Noble):
status:	New → Invalid
Changed in linux-oem-6.11 (Ubuntu Noble):
assignee:	nobody → En-Wei Wu (rickywu)
Changed in linux-firmware (Ubuntu Noble):
assignee:	nobody → En-Wei Wu (rickywu)

En-Wei Wu (rickywu) on 2025-01-20

tags:	added: jira-wtn-183 oem-priority
description:	updated

LEE KUAN-YING (kyyc0426) on 2025-01-24

Changed in linux-oem-6.11 (Ubuntu Noble):
status:	New → Fix Committed

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2025-01-25:

This bug is awaiting verification that the linux-oem-6.11/6.11.0-1014.14 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-noble-linux-oem-6.11' to 'verification-done-noble-linux-oem-6.11'. If the problem still exists, change the tag 'verification-needed-noble-linux-oem-6.11' to 'verification-failed-noble-linux-oem-6.11'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: kernel-spammed-noble-linux-oem-6.11-v2 verification-needed-noble-linux-oem-6.11

Juerg Haefliger (juergh) on 2025-01-31

Changed in linux-firmware (Ubuntu Noble):
status:	New → Fix Committed
Changed in linux-firmware (Ubuntu Oracular):
status:	New → Fix Committed
Changed in linux-firmware (Ubuntu Plucky):
status:	New → Fix Released

Revision history for this message

Timo Aaltonen (tjaalton) wrote on 2025-02-04: Please test proposed package

Hello En-Wei, or anyone else affected,

Accepted linux-firmware into oracular-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/linux-firmware/20240913.gita34e7a5f-0ubuntu2.5 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-oracular to verification-done-oracular. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-oracular. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Revision history for this message

Timo Aaltonen (tjaalton) wrote on 2025-02-04:

Hello En-Wei, or anyone else affected,

Accepted linux-firmware into noble-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/linux-firmware/20240318.git3b128b60-0ubuntu2.8 in a few hours, and then in the -proposed repository.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-noble to verification-done-noble. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-noble. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Revision history for this message

Timo Aaltonen (tjaalton) wrote on 2025-02-11:

Hello En-Wei, or anyone else affected,

Accepted linux-firmware into noble-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/linux-firmware/20240318.git3b128b60-0ubuntu2.10 in a few hours, and then in the -proposed repository.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-noble to verification-done-noble. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-noble. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

En-Wei Wu (rickywu) on 2025-02-13

tags:

added: verification-done-noble-linux-oem-6.11
removed: verification-needed-noble-linux-oem-6.11

Viral Wang (viralwang) on 2025-02-19

tags:

added: verification-needed-noble verification-needed-oracular

En-Wei Wu (rickywu) on 2025-02-25

tags:	added: verification-done-oracular removed: verification-needed-oracular
tags:	added: verification-needed-oracular removed: verification-done-oracular

En-Wei Wu (rickywu) on 2025-02-26

tags:

added: verification-done-noble verification-done-oracular
removed: verification-needed-noble verification-needed-oracular

Revision history for this message

En-Wei Wu (rickywu) wrote on 2025-02-26:

I've tested:

1. Noble 6.8.0-53-generic with linux-firmware 20240318.git3b128b60-0ubuntu2.8. It worked fine without any problem.
2. Oracular with linux-firmware 20240913.gita34e7a5f-0ubuntu2.5. It also worked fine.

Revision history for this message

Timo Aaltonen (tjaalton) wrote on 2025-02-27: Update Released

The verification of the Stable Release Update for linux-oem-6.11 has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Revision history for this message

Launchpad Janitor (janitor) wrote on 2025-02-27:

Download full text (255.9 KiB)

This bug was fixed in the package linux-oem-6.11 - 6.11.0-1015.15

---------------
linux-oem-6.11 (6.11.0-1015.15) noble; urgency=medium

[ Ubuntu: 6.11.0-18.18 ]

* CVE-2025-0927
- SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key

linux-oem-6.11 (6.11.0-1014.14) noble; urgency=medium

* noble/linux-oem-6.11: 6.11.0-1014.14 -proposed tracker (LP: #2093642)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.oem/dkms-versions -- update from kernel-versions
      (main/2025.01.13)

* Add list of source files to linux-buildinfo (LP: #2086606)
- [Packaging] Add dwarfdump package in the Build-Depends

  * Enable DP tunnel on xe driver(for lunar lake platform) (LP: #2095287)
    - drm/xe/dp: Enable DP tunneling
    - Ubuntu: [Config] Enable CONFIG_DRM_XE_DP_TUNNEL

  * The ALS doesn't work(regression) (LP: #2095561)
    - Revert "UBUNTU: SAUCE: iio: hid-sensor-attributes: validate sensitivity
      attributes"
    - SAUCE: HID: quirks: ignore non-functional sensor in HP 5MP Camera

  * [SRU] Introduce support for RTL8125BPH 2.5 GbE controller. (LP: #2092384)
    - r8169: add support for RTL8125D
    - r8169: remove leftover locks after reverted change
    - r8169: improve __rtl8169_set_wol
    - r8169: improve rtl_set_d3_pll_down
    - r8169: align WAKE_PHY handling with r8125/r8126 vendor drivers
    - r8169: align RTL8125 EEE config with vendor driver
    - net: phy: convert eee_broken_modes to a linkmode bitmap
    - net: phy: add phy_set_eee_broken
    - r8169: copy vendor driver 2.5G/5G EEE advertisement constraints
    - net: phy: realtek: merge the drivers for internal NBase-T PHY's
    - net: phy: realtek: add RTL8125D-internal PHY
    - r8169: adjust version numbering for RTL8126
    - r8169: add support for RTL8125D rev.b
    - r8169: add support for RTL8125BP rev.b

  * MT7925 controller timeout during Suspend stress test (LP: #2095279)
    - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before
      suspend
    - wifi: mt76: mt7925: add handler to hif suspend/resume event

[ Ubuntu: 6.11.0-17.17 ]

This bug was fixed in the package linux-oem-6.11 - 6.11.0-1015.15

---------------
linux-oem-6.11 (6.11.0-1015.15) noble; urgency=medium

[ Ubuntu: 6.11.0-18.18 ]

* CVE-2025-0927
    - SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key

linux-oem-6.11 (6.11.0-1014.14) noble; urgency=medium

* noble/linux-oem-6.11: 6.11.0-1014.14 -proposed tracker (LP: #2093642)

* Packaging resync (LP: #1786013)
    - [Packaging] debian.oem/dkms-versions -- update from kernel-versions
      (main/2025.01.13)

* Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Add dwarfdump package in the Build-Depends

* Enable DP tunnel on xe driver(for lunar lake platform) (LP: #2095287)
    - drm/xe/dp: Enable DP tunneling
    - Ubuntu: [Config] Enable CONFIG_DRM_XE_DP_TUNNEL

[ Ubuntu: 6.11.0-17.17 ]

* oracular/linux: 6.11.0-17.17 -proposed tracker (LP: #2093643)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.01.13)
  * When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744)
    - [Packaging] disable hv-kvp-daemon if needed
  * Backport "netkit: Add option for scrubbing skb meta data" to 6.8
    (LP: #2091184)
    - netkit: Add option for scrubbing skb meta data
  * KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
    Exit (LP: #2093146)
    - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  * [SRU] add support of QCA BT 0489:e0fc (LP: #2085406)
    - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x
  * oracular: ubuntu_boot  lib/dynamic_queue_limits.c:99! (LP: #2089684)
    - virtio_net: correct netdev_tx_reset_queue() invocation point
    - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize()
    - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize
  * Failed to probe for OVTI02C1: chip id mismatch: 560243!=0 (LP: #2090932)
    - SAUCE: ACPI: scan: Update HID for new platform
  * Bluetooth[8086:a876] crash with "hci0: Failed to read MSFT supported
    features (-110)" (LP: #2085485)
    - Bluetooth: btintel_pcie: Add recovery mechanism
  * Poor bluetooth performance on Lenovo X13s (LP: #2089357)
    - SAUCE: Bluetooth: qca: Support downloading board ID specific NVM for WCN6855
  * vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
    - SAUCE: Revert "mm: use rwsem assertion macros for mmap_lock"
    - SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
    - SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655)
    - wifi: mac80211: Fix setting txpower with emulate_chanctx
    - wifi: cfg80211: Add wiphy_delayed_work_pending()
    - wifi: mac80211: Convert color collision detection to wiphy work
    - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings
    - spi: stm32: fix missing device mode capability in stm32mp25
    - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
    - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
    - ASoC: Intel: sst: Support LPE0F28 ACPI HID
    - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
    - wifi: iwlwifi: mvm: SAR table alignment
    - mac80211: fix user-power when emulating chanctx
    - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
    - usb: typec: use cleanup facility for 'altmodes_node'
    - selftests/watchdog-test: Fix system accidentally reset after watchdog-test
    - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    - ASoC: codecs: wcd937x: add missing LO Switch control
    - ASoC: codecs: wcd937x: relax the AUX PDM watchdog
    - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
    - bpf: fix filed access without lock
    - net: usb: qmi_wwan: add Quectel RG650V
    - soc: qcom: Add check devm_kasprintf() returned value
    - firmware: arm_scmi: Reject clear channel request on A2P
    - regulator: rk808: Add apply_bit for BUCK3 on RK809
    - platform/x86: dell-smbios-base: Extends support to Alienware products
    - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
    - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
    - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
    - tools/lib/thermal: Remove the thermal.h soft link when doing make clean
    - can: j1939: fix error in J1939 documentation.
    - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect
      fan speed
    - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
    - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
    - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
    - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less
      strict
    - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
    - integrity: Use static_assert() to check struct sizes
    - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
    - LoongArch: For all possible CPUs setup logical-physical CPU mapping
    - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
    - ASoC: max9768: Fix event generation for playback mute
    - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
    - ARM: 9420/1: smp: Fix SMP for xip kernels
    - ARM: 9434/1: cfi: Fix compilation corner case
    - ipmr: Fix access to mfc_cache_list without lock held
    - f2fs: fix fiemap failure issue when page size is 16KB
    - drm/amd/display: Skip Invalid Streams from DSC Policy
    - drm/amd/display: Fix incorrect DSC recompute trigger
    - s390/facilities: Fix warning about shadow of global variable
    - efs: fix the efs new mount api implementation
    - arm64: probes: Disable kprobes/uprobes on MOPS instructions
    - kselftest/arm64: hwcap: fix f8dp2 cpuinfo name
    - kselftest/arm64: mte: fix printf type warnings about __u64
    - kselftest/arm64: mte: fix printf type warnings about longs
    - block/fs: Pass an iocb to generic_atomic_write_valid()
    - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()
    - s390/cio: Do not unregister the subchannel based on DNV
    - s390/pageattr: Implement missing kernel_page_present()
    - x86/pvh: Set phys_base when calling xen_prepare_pvh()
    - x86/pvh: Call C code via the kernel virtual mapping
    - brd: defer automatic disk creation until module initialization succeeds
    - ext4: avoid remount errors with 'abort' mount option
    - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
    - arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers
    - kselftest/arm64: Fix encoding for SVE B16B16 test
    - nvme-pci: fix freeing of the HMB descriptor table
    - m68k: mvme147: Fix SCSI controller IRQ numbers
    - m68k: mvme147: Reinstate early console
    - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
    - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
    - loop: fix type of block size
    - cachefiles: Fix incorrect length return value in
      cachefiles_ondemand_fd_write_iter()
    - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
    - cachefiles: Fix NULL pointer dereference in object->file
    - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
    - block: constify the lim argument to queue_limits_max_zone_append_sectors
    - block: properly handle REQ_OP_ZONE_APPEND in __bio_split_to_limits
    - block: take chunk_sectors into account in bio_split_write_zeroes
    - block: fix bio_split_rw_at to take zone_write_granularity into account
    - s390/syscalls: Avoid creation of arch/arch/ directory
    - hfsplus: don't query the device logical block size multiple times
    - ext4: pipeline buffer reads in mext_page_mkuptodate()
    - ext4: remove array of buffer_heads from mext_page_mkuptodate()
    - ext4: fix race in buffer_head read fault injection
    - nvme-pci: reverse request order in nvme_queue_rqs
    - virtio_blk: reverse request order in virtio_queue_rqs
    - crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys
    - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
    - crypto: qat - remove check after debugfs_create_dir()
    - crypto: qat/qat_420xx - fix off by one in uof_get_name()
    - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
    - firmware: google: Unregister driver_info on failure
    - EDAC/bluefield: Fix potential integer overflow
    - crypto: qat - remove faulty arbiter config reset
    - thermal: core: Initialize thermal zones before registering them
    - thermal: core: Drop thermal_zone_device_is_enabled()
    - thermal: core: Rearrange PM notification code
    - thermal: core: Represent suspend-related thermal zone flags as bits
    - thermal: core: Mark thermal zones as initializing to start with
    - thermal: core: Fix race between zone registration and system suspend
    - EDAC/fsl_ddr: Fix bad bit shift operations
    - EDAC/skx_common: Differentiate memory error sources
    - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
    - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
      -EBUSY
    - crypto: cavium - Fix the if condition to exit loop after timeout
    - cpufreq/amd-pstate: Don't update CPPC request in
      amd_pstate_cpu_boost_update()
    - amd-pstate: Set min_perf to nominal_perf for active mode performance gov
    - crypto: hisilicon/qm - disable same error report before resetting
    - EDAC/igen6: Avoid segmentation fault on module unload
    - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
    - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
    - sched/cpufreq: Ensure sd is rebuilt for EAS check
    - doc: rcu: update printed dynticks counter bits
    - rcu/srcutiny: don't return before reenabling preemption
    - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
    - hwmon: (pmbus/core) clear faults after setting smbalert mask
    - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
    - ACPI: CPPC: Fix _CPC register setting issue
    - crypto: caam - add error check to caam_rsa_set_priv_key_form
    - crypto: bcm - add error check in the ahash_hmac_init function
    - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
    - rcuscale: Do a proper cleanup if kfree_scale_init() fails
    - tools/lib/thermal: Make more generic the command encoding function
    - thermal/lib: Fix memory leak on error in thermal_genl_auto()
    - x86/unwind/orc: Fix unwind for newly forked tasks
    - Revert "scripts/faddr2line: Check only two symbols when calculating symbol
      size"
    - cleanup: Remove address space of returned pointer
    - time: Partially revert cleanup on msecs_to_jiffies() documentation
    - time: Fix references to _msecs_to_jiffies() handling of values
    - locking/atomic/x86: Use ALT_OUTPUT_SP() for __alternative_atomic64()
    - locking/atomic/x86: Use ALT_OUTPUT_SP() for __arch_{,try_}cmpxchg64_emu()
    - kcsan, seqlock: Support seqcount_latch_t
    - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
    - clocksource/drivers:sp804: Make user selectable
    - clocksource/drivers/timer-ti-dm: Fix child node refcount handling
    - regulator: qcom-smd: make smd_vreg_rpm static
    - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
    - arm64: dts: qcom: qcs6390-rb3gen2: use modem.mbn for modem DSP
    - ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash
    - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
    - microblaze: Export xmb_manager functions
    - arm64: dts: mediatek: mt8188: Fix wrong clock provider in MFG1 power domain
    - arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy
    - arm64: dts: mt8195: Fix dtbs_check error for mutex node
    - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
    - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
    - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
    - arm64: dts: qcom: sda660-ifc6560: fix l10a voltage ranges
    - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
    - mmc: mmc_spi: drop buggy snprintf()
    - scripts/kernel-doc: Do not track section counter across processed files
    - arm64: dts: qcom: x1e80100-slim7x: Drop orientation-switch from USB SS[0-1]
      QMP PHYs
    - arm64: dts: qcom: x1e80100-vivobook-s15: Drop orientation-switch from USB
      SS[0-1] QMP PHYs
    - openrisc: Implement fixmap to fix earlycon
    - efi/libstub: fix efi_parse_options() ignoring the default command line
    - tpm: fix signed/unsigned bug when checking event logs
    - media: i2c: vgxy61: Fix an error handling path in vgxy61_detect()
    - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
    - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
    - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
    - arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region
    - kernel-doc: allow object-like macros in ReST output
    - arm64: dts: ti: k3-am62x-phyboard-lyra: Drop unnecessary McASP AFIFOs
    - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
      trackpad
    - arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status
    - arm64: dts: mediatek: mt8195-cherry: Use correct audio codec DAI
    - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
    - cgroup/bpf: only cgroup v2 can be attached by bpf programs
    - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
    - power: sequencing: make the QCom PMU pwrseq driver depend on CONFIG_OF
    - [Config] updateconfigs for POWER_SEQUENCING_QCOM_WCN
    - arm64: dts: rockchip: Remove 'enable-active-low' from two boards
    - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
    - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
    - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
    - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
    - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
    - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
    - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
    - watchdog: Add HAS_IOPORT dependency for SBC8360 and SBC7240
    - arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers
    - dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries
    - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
    - pmdomain: ti-sci: Add missing of_node_put() for args.np
    - spi: tegra210-quad: Avoid shift-out-of-bounds
    - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time
    - regmap: irq: Set lockdep class for hierarchical IRQ domains
    - arm64: dts: renesas: hihope: Drop #sound-dai-cells
    - arm64: dts: imx8mn-tqma8mqnl-mba8mx-usbot: fix coexistence of output-low and
      output-high in GPIO
    - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
    - arm64: dts: mediatek: mt6358: fix dtbs_check error
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
      regulators
    - selftests/resctrl: Print accurate buffer size as part of MBM results
    - selftests/resctrl: Fix memory overflow due to unhandled wraparound
    - selftests/resctrl: Protect against array overrun during iMC config parsing
    - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
    - media: ipu6: Fix DMA and physical address debugging messages for 32-bit
    - media: ipu6: not override the dma_ops of device in driver
    - pwm: Assume a disabled PWM to emit a constant inactive output
    - media: atomisp: Add check for rgby_data memory allocation failure
    - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
    - HID: hyperv: streamline driver probe to avoid devres issues
    - platform/x86: panasonic-laptop: Return errno correctly in show callback
    - drm/imagination: Convert to use time_before macro
    - drm/imagination: Use pvr_vm_context_get()
    - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
    - drm/vc4: hvs: Don't write gamma luts on 2711
    - drm/vc4: hdmi: Avoid hang with debug registers when suspended
    - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
    - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
    - drm/vc4: hvs: Correct logic on stopping an HVS channel
    - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
    - drm/omap: Fix possible NULL dereference
    - drm/omap: Fix locking in omap_gem_new_dmabuf()
    - drm/v3d: Appease lockdep while updating GPU stats
    - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
    - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    - udmabuf: change folios array from kmalloc to kvmalloc
    - udmabuf: fix vmap_udmabuf error page set
    - [Config] updateconfigs for VMAP_PFN
    - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/panel: nt35510: Make new commands optional
    - drm/v3d: Address race-condition in MMU flush
    - drm/v3d: Flush the MMU before we supply more memory to the binner
    - drm/amdgpu: Fix JPEG v4.0.3 register write
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
    - wifi: ath12k: Skip Rx TID cleanup for self peer
    - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
    - ASoC: fsl_micfil: fix regmap_write_bits usage
    - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
    - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios
    - drm/bridge: anx7625: Drop EDID cache on bridge power off
    - drm/bridge: it6505: Drop EDID cache on bridge power off
    - libbpf: Fix expected_attach_type set handling in program load callback
    - libbpf: Fix output .symtab byte-order during linking
    - dlm: fix swapped args sb_flags vs sb_status
    - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled
    - drm/amd/display: fix a memleak issue when driver is removed
    - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()
    - wifi: ath12k: fix one more memcpy size error
    - bpf: Fix the xdp_adjust_tail sample prog issue
    - selftests/bpf: netns_new() and netns_free() helpers.
    - selftests/bpf: Fix backtrace printing for selftests crashes
    - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
    - selftests/bpf: add missing header include for htons
    - wifi: cfg80211: check radio iface combination for multi radio per wiphy
    - ice: consistently use q_idx in ice_vc_cfg_qs_msg()
    - drm/vc4: hdmi: Increase audio MAI fifo dreq threshold
    - drm/vc4: Introduce generation number enum
    - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
    - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
    - drm/vc4: Correct generation check in vc4_hvs_lut_load
    - libbpf: fix sym_is_subprog() logic for weak global subprogs
    - accel/ivpu: Prevent recovery invocation during probe and resume
    - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
    - libbpf: never interpret subprogs in .text as entry programs
    - netdevsim: copy addresses for both in and out paths
    - drm/bridge: tc358767: Fix link properties discovery
    - selftests/bpf: Fix msg_verify_data in test_sockmap
    - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
    - wifi: wilc1000: Set MAC after operation mode
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_config_scan()
    - drm: fsl-dcu: enable PIXCLK on LS1021A
    - drm: panel: nv3052c: correct spi_device_id for RG35XX panel
    - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
    - drm/msm/dpu: drop LM_3 / LM_4 on SDM845
    - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
    - selftests/bpf: fix test_spin_lock_fail.c's global vars usage
    - libbpf: move global data mmap()'ing into bpf_object__load()
    - drm/panfrost: Remove unused id_mask from struct panfrost_model
    - bpf, arm64: Remove garbage frame for struct_ops trampoline
    - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/msm/gpu: Check the status of registration to PM QoS
    - drm/xe/hdcp: Fix gsc structure check in fw check status
    - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    - drm/etnaviv: hold GPU lock across perfmon sampling
    - drm/amd/display: Increase idle worker HPD detection time
    - drm/amd/display: Reduce HPD Detection Interval for IPS
    - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
    - drm: zynqmp_kms: Unplug DRM device before removal
    - drm: xlnx: zynqmp_disp: layer may be null while releasing
    - wifi: wfx: Fix error handling in wfx_core_init()
    - wifi: cw1200: Fix potential NULL dereference
    - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
    - bpf, bpftool: Fix incorrect disasm pc
    - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable
    - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
    - drm/amdgpu: Fix the memory allocation issue in
      amdgpu_discovery_get_nps_info()
    - bpf: Support __nullable argument suffix for tp_btf
    - selftests/bpf: Add test for __nullable suffix in tp_btf
    - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
    - drm: use ATOMIC64_INIT() for atomic64_t
    - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
    - netfilter: nf_tables: must hold rcu read lock while iterating expression
      type list
    - netfilter: nf_tables: must hold rcu read lock while iterating object type
      list
    - netlink: typographical error in nlmsg_type constants definition
    - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()
    - drm/panfrost: Add missing OPP table refcnt decremental
    - drm/panthor: introduce job cycle and timestamp accounting
    - drm/panthor: record current and maximum device clock frequencies
    - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation
    - isofs: avoid memory leak in iocharset
    - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
    - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
    - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
    - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
    - bpf, sockmap: Several fixes to bpf_msg_push_data
    - bpf, sockmap: Several fixes to bpf_msg_pop_data
    - bpf, sockmap: Fix sk_msg_reset_curr
    - ipv6: release nexthop on device removal
    - selftests: net: really check for bg process completion
    - wifi: cfg80211: Remove the Medium Synchronization Delay validity check
    - wifi: iwlwifi: allow fast resume on ax200
    - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending
    - drm/amdgpu: fix ACA bank count boundary check error
    - drm/amdgpu: Fix map/unmap queue logic
    - drm/amdkfd: Fix wrong usage of INIT_WORK()
    - bpf: Allow return values 0 and 1 for kprobe session
    - bpf: Force uprobe bpf program to always return 0
    - selftests/bpf: skip the timer_lockup test for single-CPU nodes
    - ipv6: Fix soft lockups in fib6_select_path under high next hop churn
    - net: rfkill: gpio: Add check for clk_enable()
    - Revert "wifi: iwlegacy: do not skip frames with bad FCS"
    - bpf: Use function pointers count as struct_ops links count
    - bpf: Add kernel symbol for struct_ops trampoline
    - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
    - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
    - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
    - ALSA: 6fire: Release resources at card release
    - i2c: dev: Fix memory leak when underlying adapter does not support I2C
    - selftests: netfilter: Fix missing return values in conntrack_dump_flush
    - Bluetooth: btintel_pcie: Add handshake between driver and firmware
    - Bluetooth: btintel: Do no pass vendor events to stack
    - Bluetooth: btmtk: adjust the position to init iso data anchor
    - Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
    - Bluetooth: ISO: Use kref to track lifetime of iso_conn
    - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending
    - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending
    - Bluetooth: ISO: Send BIG Create Sync via hci_sync
    - Bluetooth: fix use-after-free in device_for_each_child()
    - xsk: Free skb when TX metadata options are invalid
    - erofs: handle NONHEAD !delta[1] lclusters gracefully
    - dlm: fix dlm_recover_members refcount on error
    - eth: fbnic: don't disable the PCI device twice
    - net: txgbe: remove GPIO interrupt controller
    - net: txgbe: fix null pointer to pcs
    - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
    - wireguard: selftests: load nf_conntrack if not present
    - bpf: fix recursive lock when verdict program return SK_PASS
    - unicode: Fix utf8_load() error path
    - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
    - RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages
    - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset
    - clk: mediatek: drop two dead config options
    - [Config] drop COMMON_CLK_MT8195_{AUDSYS,MSDC}
    - trace/trace_event_perf: remove duplicate samples on the first tracepoint
      event
    - pinctrl: zynqmp: drop excess struct member description
    - pinctrl: renesas: Select PINCTRL_RZG2L for RZ/V2H(P) SoC
    - clk: qcom: videocc-sm8550: depend on either gcc-sm8550 or gcc-sm8650
    - iommu/s390: Implement blocking domain
    - scsi: hisi_sas: Enable all PHYs that are not disabled by user during
      controller reset
    - powerpc/vdso: Flag VDSO64 entry points as functions
    - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
    - mfd: da9052-spi: Change read-mask to write-mask
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
    - irqdomain: Simplify simple and legacy domain creation
    - irqdomain: Cleanup domain name allocation
    - irqdomain: Allow giving name suffix for domain
    - regmap: Allow setting IRQ domain name suffix
    - mfd: intel_soc_pmic_bxtwc: Fix IRQ domain names duplication
    - cpufreq: loongson2: Unregister platform_driver on failure
    - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
    - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
    - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
    - mtd: rawnand: atmel: Fix possible memory leak
    - powerpc/mm/fault: Fix kfence page fault reporting
    - clk: sophgo: avoid integer overflow in sg2042_pll_recalc_rate()
    - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in
      RD_ANY_REG_OP
    - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
    - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
    - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
    - iommu/amd: Remove amd_iommu_domain_update() from page table freeing
    - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related
    - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl
    - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain
    - iommu/amd: Narrow the use of struct protection_domain to invalidation
    - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
    - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
    - RDMA/hns: Fix flush cqe error when racing with destroy qp
    - RDMA/hns: Modify debugfs name
    - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
    - RDMA/hns: Fix cpu stuck caused by printings during reset
    - RDMA/rxe: Fix the qp flush warnings in req
    - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
    - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
    - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
    - RDMA/rxe: Set queue pair cur_qp_state when being queried
    - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
    - riscv: kvm: Fix out-of-bounds array access
    - clk: imx: lpcg-scu: SW workaround for errata (e10858)
    - clk: imx: fracn-gppll: correct PLL initialization flow
    - clk: imx: fracn-gppll: fix pll power up
    - clk: imx: clk-scu: fix clk enable state save and restore
    - clk: imx: imx8-acm: Fix return value check in
      clk_imx_acm_attach_pm_domains()
    - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
    - iommu/vt-d: Fix checks and print in pgtable_walk()
    - checkpatch: always parse orig_commit in fixes tag
    - mfd: rt5033: Fix missing regmap_del_irq_chip()
    - leds: max5970: Fix unreleased fwnode_handle in probe function
    - leds: ktd2692: Set missing timing properties
    - fs/proc/kcore.c: fix coccinelle reported ERROR instances
    - scsi: target: Fix incorrect function name in pscsi_create_type_disk()
    - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
    - scsi: fusion: Remove unused variable 'rc'
    - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
    - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
    - scsi: sg: Enable runtime power management
    - x86/tdx: Introduce wrappers to read and write TD metadata
    - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
    - x86/tdx: Dynamically disable SEPT violations from causing #VEs
    - powerpc/fadump: allocate memory for additional parameters early
    - fadump: reserve param area if below boot_mem_top
    - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
    - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
    - cpufreq: loongson3: Check for error code from devm_mutex_init() call
    - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
    - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
    - kasan: move checks to do_strncpy_from_user
    - kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL
    - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
    - dax: delete a stale directory pmem
    - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
    - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending
      doorbells
    - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
    - RDMA/hns: Fix different dgids mapping to the same dip_idx
    - KVM: PPC: Book3S HV: Fix kmv -> kvm typo
    - powerpc/kexec: Fix return of uninitialized variable
    - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
    - RDMA/mlx5: Move events notifier registration to be after device registration
    - clk: clk-apple-nco: Add NULL check in applnco_probe
    - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
    - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
    - clk: en7523: remove REG_PCIE*_{MEM,MEM_MASK} configuration
    - clk: en7523: move clock_register in hw_init callback
    - clk: en7523: introduce chip_scu regmap
    - clk: en7523: fix estimation of fixed rate for EN7581
    - dt-bindings: clock: axi-clkgen: include AXI clk
    - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
    - pinctrl: k210: Undef K210_PC_DEFAULT
    - rtla/timerlat: Do not set params->user_workload with -U
    - smb: cached directories can be more than root file handle
    - mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()
    - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
    - x86: fix off-by-one in access_ok()
    - perf cs-etm: Don't flush when packet_queue fills up
    - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
    - gfs2: Allow immediate GLF_VERIFY_DELETE work
    - gfs2: Fix unlinked inode cleanup
    - perf test: Add test for Intel TPEBS counting mode
    - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
    - PCI: Fix reset_method_store() memory leak
    - perf stat: Close cork_fd when create_perf_stat_counter() failed
    - perf stat: Fix affinity memory leaks on error path
    - perf trace: Keep exited threads for summary
    - perf test attr: Add back missing topdown events
    - f2fs: compress: fix inconsistent update of i_blocks in
      release_compress_blocks and reserve_compress_blocks
    - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
    - f2fs: fix to account dirty data in __get_secs_required()
    - perf dso: Fix symtab_type for kmod compression
    - perf probe: Fix libdw memory leak
    - perf probe: Correct demangled symbols in C++ program
    - rust: kernel: fix THIS_MODULE header path in ThisModule doc comment
    - rust: macros: fix documentation of the paste! macro
    - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    - PCI: cpqphp: Fix PCIBIOS_* return value confusion
    - rust: block: fix formatting of `kernel::block::mq::request` module
    - perf disasm: Use disasm_line__free() to properly free disasm_line
    - virtiofs: use pages instead of pointer for kernel direct IO
    - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
    - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
    - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
    - f2fs: check curseg->inited before write_sum_page in change_curseg
    - f2fs: Fix not used variable 'index'
    - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
    - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or
      GC_URGENT_MID
    - PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
    - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()
    - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
    - PCI: cadence: Set cdns_pcie_host_init() global
    - PCI: j721e: Add reset GPIO to struct j721e_pcie
    - PCI: j721e: Use T_PERST_CLK_US macro
    - PCI: j721e: Add suspend and resume support
    - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
    - perf build: Add missing cflags when building with custom libtraceevent
    - f2fs: fix race in concurrent f2fs_stop_gc_thread
    - f2fs: fix to map blocks correctly for direct write
    - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data
      inode
    - perf trace: avoid garbage when not printing a trace event's arguments
    - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
    - m68k: coldfire/device.c: only build FEC when HW macros are defined
    - svcrdma: Address an integer overflow
    - nfsd: drop inode parameter from nfsd4_change_attribute()
    - perf list: Fix topic and pmu_name argument order
    - perf trace: Fix tracing itself, creating feedback loops
    - perf trace: Do not lose last events in a race
    - perf trace: Avoid garbage when not printing a syscall's arguments
    - remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()
    - remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()
    - remoteproc: qcom: pas: add minidump_id to SM8350 resources
    - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
    - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
    - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
    - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
    - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
    - nfsd: release svc_expkey/svc_export with rcu_work
    - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
    - NFSD: Fix nfsd4_shutdown_copy()
    - f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS
    - f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow
    - hwmon: (tps23861) Fix reporting of negative temperatures
    - hwmon: (aquacomputer_d5next) Fix length of speed_input array
    - phy: airoha: Fix REG_CSR_2L_PLL_CMN_RESERVE0 config in
      airoha_pcie_phy_init_clk_out()
    - phy: airoha: Fix REG_PCIE_PMA_TX_RESET config in
      airoha_pcie_phy_init_csr_2l()
    - phy: airoha: Fix REG_CSR_2L_JCPLL_SDM_HREN config in
      airoha_pcie_phy_init_ssc_jcpll()
    - phy: airoha: Fix REG_CSR_2L_RX{0,1}_REV0 definitions
    - vdpa/mlx5: Fix suboptimal range on iotlb iteration
    - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
    - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()
    - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
    - gpio: zevio: Add missed label initialisation
    - vfio/pci: Properly hide first-in-list PCIe extended capability
    - fs_parser: update mount_api doc to match function signature
    - LoongArch: Fix build failure with GCC 15 (-std=gnu23)
    - LoongArch: BPF: Sign-extend return values
    - power: supply: core: Remove might_sleep() from power_supply_put()
    - power: supply: bq27xxx: Fix registers of bq27426
    - power: supply: rt9471: Fix wrong WDT function regfield declaration
    - power: supply: rt9471: Use IC status regfield to report real charger status
    - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
    - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
    - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
    - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
      configuration
    - net: microchip: vcap: Add typegroup table terminators in kunit tests
    - netlink: fix false positive warning in extack during dumps
    - exfat: fix file being changed by unaligned direct write
    - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
    - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
    - net: mdio-ipq4019: add missing error check
    - marvell: pxa168_eth: fix call balance of pep->clk handling routines
    - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
    - octeontx2-af: RPM: Fix mismatch in lmac type
    - octeontx2-af: RPM: Fix low network performance
    - octeontx2-af: RPM: fix stale RSFEC counters
    - octeontx2-af: RPM: fix stale FCFEC counters
    - octeontx2-af: Quiesce traffic before NIX block reset
    - spi: atmel-quadspi: Fix register name in verbose logging function
    - net: hsr: fix hsr_init_sk() vs network/transport headers.
    - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
    - bnxt_en: Set backplane link modes correctly for ethtool
    - bnxt_en: Fix receive ring space parameters when XDP is active
    - bnxt_en: Refactor bnxt_ptp_init()
    - bnxt_en: Unregister PTP during PCI shutdown and suspend
    - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
    - Bluetooth: MGMT: Fix possible deadlocks
    - llc: Improve setsockopt() handling of malformed user input
    - rxrpc: Improve setsockopt() handling of malformed user input
    - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
    - ip6mr: fix tables suspicious RCU usage
    - ipmr: fix tables suspicious RCU usage
    - iio: light: al3010: Fix an error handling path in al3010_probe()
    - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
    - usb: yurex: make waiting on yurex_write interruptible
    - USB: chaoskey: fail open after removal
    - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
    - misc: apds990x: Fix missing pm_runtime_disable()
    - devres: Fix page faults when tracing devres from unloaded modules
    - usb: gadget: uvc: wake pump everytime we update the free list
    - interconnect: qcom: icc-rpmh: probe defer incase of missing QoS clock
      dependency
    - phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe
    - phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
    - counter: stm32-timer-cnt: Add check for clk_enable()
    - counter: ti-ecap-capture: Add check for clk_enable()
    - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian
    - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
    - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
    - ALSA: hda/realtek: Update ALC256 depop procedure
    - drm/radeon: add helper rdev_to_drm(rdev)
    - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
    - drm/radeon: Fix spurious unplug event on radeon HDMI
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in
      dcn20_program_pipe
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
    - ASoC: imx-audmix: Add NULL check in imx_audmix_probe
    - drm/xe/ufence: Wake up waiters after setting ufence->signalled
    - apparmor: fix 'Do simple duplicate message elimination'
    - ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()
    - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
    - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
    - s390/pci: Fix potential double remove of hotplug slot
    - net_sched: sch_fq: don't follow the fast path if Tx is behind now
    - xen: Fix the issue of resource not being properly released in
      xenbus_dev_probe()
    - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
      devices
    - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
    - usb: ehci-spear: fix call balance of sehci clk handling routines
    - usb: typec: ucsi: glink: fix off-by-one in connector_status
    - dm-cache: fix warnings about duplicate slab caches
    - dm-bufio: fix warnings about duplicate slab caches
    - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
    - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    - irqdomain: Always associate interrupts for legacy domains
    - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
    - ext4: fix FS_IOC_GETFSMAP handling
    - jfs: xattr: check invalid xattr size more strictly
    - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5
      21MES00B00
    - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
    - ASoC: da7213: Populate max_register to regmap_config
    - perf/x86/intel/pt: Fix buffer full but size is 0 case
    - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    - KVM: x86: switch hugepage recovery thread to vhost_task
    - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
    - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
    - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
    - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
    - KVM: arm64: Don't retire aborted MMIO instruction
    - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
    - KVM: arm64: Get rid of userspace_irqchip_in_use
    - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
    - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
    - Compiler Attributes: disable __counted_by for clang < 19.1.3
    - PCI: Fix use-after-free of slot->bus on hot remove
    - LoongArch: Explicitly specify code model in Makefile
    - clk: clk-loongson2: Fix memory corruption bug in struct
      loongson2_clk_provider
    - clk: clk-loongson2: Fix potential buffer overflow in flexible-array member
      access
    - fsnotify: fix sending inotify event with unexpected filename
    - comedi: Flush partial mappings in error case
    - apparmor: test: Fix memory leak for aa_unpack_strdup()
    - iio: dac: adi-axi-dac: fix wrong register bitfield
    - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    - locking/lockdep: Avoid creating new name string literals in
      lockdep_set_subclass()
    - tools/nolibc: s390: include std.h
    - pinctrl: qcom: spmi: fix debugfs drive strength
    - dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with
      fallbacks
    - dt-bindings: iio: dac: ad3552r: fix maximum spi speed
    - exfat: fix uninit-value in __exfat_get_dentry_set
    - exfat: fix out-of-bounds access of directory entries
    - xhci: Fix control transfer error on Etron xHCI host
    - xhci: Combine two if statements for Etron xHCI host
    - xhci: Don't perform Soft Retry for Etron xHCI host
    - xhci: Don't issue Reset Device command to Etron xHCI host
    - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    - usb: xhci: Limit Stop Endpoint retries
    - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
    - usb: xhci: Avoid queuing redundant Stop Endpoint commands
    - ARM: dts: omap36xx: declare 1GHz OPP as turbo again
    - wifi: ath12k: fix warning when unbinding
    - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of
      failures
    - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan
    - wifi: ath12k: fix crash when unbinding
    - wifi: brcmfmac: release 'root' node in all execution paths
    - Revert "fs: don't block i_writecount during exec"
    - Revert "f2fs: remove unreachable lazytime mount option parsing"
    - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
    - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
    - io_uring: fix corner case forgetting to vunmap
    - io_uring: check for overflows in io_pin_pages
    - blk-settings: round down io_opt to physical_block_size
    - gpio: exar: set value when external pull-up or pull-down is present
    - spi: Fix acpi deferred irq probe
    - mtd: spi-nor: core: replace dummy buswidth from addr to data
    - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
    - cifs: support mounting with alternate password to allow password rotation
    - parisc/ftrace: Fix function graph tracing disablement
    - RISC-V: Scalar unaligned access emulated on hotplug CPUs
    - RISC-V: Check scalar unaligned access on all CPUs
    - ksmbd: fix use-after-free in SMB request handling
    - smb: client: fix NULL ptr deref in crypto_aead_setkey()
    - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
    - irqchip/irq-mvebu-sei: Move misplaced select() callback to SEI CP domain
    - x86/CPU/AMD: Terminate the erratum_1386_microcode array
    - ubi: wl: Put source PEB into correct list if trying locking LEB failed
    - um: ubd: Do not use drvdata in release
    - um: net: Do not use drvdata in release
    - dt-bindings: serial: rs485: Fix rs485-rts-delay property
    - serial: 8250_fintek: Add support for F81216E
    - serial: 8250: omap: Move pm_runtime_get_sync
    - serial: amba-pl011: Fix RX stall when DMA is used
    - serial: amba-pl011: fix build regression
    - mtd: ubi: fix unreleased fwnode_handle in find_volume_fwnode()
    - block: Prevent potential deadlock in blk_revalidate_disk_zones()
    - um: vector: Do not use drvdata in release
    - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    - iio: gts: Fix uninitialized symbol 'ret'
    - ublk: fix ublk_ch_mmap() for 64K page size
    - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
    - block: fix missing dispatching request when queue is started or unquiesced
    - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
    - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
    - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
    - gve: Flow steering trigger reset only for timeout error
    - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
    - i40e: Fix handling changed priv flags
    - media: wl128x: Fix atomicity violation in fmc_send_cmd()
    - media: intel/ipu6: do not handle interrupts when device is disabled
    - arm64: dts: mediatek: mt8186-corsola-voltorb: Merge speaker codec nodes
    - netdev-genl: Hold rcu_read_lock in napi_get
    - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
    - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
    - ALSA: rawmidi: Fix kvfree() call in spinlock
    - ALSA: ump: Fix evaluation of MIDI 1.0 FB info
    - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
    - ALSA: hda/realtek: Update ALC225 depop procedure
    - ALSA: hda/realtek: Set PCBeep to default value for ALC274
    - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
    - ALSA: hda/realtek: Apply quirk for Medion E15433
    - smb3: request handle caching when caching directories
    - smb: client: handle max length for SMB symlinks
    - smb: Don't leak cfid when reconnect races with open_cached_dir
    - smb: prevent use-after-free due to open_cached_dir error paths
    - smb: During unmount, ensure all cached dir instances drop their dentry
    - usb: misc: ljca: set small runtime autosuspend delay
    - usb: misc: ljca: move usb_autopm_put_interface() after wait for response
    - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
    - usb: musb: Fix hardware lockup on first Rx endpoint request
    - usb: dwc3: gadget: Fix checking for number of TRBs left
    - usb: dwc3: gadget: Fix looping of queued SG entries
    - staging: vchiq_arm: Fix missing refcount decrement in error path for fw_node
    - counter: stm32-timer-cnt: fix device_node handling in probe_encoder()
    - ublk: fix error code for unsupported command
    - lib: string_helpers: silence snprintf() output truncation warning
    - f2fs: fix to do sanity check on node blkaddr in truncate_node()
    - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
    - Input: cs40l50 - fix wrong usage of INIT_WORK()
    - NFSD: Prevent a potential integer overflow
    - SUNRPC: make sure cache entry active before cache_show
    - um: Fix potential integer overflow during physmem setup
    - um: Fix the return value of elf_core_copy_task_fpregs
    - kfifo: don't include dma-mapping.h in kfifo.h
    - um: ubd: Initialize ubd's disk pointer in ubd_add
    - um: Always dump trace for specified task in show_stack
    - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
    - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    - rtc: abx80x: Fix WDT bit position of the status register
    - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
    - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
    - ubifs: Correct the total block count by deducting journal reservation
    - ubi: fastmap: Fix duplicate slab cache names while attaching
    - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
    - jffs2: fix use of uninitialized variable
    - rtc: rzn1: fix BCD to rtc_time conversion errors
    - Revert "nfs: don't reuse partially completed requests in
      nfs_lock_and_join_requests"
    - nvme-multipath: avoid hang on inaccessible namespaces
    - nvme/multipath: Fix RCU list traversal to use SRCU primitive
    - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs
    - block: model freeze & enter queue as lock for supporting lockdep
    - block: fix uaf for flush rq while iterating tags
    - block: return unsigned int from bdev_io_min
    - nvme-fabrics: fix kernel crash while shutting down controller
    - 9p/xen: fix init sequence
    - 9p/xen: fix release of IRQ
    - perf/arm-smmuv3: Fix lockdep assert in ->event_init()
    - perf/arm-cmn: Ensure port and device id bits are set properly
    - smb: client: disable directory caching when dir_cache_timeout is zero
    - x86/Documentation: Update algo in init_size description of boot protocol
    - cifs: Fix parsing native symlinks relative to the export
    - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE
      session
    - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
    - Rename .data.unlikely to .data..unlikely
    - Rename .data.once to .data..once to fix resetting WARN*_ONCE
    - kbuild: deb-pkg: Don't fail if modules.order is missing
    - smb: Initialize cfid->tcon before performing network ops
    - block: Don't allow an atomic write be truncated in blkdev_write_iter()
    - modpost: remove incorrect code in do_eisa_entry()
    - cifs: during remount, make sure passwords are in sync
    - cifs: unlock on error in smb3_reconfigure()
    - nfs: ignore SB_RDONLY when mounting nfs
    - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
    - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
    - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
    - nfs/blocklayout: Don't attempt unregister for invalid block device
    - nfs/blocklayout: Limit repeat device registration on failure
    - block, bfq: fix bfqq uaf in bfq_limit_depth()
    - brd: decrease the number of allocated pages which discarded
    - sh: intc: Fix use-after-free bug in register_intc_controller()
    - tools/power turbostat: Fix trailing '\n' parsing
    - tools/power turbostat: Fix child's argument forwarding
    - block: always verify unfreeze lock on the owner task
    - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq()
    - Linux 6.11.11
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-53141
    - netfilter: ipset: add missing range check in bitmap_ip_uadt
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-50010
    - Revert "exec: don't WARN for racy path_noexec check"
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-53143
    - fsnotify: Fix ordering of iput() and watched_objects decrement
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-53142
    - initramfs: avoid filename buffer overrun
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650)
    - net: vertexcom: mse102x: Fix tx_bytes calculation
    - net/mlx5: Fix msix vectors to respect platform limit
    - net/mlx5e: clear xdp features on non-uplink representors
    - net/mlx5e: Disable loopback self-test on multi-PF netdev
    - drm/i915/gsc: ARL-H and ARL-U need a newer GSC FW.
    - drivers: perf: Fix wrong put_cpu() placement
    - Bluetooth: hci_core: Fix calling mgmt_device_connected
    - Bluetooth: btintel: Direct exception event to bluetooth stack
    - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
      hnodes.
    - net: phylink: ensure PHY momentary link-fails are handled
    - samples: pktgen: correct dev to DEV
    - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
    - net: Make copy_safe_from_sockptr() match documentation
    - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
    - net: ti: icssg-prueth: Fix 1 PPS sync
    - bonding: add ns target multicast address to slave device
    - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
    - tools/mm: fix compile error
    - drm/amd/display: Run idle optimizations at end of vblank handler
    - drm/amd/display: Change some variable name of psr
    - drm/amd/display: Fix Panel Replay not update screen correctly
    - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
    - x86/stackprotector: Work around strict Clang TLS symbol requirements
    - crash, powerpc: default to CRASH_DUMP=n on PPC_BOOK3S_32
    - [Config] enable ARCH_DEFAULT_CRASH_DUMP
    - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    - evm: stop avoidably reading i_writecount in evm_file_release
    - KVM: selftests: Disable strict aliasing
    - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
    - KVM: x86: Unconditionally set irr_pending when updating APICv state
    - tpm: Disable TPM on tpm2_create_primary() failure
    - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
    - ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318
    - mptcp: update local address flags when setting it
    - mptcp: hold pm lock when deleting entry
    - mptcp: pm: use _rcu variant under rcu_read_lock
    - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
    - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
    - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
    - LoongArch: Add WriteCombine shadow mapping in KASAN
    - LoongArch: Fix AP booting issue in VM mode
    - LoongArch: Make KASAN work with 5-level page-tables
    - selftests: hugetlb_dio: fixup check for initial conditions to skip in the
      start
    - btrfs: fix incorrect comparison for delayed refs
    - mailbox: qcom-cpucp: Mark the irq with IRQF_NO_SUSPEND flag
    - firmware: arm_scmi: Skip opp duplicates
    - firmware: arm_scmi: Report duplicate opps as firmware bugs
    - mmc: sunxi-mmc: Fix A100 compatible description
    - drm/bridge: tc358768: Fix DSI command tx
    - drm/xe: handle flat ccs during hibernation on igpu
    - pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
    - pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
    - nouveau: fw: sync dma after setup is called.
    - nouveau: handle EBUSY and EAGAIN for GSP aux errors.
    - nouveau/dp: handle retries for AUX CH transfers with GSP.
    - drm/amd: Fix initialization mistake for NBIO 7.7.0
    - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
    - drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
    - drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
    - drm/amdgpu: enable GTT fallback handling for dGPUs only
    - drm/amdgpu/mes12: correct kiq unmap latency
    - drm/amd/display: Require minimum VBlank size for stutter optimization
    - drm/amd/display: Fix failure to read vram info due to static BP_RESULT
    - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    - drm/xe: Restore system memory GGTT mappings
    - drm/xe: improve hibernation on igpu
    - lib/buildid: Fix build ID parsing logic
    - net: sched: u32: Add test case for systematic hnode IDR leaks
    - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    - Linux 6.11.10
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53133
    - drm/amd/display: Handle dml allocation failure to avoid crash
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53108
    - drm/amd/display: Adjust VSDB parser for replay feature
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53134
    - pmdomain: imx93-blk-ctrl: correct remove path
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53132
    - drm/xe/oa: Fix "Missing outer runtime PM protection" warning
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53127
    - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53130
    - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53105
    - mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53109
    - nommu: pass NULL argument to vma_iter_prealloc()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53131
    - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53135
    - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
      CONFIG_BROKEN
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53106
    - ima: fix buffer overrun in ima_eventdigest_init_common
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53110
    - vp_vdpa: fix id_table array not null terminated error
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53126
    - vdpa: solidrun: Fix UB bug with devres
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53111
    - mm/mremap: fix address wraparound in move_page_tables()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53107
    - fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53128
    - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53112
    - ocfs2: uncache inode which has failed entering the group
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53113
    - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53114
    - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53137
    - ARM: fix cacheflush with PAN
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53115
    - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53116
    - drm/panthor: Fix handling of partial GPU mapping of BOs
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53117
    - virtio/vsock: Improve MSG_ZEROCOPY error handling
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53118
    - vsock: Fix sk_error_queue memory leak
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53119
    - virtio/vsock: Fix accept_queue memory leak
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53120
    - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53138
    - net/mlx5e: kTLS, Fix incorrect page refcounting
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53121
    - net/mlx5: fs, lock FTE when checking if active
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53122
    - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53123
    - mptcp: error out earlier on disconnect
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53124
    - net: fix data-races around sk->sk_forward_alloc
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53129
    - drm/rockchip: vop: Fix a dereferenced before check warning
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53139
    - sctp: fix possible UAF in sctp_v6_available()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53140
    - netlink: terminate outstanding dump on socket close
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649)
    - nvme/host: Fix RCU list traversal to use SRCU primitive
    - 9p: v9fs_fid_find: also lookup by inode if not found dentry
    - 9p: Avoid creating multiple slab caches with the same name
    - selftests/bpf: Verify that sync_linked_regs preserves subreg_def
    - nvmet-passthru: clear EUID/NGUID/UUID while using loop target
    - irqchip/ocelot: Fix trigger register address
    - pinctrl: aw9523: add missing mutex_destroy
    - pinctrl: intel: platform: Add Panther Lake to the list of supported
    - block: Fix elevator_get_default() checking for NULL q->tag_set
    - HID: multitouch: Add support for B2402FVA track point
    - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    - iommu/arm-smmu: Clarify MMU-500 CPRE workaround
    - nvme: disable CC.CRIME (NVME_CC_CRIME)
    - bpf: use kvzmalloc to allocate BPF verifier environment
    - crypto: api - Fix liveliness check in crypto_alg_tested
    - crypto: marvell/cesa - Disable hash algorithms
    - s390/ap: Fix CCA crypto card behavior within protected execution environment
    - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    - drm/vmwgfx: Limit display layout ioctl array size to
      VMWGFX_NUM_DISPLAY_UNITS
    - selftests/bpf: Assert link info uprobe_multi count & path_size if unset
    - ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
    - drm/amdkfd: Accounting pdd vram_usage for svm
    - powerpc/powernv: Free name on error in opal_event_init()
    - net: phy: mdio-bcm-unimac: Add BCM6846 support
    - drm/xe/query: Increase timestamp width
    - nvme-loop: flush off pending I/O while shutting down loop controller
    - samples/landlock: Fix port parsing in sandboxer
    - vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
    - ASoC: Intel: avs: Update stream status in a separate thread
    - ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
    - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
    - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
    - ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops
    - netfs: Downgrade i_rwsem for a buffered write
    - HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
    - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
    - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    - ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7 regs
    - RISCV: KVM: use raw_spinlock for critical section in imsic
    - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
    - LoongArch: Use "Exception return address" to comment ERA
    - ASoC: fsl_micfil: Add sample rate constraint
    - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    - drm/xe: Enlarge the invalidation timeout from 150 to 500
    - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    - drm/xe: Handle unreliable MMIO reads during forcewake
    - drm/xe: Don't restart parallel queues multiple times on GT reset
    - mm: krealloc: Fix MTE false alarm in __do_krealloc
    - 9p: fix slab cache name creation for real
    - Linux 6.11.9
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53098
    - drm/xe/ufence: Prefetch ufence addr to catch bogus address
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53099
    - bpf: Check validity of link->type in bpf_link_show_fdinfo()
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53089
    - LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53090
    - afs: Fix lock recursion
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53101
    - fs: Fix uninitialized value issue in from_kuid and from_kgid
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53091
    - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53092
    - virtio_pci: Fix admin vq cleanup by using correct info pointer
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53102
    - nvme: make keep-alive synchronous operation
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53093
    - nvme-multipath: defer partition scanning
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53094
    - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53100
    - nvme: tcp: avoid race between queue_lock lock and destroy
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53095
    - smb: client: Fix use-after-free of network namespace.
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645)
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
      excavator
    - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
    - arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
    - arm64: dts: rockchip: Designate Turing RK1's system power controller
    - EDAC/qcom: Make irq configuration optional
    - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
    - arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
    - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
    - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    - arm64: dts: rockchip: Remove undocumented supports-emmc property
    - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
    - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
    - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
    - arm64: dts: imx8mp: correct sdhc ipg clk
    - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
    - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
    - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
    - ARM: dts: rockchip: fix rk3036 acodec node
    - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    - ARM: dts: rockchip: Fix the spi controller on rk3036
    - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
    - NFSv3: only use NFS timeout for MOUNT when protocols are compatible
    - NFS: Fix attribute delegation behaviour on exclusive create
    - NFS: Further fixes to attribute delegation a/mtime changes
    - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    - net: enetc: set MAC address to the VF net_device
    - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
    - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
    - can: c_can: fix {rx,tx}_errors statistics
    - ice: change q_index variable type to s16 to store -1 value
    - e1000e: Remove Meteor Lake SMBUS workarounds
    - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
    - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
    - netfilter: nf_tables: wait for rcu grace period on net_device removal
    - virtio_net: Support dynamic rss indirection table size
    - virtio_net: Sync rss config to device when virtnet_probe
    - virtio_net: Update rss when set queue
    - net: arc: rockchip: fix emac mdio node support
    - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
    - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    - media: stb0899_algo: initialize cfr before using it
    - media: dvb_frontend: don't play tricks with underflow values
    - media: adv7604: prevent underflow condition when reporting colorspace
    - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
    - tools/lib/thermal: Fix sampling handler context ptr
    - thermal/of: support thermal zones w/o trips subnode
    - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    - media: pulse8-cec: fix data timestamp at pulse8_setup()
    - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
    - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
      switching CAN modes
    - can: {cc770,sja1000}_isa: allow building on x86_64
    - [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA
    - drm/xe: Set mask bits for CCS_MODE register
    - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    - rpmsg: glink: Handle rejected intent request better
    - drm/amd/pm: always pick the pptable from IFWI
    - drm/amd/display: Fix brightness level not retained over reboot
    - drm/imagination: Add a per-file PVR context list
    - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    - drm/amdgpu: Adjust debugfs register access permissions
    - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
    - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
    - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    - dm cache: correct the number of origin blocks to match the target length
    - dm cache: optimize dirty bit checking with find_next_bit when resizing
    - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
      overflow
    - mptcp: no admin perm to list endpoints
    - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
    - tracing: Fix tracefs mount options
    - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
    - mptcp: use sock_kfree_s instead of kfree
    - arm64: Kconfig: Make SME depend on BROKEN for now
    - [Config] updateconfigs for ARM64_SME
    - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
    - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
      spurious interrupts
    - btrfs: fix the length of reserved qgroup to free
    - btrfs: fix per-subvolume RO/RW flags with new mount API
    - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    - platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
    - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
    - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
    - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
    - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    - objpool: fix to make percpu slot allocation more robust
    - mm/damon/core: handle zero {aggregation,ops_update} intervals
    - mm/damon/core: handle zero schemes apply interval
    - mm/mlock: set the correct prev on failure
    - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
    - usb: dwc3: fix fault at system suspend if device was already runtime
      suspended
    - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    - USB: serial: option: add Fibocom FG132 0x0112 composition
    - USB: serial: option: add Quectel RG650V
    - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
    - irqchip/gic-v3: Force propagation of the active state with a read-back
    - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    - selftests: hugetlb_dio: check for initial conditions to skip in the start
    - firmware: qcom: scm: Refactor code to support multiple dload mode
    - [Config] updateconfigs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT
    - firmware: qcom: scm: suppress download mode error
    - block: rework bio splitting
    - block: fix queue limits checks in blk_rq_map_user_bvec for real
    - drm/xe: Move LNL scheduling WA to xe_device.h
    - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    - xtensa: Emulate one-byte cmpxchg
    - Linux 6.11.8
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50265
    - ocfs2: remove entry once instead of null-ptr-dereference in
      ocfs2_xa_remove()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50266
    - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50267
    - USB: serial: io_edgeport: fix use after free in debug printk
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50268
    - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53083
    - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50269
    - usb: musb: sunxi: Fix accessing an released usb phy
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53079
    - mm/thp: fix deferred split unqueue naming and locking
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50270
    - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50271
    - signal: restore the override_rlimit logic
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50272
    - filemap: Fix bounds checking in filemap_read()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53104
    - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
      uvc_parse_format
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50273
    - btrfs: reinitialize delayed ref list after deleting it from the list
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53064
    - idpf: fix idpf_vc_core_init error path
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50274
    - idpf: avoid vport access in idpf_get_link_ksettings
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53065
    - mm/slab: fix warning caused by duplicate kmem_cache creation in
      kmem_buckets_create
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50275
    - arm64/sve: Discard stale CPU state when handling SVE traps
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50276
    - net: vertexcom: mse102x: Fix possible double free of TX skb
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53066
    - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53067
    - scsi: ufs: core: Start the RTC update work later
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50277
    - dm: fix a crash if blk_alloc_disk fails
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50278
    - dm cache: fix potential out-of-bounds access on the first resume
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50279
    - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50280
    - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50281
    - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50282
    - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53071
    - drm/panthor: Be stricter about IO mapping flags
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53080
    - drm/panthor: Lock XArray when getting entries for the VM
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53084
    - drm/imagination: Break an object reference loop
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53085
    - tpm: Lock TPM chip in tpm_pm_suspend() first
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53086
    - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53087
    - drm/xe: Fix possible exec queue leak in exec IOCTL
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50283
    - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50284
    - ksmbd: Fix the missing xa_store error check
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50285
    - ksmbd: check outstanding simultaneous SMB operations
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50286
    - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50287
    - media: v4l2-tpg: prevent the risk of a division by zero
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50288
    - media: vivid: fix buffer overwrite when using > 32 buffers
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50289
    - media: av7110: fix a spectre vulnerability
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50290
    - media: cx24116: prevent overflows on SNR calculus
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53061
    - media: s5p-jpeg: prevent buffer overflows
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53081
    - media: ar0521: don't overflow when checking PLL values
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53062
    - media: mgb4: protect driver against spectre
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50291
    - media: dvb-core: add missing buffer index check
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50292
    - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53063
    - media: dvbdev: prevent the risk of out of memory access
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50293
    - net/smc: do not leave a dangling sk pointer in __smc_create()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50294
    - rxrpc: Fix missing locking causing hanging calls
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50295
    - net: arc: fix the device for dma_map_single/dma_unmap_single
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53082
    - virtio_net: Add hash_key_length check
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50296
    - net: hns3: fix kernel crash when uninstalling driver
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53088
    - i40e: fix race condition by adding filter's intermediate sync state
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50297
    - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50298
    - net: enetc: allocate vf_state during PF probes
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50299
    - sctp: properly validate chunk size in sctp_sf_ootb()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50300
    - regulator: rtq2208: Fix uninitialized use of regulator_config
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50301
    - security/keys: fix slab-out-of-bounds in key_task_permission
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53072
    - platform/x86/amd/pmc: Detect when STB is not available
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50302
    - HID: core: zero-initialize the report buffer
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53068
    - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53069
    - firmware: qcom: scm: fix a NULL-pointer dereference
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629)
    - drm/amdgpu: fix random data corruption for sdma 7
    - cgroup: Fix potential overflow issue when checking max_depth
    - spi: geni-qcom: Fix boot warning related to pm_runtime and devres
    - perf trace: Fix non-listed archs in the syscalltbl routines
    - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT
    - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy
      length
    - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
    - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    - wifi: ath11k: Fix invalid ring usage in full monitor mode
    - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts
    - wifi: brcm80211: BRCM_TRACING should depend on TRACING
    - RDMA/cxgb4: Dump vendor specific QP details
    - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
    - RDMA/bnxt_re: Fix the usage of control path spin locks
    - RDMA/bnxt_re: synchronize the qp-handle table array
    - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd
    - wifi: iwlwifi: mvm: don't add default link in fw restart flow
    - Revert "wifi: iwlwifi: remove retry loops in start"
    - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
      register values
    - dpll: add Embedded SYNC feature for a pin
    - ice: add callbacks for Embedded SYNC enablement on dpll pins
    - gtp: allow -1 to be specified as file description from userspace
    - bpf: Force checkpoint when jmp history is too long
    - bpf: Add bpf_mem_alloc_check_size() helper
    - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
    - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
    - mlxsw: pci: Sync Rx buffers for CPU
    - mlxsw: pci: Sync Rx buffers for device
    - net: ethernet: mtk_wed: fix path of MT7988 WO firmware
    - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
    - iomap: improve shared block detection in iomap_unshare_iter
    - iomap: don't bother unsharing delalloc extents
    - iomap: share iomap_unshare_iter predicate code with fsdax
    - fsdax: remove zeroing code from dax_unshare_iter
    - iomap: turn iomap_want_unshare_iter into an inline function
    - kasan: Fix Software Tag-Based KASAN with GCC
    - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
    - afs: Fix missing subdir edit when renamed between parent dirs
    - gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init()
      call
    - smb: client: fix parsing of device numbers
    - smb: client: set correct device number on nfs reparse points
    - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
    - drm/mediatek: Fix color format MACROs in OVL
    - drm/mediatek: Fix get efuse issue for MT8188 DPTX
    - drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy()
    - cxl/events: Fix Trace DRAM Event Record
    - PCI: Fix pci_enable_acs() support for the ACS quirks
    - nvme: module parameter to disable pi with offsets
    - drm/panthor: Fix firmware initialization on systems with a page size > 4k
    - drm/panthor: Fail job creation when the group is dead
    - drm/panthor: Report group as timedout when we fail to properly suspend
    - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
    - fs/ntfs3: Stale inode instead of bad
    - rust: device: change the from_raw() function
    - scsi: scsi_transport_fc: Allow setting rport state to current state
    - cifs: Improve creating native symlinks pointing to directory
    - cifs: Fix creating native symlinks pointing to current or parent directory
    - ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
    - powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
    - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
    - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
    - net: amd: mvme147: Fix probe banner message
    - NFS: remove revoked delegation from server's delegation list
    - misc: sgi-gru: Don't disable preemption in GRU driver
    - NFSD: Initialize struct nfsd4_copy earlier
    - NFSD: Never decrement pending_async_copies on error
    - ALSA: usb-audio: Add quirks for Dell WD19 dock
    - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171
    - usbip: tools: Fix detach_port() invalid port error path
    - usb: phy: Fix API devm_usb_put_phy() can not release the phy
    - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
    - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non
      self-powered devices
    - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
    - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
    - xhci: Fix Link TRB DMA in command ring stopped completion event
    - xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    - Revert "driver core: Fix uevent_show() vs driver detach race"
    - dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply
    - iio: light: veml6030: fix microlux value calculation
    - RISC-V: ACPI: fix early_ioremap to early_memremap
    - tools/mm: -Werror fixes in page-types/slabinfo
    - mm: shrinker: avoid memleak in alloc_shrinker_info
    - firmware: microchip: auto-update: fix poll_complete() to not report spurious
      timeout errors
    - thunderbolt: Honor TMU requirements in the domain when setting TMU mode
    - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
    - cxl/port: Fix CXL port initialization order when the subsystem is built-in
    - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
    - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
    - block: fix sanity checks in blk_rq_map_user_bvec
    - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
    - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
    - riscv: vdso: Prevent the compiler from inserting calls to memset()
    - Input: edt-ft5x06 - fix regmap leak when probe fails
    - ALSA: hda/realtek: Limit internal Mic boost on Dell platform
    - riscv: efi: Set NX compat flag in PE/COFF header
    - riscv: Use '%u' to format the output of 'cpu'
    - riscv: Remove unused GENERATING_ASM_OFFSETS
    - riscv: Remove duplicated GET_RM
    - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
    - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
    - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
    - tpm: Return tpm2_sessions_init() when null key creation fails
    - tpm: Rollback tpm2_load_null()
    - drm/amdgpu/smu13: fix profile reporting
    - tpm: Lazily flush the auth session
    - mei: use kvmalloc for read buffer
    - x86/traps: Enable UBSAN traps on x86
    - x86/traps: move kmsan check after instrumentation_begin
    - accel/ivpu: Fix NOC firewall interrupt handling
    - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
    - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
    - nvme: re-fix error-handling for io_uring nvme-passthrough
    - kasan: remove vmalloc_percpu test
    - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
    - drm/xe: Fix register definition order in xe_regs.h
    - drm/xe: Kill regs/xe_sriov_regs.h
    - drm/xe: Add mmio read before GGTT invalidate
    - drm/xe: Don't short circuit TDR on jobs not started
    - btrfs: fix extent map merging not happening for adjacent extents
    - btrfs: fix defrag not merging contiguous extents due to merged extent maps
    - gpiolib: fix debugfs newline separators
    - gpiolib: fix debugfs dangling chip separator
    - vmscan,migrate: fix page count imbalance on node stats when demoting pages
    - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
    - Input: fix regression when re-registering input handlers
    - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
    - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
    - mm: shrink skip folio mapped by an exiting process
    - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
    - riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64
    - riscv: dts: starfive: disable unused csi/camss nodes
    - arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM
    - arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100: Fix up BAR spaces
    - arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100: fix PCIe4 interconnect
    - arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block
    - arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks
    - drm/xe/xe2hpg: Add Wa_15016589081
    - drm/amdgpu/swsmu: fix ordering for setting workload_mask
    - drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
    - fs/ntfs3: Sequential field availability check in mi_enum_attr()
    - drm/amdgpu: handle default profile on on devices without fullscreen 3D
    - MIPS: export __cmpxchg_small()
    - RISC-V: disallow gcc + rust builds
    - [Config] updateconfigs after disabling rust with gcc on riscv
    - rcu/kvfree: Add kvfree_rcu_barrier() API
    - rcu/kvfree: Refactor kvfree_rcu_queue_batch()
    - Linux 6.11.7
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50212
    - lib: alloc_tag_module_unload must wait for pending kfree_rcu calls
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53046
    - arm64: dts: imx8ulp: correct the flexspi compatible string
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53052
    - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50213
    - drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50214
    - drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50215
    - nvmet-auth: assign dh_key to NULL after kfree_sensitive
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50216
    - xfs: fix finding a last resort AG in xfs_filestream_pick_ag
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50217
    - btrfs: fix use-after-free of block device file in
      __btrfs_free_extra_devids()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53043
    - mctp i2c: handle NULL header address
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50303
    - resource,kexec: walk_system_ram_res_rev must retain resource flags
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50218
    - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50219
    - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50263
    - fork: only invoke khugepaged, ksm hooks if no error
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50220
    - fork: do not invoke uffd on fork if error occurs
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53047
    - mptcp: init: protect sched with rcu_read_lock
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50221
    - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50222
    - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50223
    - sched/numa: Fix the potential null pointer dereference in task_numa_work()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53053
    - scsi: ufs: core: Fix another deadlock during RTC update
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53075
    - riscv: Prevent a bad reference count on CPU nodes
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50224
    - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50225
    - btrfs: fix error propagation of split bios
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53054
    - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50226
    - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50227
    - thunderbolt: Fix KASAN reported stack out-of-bounds read in
      tb_retimer_scan()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50228
    - mm: shmem: fix data-race in shmem_getattr()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50229
    - nilfs2: fix potential deadlock with newly created symlinks
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50230
    - nilfs2: fix kernel bug due to missing clearing of checked flag
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50231
    - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53076
    - iio: gts-helper: Fix memory leaks for the error path of
      iio_gts_build_avail_scale_table()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50232
    - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50233
    - staging: iio: frequency: ad9832: fix division by zero in
      ad9832_calc_freqreg()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53055
    - wifi: iwlwifi: mvm: fix 6 GHz scan construction
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50234
    - wifi: iwlegacy: Clear stale interrupts before resuming device
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50235
    - wifi: cfg80211: clear wdev->cqm_config pointer on free
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50236
    - wifi: ath10k: Fix memory leak in management tx
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50237
    - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50238
    - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50239
    - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50240
    - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53077
    - rpcrdma: Always release the rpcrdma_device's xa_array
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50242
    - fs/ntfs3: Additional check in ntfs_file_release
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50243
    - fs/ntfs3: Fix general protection fault in run_is_mapped_full
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50244
    - fs/ntfs3: Additional check in ni_clear()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50245
    - fs/ntfs3: Fix possible deadlock in mi_read
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50246
    - fs/ntfs3: Add rough attr alloc_size check
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50247
    - fs/ntfs3: Check if more than chunk-size bytes are written
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50248
    - ntfs3: Add bounds checking to mi_enum_attr()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53078
    - drm/tegra: Fix NULL vs IS_ERR() check in probe()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53056
    - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50249
    - ACPI: CPPC: Make rmw_lock a raw_spin_lock
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50250
    - fsdax: dax_unshare_iter needs to copy entire blocks
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50251
    - netfilter: nft_payload: sanitize offset and length before calling
      skb_checksum()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50252
    - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50253
    - bpf: Check the validity of nr_words in bpf_iter_bits_new()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50254
    - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50255
    - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50256
    - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50257
    - netfilter: Fix use-after-free in get_info()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50258
    - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50262
    - bpf: Fix out-of-bounds write in trie_get_next_key()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53044
    - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50259
    - netdevsim: Add trailing zero to terminate the string in
      nsim_nexthop_bucket_activity_write()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50304
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53042
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53048
    - ice: fix crash on probe for DPLL enabled E810 LOM
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53058
    - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50260
    - sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53045
    - ASoC: dapm: fix bounds checker error in dapm_widget_list_create
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50261
    - macsec: Fix use-after-free while sending the offloading packet
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53059
    - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53074
    - wifi: iwlwifi: mvm: don't leak a link on AP removal
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53049
    - slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof
  * Oracular update: v6.11.6 upstream stable release (LP: #2091386)
    - bpf: Use raw_spinlock_t in ringbuf
    - iio: accel: bma400: Fix uninitialized variable field_value in tap event
      handling.
    - reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
    - bpf: sync_linked_regs() must preserve subreg_def
    - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
    - irqchip/riscv-imsic: Fix output text of base address
    - bpf: devmap: provide rxq after redirect
    - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
    - lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
    - bpf: Fix memory leak in bpf_core_apply
    - RDMA/bnxt_re: Fix a possible memory leak
    - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
    - RDMA/bnxt_re: Add a check for memory allocation
    - x86/resctrl: Avoid overflow in MB settings in bw_validate()
    - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
    - clk: rockchip: fix finding of maximum clock ID
    - bpf: Check the remaining info_cnt before repeating btf fields
    - bpf: fix unpopulated name_len field in perf_event link info
    - selftests/bpf: fix perf_event link info name_len assertion
    - riscv, bpf: Fix possible infinite tailcall when CONFIG_CFI_CLANG is enabled
    - s390/pci: Handle PCI error codes other than 0x3a
    - bpf: fix kfunc btf caching for modules
    - iio: frequency: {admv4420,adrf6780}: format Kconfig entries
    - iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
    - drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
    - selftests/bpf: Fix cross-compiling urandom_read
    - bpf: Fix unpopulated path_size when uprobe_multi fields unset
    - sched/core: Disable page allocation in task_tick_mm_cid()
    - ALSA: hda/cs8409: Fix possible NULL dereference
    - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
    - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
    - RDMA/irdma: Fix misspelling of "accept*"
    - RDMA/srpt: Make slab cache names unique
    - elevator: do not request_module if elevator exists
    - elevator: Remove argument from elevator_find_get
    - ipv4: give an IPv4 dev to blackhole_netdev
    - net: sparx5: fix source port register when mirroring
    - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
    - RDMA/bnxt_re: Fix out of bound check
    - RDMA/bnxt_re: Fix incorrect dereference of srq in async event
    - RDMA/bnxt_re: Return more meaningful error
    - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
    - RDMA/bnxt_re: Get the toggle bits from SRQ events
    - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
    - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
    - RDMA/bnxt_re: Fix the GID table length
    - accel/qaic: Fix the for loop used to walk SG table
    - drm/panel: himax-hx83102: Adjust power and gamma to optimize brightness
    - drm/msm/dpu: make sure phys resources are properly initialized
    - drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
    - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
    - drm/msm/dsi: improve/fix dsc pclk calculation
    - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
    - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
    - drm/msm: Allocate memory for disp snapshot with kvzalloc()
    - firmware: arm_scmi: Queue in scmi layer for mailbox implementation
    - net/smc: Fix memory leak when using percpu refs
    - [PATCH} hwmon: (jc42) Properly detect TSE2004-compliant devices again
    - net: usb: usbnet: fix race in probe failure
    - net: stmmac: dwmac-tegra: Fix link bring-up sequence
    - octeontx2-af: Fix potential integer overflows on integer shifts
    - ring-buffer: Fix reader locking when changing the sub buffer order
    - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
    - macsec: don't increment counters for an unrelated SA
    - netdevsim: use cond_resched() in nsim_dev_trap_report_work()
    - net: ethernet: aeroflex: fix potential memory leak in
      greth_start_xmit_gbit()
    - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
    - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
    - net: ethernet: rtsn: fix potential memory leak in rtsn_start_xmit()
    - bpf: Fix truncation bug in coerce_reg_to_size_sx()
    - net: systemport: fix potential memory leak in bcm_sysport_xmit()
    - irqchip/renesas-rzg2l: Fix missing put_device
    - drm/msm/dpu: Don't always set merge_3d pending flush
    - drm/msm/dpu: don't always program merge_3d block
    - net: bcmasp: fix potential memory leak in bcmasp_xmit()
    - drm/msm/a6xx+: Insert a fence wait before SMMU table update
    - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
    - net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
    - genetlink: hold RCU in genlmsg_mcast()
    - ravb: Remove setting of RX software timestamp
    - net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
    - net: dsa: vsc73xx: fix reception from VLAN-unaware bridges
    - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
    - smb: client: fix possible double free in smb2_set_ea()
    - smb: client: fix OOBs when building SMB2_IOCTL request
    - usb: typec: altmode should keep reference to parent
    - s390: Initialize psw mask in perf_arch_fetch_caller_regs()
    - drm/xe: fix unbalanced rpm put() with fence_fini()
    - drm/xe: fix unbalanced rpm put() with declare_wedged()
    - drm/xe: Take job list lock in xe_sched_add_pending_job
    - drm/xe: Don't free job in TDR
    - drm/xe: Use bookkeep slots for external BO's in exec IOCTL
    - bpf: Fix link info netfilter flags to populate defrag flag
    - Bluetooth: bnep: fix wild-memory-access in proto_unregister
    - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
    - net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
    - net/mlx5: Check for invalid vector index on EQ creation
    - net/mlx5: Fix command bitmask initialization
    - net/mlx5: Unregister notifier on eswitch init failure
    - net/mlx5e: Don't call cleanup on profile rollback failure
    - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
    - vsock: Update rx_bytes on read_skb()
    - vsock: Update msg_count on read_skb()
    - bpf, vsock: Drop static vsock_bpf_prot initialization
    - riscv, bpf: Make BPF_CMPXCHG fully ordered
    - nvme-pci: fix race condition between reset and nvme_dev_disable()
    - bpf: Fix iter/task tid filtering
    - bpf: Fix incorrect delta propagation between linked registers
    - bpf: Fix print_reg_state's constant scalar dump
    - cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
    - fgraph: Allocate ret_stack_list with proper size
    - mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
    - mm: shmem: move shmem_huge_global_enabled() into
      shmem_allowable_huge_orders()
    - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
    - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
    - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - xhci: dbgtty: remove kfifo_out() wrapper
    - xhci: dbgtty: use kfifo from tty_port struct
    - xhci: dbc: honor usb transfer size boundaries.
    - uprobe: avoid out-of-bounds memory access of fetching args
    - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
      VLA
    - ASoC: amd: yc: Add quirk for HP Dragonfly pro one
    - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
      default regs values
    - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
    - arm64: Force position-independent veneers
    - udf: refactor udf_current_aext() to handle error
    - udf: refactor udf_next_aext() to handle error
    - udf: refactor inode_bmap() to handle error
    - udf: fix uninit-value use in udf_get_fileshortad
    - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
    - fsnotify: Avoid data race between fsnotify_recalc_mask() and
      fsnotify_object_watched()
    - drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
    - cifs: Validate content of NFS reparse point buffer
    - LoongArch: Don't crash in stack_top() for tasks without vDSO
    - objpool: fix choosing allocation for percpu slots
    - jfs: Fix sanity check in dbMount
    - tracing/probes: Fix MAX_TRACE_ARGS limit handling
    - tracing: Consider the NULL character when validating the event length
    - xfrm: extract dst lookup parameters into a struct
    - xfrm: respect ip protocols rules criteria when performing dst lookups
    - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
    - netfilter: bpf: must hold reference on net namespace
    - net: pse-pd: Fix out of bound for loop
    - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
    - be2net: fix potential memory leak in be_xmit()
    - net: plip: fix break; causing plip to never transmit
    - bnxt_en: replace ptp_lock with irqsave variant
    - octeon_ep: Implement helper for iterating packets in Rx queue
    - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
    - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
    - bpf, arm64: Fix address emission with tag-based KASAN enabled
    - fsl/fman: Save device references taken in mac_probe()
    - fsl/fman: Fix refcount handling of fman-related devices
    - net: wwan: fix global oob in wwan_rtnl_policy
    - net: fix races in netdev_tx_sent_queue()/dev_watchdog()
    - virtio_net: fix integer overflow in stats
    - mlxsw: spectrum_router: fix xa_store() error checking
    - net: usb: usbnet: fix name regression
    - bpf: Preserve param->string when parsing mount options
    - bpf: Add MEM_WRITE attribute
    - bpf: Fix overloading of MEM_UNINIT's meaning
    - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
    - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
      created by classifiers
    - net: sched: fix use-after-free in taprio_change()
    - net: sched: use RCU read-side critical section in taprio_dump()
    - r8169: avoid unsolicited interrupts
    - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
    - Bluetooth: hci_core: Disable works on hci_unregister_dev
    - Bluetooth: SCO: Fix UAF on sco_sock_timeout
    - Bluetooth: ISO: Fix UAF on iso_sock_timeout
    - bpf,perf: Fix perf_event_detach_bpf_prog error handling
    - bpf: fix do_misc_fixups() for bpf_get_branch_snapshot()
    - net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
    - net: dsa: mv88e6xxx: group cycle counter coefficients
    - net: dsa: mv88e6xxx: read cycle counter period from hardware
    - net: dsa: mv88e6xxx: support 4000ps cycle counter period
    - bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
    - ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
    - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
    - ASoC: loongson: Fix component check failed on FDT systems
    - ASoC: topology: Bump minimal topology ABI version
    - ASoC: max98388: Fix missing increment of variable slot_found
    - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
    - PCI: Hold rescan lock while adding devices during host probe
    - fs: pass offset and result to backing_file end_write() callback
    - fuse: update inode size after extending passthrough write
    - ASoC: fsl_micfil: Add a flag to distinguish with different volume control
      types
    - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
    - fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
    - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
    - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
    - ALSA: hda/realtek: Update default depop procedure
    - smb: client: Handle kstrdup failures for passwords
    - cifs: fix warning when destroy 'cifs_io_request_pool'
    - PCI/pwrctl: Add WCN6855 support
    - PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees
    - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
    - btrfs: qgroup: set a more sane default value for subtree drop threshold
    - btrfs: clear force-compress on remount when compress mount option is given
    - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
    - perf/x86/rapl: Fix the energy-pkg event for AMD CPUs
    - btrfs: reject ro->rw reconfiguration if there are hard ro requirements
    - btrfs: zoned: fix zone unusable accounting for freed reserved extent
    - btrfs: fix read corruption due to race with extent map merging
    - drm/amd: Guard against bad data for ATIF ACPI method
    - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
    - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
      detection issue
    - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
    - fs: don't try and remove empty rbtree node
    - xfs: don't fail repairs on metadata files with no attr fork
    - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
    - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
    - KVM: arm64: Unregister redistributor for failed vCPU creation
    - KVM: arm64: Fix shift-out-of-bounds bug
    - KVM: arm64: Don't eagerly teardown the vgic on init error
    - firewire: core: fix invalid port index for parent device
    - x86/lam: Disable ADDRESS_MASKING in most cases
    - [Config] updateconfigs to disable ADDRESS_MASKING
    - x86/sev: Ensure that RMP table fixups are reserved
    - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
    - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
    - LoongArch: Get correct cores_per_package for SMT systems
    - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
    - LoongArch: Make KASAN usable for variable cpu_vabits
    - xfrm: fix one more kernel-infoleak in algo dumping
    - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
    - md/raid10: fix null ptr dereference in raid10_size()
    - drm/bridge: Fix assignment of the of_node of the parent to aux bridge
    - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
    - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
      addresses
    - fgraph: Fix missing unlock in register_ftrace_graph()
    - fgraph: Change the name of cpuhp state to "fgraph:online"
    - net: phy: dp83822: Fix reset pin definitions
    - nfsd: fix race between laundromat and free_stateid
    - drm/amd/display: temp w/a for DP Link Layer compliance
    - ata: libata: Set DID_TIME_OUT for commands that actually timed out
    - ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC
    - ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's
    - ASoC: SOF: Intel: hda: Always clean up link DMA during stop
    - ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs
    - ASoC: dapm: avoid container_of() to get component
    - ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
    - ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
    - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
    - Revert " fs/9p: mitigate inode collisions"
    - Revert "fs/9p: remove redundant pointer v9ses"
    - Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl"
    - Revert "fs/9p: simplify iget to remove unnecessary paths"
    - soundwire: intel_ace2x: Send PDI stream number during prepare
    - x86: support user address masking instead of non-speculative conditional
    - x86: fix whitespace in runtime-const assembler output
    - x86: fix user address masking non-canonical speculation issue
    - platform/x86: dell-wmi: Ignore suspend notifications
    - ACPI: PRM: Clean up guid type in struct prm_handler_info
    - ASoC: qcom: Select missing common Soundwire module code on SDM845
    - Linux 6.11.6
  * ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel
    5.15.0-127.137 (LP: #2091990)
    - netfilter: xtables: fix typo causing some targets not to load on IPv6
  * By always inlining _compound_head(), clone() sees 3%+ performance increase
    (LP: #2089327)
    - mm: always inline _compound_head() with
      CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
  * Keyboard backlight controls do not work on Asus ROG Zephyrus GA503RM in
    Oracular (LP: #2089113)
    - hid-asus: use hid for brightness control on keyboard
  * Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+
    (LP: #2086587)
    - SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx
  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Sort build dependencies alphabetically
    - [Packaging] Add list of used source files to buildinfo package
  * asus: Fix thermal profile initialization on Lunar Lake (LP: #2085950)
    - platform/x86: asus-wmi: Fix thermal profile initialization
  * drm/xe: Fix LNL getting wedged after idling (LP: #2085944)
    - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
  * UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
    - ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
  * Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983)
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152)
    - ALSA: scarlett2: Add error check after retrieving PEQ filter values
    - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
    - net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
    - net: enetc: block concurrent XDP transmissions during ring reconfiguration
    - net: enetc: disable Tx BD rings after they are empty
    - net: enetc: disable NAPI after all rings are disabled
    - net: enetc: add missing static descriptor and inline keyword
    - udp: Compute L4 checksum as usual when not segmenting the skb
    - arm64: dts: marvell: cn9130-sr-som: fix cp0 mdio pin numbers
    - arm64: probes: Fix simulate_ldr*_literal()
    - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
      link PHY
    - selftests: mptcp: join: test for prohibited MPC to port-based endp
    - fat: fix uninitialized variable
    - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace
      point
    - net: fec: Move `fec_ptp_read()` to the top of the file
    - net: fec: Remove duplicated code
    - mptcp: prevent MPC handshake on port-based signal endpoints
    - s390/sclp: Deactivate sclp after all its users
    - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    - KVM: s390: gaccess: Check if guest address is in memslot
    - KVM: s390: Change virtual to physical address access in diag 0x258 handler
    - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
    - x86/cpufeatures: Add a IBPB_NO_RET BUG flag
    - x86/entry: Have entry_ibpb() invalidate return predictions
    - x86/bugs: Skip RSB fill at VMEXIT
    - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
    - fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks
    - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
    - io_uring/sqpoll: close race on waiting for sqring entries
    - selftest: hid: add the missing tests directory
    - Input: xpad - add support for MSI Claw A1M
    - scsi: mpi3mr: Validate SAS port assignments
    - scsi: ufs: core: Fix the issue of ICU failure
    - scsi: ufs: core: Requeue aborted request
    - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
    - drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible
      mode
    - drm/xe/xe_sync: initialise ufence.signalled
    - drm/xe/ufence: ufence can be signaled right after wait_woken
    - drm/vmwgfx: Cleanup kms setup without 3d
    - drm/vmwgfx: Handle surface check failure correctly
    - drm/amdgpu/mes: fix issue of writing to the same log buffer from 2 MES pipes
    - drm/amdgpu/smu13: always apply the powersave optimization
    - drm/amdgpu/swsmu: Only force workload setup on init
    - drm/amdgpu: prevent BO_HANDLES error from being overwritten
    - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
    - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
    - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
    - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: hid-sensors: Fix an error handling path in
      _hid_sensor_set_report_latency()
    - iio: light: veml6030: fix ALS sensor resolution
    - iio: light: opt3001: add missing full-scale range value
    - iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
    - iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
    - iio: chemical: ens160: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: magnetometer: af8133j: add missing select IIO_(TRIGGERED_)BUFFER in
      Kconfig
    - iio: resolver: ad2s1210 add missing select REGMAP in Kconfig
    - iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
    - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ad7944: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - Bluetooth: Remove debugfs directory on module init failure
    - Bluetooth: btusb: Fix not being able to reconnect after suspend
    - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
    - xhci: Fix incorrect stream context type macro
    - xhci: Mitigate failed set dequeue pointer commands
    - USB: serial: option: add support for Quectel EG916Q-GL
    - USB: serial: option: add Telit FN920C04 MBIM compositions
    - usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
    - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
    - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
    - usb: dwc3: core: Fix system suspend on TI AM62 platforms
    - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM
      device
    - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
    - serial: imx: Update mctrl old_status on RTSD interrupt
    - x86/resctrl: Annotate get_mem_config() functions as __init
    - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
    - x86/entry_32: Do not clobber user EFLAGS.ZF
    - irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
    - irqchip/sifive-plic: Return error code on failure
    - serial: qcom-geni: fix polled console initialisation
    - serial: qcom-geni: revert broken hibernation support
    - serial: qcom-geni: fix shutdown race
    - serial: qcom-geni: fix dma rx cancellation
    - serial: qcom-geni: fix receiver enable
    - mm: vmscan.c: fix OOM on swap stress test
    - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
      1000 G2
    - Linux 6.11.5
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50192
    - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50069
    - pinctrl: apple: check devm_kasprintf() returned value
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50070
    - pinctrl: stm32: check devm_kasprintf() returned value
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50196
    - pinctrl: ocelot: fix system hang on level based interrupts
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50197
    - pinctrl: intel: platform: fix error path in device_for_each_child_node()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50071
    - pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50072
    - x86/bugs: Use code segment selector for VERW operand
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50073
    - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50193
    - x86/entry_32: Clear CPU buffers after register restore in NMI return
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50074
    - parport: Proper fix for array out-of-bounds access
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50100
    - USB: gadget: dummy-hcd: Fix "task hung" problem
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50075
    - xhci: tegra: fix checked USB2 port number
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50076
    - vt: prevent kernel-infoleak in con_font_get()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50077
    - Bluetooth: ISO: Fix multiple init when debugfs is disabled
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50078
    - Bluetooth: Call iso_exit() on module unload
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50198
    - iio: light: veml6030: fix IIO device retrieval from embedded device
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50201
    - drm/radeon: Fix encoder->possible_clones
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50098
    - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50079
    - io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50080
    - ublk: don't allow user copy for unprivileged device
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50081
    - blk-mq: setup queue ->tag_set before initializing hctx
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50082
    - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50101
    - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50083
    - tcp: fix mptcp DSS corruption due to large pmtu xmit
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50068
    - mm/damon/tests/sysfs-kunit.h: fix memory leak in
      damon_sysfs_test_add_targets()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50199
    - mm/swapfile: skip HugeTLB pages for unuse_vma
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50066
    - mm/mremap: fix move_normal_pmd/retract_page_tables race
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50202
    - nilfs2: propagate directory read errors from nilfs_find_entry()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50200
    - maple_tree: correct tree corruption on spanning store
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50084
    - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50194
    - arm64: probes: Fix uprobes for big-endian kernels
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50099
    - arm64: probes: Remove broken LDR (literal) uprobe support
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50195
    - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50085
    - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50086
    - ksmbd: fix user-after-free from session log off
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50087
    - btrfs: fix uninitialized pointer free on read_alloc_one_name() error
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50088
    - btrfs: fix uninitialized pointer free in add_inode_ref()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068)
    - net: fec: don't save PTP state if PTP is unsupported
    - fs/ntfs3: Do not call file_modified if collapse range failed
    - fs/ntfs3: Optimize large writes into sparse file
    - fs/ntfs3: Fix sparse warning for bigendian
    - fs/ntfs3: Fix sparse warning in ni_fiemap
    - fs/ntfs3: Refactor enum_rstbl to suppress static checker
    - vdpa/octeon_ep: Fix format specifier for pointers in debug messages
    - virtio_console: fix misc probe bugs
    - perf vdso: Missed put on 32-bit dsos
    - perf build: Fix static compilation error when libdw is not installed
    - perf build: Fix build feature-dwarf_getlocations fail for old libdw
    - zram: don't free statically defined names
    - bpf: Call the missed btf_record_free() when map creation fails
    - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
    - bpf: Check percpu map value size first
    - s390/facility: Disable compile time optimization for decompressor code
    - s390/mm: Add cond_resched() to cmm_alloc/free_pages()
    - bpf, x64: Fix a jit convergence issue
    - ext4: nested locking for xattr inode
    - s390/cpum_sf: Remove WARN_ON_ONCE statements
    - s390/traps: Handle early warnings gracefully
    - ktest.pl: Avoid false positives with grub2 skip regex
    - soundwire: intel_bus_common: enable interrupts before exiting reset
    - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
    - clk: bcm: bcm53573: fix OF node leak in init
    - PCI: Add ACS quirk for Qualcomm SA8775P
    - i2c: i801: Use a different adapter-name for IDF adapters
    - PCI: Mark Creative Labs EMU20k2 INTx masking as broken
    - RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
    - mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
    - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
    - riscv: Omit optimized string routines when using KASAN
    - riscv: avoid Imbalance in RAS
    - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
    - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
    - PCI: endpoint: Assign PCI domain number for endpoint controllers
    - soundwire: cadence: re-check Peripheral status with delayed_work
    - riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
      unknown
    - media: videobuf2-core: clear memory related fields in
      __vb2_plane_dmabuf_put()
    - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
    - usb: chipidea: udc: enable suspend interrupt after usb reset
    - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
      Crashkernel Scenario
    - xhci: dbc: Fix STALL transfer event handling
    - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
    - comedi: ni_routing: tools: Check when the file could not be opened
    - LoongArch: Fix memleak in pci_acpi_scan_root()
    - netfilter: nf_nat: don't try nat source port reallocation for reverse dir
      clash
    - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
    - tools/iio: Add memory allocation failure check for trigger_name
    - staging: vme_user: added bound check to geoid
    - driver core: bus: Return -EIO instead of 0 when show/store invalid bus
      attribute
    - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
      lpfc_els_flush_cmd()
    - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
      KERN_WARNING
    - NFSD: Mark filecache "down" if init fails
    - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net()
      failed
    - ice: set correct dst VSI in only LAN filters
    - ice: clear port vlan config during reset
    - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
    - ice: fix VLAN replay after reset
    - SUNRPC: Fix integer overflow in decode_rc_list()
    - net: phy: aquantia: AQR115c fix up PMA capabilities
    - net: phy: aquantia: remove usage of phy_set_max_speed
    - tcp: fix to allow timestamp undo if no retransmits were sent
    - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
    - tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
    - rxrpc: Fix uninitialised variable in rxrpc_send_data()
    - net: dsa: sja1105: fix reception from VLAN-unaware bridges
    - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids()
      test
    - net: pse-pd: Fix enabled status mismatch
    - Bluetooth: btusb: Don't fail external suspend requests
    - net: phy: bcm84881: Fix some error handling paths
    - net: ethernet: adi: adin1110: Fix some error handling path in
      adin1110_read_fifo()
    - net: dsa: b53: fix jumbo frame mtu check
    - net: dsa: b53: fix max MTU for 1g switches
    - net: dsa: b53: fix max MTU for BCM5325/BCM5365
    - net: dsa: b53: allow lower MTUs on BCM5325/5365
    - net: dsa: b53: fix jumbo frames on 10/100 ports
    - drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
    - nouveau/dmem: Fix privileged error in copy engine channel
    - gpio: aspeed: Add the flush write to ensure the write complete.
    - gpio: aspeed: Use devm_clk api to manage clock source
    - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
    - powercap: intel_rapl_tpmi: Ignore minor version change
    - ice: Fix entering Safe Mode
    - ice: Fix netif_is_ice() in Safe Mode
    - ice: Flush FDB entries before reset
    - drm/xe: Restore GT freq on GSC load error
    - drm/xe: Make wedged_mode debugfs writable
    - net: ibm: emac: mal: fix wrong goto
    - net: ti: icssg-prueth: Fix race condition for VLAN table access
    - btrfs: zoned: fix missing RCU locking in error message when loading zone
      info
    - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
    - netfilter: fib: check correct rtable in vrf setups
    - net: ibm: emac: mal: add dcr_unmap to _remove
    - net: dsa: refuse cross-chip mirroring operations
    - rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
    - vxlan: Handle error of rtnl_register_module().
    - bridge: Handle error of rtnl_register_module().
    - mctp: Handle error of rtnl_register_module().
    - mpls: Handle error of rtnl_register_module().
    - phonet: Handle error of rtnl_register_module().
    - rcu/nocb: Fix rcuog wake-up from offline softirq
    - HID: multitouch: Add support for lenovo Y9000P Touchpad
    - hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
    - hwmon: (tmp513) Add missing dependency on REGMAP_I2C
    - hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
    - hwmon: (adm9240) Add missing dependency on REGMAP_I2C
    - hwmon: (adt7470) Add missing dependency on REGMAP_I2C
    - hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
    - HID: plantronics: Workaround for an unexcepted opposite volume key
    - HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN
    - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
    - usb: dwc3: core: Stop processing of pending events if controller is halted
    - usb: xhci: Fix problem with xhci resume from suspend
    - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
    - usb: dwc3: re-enable runtime PM after failed resume
    - usb: gadget: core: force synchronous registration
    - hid: intel-ish-hid: Fix uninitialized variable 'rv' in
      ish_fw_xfer_direct_dma
    - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
    - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
    - drm/amdgpu: partially revert powerplay `__counted_by` changes
    - drm/amd/display: Clear update flags after update has been applied
    - drm/amdkfd: Fix an eviction fence leak
    - drm/amd/display: fix hibernate entry for DCN35+
    - drm/xe/guc_submit: fix xa_store() error checking
    - drm/i915/hdcp: fix connector refcounting
    - drm/xe/ct: fix xa_store() error checking
    - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
    - Revert "mmc: mvsdio: Use sg_miter for PIO"
    - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
    - mptcp: fallback when MPTCP opts are dropped after 1st data
    - ata: libata: avoid superfluous disk spin down + spin up during hibernation
    - OPP: fix error code in dev_pm_opp_set_config()
    - net: dsa: lan9303: ensure chip reset and wait for READY status
    - net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY
    - mptcp: pm: do not remove closing subflows
    - powercap: intel_rapl_tpmi: Fix bogus register reading
    - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
    - selftests/rseq: Fix mm_cid test failure
    - btrfs: split remaining space to discard in chunks
    - btrfs: add cancellation points to trim loops
    - PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()
    - idpf: use actual mbx receive payload length
    - fs/proc/kcore.c: allow translation of physical memory addresses
    - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
    - io_uring/rw: fix cflags posting for single issue multishot read
    - Linux 6.11.4
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50182
    - secretmem: disable memfd_secret() if arch cannot set direct map
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50019
    - kthread: unpark only parked kthread
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50096
    - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50020
    - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50021
    - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50022
    - device-dax: correct pgoff align in dax_set_mapping()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50185
    - mptcp: handle consistently DSS corruption
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50023
    - net: phy: Remove LED entry from LEDs list on unregister
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50024
    - net: Fix an unsafe loop on the list
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50186
    - net: explicitly clear the sk pointer, when pf->create fails
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50025
    - scsi: fnic: Move flush_work initialization out of if block
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50026
    - scsi: wd33c93: Don't use stale scsi_pointer value
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50027
    - thermal: core: Free tzp copy along with the thermal zone
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50028
    - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50029
    - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50030
    - drm/xe/ct: prevent UAF in send_recv()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50187
    - drm/vc4: Stop the active perfmon before being destroyed
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50031
    - drm/v3d: Stop the active perfmon before being destroyed
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50189
    - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50033
    - slip: make slhc_remember() more robust against malicious packets
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50034
    - net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50035
    - ppp: fix ppp_async_encode() illegal access
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50036
    - net: do not delay dst_entries_add() in dst_release()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50037
    - drm/fbdev-dma: Only cleanup deferred I/O if necessary
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50092
    - net: netconsole: fix wrong warning
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50038
    - netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50039
    - net/sched: accept TCA_STAB only for root qdisc
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50040
    - igb: Do not bring the device up after non-fatal error
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50041
    - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50042
    - ice: Fix increasing MSI-X on VF
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50093
    - thermal: intel: int340x: processor: Fix warning during module unload
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50043
    - nfsd: fix possible badness in FREE_STATEID
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50044
    - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50045
    - netfilter: br_netfilter: fix panic with metadata_dst skb
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50094
    - sfc: Don't invoke xdp_do_flush() from netpoll.
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50188
    - net: phy: dp83869: fix memory corruption when enabling fiber
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50046
    - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50190
    - ice: fix memleak in ice_init_tx_topology()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50180
    - fbdev: sisfb: Fix strbuf array overflow
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50047
    - smb: client: fix UAF in async decryption
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50048
    - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50049
    - drm/amd/display: Check null pointer before dereferencing se
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50090
    - drm/xe/oa: Fix overflow in oa batch buffer
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50183
    - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
      instance
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50055
    - driver core: bus: Fix double free in driver API bus_register()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50091
    - dm vdo: don't refer to dedupe_context after releasing it
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50056
    - usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50184
    - virtio_pmem: Check device status before requesting flush
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50057
    - usb: typec: tipd: Free IRQ only if it was requested before
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50058
    - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50181
    - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50059
    - ntb: ntb_hw_switchtec: Fix use after free vulnerability in
      switchtec_ntb_remove due to race condition
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50060
    - io_uring: check if we need to reschedule during overflow flush
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50061
    - i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
      Driver Due to Race Condition
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50062
    - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50095
    - RDMA/mad: Improve handling of timed out WRs of mad agent
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50063
    - bpf: Prevent tail call between progs attached to different hooks
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50191
    - ext4: don't set SB_RDONLY after filesystem errors
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50064
    - zram: free secondary algorithms names
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50065
    - ntfs3: Change to non-blocking allocation in ntfs_d_hash
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50089
    - unicode: Don't special case ignorable code points
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052)
    - jump_label: Fix static_key_slow_dec() yet again
    - scsi: st: Fix input/output error on empty drive reset
    - scsi: pm8001: Do not overwrite PCI queue mapping
    - drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
    - drm/i915/display: BMG supports UHBR13.5
    - drm/i915/dp: Fix AUX IO power enabling for eDP PSR
    - drm/amdgpu: Fix get each xcp macro
    - drm/amd/display: handle nulled pipe context in DCE110's set_drr()
    - ksmbd: fix warning: comparison of distinct pointer types lacks a cast
    - mailbox: ARM_MHU_V3 should depend on ARM64
    - [Config] updateconfigs for ARM_MHU_V3
    - mailbox: rockchip: fix a typo in module autoloading
    - ceph: fix a memory leak on cap_auths in MDS client
    - drm/i915/dp: Fix colorimetry detection
    - ieee802154: Fix build error
    - net: sparx5: Fix invalid timestamps
    - net/mlx5: Added cond_resched() to crdump collection
    - net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
    - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
    - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
    - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
    - selftests: netfilter: Fix nft_audit.sh for newer nft binaries
    - selftests: netfilter: Add missing return value
    - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
    - afs: Fix missing wire-up of afs_retry_request()
    - net: Add netif_get_gro_max_size helper for GRO
    - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
    - net: fec: Restart PPS after link state change
    - net: fec: Reload PTP registers after link-state change
    - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
    - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
    - netfs: Fix missing wakeup after issuing writes
    - net: phy: realtek: Check the index value in led_hw_control_get
    - bridge: mcast: Fail MDB get request on empty entry
    - iomap: constrain the file range passed to iomap_file_unshare
    - dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
    - ASoC: topology: Fix incorrect addressing assignments
    - ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
      uninitialized
    - drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
    - io_uring: fix memory leak when cache init fail
    - rust: kbuild: split up helpers.c
    - rust: kbuild: auto generate helper exports
    - rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
    - ALSA: mixer_oss: Remove some incorrect kfree_const() usages
    - ALSA: hda/realtek: Fix the push button function for the ALC257
    - cifs: Remove intermediate object of failed create reparse call
    - drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
    - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
    - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
    - drm/xe: Restore pci state upon resume
    - drm/xe: Resume TDR after GT reset
    - cifs: Do not convert delimiter when parsing NFS-style symlinks
    - tools/rtla: Fix installation from out-of-tree build
    - ALSA: gus: Fix some error handling paths related to get_bpos() usage
    - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
    - drm/amd/display: Disable replay if VRR capability is false
    - drm/amd/display: Fix VRR cannot enable
    - drm/amd/display: Re-enable panel replay feature
    - e1000e: avoid failing the system during pm_suspend
    - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
    - crypto: x86/sha256 - Add parentheses around macros' single arguments
    - crypto: octeontx - Fix authenc setkey
    - crypto: octeontx2 - Fix authenc setkey
    - ice: Adjust over allocation of memory in ice_sched_add_root_node() and
      ice_sched_add_node()
    - wifi: iwlwifi: mvm: Fix a race in scan abort flow
    - wifi: iwlwifi: mvm: drop wrong STA selection in TX
    - net: hisilicon: hip04: fix OF node leak in probe()
    - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
    - net: hisilicon: hns_mdio: fix OF node leak in probe()
    - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
    - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
    - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
    - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
    - net: sched: consistently use rcu_replace_pointer() in taprio_change()
    - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
    - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
    - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
    - ACPI: CPPC: Add support for setting EPP register in FFH
    - wifi: rtw88: select WANT_DEV_COREDUMP
    - l2tp: free sessions using rcu
    - l2tp: use rcu list add/del when updating lists
    - ACPI: EC: Do not release locks during operation region accesses
    - net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
    - net: mvpp2: Increase size of queue_name buffer
    - bnxt_en: Extend maximum length of version string by 1 byte
    - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
    - wifi: rtw89: correct base HT rate mask for firmware
    - netfilter: nf_tables: do not remove elements if set backend implements
      .abort
    - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
    - nvme-keyring: restrict match length for version '1' identifiers
    - nvme-tcp: sanitize TLS key handling
    - nvme-tcp: check for invalidated or revoked key
    - net: atlantic: Avoid warning about potential string truncation
    - crypto: simd - Do not call crypto_alloc_tfm during registration
    - netpoll: Ensure clean state on setup failures
    - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
    - wifi: iwlwifi: mvm: use correct key iteration
    - wifi: iwlwifi: allow only CN mcc from WRDD
    - virt: sev-guest: Ensure the SNP guest messages do not exceed a page
    - wifi: mac80211: fix RCU list iterations
    - ACPICA: iasl: handle empty connection_node
    - proc: add config & param to block forcing mem writes
    - [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
    - vfs: use RCU in ilookup
    - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
    - nvme: fix metadata handling in nvme-passthrough
    - can: netlink: avoid call to do_set_data_bittiming callback with stale
      can_priv::ctrlmode
    - netdev-genl: Set extack and fix error on napi-get
    - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
    - arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
    - net: phy: Check for read errors in SIOCGMIIREG
    - x86/bugs: Add missing NO_SSB flag
    - x86/bugs: Fix handling when SRSO mitigation is disabled
    - crypto: hisilicon - fix missed error branch
    - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
    - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
    - netfs: Cancel dirty folios that have no storage destination
    - nfp: Use IRQF_NO_AUTOEN flag in request_irq()
    - ALSA: usb-audio: Add input value sanity checks for standard types
    - x86/apic: Remove logical destination mode for 64-bit
    - ALSA: usb-audio: Define macros for quirk table entries
    - ALSA: usb-audio: Replace complex quirk lines with macros
    - ALSA: usb-audio: Add quirk for RME Digiface USB
    - ALSA: usb-audio: Add mixer quirk for RME Digiface USB
    - ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
    - ALSA: usb-audio: Add logitech Audio profile quirk
    - ASoC: codecs: wsa883x: Handle reading version failure
    - ALSA: control: Take power_ref lock primarily
    - tools/x86/kcpuid: Protect against faulty "max subleaf" values
    - x86/pkeys: Add PKRU as a parameter in signal handling functions
    - x86/pkeys: Restore altstack access in sigreturn()
    - x86/kexec: Add EFI config table identity mapping for kexec kernel
    - ALSA: hdsp: Break infinite MIDI input flush loop
    - tools/nolibc: powerpc: limit stack-protector workaround to GCC
    - selftests/nolibc: avoid passing NULL to printf("%s")
    - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
    - ASoC: Intel: boards: always check the result of
      acpi_dev_get_first_match_dev()
    - hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
    - pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
    - pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
    - rcuscale: Provide clear error when async specified without primitives
    - power: reset: brcmstb: Do not go into infinite loop if reset fails
    - iommu/arm-smmu-v3: Match Stall behaviour for S2
    - iommu/vt-d: Always reserve a domain ID for identity setup
    - iommu/vt-d: Unconditionally flush device TLB for pasid table updates
    - iommu/arm-smmu-v3: Do not use devm for the cd table allocations
    - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
    - drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
    - ata: pata_serverworks: Do not use the term blacklist
    - ata: sata_sil: Rename sil_blacklist to sil_quirks
    - selftests/bpf: fix uprobe.path leak in bpf_testmod
    - scsi: smartpqi: Add new controller PCI IDs
    - HID: Ignore battery for all ELAN I2C-HID devices
    - drm/amd/display: Underflow Seen on DCN401 eGPU
    - drm/xe: Name and document Wa_14019789679
    - jfs: UBSAN: shift-out-of-bounds in dbFindBits
    - scsi: smartpqi: correct stream detection
    - scsi: smartpqi: add new controller PCI IDs
    - drm/amdgpu: add raven1 gfxoff quirk
    - drm/amdgpu: enable gfxoff quirk on HP 705G4
    - drm/amdkfd: Fix resource leak in criu restore queue
    - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
    - platform/x86: touchscreen_dmi: add nanote-next quirk
    - platform/x86/amd: pmf: Add quirk for TUF Gaming A14
    - drm/stm: ltdc: reset plane transparency after plane disable
    - drm/amdgpu/gfx12: properly handle error ints on all pipes
    - drm/amdgpu/gfx9: properly handle error ints on all pipes
    - drm/amd/display: Fix possible overflow in integer multiplication
    - drm/printer: Allow NULL data in devcoredump printer
    - perf,x86: avoid missing caller address in stack traces captured in uprobe
    - scsi: aacraid: Rearrange order of struct aac_srb_unit
    - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
      topology
    - scsi: lpfc: Update PRLO handling in direct attached topology
    - drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
    - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
    - drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
    - perf: Fix event_function_call() locking
    - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
    - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
    - drm/amd/display: Unlock Pipes Based On DET Allocation
    - drm/amdgpu: fix ptr check warning in gfx9 ip_dump
    - drm/amdgpu: fix ptr check warning in gfx10 ip_dump
    - drm/amdgpu: fix ptr check warning in gfx11 ip_dump
    - drm/amdgpu: Block MMR_READ IOCTL in reset
    - drm/amdgpu/gfx9: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
    - drm/xe: Use topology to determine page fault queue size
    - drm/amdkfd: Check int source id for utcl2 poison event
    - of/irq: Refer to actual buffer size in of_irq_parse_one()
    - drm/amd/display: guard write a 0 post_divider value to HW
    - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
    - ovl: fsync after metadata copy-up
    - drm/amdgpu/gfx12: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx11: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx10: use rlc safe mode for soft recovery
    - platform/x86: lenovo-ymc: Ignore the 0x0 state
    - tools/hv: Add memory allocation check in hv_fcopy_start
    - HID: i2c-hid: ensure various commands do not interfere with each other
    - platform/mellanox: mlxbf-pmc: fix lockdep warning
    - platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch
      buttons LED
    - bpf: Make the pointer returned by iter next method valid
    - ext4: ext4_search_dir should return a proper error
    - bpftool: Fix undefined behavior caused by shifting into the sign bit
    - iomap: handle a post-direct I/O invalidate race in
      iomap_write_delalloc_release
    - EINJ, CXL: Fix CXL device SBDF calculation
    - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: spi-cadence: Fix missing spi_controller_is_target() check
    - selftest: hid: add missing run-hid-tools-tests.sh
    - spi: s3c64xx: fix timeout counters in flush_fifo
    - kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
    - selftests: breakpoints: use remaining time to check if suspend succeed
    - accel/ivpu: Add missing MODULE_FIRMWARE metadata
    - spi: rpc-if: Add missing MODULE_DEVICE_TABLE
    - ALSA: control: Fix power_ref lock order for compat code, too
    - perf callchain: Fix stitch LBR memory leaks
    - perf: Really fix event_function_call() locking
    - drm/xe: fixup xe_alloc_pf_queue
    - drm/xe: Fix memory leak on xe_alloc_pf_queue failure
    - selftests: vDSO: fix vDSO name for powerpc
    - selftests: vDSO: fix vdso_config for powerpc
    - selftests: vDSO: fix vDSO symbols lookup for powerpc64
    - ext4: fix error message when rejecting the default hash
    - selftests/mm: fix charge_reserved_hugetlb.sh test
    - nvme-tcp: fix link failure for TCP auth
    - f2fs: add write priority option based on zone UFS
    - powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
    - selftests: vDSO: fix ELF hash table entry size for s390x
    - selftests: vDSO: fix vdso_config for s390
    - f2fs: make BG GC more aggressive for zoned devices
    - f2fs: introduce migration_window_granularity
    - f2fs: increase BG GC migration window granularity when boosted for zoned
      devices
    - f2fs: do FG_GC when GC boosting is required for zoned devices
    - f2fs: forcibly migrate to secure space for zoned device file pinning
    - Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
    - KVM: arm64: Fix kvm_has_feat*() handling of negative features
    - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
    - i2c: xiic: Wait for TX empty to avoid missed TX NAKs
    - i2c: core: Lock address during client device instantiation
    - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
    - i2c: designware: fix controller is holding SCL low while ENABLE bit is
      disabled
    - i2c: synquacer: Deal with optional PCLK correctly
    - rust: sync: require `T: Sync` for `LockedBy::access`
    - ovl: fail if trusted xattrs are needed but caller lacks permission
    - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
    - memory: tegra186-emc: drop unused to_tegra186_emc()
    - dt-bindings: clock: exynos7885: Fix duplicated binding
    - spi: bcm63xx: Fix module autoloading
    - spi: bcm63xx: Fix missing pm_runtime_disable()
    - power: supply: hwmon: Fix missing temp1_max_alarm attribute
    - power: supply: Drop use_cnt check from power_supply_property_is_writeable()
    - perf/core: Fix small negative period being ignored
    - drm/v3d: Prevent out of bounds access in performance query extensions
    - parisc: Fix itlb miss handler for 64-bit programs
    - drm/mediatek: ovl_adaptor: Add missing of_node_put()
    - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
    - ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
    - ALSA: core: add isascii() check to card ID generator
    - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
    - ALSA: usb-audio: Add native DSD support for Luxman D-08u
    - ALSA: line6: add hw monitor volume control to POD HD500X
    - ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
    - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
    - ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
    - ext4: correct encrypted dentry name hash when not casefolded
    - ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
    - ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
    - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
    - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
    - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
    - ext4: fix fast commit inode enqueueing during a full journal commit
    - ext4: use handle to mark fc as ineligible in __track_dentry_update()
    - ext4: mark fc as ineligible using an handle in ext4_xattr_set()
    - parisc: Fix 64-bit userspace syscall path
    - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
    - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
    - drm/rockchip: vop: clear DMA stop bit on RK3066
    - of: address: Report error on resource bounds overflow
    - of/irq: Support #msi-cells=<0> in of_msi_get_domain
    - lib/buildid: harden build ID parsing logic
    - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
    - mm: krealloc: consider spare memory for __GFP_ZERO
    - ocfs2: fix the la space leak when unmounting an ocfs2 volume
    - ocfs2: fix uninit-value in ocfs2_get_block()
    - scripts/gdb: fix timerlist parsing issue
    - scripts/gdb: add iteration function for rbtree
    - scripts/gdb: fix lx-mounts command error
    - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
    - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
    - drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
    - sched/deadline: Comment sched_dl_entity::dl_server variable
    - sched/core: Add clearing of ->dl_server in put_prev_task_balance()
    - sched/core: Clear prev->dl_server in CFS pick fast path
    - sched: psi: fix bogus pressure spikes from aggregation race
    - riscv: define ILLEGAL_POINTER_VALUE for 64bit
    - [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv
    - perf python: Disable -Wno-cast-function-type-mismatch if present on clang
    - perf hist: Update hist symbol when updating maps
    - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
    - NFSD: Fix NFSv4's PUTPUBFH operation
    - sysctl: avoid spurious permanent empty tables
    - RDMA/mana_ib: use the correct page table index based on hardware page size
    - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
    - drivers/perf: riscv: Align errno for unsupported perf event
    - riscv: Fix kernel stack size when KASAN is enabled
    - media: imx335: Fix reset-gpio handling
    - clk: rockchip: fix error for unknown clocks
    - leds: pca9532: Remove irrelevant blink configuration error message
    - media: videobuf2: Drop minimum allocation requirement of 2 buffers
    - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
    - media: sun4i_csi: Implement link validate for sun4i_csi subdev
    - clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
    - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
    - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
    - clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
    - clk: qcom: clk-rpmh: Fix overflow in BCM vote
    - clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
    - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
    - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sc8180x: Add GPLL9 support
    - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
    - clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
    - drm/amd/display: avoid set dispclk to 0
    - smb: client: use actual path when queryfs
    - smb3: fix incorrect mode displayed for read-only files
    - iio: magnetometer: ak8975: Fix reading for ak099xx sensors
    - iio: pressure: bmp280: Fix regmap for BMP280 device
    - iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
    - tomoyo: fallback to realpath if symlink's pathname does not exist
    - kselftests: mm: fix wrong __NR_userfaultfd value
    - rtc: at91sam9: fix OF node leak in probe() error path
    - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
    - mm/gup: fix memfd_pin_folios hugetlb page allocation
    - mm/hugetlb: simplify refs in memfd_alloc_folio
    - Input: adp5589-keys - fix adp5589_gpio_get_value()
    - HID: bpf: fix cfi stubs for hid_bpf_ops
    - pidfs: check for valid pid namespace
    - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
    - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
    - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
    - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
    - ACPI: resource: Add Asus ExpertBook B2502CVA to
      irq1_level_low_skip_override[]
    - btrfs: drop the backref cache during relocation if we commit
    - btrfs: send: fix invalid clone operation for file that got its size
      decreased
    - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
    - gpio: davinci: fix lazy disable
    - net: pcs: xpcs: fix the wrong register that was written back
    - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
    - io_uring/net: harden multishot termination case for recv
    - ceph: fix cap ref leak via netfs init_request
    - tracing/hwlat: Fix a race during cpuhp processing
    - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
    - rtla: Fix the help text in osnoise and timerlat top tools
    - firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
    - close_range(): fix the logics in descriptor table trimming
    - drm/i915/gem: fix bitwise and logical AND mixup
    - drm/panthor: Don't add write fences to the shared BOs
    - drm/panthor: Don't declare a queue blocked if deferred operations are
      pending
    - drm/sched: Fix dynamic job-flow control race
    - drm/sched: Add locking to drm_sched_entity_modify_sched
    - drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
    - drm/sched: Always increment correct scheduler score
    - drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
    - drm/amd/display: Add HDR workaround for specific eDP
    - drm/amd/display: Enable idle workqueue for more IPS modes
    - kconfig: fix infinite loop in sym_calc_choice()
    - kconfig: qconf: move conf_read() before drawing tree pain
    - kconfig: qconf: fix buffer overflow in debug links
    - arm64: cputype: Add Neoverse-N3 definitions
    - arm64: errata: Expand speculative SSBS workaround once more
    - mm: z3fold: deprecate CONFIG_Z3FOLD
    - [Config] updateconfigs after deprecating Z3FOLD
    - drm/amd/display: Allow backlight to go below
      `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
    - sunrpc: change sp_nrthreads from atomic_t to unsigned int.
    - NFSD: Async COPY result needs to return a write verifier
    - remoteproc: k3-r5: Acquire mailbox handle during probe routine
    - remoteproc: k3-r5: Delay notification of wakeup event
    - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
    - ACPI: battery: Simplify battery hook locking
    - drm/xe: Clean up VM / exec queue file lock usage.
    - drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
    - drm/xe/vram: fix ccs offset calculation
    - drm/sched: revert "Always increment correct scheduler score"
    - ALSA: control: Fix leftover snd_power_unref()
    - crypto: octeontx* - Select CRYPTO_AUTHENC
    - drm/amd/display: Revert Avoid overflow assignment
    - perf report: Fix segfault when 'sym' sort key is not used
    - pmdomain: core: Reduce debug summary table width
    - perf python: Allow checking for the existence of warning options in clang
    - Linux 6.11.3
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49863
    - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49864
    - rxrpc: Fix a race between socket set up and I/O thread creation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49865
    - drm/xe/vm: move xa_alloc to prevent UAF
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49955
    - ACPI: battery: Fix possible crash when unregistering a battery hook
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49973
    - r8169: add tally counter fields added with RTL8125
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49974
    - NFSD: Limit the number of concurrent async COPY operations
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49975
    - uprobes: fix kernel info leak via "[uprobes]" vma
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50003
    - drm/amd/display: Fix system hang while resume with TBT monitor
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50173
    - drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49866
    - tracing/timerlat: Fix a race during cpuhp processing
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49976
    - tracing/timerlat: Drop interface_lock in stop_kthread()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50005
    - mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50012
    - cpufreq: Avoid a bad reference count on CPU node
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49867
    - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49868
    - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49869
    - btrfs: send: fix buffer overflow detection when copying path to cache entry
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49870
    - cachefiles: fix dentry leak in cachefiles_open_file()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49871
    - Input: adp5589-keys - fix NULL pointer dereference
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49872
    - mm/gup: fix memfd_pin_folios alloc race panic
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49964
    - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49873
    - mm/filemap: fix filemap_get_folios_contig THP panic
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49977
    - net: stmmac: Fix zero-division error when disabling tc cbs
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49978
    - gso: fix udp gso fraglist segmentation after pull from frag_list
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49979
    - net: gso: fix tcp fraglist segmentation after pull from frag_list
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49980
    - vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49981
    - media: venus: fix use after free bug in venus_remove due to race condition
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49956
    - gfs2: fix double destroy_workqueue error
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50176
    - remoteproc: k3-r5: Fix error handling when power-up failed
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49982
    - aoe: fix the potential use-after-free problem in more places
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49874
    - i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver
      Due to Race Condition
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49875
    - nfsd: map the EBADMSG to nfserr_io to avoid warning
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50013
    - exfat: fix memory leak in exfat_load_bitmap()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49876
    - drm/xe: fix UAF around queue destruction
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49877
    - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49957
    - ocfs2: fix null-ptr-deref when journal load failed.
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49965
    - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49966
    - ocfs2: cancel dqi_sync_work before freeing oinfo
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49958
    - ocfs2: reserve space for inline xattr before attaching reflink tree
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49959
    - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49878
    - resource: fix region_intersects() vs add_memory_driver_managed()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49879
    - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49880
    - ext4: fix off by one issue in alloc_flex_gd()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49881
    - ext4: update orig_path in ext4_find_extent()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50014
    - ext4: fix access to uninitialised lock in fc replay path
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49960
    - ext4: fix timer use-after-free on failed mount
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49882
    - ext4: fix double brelse() the buffer of the extents path
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49883
    - ext4: aovid use-after-free in ext4_ext_insert_extent()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49983
    - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50015
    - ext4: dax: fix overflowing extents beyond inode size when partially writing
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49884
    - ext4: fix slab-use-after-free in ext4_split_extent_at()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49885
    - mm, slub: avoid zeroing kmalloc redzone
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49961
    - media: i2c: ar0521: Use cansleep version of gpiod_set_value()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49985
    - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49886
    - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49986
    - platform/x86: x86-android-tablets: Fix use after free on
      platform_device_register() errors
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49887
    - f2fs: fix to don't panic system for no free segment fault injection
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49888
    - bpf: Fix a sdiv overflow issue
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49987
    - bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50006
    - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49889
    - ext4: avoid use-after-free in ext4_ext_show_leaf()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49968
    - ext4: filesystems without casefold feature cannot be mounted with siphash
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49988
    - ksmbd: add refcnt to ksmbd_conn struct
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49890
    - drm/amd/pm: ensure the fw_info is not null before using it
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49891
    - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
      paths
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49892
    - drm/amd/display: Initialize get_bytes_per_element's default to 1
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50016
    - drm/amd/display: Avoid overflow assignment in link_dp_cts
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49893
    - drm/amd/display: Check stream_status before it is used
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49969
    - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49970
    - drm/amd/display: Implement bounds check for stream encoder creation in
      DCN401
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49894
    - drm/amd/display: Fix index out of bounds in degamma hardware format
      translation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49895
    - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
      translation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49971
    - drm/amd/display: Increase array size of dummy_boolean
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49972
    - drm/amd/display: Deallocate DML memory if allocation fails
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49896
    - drm/amd/display: Check stream before comparing them
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49897
    - drm/amd/display: Check phantom_stream before it is used
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49898
    - drm/amd/display: Check null-initialized variables
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49899
    - drm/amd/display: Initialize denominators' default to 1
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49900
    - jfs: Fix uninit-value access of new_ea in ea_buffer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49901
    - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49902
    - jfs: check if leafidx greater than num leaves per dmap tree
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49903
    - jfs: Fix uaf in dbFreeBits
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49904
    - drm/amdgpu: add list empty check to avoid null pointer issue
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49989
    - drm/amd/display: fix double free issue during amdgpu module unload
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49905
    - drm/amd/display: Add null check for 'afb' in
      amdgpu_dm_plane_handle_cursor_update (v2)
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49906
    - drm/amd/display: Check null pointer before try to access it
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49907
    - drm/amd/display: Check null pointers before using dc->clk_mgr
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49908
    - drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50177
    - drm/amd/display: fix a UBSAN warning in DML2.1
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49909
    - drm/amd/display: Add NULL check for function pointer in
      dcn32_set_output_transfer_func
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49910
    - drm/amd/display: Add NULL check for function pointer in
      dcn401_set_output_transfer_func
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49911
    - drm/amd/display: Add NULL check for function pointer in
      dcn20_set_output_transfer_func
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49912
    - drm/amd/display: Handle null 'stream_status' in
      'planes_changed_for_existing_stream'
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49913
    - drm/amd/display: Add null check for top_pipe_to_program in
      commit_planes_for_stream
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49914
    - drm/amd/display: Add null check for pipe_ctx->plane_state in
      dcn20_program_pipe
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49915
    - drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49916
    - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
      dcn401_init_hw
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49917
    - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
      dcn30_init_hw
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49918
    - drm/amd/display: Add null check for head_pipe in
      dcn32_acquire_idle_pipe_for_head_pipe_in_layer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49919
    - drm/amd/display: Add null check for head_pipe in
      dcn201_acquire_free_pipe_for_layer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49991
    - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49920
    - drm/amd/display: Check null pointers before multiple uses
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49921
    - drm/amd/display: Check null pointers before used
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49922
    - drm/amd/display: Check null pointers before using them
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49923
    - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49992
    - drm/stm: Avoid use-after-free issues with crtc and plane
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49993
    - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49924
    - fbdev: pxafb: Fix possible use after free in pxafb_task()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49925
    - fbdev: efifb: Register sysfs groups through driver core
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49926
    - rcu-tasks: Fix access non-existent percpu rtpcp variable in
      rcu_tasks_need_gpcb()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50007
    - ALSA: asihpi: Fix potential OOB array access
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50017
    - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49927
    - x86/ioapic: Handle allocation failures gracefully
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50008
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_cmd_802_11_scan_ext()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50018
    - net: napi: Prevent overflow of napi_defer_hard_irqs
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49928
    - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50178
    - cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50009
    - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49994
    - block: fix integer overflow in BLKSECDISCARD
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49929
    - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49995
    - tipc: guard against string buffer overrun
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49962
    - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
      acpi_db_convert_to_package()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49930
    - wifi: ath11k: fix array out-of-bound access in SoC stats
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49931
    - wifi: ath12k: fix array out-of-bound access in SoC stats
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49932
    - btrfs: don't readahead the relocation inode on RST
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49933
    - blk_iocost: fix more out of bound shifts
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49934
    - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50010
    - exec: don't WARN for racy path_noexec check
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49935
    - ACPI: PAD: fix crash in exit_round_robin()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49936
    - net/xen-netback: prevent UAF in xenvif_flush_hash()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49937
    - wifi: cfg80211: Set correct chandef when starting CAC
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49938
    - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49939
    - wifi: rtw89: avoid to add interface to list twice when SER
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49940
    - l2tp: prevent possible tunnel refcount underflow
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49941
    - gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49996
    - cifs: Fix buffer overflow when parsing NFS reparse points
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49942
    - drm/xe: Prevent null pointer access in xe_migrate_copy
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49943
    - drm/xe/guc_submit: add missing locking in wedged_fini
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50011
    - ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50174
    - drm/panthor: Fix race when converting group handle to group object
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49944
    - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49945
    - net/ncsi: Disable the ncsi work before freeing the associated structure
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49946
    - ppp: do not assume bh is held in ppp_channel_bridge_input()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49947
    - net: test for not too small csum_start in virtio_net_hdr_to_skb()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49948
    - net: add more sanity checks to qdisc_pkt_len_init()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49949
    - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49997
    - net: ethernet: lantiq_etop: fix memory disclosure
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49998
    - net: dsa: improve shutdown sequence
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49999
    - afs: Fix the setting of the server responding flag
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49950
    - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49951
    - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49952
    - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49953
    - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50000
    - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50001
    - net/mlx5: Fix error path in multi-packet WQE transmit
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50179
    - ceph: remove the incorrect Fw reference check when dirtying pages
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49963
    - mailbox: bcm2835: Fix timeout during suspend mode
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49954
    - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50002
    - static_call: Handle module init failure correctly in
      static_call_del_module()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033)
    - EDAC/synopsys: Fix error injection on Zynq UltraScale+
    - crypto: xor - fix template benchmarking
    - crypto: qat - disable IOV in adf_dev_stop()
    - crypto: qat - fix recovery flow for VFs
    - crypto: qat - ensure correct order in VF restarting handler
    - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
    - eth: fbnic: select DEVLINK and PAGE_POOL
    - wifi: brcmfmac: introducing fwil query functions
    - wifi: ath9k: Remove error checks when creating debugfs entries
    - wifi: ath12k: fix BSS chan info request WMI command
    - wifi: ath12k: match WMI BSS chan info structure with firmware definition
    - wifi: ath12k: fix invalid AMPDU factor calculation in
      ath12k_peer_assoc_h_he()
    - hwrng: cn10k - Enable by default CN10K driver if Thunder SoC is enabled
    - crypto: x86/aes-gcm - fix PREEMPT_RT issue in gcm_crypt()
    - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
    - virtio: rename virtio_config_enabled to virtio_config_core_enabled
    - virtio: allow driver to disable the configure change notification
    - virtio-net: synchronize operstate with admin state on up/down
    - virtio-net: synchronize probe with ndo_set_features
    - arm64: signal: Fix some under-bracketed UAPI macros
    - wifi: rtw88: remove CPT execution branch never used
    - RISC-V: KVM: Fix sbiret init before forwarding to userspace
    - RISC-V: KVM: Allow legacy PMU access from guest
    - RISC-V: KVM: Fix to allow hpmcounter31 from the guest
    - mount: handle OOM on mnt_warn_timestamp_expiry
    - autofs: fix missing fput for FSCONFIG_SET_FD
    - netfilter: nf_tables: store new sets in dedicated list
    - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
    - kselftest/arm64: signal: fix/refactor SVE vector length enumeration
    - arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI
      first
    - thermal: core: Fold two functions into their respective callers
    - thermal: core: Fix rounding of delay jiffies
    - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
    - perf/dwc_pcie: Always register for PCIe bus notifier
    - crypto: qat - fix "Full Going True" macro definition
    - ACPI: video: force native for Apple MacbookPro9,2
    - wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio
    - wifi: iwlwifi: config: label 'gl' devices as discrete
    - wifi: iwlwifi: mvm: increase the time between ranging measurements
    - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
    - wifi: mac80211: fix the comeback long retry times
    - wifi: iwlwifi: mvm: allow ESR when we the ROC expires
    - wifi: mac80211: Check for missing VHT elements only for 5 GHz
    - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
    - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the
      spec
    - padata: Honor the caller's alignment in case of chunk_size 0
    - drivers/perf: hisi_pcie: Record hardware counts correctly
    - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
    - kselftest/arm64: Actually test SME vector length changes via sigreturn
    - can: j1939: use correct function name in comment
    - wifi: rtw89: wow: fix wait condition for AOAC report request
    - ACPI: CPPC: Fix MASK_VAL() usage
    - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
    - netfilter: nf_tables: reject element expiration with no timeout
    - netfilter: nf_tables: reject expiration higher than timeout
    - netfilter: nf_tables: remove annotation to access set timeout while holding
      lock
    - netfilter: nft_dynset: annotate data-races around set timeout
    - perf/arm-cmn: Refactor node ID handling. Again.
    - perf/arm-cmn: Fix CCLA register offset
    - perf/arm-cmn: Ensure dtm_idx is big enough
    - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
    - thermal: gov_bang_bang: Adjust states of all uninitialized instances
    - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
    - wifi: mt76: mt7996: fix traffic delay when switching back to working channel
    - wifi: mt76: mt7996: fix wmm set of station interface to 3
    - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
    - wifi: mt76: mt7996: fix EHT beamforming capability check
    - pm:cpupower: Add missing powercap_set_enabled() stub function
    - crypto: ccp - do not request interrupt on cmd completion when irqs disabled
    - crypto: hisilicon/hpre - mask cluster timeout error
    - crypto: hisilicon/qm - reset device before enabling it
    - wifi: mt76: mt7996: fix handling mbss enable/disable
    - wifi: mt76: connac: fix checksum offload fields of connac3 RXD
    - wifi: mt76: mt7603: fix mixed declarations and code
    - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
    - wifi: mt76: mt7915: fix rx filter setting for bfee functionality
    - wifi: mt76: mt7996: fix uninitialized TLV data
    - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
    - af_unix: Don't call skb_get() for OOB skb.
    - af_unix: Remove single nest in manage_oob().
    - af_unix: Rename unlinked_skb in manage_oob().
    - af_unix: Move spin_lock() in manage_oob().
    - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
    - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
    - can: m_can: enable NAPI before enabling interrupts
    - can: m_can: m_can_close(): stop clocks after device has been shut down
    - Bluetooth: btusb: Fix not handling ZPL/short-transfer
    - bareudp: Pull inner IP header in bareudp_udp_encap_recv().
    - bareudp: Pull inner IP header on xmit.
    - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
    - crypto: n2 - Set err to EINVAL if snprintf fails for hmac
    - xsk: fix batch alloc API on non-coherent systems
    - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
    - fbnic: Set napi irq value after calling netif_napi_add
    - net: tipc: avoid possible garbage value
    - ublk: move zone report data out of request pdu
    - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
    - block, bfq: don't break merge chain in bfq_split_bfqq()
    - cachefiles: Fix non-taking of sb_writers around set/removexattr
    - nbd: correct the maximum value for discard sectors
    - erofs: fix incorrect symlink detection in fast symlink
    - erofs: fix error handling in z_erofs_init_decompressor
    - block, bfq: fix uaf for accessing waker_bfqq after splitting
    - block, bfq: fix procress reference leakage for bfqq in merge chain
    - io_uring/io-wq: do not allow pinning outside of cpuset
    - io_uring/io-wq: inherit cpuset of cgroup in io worker
    - spi: ppc4xx: handle irq_of_parse_and_map() errors
    - arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
    - arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
    - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
    - firmware: qcom: scm: Disable SDI and write no dump to dump mode
    - regulator: Return actual error in of_regulator_bulk_get_all()
    - arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
    - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
    - arm64: tegra: Correct location of power-sensors for IGX Orin
    - arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
    - arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
    - arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
    - spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
    - arm64: dts: qcom: x1e80100: Fix PHY for DP2
    - ARM: dts: microchip: sama7g5: Fix RTT clock
    - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
    - arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
    - ARM: versatile: fix OF node leak in CPUs prepare
    - reset: berlin: fix OF node leak in probe() error path
    - reset: k210: fix OF node leak in probe() error path
    - platform: cznic: turris-omnia-mcu: Fix error check in
      omnia_mcu_register_trng()
    - clocksource/drivers/qcom: Add missing iounmap() on errors in
      msm_dt_timer_init()
    - arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
    - x86/mm: Use IPIs to synchronize LAM enablement
    - ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
    - ASoC: tas2781: Fix a compiling warning reported by robot kernel test due to
      adding tas2563_dvc_table
    - ASoC: tas2781-i2c: Drop weird GPIO code
    - ASoC: tas2781-i2c: Get the right GPIO line
    - selftests/ftrace: Add required dependency for kprobe tests
    - ALSA: hda: cs35l41: fix module autoloading
    - selftests/ftrace: Fix test to handle both old and new kernels
    - x86/boot/64: Strip percpu address space when setting up GDT descriptors
    - m68k: Fix kernel_clone_args.flags in m68k_clone()
    - ASoC: loongson: fix error release
    - selftests/ftrace: Fix eventfs ownership testcase to find mount point
    - selftests:resctrl: Fix build failure on archs without __cpuid_count()
    - cgroup/pids: Avoid spurious event notification
    - hwmon: (max16065) Fix overflows seen when writing limits
    - hwmon: (max16065) Fix alarm attributes
    - iommu/arm-smmu: Un-demote unhandled-fault msg
    - iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check
    - mtd: slram: insert break after errors in parsing the map
    - hwmon: (ntc_thermistor) fix module autoloading
    - power: supply: axp20x_battery: Remove design from min and max voltage
    - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
    - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
    - iommu/amd: Handle error path in amd_iommu_probe_device()
    - iommu/amd: Allocate the page table root using GFP_KERNEL
    - iommu/amd: Move allocation of the top table into v1_alloc_pgtable
    - iommu/amd: Set the pgsize_bitmap correctly
    - iommu/amd: Do not set the D bit on AMD v2 table entries
    - mtd: powernv: Add check devm_kasprintf() returned value
    - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
    - mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
    - mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
    - mtd: rawnand: mtk: Fix init error path
    - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
    - iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
    - iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
    - pmdomain: core: Harden inter-column space in debug summary
    - pmdomain: core: Fix "managed by" alignment in debug summary
    - drm/stm: Fix an error handling path in stm_drm_platform_probe()
    - drm/stm: ltdc: check memory returned by devm_kzalloc()
    - drm/amd/display: free bo used for dmub bounding box
    - drm/amdgpu: properly handle vbios fake edid sizing
    - drm/radeon: properly handle vbios fake edid sizing
    - drm/amd/display: Reset VRR config during resume
    - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
    - scsi: sd: Don't check if a write for REQ_ATOMIC
    - scsi: block: Don't check REQ_ATOMIC for reads
    - scsi: NCR5380: Check for phase match during PDMA fixup
    - drm/amd/amdgpu: Properly tune the size of struct
    - drm/amd/display: Improve FAM control for DCN401
    - drm/rockchip: vop: Allow 4096px width scaling
    - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
    - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
    - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
    - drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
    - drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
    - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
    - powerpc/8xx: Fix initial memory mapping
    - powerpc/8xx: Fix kernel vs user address comparison
    - powerpc/vdso: Inconditionally use CFUNC macro
    - drm/msm: Use a7xx family directly in gpu_state
    - drm/msm: Dump correct dbgahb clusters on a750
    - drm/msm: Fix CP_BV_DRAW_STATE_ADDR name
    - drm/msm: Fix incorrect file name output in adreno_request_fw()
    - drm/msm/a5xx: disable preemption in submits by default
    - drm/msm/a5xx: properly clear preemption records on resume
    - drm/msm/a5xx: fix races in preemption evaluation stage
    - drm/msm/a5xx: workaround early ring-buffer emptiness check
    - ipmi: docs: don't advertise deprecated sysfs entries
    - drm/msm/dp: enable widebus on all relevant chipsets
    - drm/msm/dsi: correct programming sequence for SM8350 / SM8450
    - drm/msm: fix %s null argument error
    - platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
    - kselftest: dt: Ignore nodes that have ancestors disabled
    - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
    - drm/amdgpu: fix invalid fence handling in amdgpu_vm_tlb_flush
    - xen: use correct end address of kernel for conflict checking
    - HID: wacom: Support sequence numbers smaller than 16-bit
    - HID: wacom: Do not warn about dropped packets for first packet
    - ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
    - xen: introduce generic helper checking for memory map conflicts
    - xen: move max_pfn in xen_memory_setup() out of function scope
    - xen: add capability to remap non-RAM pages to different PFNs
    - xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
    - drm/xe: fix missing 'xe_vm_put'
    - xen/swiotlb: add alignment check for dma buffers
    - xen/swiotlb: fix allocated size
    - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
    - bpf, x64: Fix tailcall hierarchy
    - bpf, arm64: Fix tailcall hierarchy
    - bpf: Fix compare error in function retval_range_within
    - selftests/bpf: Workaround strict bpf_lsm return value check.
    - selftests/bpf: Fix error linking uprobe_multi on mips
    - selftests/bpf: Fix wrong binary in Makefile log output
    - tools/runqslower: Fix LDFLAGS and add LDLIBS support
    - selftests/bpf: Use pid_t consistently in test_progs.c
    - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
    - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
    - selftests/bpf: Drop unneeded error.h includes
    - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
    - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
    - selftests/bpf: Fix missing BUILD_BUG_ON() declaration
    - selftests/bpf: Fix include of <sys/fcntl.h>
    - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
    - selftests/bpf: Fix compiling kfree_skb.c with musl-libc
    - selftests/bpf: Fix compiling flow_dissector.c with musl-libc
    - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
    - selftests/bpf: Fix compiling core_reloc.c with musl-libc
    - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
    - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
    - selftests/bpf: Fix errors compiling crypto_sanity.c with musl libc
    - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
    - libbpf: Don't take direct pointers into BTF data from st_ops
    - selftests/bpf: Fix arg parsing in veristat, test_progs
    - selftests/bpf: Fix error compiling test_lru_map.c
    - selftests/bpf: Fix C++ compile error from missing _Bool type
    - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
    - selftests/bpf: Fix compile if backtrace support missing in libc
    - selftests/bpf: Fix error compiling tc_redirect.c with musl libc
    - s390/entry: Move early program check handler to entry.S
    - s390/entry: Make early program check handler relocated lowcore aware
    - libbpf: Fix license for btf_relocate.c
    - samples/bpf: Fix compilation errors with cf-protection option
    - selftests/bpf: no need to track next_match_pos in struct test_loader
    - selftests/bpf: extract test_loader->expect_msgs as a data structure
    - selftests/bpf: allow checking xlated programs in verifier_* tests
    - selftests/bpf: __arch_* macro to limit test cases to specific archs
    - selftests/bpf: fix to avoid __msg tag de-duplication by clang
    - selftests/bpf: Fix incorrect parameters in NULL pointer checking
    - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
    - s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
    - libbpf: Ensure new BTF objects inherit input endianness
    - xz: cleanup CRC32 edits from 2018
    - kthread: fix task state in kthread worker if being frozen
    - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
    - bpftool: Fix handling enum64 in btf dump sorting
    - sched/deadline: Fix schedstats vs deadline servers
    - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
    - ext4: avoid buffer_head leak in ext4_mark_inode_used()
    - ext4: avoid potential buffer_head leak in __ext4_new_inode()
    - ext4: avoid negative min_clusters in find_group_orlov()
    - ext4: return error on ext4_find_inline_entry
    - sched/numa: Fix the vma scan starving issue
    - nilfs2: determine empty node blocks as corrupted
    - sched/pelt: Use rq_clock_task() for hw_pressure
    - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
    - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
    - perf scripts python cs-etm: Restore first sample log in verbose mode
    - perf bpf: Move BPF disassembly routines to separate file to avoid clash with
      capstone bpf headers
    - perf mem: Free the allocated sort string, fixing a leak
    - perf lock contention: Change stack_id type to s32
    - perf vendor events: SKX, CLX, SNR uncore cache event fixes
    - perf inject: Fix leader sampling inserting additional samples
    - perf report: Fix --total-cycles --stdio output error
    - perf build: Fix up broken capstone feature detection fast path
    - perf sched timehist: Fix missing free of session in perf_sched__timehist()
    - perf stat: Display iostat headers correctly
    - perf dwarf-aux: Check allowed location expressions when collecting variables
    - perf annotate-data: Fix off-by-one in location range check
    - perf dwarf-aux: Handle bitfield members from pointer access
    - perf hist: Don't set hpp_fmt_value for members in --no-group
    - perf sched timehist: Fixed timestamp error when unable to confirm event
      sched_in time
    - perf time-utils: Fix 32-bit nsec parsing
    - perf mem: Check mem_events for all eligible PMUs
    - perf mem: Fix missed p-core mem events on ADL and RPL
    - clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
    - clk: imx: imx6ul: fix default parent for enet*_ref_sel
    - clk: imx: composite-8m: Enable gate clk with mcore_booted
    - clk: imx: composite-93: keep root clock on when mcore enabled
    - clk: imx: composite-7ulp: Check the PCC present bit
    - clk: imx: fracn-gppll: fix fractional part of PLL getting lost
    - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
    - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
    - clk: imx: imx8qxp: Parent should be initialized earlier than the clock
    - quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
    - remoteproc: imx_rproc: Correct ddr alias for i.MX8M
    - remoteproc: imx_rproc: Initialize workqueue earlier
    - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
    - clk: qcom: dispcc-sm8550: fix several supposed typos
    - clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
    - clk: qcom: dispcc-sm8650: Update the GDSC flags
    - clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
    - leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
    - pinctrl: renesas: rzg2l: Return -EINVAL if the pin doesn't support
      PIN_CFG_OEN
    - pinctrl: ti: ti-iodelay: Fix some error handling paths
    - phy: phy-rockchip-samsung-hdptx: Explicitly include pm_runtime.h
    - Input: ilitek_ts_i2c - avoid wrong input subsystem sync
    - Input: ilitek_ts_i2c - add report id message validation
    - media: raspberrypi: VIDEO_RASPBERRYPI_PISP_BE should depend on ARCH_BCM2835
    - [Config] updateconfigs for VIDEO_RASPBERRYPI_PISP_BE
    - PCI: Wait for Link before restoring Downstream Buses
    - firewire: core: correct range of block for case of switch statement
    - media: staging: media: starfive: camss: Drop obsolete return value
      documentation
    - clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
    - clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
    - leds: pca995x: Use device_for_each_child_node() to access device child nodes
    - leds: pca995x: Fix device child node usage in pca995x_probe()
    - x86/PCI: Check pcie_find_root_port() return for NULL
    - PCI: xilinx-nwl: Fix register misspelling
    - PCI: xilinx-nwl: Clean up clock on probe failure/removal
    - leds: gpio: Set num_leds after allocation
    - media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
    - pinctrl: single: fix missing error code in pcs_probe()
    - clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
    - iommufd/selftest: Fix buffer read overrrun in the dirty test
    - RDMA/bnxt_re: Fix the table size for PSN/MSN entries
    - media: imagination: VIDEO_E5010_JPEG_ENC should depend on ARCH_K3
    - [Config] updateconfigs for VIDEO_E5010_JPEG_ENC
    - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
    - clk: ti: dra7-atl: Fix leak of of_nodes
    - clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync()
      usage
    - clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
    - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
    - nfsd: fix refcount leak when file is unhashed after being found
    - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
    - dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with
      fsl,lx2160ar2-pcie
    - iommufd: Check the domain owner of the parent before creating a nesting
      domain
    - RDMA/erdma: Return QP state in erdma_query_qp
    - RDMA/mlx5: Fix counter update on MR cache mkey creation
    - RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
    - RDMA/mlx5: Drop redundant work canceling from clean_keys()
    - RDMA/mlx5: Fix MR cache temp entries cleanup
    - watchdog: imx_sc_wdt: Don't disable WDT in suspend
    - RDMA/hns: Don't modify rq next block addr in HIP09 QPC
    - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
    - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
    - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
    - RDMA/hns: Optimize hem allocation performance
    - RDMA/hns: Fix restricted __le16 degrades to integer issue
    - Input: ims-pcu - fix calling interruptible mutex
    - RDMA/mlx5: Obtain upper net device only when needed
    - PCI: qcom-ep: Enable controller resources like PHY only after refclk is
      available
    - riscv: Fix fp alignment bug in perf_callchain_user()
    - RDMA/hns: Fix ah error counter in sw stat not increasing
    - RDMA/irdma: fix error message in irdma_modify_qp_roce()
    - ntb_perf: Fix printk format
    - ntb: Force physically contiguous allocation of rx ring buffers
    - nfsd: untangle code in nfsd4_deleg_getattr_conflict()
    - nfsd: fix initial getattr on write delegation
    - crypto: caam - Pad SG length when allocating hash edesc
    - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
    - [Config] disable CRYPTO_AES_GCM_P10
    - f2fs: atomic: fix to avoid racing w/ GC
    - f2fs: reduce expensive checkpoint trigger frequency
    - f2fs: fix to avoid racing in between read and OPU dio write
    - f2fs: Create COW inode from parent dentry for atomic write
    - f2fs: fix to wait page writeback before setting gcing flag
    - f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
    - f2fs: compress: don't redirty sparse cluster during {,de}compress
    - f2fs: prevent atomic file from being dirtied before commit
    - spi: airoha: fix dirmap_{read,write} operations
    - spi: airoha: fix airoha_snand_{write,read}_data data_len estimation
    - spi: atmel-quadspi: Undo runtime PM changes at driver exit time
    - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
    - lib/sbitmap: define swap_lock as raw_spinlock_t
    - spi: airoha: remove read cache in airoha_snand_dirmap_read()
    - spi: atmel-quadspi: Avoid overwriting delay register settings
    - NFSv4.2: Fix detection of "Proxying of Times" server support
    - nvme-multipath: system fails to create generic nvme device
    - iio: adc: ad7606: fix oversampling gpio array
    - iio: adc: ad7606: fix standby gpio state to match the documentation
    - driver core: Fix error handling in driver API device_rename()
    - ABI: testing: fix admv8818 attr description
    - iio: chemical: bme680: Fix read/write ops to device by adding mutexes
    - iio: magnetometer: ak8975: drop incorrect AK09116 compatible
    - dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
    - serial: 8250: omap: Cleanup on error in request_irq
    - Coresight: Set correct cs_mode for TPDM to fix disable issue
    - Coresight: Set correct cs_mode for dummy source to fix disable issue
    - coresight: tmc: sg: Do not leak sg_table
    - interconnect: icc-clk: Add missed num_nodes initialization
    - interconnect: qcom: sm8250: Enable sync_state
    - dm integrity: fix gcc 5 warning
    - cxl/pci: Fix to record only non-zero ranges
    - um: remove ARCH_NO_PREEMPT_DYNAMIC
    - Revert "dm: requeue IO if mapping table not yet available"
    - net: phy: aquantia: fix -ETIMEDOUT PHY probe failure when firmware not
      present
    - net: xilinx: axienet: Schedule NAPI in two steps
    - net: xilinx: axienet: Fix packet counting
    - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
    - net: qrtr: Update packets cloning when broadcasting
    - net: phy: aquantia: fix setting active_low bit
    - net: phy: aquantia: fix applying active_low bit after reset
    - net: ravb: Fix maximum TX frame size for GbEth devices
    - net: ravb: Fix R-Car RX frame size limit
    - virtio_net: Fix mismatched buf address when unmapping for small packets
    - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
    - netfilter: ctnetlink: compile ctnetlink_label_size with
      CONFIG_NF_CONNTRACK_EVENTS
    - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump
      path
    - netfilter: nf_tables: missing objects with no memcg accounting
    - selftests: netfilter: Avoid hanging ipvs.sh
    - io_uring/sqpoll: do not allow pinning outside of cpuset
    - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
    - io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
    - mm: migrate: annotate data-race in migrate_folio_unmap()
    - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
    - drm/amd/display: Add DSC Debug Log
    - drm/amdgpu/display: Fix a mistake in revert commit
    - xen: move checks for e820 conflicts further up
    - xen: allow mapping ACPI data using a different physical address
    - io_uring/sqpoll: retain test for whether the CPU is valid
    - drm/amd/display: disable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc
      before using it
    - io_uring/sqpoll: do not put cpumask on stack
    - selftests/bpf: correctly move 'log' upon successful match
    - Remove *.orig pattern from .gitignore
    - PCI: Revert to the original speed after PCIe failed link retraining
    - PCI: Clear the LBMS bit after a link retrain
    - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
    - PCI: imx6: Fix missing call to phy_power_off() in error handling
    - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP
    - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI
    - PCI: Correct error reporting with PCIe failed link retraining
    - PCI: Use an error code with PCIe failed link retraining
    - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
    - PCI: dra7xx: Fix error handling when IRQ request fails in probe
    - Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
    - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
    - soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
    - soc: fsl: cpm1: tsa: Fix tsa_write8()
    - soc: versatile: integrator: fix OF node leak in probe() error path
    - Revert "media: tuners: fix error return code of
      hybrid_tuner_request_state()"
    - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all()
    - Input: adp5588-keys - fix check on return code
    - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
    - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
    - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
    - KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
    - KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
    - KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
    - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
    - drm/amdgpu/mes12: reduce timeout
    - drm/amdgpu/mes11: reduce timeout
    - drm/amdkfd: Add SDMA queue quantum support for GFX12
    - drm/amdgpu: update golden regs for gfx12
    - drm/amdgpu/mes12: set enable_level_process_quantum_check
    - drm/amdgpu/vcn: enable AV1 on both instances
    - drm/amd/pm: update workload mask after the setting
    - drm/amdgpu: fix PTE copy corruption for sdma 7
    - drm/amdgpu: bump driver version for cleared VRAM
    - drm/amdgpu/mes12: switch SET_SHADER_DEBUGGER pkt to mes schq pipe
    - drm/amdgpu: Fix selfring initialization sequence on soc24
    - drm/amd/display: Add HDMI DSC native YCbCr422 support
    - drm/amd/display: Round calculated vtotal
    - drm/amd/display: Clean up dsc blocks in accelerated mode
    - drm/amd/display: Block timing sync for different output formats in pmo
    - drm/amd/display: Validate backlight caps are sane
    - drm/amd/display: Disable SYMCLK32_LE root clock gating
    - drm/amd/display: Block dynamic IPS2 on DCN35 for incompatible FW versions
    - drm/amd/display: Enable DML2 override_det_buffer_size_kbytes
    - drm/amd/display: Skip to enable dsc if it has been off
    - drm/amd/display: Fix underflow when setting underscan on DCN401
    - drm/amd/display: Update IPS default mode for DCN35/DCN351
    - objtool: Handle frame pointer related instructions
    - powerpc/atomic: Use YZ constraints for DS-form instructions
    - ksmbd: make __dir_empty() compatible with POSIX
    - ksmbd: allow write with FILE_APPEND_DATA
    - ksmbd: handle caseless file creation
    - ata: libata-scsi: Fix ata_msense_control() CDL page reporting
    - scsi: ufs: qcom: Update MODE_MAX cfg_bw value
    - scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs
    - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
    - scsi: mac_scsi: Refactor polling loop
    - scsi: mac_scsi: Disallow bus errors during PDMA send
    - can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
    - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
    - usbnet: fix cyclical race on disconnect with work queue
    - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
    - arm64: dts: mediatek: mt8395-nio-12l: Mark USB 3.0 on xhci1 as disabled
    - USB: appledisplay: close race between probe and completion handler
    - USB: misc: cypress_cy7c63: check for short transfer
    - USB: class: CDC-ACM: fix race between get_serial and set_serial
    - USB: misc: yurex: fix race between read and write
    - usb: xhci: fix loss of data on Cadence xHC
    - usb: cdnsp: Fix incorrect usb_request status
    - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
    - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
    - usb: dwc2: drd: fix clock gating on USB role switch
    - bus: integrator-lm: fix OF node leak in probe()
    - bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems
    - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
    - tty: rp2: Fix reset with non forgiving PCIe host bridges
    - pps: add an error check in parport_attach
    - serial: don't use uninitialized value in uart_poll_init()
    - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
    - serial: qcom-geni: fix fifo polling timeout
    - serial: qcom-geni: fix false console tx restart
    - crypto: qcom-rng - fix support for ACPI-based systems
    - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
    - drbd: Fix atomicity violation in drbd_uuid_set_bm()
    - drbd: Add NULL check for net_conf to prevent dereference in state validation
    - ACPI: resource: Do IRQ override on MECHREV GM7XG0M
    - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    - intel_idle: add Granite Rapids Xeon support
    - intel_idle: fix ACPI _CST matching for newer Xeon platforms
    - x86/entry: Remove unwanted instrumentation in common_interrupt()
    - perf/x86/intel: Allow to setup LBR for counting event for BPF
    - perf/x86/intel/pt: Fix sampling synchronization
    - btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
    - wifi: mt76: mt7921: Check devm_kasprintf() returned value
    - wifi: mt76: mt7915: check devm_kasprintf() returned value
    - idpf: fix netdev Tx queue stop/wake
    - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
    - wifi: rtw88: 8822c: Fix reported RX band width
    - wifi: rtw88: 8703b: Fix reported RX band width
    - wifi: mt76: mt7615: check devm_kasprintf() returned value
    - wifi: mt76: mt7925: fix a potential association failure upon resuming
    - debugfs show actual source in /proc/mounts
    - debugobjects: Fix conditions in fill_pool()
    - btrfs: tree-checker: fix the wrong output of data backref objectid
    - btrfs: always update fstrim_range on failure in FITRIM ioctl
    - f2fs: fix several potential integer overflows in file offsets
    - f2fs: prevent possible int overflow in dir_block_index()
    - f2fs: avoid potential int overflow in sanity_check_area_boundary()
    - hwrng: mtk - Use devm_pm_runtime_enable
    - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
    - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
    - arm64: esr: Define ESR_ELx_EC_* constants as UL
    - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
    - arm64: dts: mediatek: mt8186-corsola: Disable DPI display interface
    - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
    - arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
    - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
    - fs: Fix file_set_fowner LSM hook inconsistencies
    - nfs: fix memory leak in error path of nfs4_do_reclaim
    - EDAC/igen6: Fix conversion of system address to physical memory address
    - eventpoll: Annotate data-race of busy_poll_usecs
    - md: Don't flush sync_work in md_write_start()
    - cpuidle: riscv-sbi: Use scoped device node handling to fix missing
      of_node_put
    - lsm: add the inode_free_security_rcu() LSM implementation hook
    - spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
    - dt-bindings: spi: nxp-fspi: add imx8ulp support
    - ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
    - ARM: dts: imx6ull-seeed-npi: fix fsl,pins property in tscgrp pinctrl
    - tools/nolibc: include arch.h from string.h
    - soc: versatile: realview: fix memory leak during device remove
    - soc: versatile: realview: fix soc_dev leak during device remove
    - usb: typec: ucsi: Call CANCEL from single location
    - usb: typec: ucsi: Fix busy loop on ASUS VivoBooks
    - soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
    - serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
    - serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
    - serial: qcom-geni: fix console corruption
    - thermal: core: Store trip sysfs attributes in thermal_trip_desc
    - thermal: sysfs: Get to trips via attribute pointers
    - thermal: sysfs: Refine the handling of trip hysteresis changes
    - thermal: sysfs: Add sanity checks for trip temperature and hysteresis
    - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
    - compiler.h: specify correct attribute for .rodata..c_jump_table
    - lockdep: fix deadlock issue between lockdep and rcu
    - mm/hugetlb_vmemmap: batch HVO work when demoting
    - s390/ftrace: Avoid calling unwinder in ftrace_return_address()
    - selftest mm/mseal: fix test_seal_mremap_move_dontunmap_anyaddr
    - mm: only enforce minimum stack gap size if it's sensible
    - spi: fspi: add support for imx8ulp
    - module: Fix KCOV-ignored file name
    - fbdev: xen-fbfront: Assign fb_info->device
    - tpm: export tpm2_sessions_init() to fix ibmvtpm building
    - mm/huge_memory: ensure huge_zero_folio won't have large_rmappable flag set
    - mm: change vmf_anon_prepare() to __vmf_anon_prepare()
    - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu
      read lock
    - i2c: aspeed: Update the stop sw state when the bus recovery occurs
    - i2c: isch: Add missed 'else'
    - i2c: xiic: Try re-initialization on bus busy timeout
    - Documentation: KVM: fix warning in "make htmldocs"
    - spi: atmel-quadspi: Fix wrong register value written to MR
    - Revert: "dm-verity: restart or panic on an I/O error"
    - Linux 6.11.2
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47675
    - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47676
    - mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47677
    - exfat: resolve memory leak from exfat_create_upcase_table()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47725
    - dm-verity: restart or panic on an I/O error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47739
    - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47678
    - icmp: change the order of rate limits
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47733
    - netfs: Delete subtree of 'fs/netfs' when netfs module exits
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47679
    - vfs: fix race between evice_inodes() and find_inode()&iput()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49859
    - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47680
    - f2fs: check discard support for conventional zones
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47740
    - f2fs: Require FMODE_WRITE for atomic write ioctls
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47726
    - f2fs: fix to wait dio completion
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47741
    - btrfs: fix race setting file private on concurrent lseek using same fd
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47681
    - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49858
    - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49860
    - ACPI: sysfs: validate return type of _STR method
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47742
    - firmware_loader: Block path traversal
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47682
    - scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47743
    - KEYS: prevent NULL pointer dereference in find_asymmetric_key()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47727
    - x86/tdx: Fix "in-kernel MMIO" check
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47744
    - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47719
    - iommufd: Protect against overflow of ALIGN() during iova allocation
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47745
    - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47746
    - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47734
    - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47684
    - tcp: check skb is non-NULL in tcp_rto_delta_us()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47747
    - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
      Condition
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47685
    - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47686
    - ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47748
    - vhost_vdpa: assign irq bypass producer token correctly
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47687
    - vdpa/mlx5: Fix invalid mr resource destroy
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47688
    - driver core: Fix a potential null-ptr-deref in module_add_driver()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47689
    - f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47690
    - f2fs: get rid of online repaire on corrupted directory
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47691
    - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47692
    - nfsd: return -EINVAL when namelen is 0
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47737
    - nfsd: call cache_put if xdr_reserve_space returns NULL
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2023-52917
    - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47749
    - RDMA/cxgb4: Added NULL check for lookup_atid
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47735
    - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47750
    - RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47751
    - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47693
    - IB/core: Fix ib_cache_setup_one error flow cleanup
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47694
    - IB/mlx5: Fix UMR pd cleanup on error flow of driver init
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47695
    - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47752
    - media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47753
    - media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47754
    - media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47696
    - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47755
    - nvdimm: Fix devs leaks in scan_labels()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47756
    - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47697
    - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47698
    - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47728
    - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49861
    - bpf: Fix helper writes to read-only maps
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47757
    - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47699
    - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47700
    - ext4: check stripe size compatibility on remount as well
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47701
    - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49850
    - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47702
    - bpf: Fail verification for sign-extension of packet data/data_end/data_meta
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47703
    - bpf, lsm: Add check for BPF LSM return value
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49851
    - tpm: Clean up TPM space after command failure
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47723
    - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49852
    - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47720
    - drm/amd/display: Add null check for set_output_gamma in
      dcn30_set_output_transfer_func
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47704
    - drm/amd/display: Check link_res->hpo_dp_link_enc before using it
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49853
    - firmware: arm_scmi: Fix double free in OPTEE transport
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47705
    - block: fix potential invalid pointer dereference in blk_add_partition
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47736
    - erofs: handle overlapped pclusters out of crafted images properly
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47706
    - block, bfq: fix possible UAF for bfqq->bic with merge chain
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49855
    - nbd: fix race between timeout and normal completion
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47707
    - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47708
    - netkit: Assign missing bpf_net_context
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47709
    - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47710
    - sock_map: Add a cond_resched() in sock_hash_free()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47711
    - af_unix: Don't return OOB skb in manage_oob().
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47712
    - wifi: wilc1000: fix potential RCU dereference issue in
      wilc_parse_join_bss_param
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47713
    - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47730
    - crypto: hisilicon/qm - inject error before stopping queue
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49856
    - x86/sgx: Fix deadlock in SGX NUMA node search
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47714
    - wifi: mt76: mt7996: use hweight16 to get correct tx antenna
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47715
    - wifi: mt76: mt7915: fix oops on non-dbdc mt7986
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49857
    - wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47738
    - wifi: mac80211: don't use rate mask for offchannel TX either
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47731
    - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49862
    - powercap: intel_rapl: Fix off by one in get_rpi()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47716
    - ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47717
    - RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47721
    - wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to
      prevent out-of-bounds reading
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47732
    - crypto: iaa - Fix potential use after free bug
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47718
    - wifi: rtw88: always wait for both firmware loading attempts
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47724
    - wifi: ath11k: use work queue to process beacon tx event
  * Oracular update: v6.11.1 upstream stable release (LP: #2089020)
    - powercap/intel_rapl: Add support for AMD family 1Ah
    - powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs
    - cpufreq/amd-pstate: Add the missing cpufreq_cpu_put()
    - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in
      nft_socket_cgroup_subtree_level()
    - ASoC: amd: acp: add ZSC control register programming sequence
    - nvme-pci: qdepth 1 quirk
    - USB: serial: pl2303: add device id for Macrosilicon MS3020
    - powercap: intel_rapl: Change an error pointer to NULL
    - Linux 6.11.1
  * Oracular update: v6.11.1 upstream stable release (LP: #2089020) //
    CVE-2024-47671
    - USB: usbtmc: prevent kernel-usb-infoleak
  * Oracular update: v6.11.1 upstream stable release (LP: #2089020) //
    CVE-2024-46869
    - Bluetooth: btintel_pcie: Allocate memory for driver private data
  * CVE-2024-53164
    - net: sched: fix ordering of qlen adjustment
  * CVE-2024-53103
    - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

-- Manuel Diewald <manuel.diewald@canonical.com>  Sat, 08 Feb 2025 14:30:04 +0100

Changed in linux-oem-6.11 (Ubuntu Noble):
status:	Fix Committed → Fix Released

Revision history for this message

Andreas Hasenack (ahasenack) wrote on 2025-03-06:

Hi @rickywu, in comment #5 you wrote:

> 1. Noble 6.8.0-53-generic with linux-firmware 20240318.git3b128b60-0ubuntu2.8. It worked fine without any
> problem.

That is not the correct version of linux-firmware from noble-proposed. noble-proposed has 20240318.git3b128b60-0ubuntu2.10, and noble-updates has 20240318.git3b128b60-0ubuntu2.9.

Please clarify. In the meantime, I'm changing the verification tag back to verification-needed-noble.

tags:

added: verification-needed-noble
removed: verification-done-noble

Revision history for this message

Launchpad Janitor (janitor) wrote on 2025-03-06:

This bug was fixed in the package linux-firmware - 20240913.gita34e7a5f-0ubuntu2.5

---------------
linux-firmware (20240913.gita34e7a5f-0ubuntu2.5) oracular; urgency=medium

-- Juerg Haefliger <email address hidden> Tue, 04 Feb 2025 10:05:12 +0100

Changed in linux-firmware (Ubuntu Oracular):
status:	Fix Committed → Fix Released

Revision history for this message

Juerg Haefliger (juergh) wrote on 2025-03-07 (last edit on 2025-03-07):

#10

@ahasenack This bug was initially fixed in Noble 20240318.git3b128b60-0ubuntu2.8 which @rickywu verified. We then reverted the fix in 2.9 for the point release and brought it back in 2.10. The 2.8 and 2.10 packages are identical except for the changelog. From my perspective his verification of 2.8 is still valid for 2.10 but it's there SRU team's call.

Revision history for this message

En-Wei Wu (rickywu) wrote on 2025-03-11:

#11

Hi @ahasenack and @juergh, I just tested Nobel 6.8.0-53-generic with linux-firwmare 20240318.git3b128b60-0ubuntu2.10 and it's verified without issue.

tags:

added: verification-done-noble
removed: verification-needed-noble

Revision history for this message

Launchpad Janitor (janitor) wrote on 2025-03-11:

#12

This bug was fixed in the package linux-firmware - 20240318.git3b128b60-0ubuntu2.10

---------------
linux-firmware (20240318.git3b128b60-0ubuntu2.10) noble; urgency=medium

  * [SRU] Introduce support for RTL8125BPH 2.5 GbE controller. (LP: #2092384)
    - rtl_nic: add firmware rtl8125bp-2
  * With OLED panel attached to amdgpu the glxgear fps is too low (LP: #2093400)
    - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
    - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
    - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
    - amdgpu: DMCUB updates for various AMDGPU ASICs
    - amdgpu: DMCUB updates forvarious AMDGPU ASICs
    - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
    - amdgpu: update DMCUB to v0.0.233.0 DCN351
    - amdgpu: DMCUB updates forvarious AMDGPU ASICs
    - amdgpu: DMCUB updates for various AMDGPU ASICs
    - amdgpu: update DMCUB to v9.0.10.0 for DCN351
    - amdgpu: update dmcub 0.0.246.0 firmware
  * MT7925 controller timeout during Suspend stress test (LP: #2095279)
    - linux-firmware: update firmware for MT7925 WiFi device
    - linux-firmware: update firmware for MT7925 WiFi device
  * Add missing audio firmware files for Realtek rtl1320 amplifier (LP: #2093304)
    - realtek: rt1320: Add patch firmware of MCU
  * No sound output from one of the speaker on HP ZBook[cs35l56] (LP: #2095334)
    - cirrus: cs35l56: Correct some links to address the correct amp instance

-- Juerg Haefliger <email address hidden> Thu, 06 Feb 2025 17:06:58 +0100

Changed in linux-firmware (Ubuntu Noble):
status:	Fix Committed → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-oem-6.11 package

MT7925 controller timeout during Suspend stress test

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-oem-6.11 package