The Linux Kernel.
Source Timestamp: 2026-08-04 00:40:11 +0000
GIT Revision: dbb0b26aba371c4a51fece78708201fface8bd43
GIT Branch: slowroll
Provides
Requires
License
GPL-2.0-only
Changelog
* Mon Aug 03 2026 rfrohl@suse.com
- Update config files for v6.18.42.
- commit 6ebc8f6
* Mon Aug 03 2026 rfrohl@suse.com
- audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1258210).
Refresh patches.suse/vfs-add-super_operations-get_inode_dev.
- commit e88f65f
* Mon Aug 03 2026 rfrohl@suse.com
- Linux 6.18.42 (bsc#1258210).
- KVM: SVM: Bump asid_generation on CPU online to avoid ASID
collision after hotplug (bsc#1258210).
- gpu: Fix uninitialized buddy for built-in drivers (bsc#1258210).
- net: stmmac: fix dwmac4 transmit performance regression
(bsc#1258210).
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM
query (bsc#1258210).
- usb: gadget: f_tcm: synchronize delayed set_alt with teardown
(bsc#1258210).
- rust: device: avoid trailing ; in printing macros (bsc#1258210).
- rust: allow `suspicious_runtime_symbol_definitions` lint for
Rust >= 1.98 (bsc#1258210).
- mm/damon/core: disallow overlapping input ranges for
damon_set_regions() (bsc#1258210).
- mm/damon/core: validate ranges in damon_set_regions()
(bsc#1258210).
- i3c: mipi-i3c-hci: Fix handling of shared IRQs during early
initialization (bsc#1258210).
- i3c: mipi-i3c-hci: Fix Hot-Join NACK (bsc#1258210).
- pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for
DSI/CSI (bsc#1258210).
- pmdomain: imx93-blk-ctrl: convert to devm_* only (bsc#1258210).
- net: ipa: fix SMEM state handle leaks in SMP2P init
(bsc#1258210).
- ata: libata-core: Reject an invalid concurrent positioning
ranges count (bsc#1258210).
- bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
(bsc#1258210).
- bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
(bsc#1258210).
- octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
(bsc#1258210).
- octeontx2-af: validate body pcifunc in
rvu_mbox_handler_rep_event_notify (bsc#1258210).
- net: mana: Optimize irq affinity for low vcpu configs
(bsc#1258210).
- net: mana: Validate the packet length reported by the NIC
(bsc#1258210).
- fs/resctrl: Fix use-after-free during unmount (bsc#1258210).
- fs/resctrl: Move RMID initialization to first mount
(bsc#1258210).
- fs/resctrl: Move allocation/free of closid_num_dirty_rmid[]
(bsc#1258210).
- x86,fs/resctrl: Rename some L3 specific functions (bsc#1258210).
- x86,fs/resctrl: Rename struct rdt_mon_domain and
rdt_hw_mon_domain (bsc#1258210).
- fs/resctrl: Split L3 dependent parts out of __mon_event_count()
(bsc#1258210).
- mmc: vub300: fix use-after-free on probe failure (bsc#1258210).
- mmc: vub300: rename probe error labels (bsc#1258210).
- dm: avoid leaking the caller's thread keyring via the table
device file (bsc#1258210).
- cred: add kernel_cred() helper (bsc#1258210).
- accel/amdxdna: reject command submission on devices without
a submit op (bsc#1258210).
- ovl: use linked upper dentry in copy-up tmpfile (bsc#1258210).
- dmaengine: dw-edma-pcie: Reject devices without driver data
(bsc#1258210).
- dmaengine: dw-edma: Fix confusing cleanup.h syntax (bsc#1258210).
- mtd: maps: vmu-flash: fix fault in unaligned fixup (bsc#1258210).
- kho: make sure scratch size is always aligned by
CMA_MIN_ALIGNMENT_BYTES (bsc#1258210).
- mm/sparse-vmemmap: fix vmemmap accounting underflow
(bsc#1258210).
- remoteproc: xlnx: Check remote core state (bsc#1258210).
- cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size
(bsc#1258210).
- cxl/pci: Remove CXL VH handling in CONFIG_PCIEAER_CXL conditional
blocks from core/pci.c (bsc#1258210).
- cxl/pci: Remove unnecessary CXL RCH handling helper functions
(bsc#1258210).
- cxl/pci: Remove unnecessary CXL Endpoint handling helper
functions (bsc#1258210).
- SUNRPC: Return an error from xdr_buf_to_bvec() on overflow
(bsc#1258210).
- SUNRPC: Add helpers to convert xdr_buf byte ranges to
scatterlists (bsc#1258210).
- sunrpc: allocate a separate bvec array for socket sends
(bsc#1258210).
- NFSD: pass nfsd_file to nfsd_iter_read() (bsc#1258210).
- pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP
(bsc#1258210).
- gpu/buddy: bail out of try_harder when alignment cannot be
honoured (bsc#1258210).
- drm: drop lib from header search path (bsc#1258210).
- gpu: Move DRM buddy allocator one level up (part two)
(bsc#1258210).
- netfilter: nf_conntrack_sip: validate skb_dst() before accessing
it (bsc#1258210).
- netfilter: nf_conntrack_sip: remove net variable shadowing
(bsc#1258210).
- netfilter: nft_fib: reject fib expression on the netdev egress
hook (bsc#1258210).
- netfilter: nf_tables: remove register tracking infrastructure
(bsc#1258210).
- arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort
controllers (bsc#1258210).
- arm64: dts: qcom: correct RBR opp entry (bsc#1258210).
- VDUSE: avoid leaking information to userspace (bsc#1258210).
- vduse: take out allocations from vduse_dev_alloc_coherent
(bsc#1258210).
- vduse: remove unused vaddr parameter of
vduse_domain_free_coherent (bsc#1258210).
- vduse: return internal vq group struct as map token
(bsc#1258210).
- xfs: don't replace the wrong part of the cow fork (bsc#1258210).
- fuse-uring: fix race between registration and connection abortion
(bsc#1258210).
- audit: use 'unsigned int' instead of 'unsigned' (bsc#1258210).
- audit: widen ino fields to u64 (bsc#1258210).
- landlock: Account all audit data allocations to user space
(bsc#1258210).
- landlock: Fix formatting (bsc#1258210).
- drm/amd/display: Fix DTB DTO updates breaking live pixel rate
sources (bsc#1258210).
- fscrypt: Avoid dynamic allocation in fscrypt_get_devices()
(bsc#1258210).
- ksmbd: validate ACE size against SID sub-authorities
(bsc#1258210).
- ksmbd: bound DACL dedup walk to copied ACEs (bsc#1258210).
- ksmbd: restore DACL size on check_add_overflow() to avoid
malformed ACL (bsc#1258210).
- ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
(bsc#1258210).
- net: qrtr: ns: Raise node count limit to 512 (bsc#1258210).
- ublk: wait on ublk_dev_ready() instead of ub->completion
(bsc#1258210).
- drm/xe/uapi: Reject coh_none PAT index for CPU_ADDR_MIRROR
(bsc#1258210).
- dm-verity: fix buffer overflow in FEC calculation (bsc#1258210).
- dm-verity-fec: replace {MAX,MIN}_RSN with {MIN,MAX}_ROOTS
(bsc#1258210).
- dm-verity-fec: fix reading parity bytes split across blocks
(take 3) (bsc#1258210).
- dm-verity-fec: fix the size of dm_verity_fec_io::erasures
(bsc#1258210).
- bpf: Fix same-register dst/src OOB read and pointer leak in
sock_ops (bsc#1258210).
- drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx (bsc#1258210).
- drm/amd/pm: fix smu13 power limit range calculation
(bsc#1258210).
- drm/amdgpu: fix aperture mapping leak (bsc#1258210).
- drm/amdgpu: invoke pm_genpd_remove() before freeing genpd
(bsc#1258210).
- drm/amdgpu: fix resource leak on ACP reset timeout (bsc#1258210).
- drm/amdgpu: fix division by zero with invalid uvd dimensions
(bsc#1258210).
- drm/dp_mst: Handle torn-down topology gracefully in
drm_dp_mst_topology_queue_probe() (bsc#1258210).
- drm/amdgpu/vcn4: avoid rereading IB param length (bsc#1258210).
- drm/amdgpu/vce: fix integer overflow in image size (bsc#1258210).
- drm/amdgpu/soc24: reset dGPU if suspend got aborted
(bsc#1258210).
- drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()
(bsc#1258210).
- drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection (bsc#1258210).
- drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection (bsc#1258210).
- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() (bsc#1258210).
- drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()
(bsc#1258210).
- drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1258210).
- drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() (bsc#1258210).
- drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() (bsc#1258210).
- drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() (bsc#1258210).
- drm/amd/pm: make pp_features read-only when scpm is enabled
(bsc#1258210).
- drm/amd/pm: fix amdgpu_pm_info power display units (bsc#1258210).
- watchdog: s32g_wdt: remove incorrect options in watchdog_info
struct (bsc#1258210).
- vxlan: mdb: Fix source list corruption on a failed replace
(bsc#1258210).
- vsock/virtio: collapse receive queue under memory pressure
(bsc#1258210).
- tipc: clear sock->sk on the failed-insert path in
tipc_sk_create() (bsc#1258210).
- tcp: challenge ACK for non-exact RST in SYN-RECEIVED
(bsc#1258210).
- tcp: initialize standalone TCP-AO response padding (bsc#1258210).
- rtase: Workaround for TX hang caused by hardware packet parsing
(bsc#1258210).
- pppoe: reload header pointer after dev_hard_header()
(bsc#1258210).
- ovpn: hold peer before scheduling keepalive work (bsc#1258210).
- ovpn: fix peer refcount leak in TCP error paths (bsc#1258210).
- openvswitch: fix GSO userspace truncation underflow
(bsc#1258210).
- mctp: serial: handle zero-length frames to prevent rx buffer
overflow (bsc#1258210).
- mac802154: llsec: reject frames shorter than the authentication
tag (bsc#1258210).
- mac802154: hold an interface reference across the scan worker
(bsc#1258210).
- ila: reload IPv6 header after pskb_may_pull in checksum adjust
(bsc#1258210).
- ice: use READ_ONCE() to access cached PHC time (bsc#1258210).
- ice: reject out-of-range ptype in ice_parser_profile_init
(bsc#1258210).
- gve: fix Rx queue stall on alloc failure (bsc#1258210).
- ksmbd: defer destroy_previous_session() until after NTLM
authentication (bsc#1258210).
- smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without
a symlink target (bsc#1258210).
- rbd: Reset positive result codes to zero in object map update
path (bsc#1258210).
- super: fix emergency thaw deadlock on frozen block devices
(bsc#1258210).
- ice: fix PTP Call Trace during PTP release (bsc#1258210).
- ptp: ptp_s390: Add missing facility check (bsc#1258210).
- s390/ptff: Export ptff_function_mask[] (bsc#1258210).
- proc: Fix broken error paths for namespace links (bsc#1258210).
- net: pcs: xpcs: fix SGMII state reading (bsc#1258210).
- net: hip04: fix RX buffer leak on build_skb failure
(bsc#1258210).
- net: gro: fix double aggregation of flush-marked skbs
(bsc#1258210).
- net/x25: fix use-after-free in x25_kill_by_neigh() (bsc#1258210).
- net/mlx5e: Use sender devcom for MPV master-up (bsc#1258210).
- net/iucv: fix use-after-free of a severed iucv_path
(bsc#1258210).
- net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()
(bsc#1258210).
- geneve: require CAP_NET_ADMIN in the device netns for changelink
(bsc#1258210).
- net: slip: serialize receive against buffer reallocation
(bsc#1258210).
- vxlan: require CAP_NET_ADMIN in the device netns for changelink
(bsc#1258210).
- phonet: pep: fix use-after-free in pep_get_sb() (bsc#1258210).
- net: stmmac: intel: skip SerDes reconfig when rate is unchanged
(bsc#1258210).
- iommu/vt-d: Disallow SVA if page walk is not coherent
(bsc#1258210).
- iomap: fix out-of-bounds bitmap_set() with zero-length range
(bsc#1258210).
- io_uring/rw: fix missing ERESTARTSYS conversion in read paths
(bsc#1258210).
- ftrace: Add global mutex to serialize trace_parser access
(bsc#1258210).
- fscrypt: Add missing superblock check in
find_or_insert_direct_key() (bsc#1258210).
- fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
(bsc#1258210).
- fs/super: fix emergency thaw double-unlock of s_umount
(bsc#1258210).
- binfmt_elf_fdpic: only honour the first PT_INTERP (bsc#1258210).
- ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
(bsc#1258210).
- ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in
shutdown (bsc#1258210).
- amt: fix use-after-free in AMT delayed works (bsc#1258210).
- libceph: remove debugfs files before client teardown
(bsc#1258210).
- libceph: reject zero bucket types in crush_decode (bsc#1258210).
- libceph: Reject monmaps advertising zero monitors (bsc#1258210).
- libceph: refresh auth->authorizer_buf{,_len} after authorizer
update (bsc#1258210).
- libceph: guard missing CRUSH type name lookup (bsc#1258210).
- libceph: Fix multiplication overflow in
decode_new_up_state_weight() (bsc#1258210).
- libceph: bound get_version reply decode to front len
(bsc#1258210).
- ceph: fix writeback_count leak in write_folio_nounlock()
(bsc#1258210).
- ceph: fix refcount leak in ceph_readdir() (bsc#1258210).
- ceph: fix pre-auth out-of-bounds read on snaptrace in
ceph_handle_caps() (bsc#1258210).
- sctp: close UDP tunnel sockets during netns teardown
(bsc#1258210).
- sctp: avoid auth_enable sysctl UAF during netns teardown
(bsc#1258210).
- sctp: don't free the ASCONF's own transport in DEL-IP processing
(bsc#1258210).
- mm/huge_memory: set PG_has_hwpoisoned only after new folio
head is established (bsc#1258210).
- mm/kmemleak: fix checksum computation for per-cpu objects
(bsc#1258210).
- afs: Fix afs_edit_dir_remove() to get, not find, block 0
(bsc#1258210).
- mptcp: pm: userspace: fix use-after-free in get_local_id
(bsc#1258210).
- mptcp: only set DATA_FIN when a mapping is present (bsc#1258210).
- mptcp: decrement subflows counter on failed passive join
(bsc#1258210).
- Revert "arm64: syscall: Ensure saved x0 is kept in-sync with
tracer updates" (bsc#1258210).
- arm64: syscall: Ensure saved x0 is kept in-sync with tracer
updates (bsc#1258210).
- arm64: make huge_ptep_get handled unaligned addresses
(bsc#1258210).
- tracing/probes: Prevent out-of-bounds write in
__trace_probe_log_err() (bsc#1258210).
- tracing/probes: Fix potential underflow in LEN_OR_ZERO macro
(bsc#1258210).
- tracing/probes: Avoid temporary buffer truncation in
trace_probe_match_command_args() (bsc#1258210).
- tracing/eprobe: Fix exact system name matching in
eprobe_dyn_event_match() (bsc#1258210).
- tracing: Fix union collision of module and refcnt for dynamic
events (bsc#1258210).
- tracing: Fix resource leak on mmiotrace trace_pipe close
(bsc#1258210).
- tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev
(bsc#1258210).
- tracing: Fix context switch counter truncation (bsc#1258210).
- misc: nsm: pin the module while the device is open (bsc#1258210).
- misc: nsm: only unlock nsm_dev on post-lock error paths
(bsc#1258210).
- intel_th: fix MSC output device reference leak (bsc#1258210).
- mei: bus: access mei_device under device_lock on cleanup
(bsc#1258210).
- selftests: ntsync: correct CONFIG_NTSYNC name (bsc#1258210).
- serial: 8250_mid: Fix NULL function pointer dereference on
DNV/ICX-D/SNR platforms (bsc#1258210).
- serial: sc16is7xx: implement gpio get_direction() callback
(bsc#1258210).
- uio_hv_generic: Bind to FCopy device by default (bsc#1258210).
- comedi: comedi_parport: deal with premature interrupt
(bsc#1258210).
- x86/boot/compressed: Disable jump tables (bsc#1258210).
- firmware: stratix10-svc: fix memory leaks and list corruption
bugs (bsc#1258210).
- rhashtable: clear stale iter->p on table restart (bsc#1258210).
- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL
(bsc#1258210).
- LoongArch: Retrieve CPU package ID from PPTT when available
(bsc#1258210).
- LoongArch: Move jump_label_init() before parse_early_param()
(bsc#1258210).
- LoongArch: Fix oops during single-step debugging (bsc#1258210).
- LoongArch: Fix address space mismatch in kexec command line
lookup (bsc#1258210).
- objtool/rust: add one more `noreturn` Rust function for Rust
1.99.0 (bsc#1258210).
- rust: allow `clippy::unwrap_or_default` globally (bsc#1258210).
- rust: time: fix as_micros_ceil() to round correctly for negative
Delta (bsc#1258210).
- rust_binder: only print failure if error has source
(bsc#1258210).
- platform/loongarch: laptop: Explicitly reset bl_powered state
when suspend (bsc#1258210).
- binfmt_misc: set have_execfd only once the interpreter is opened
(bsc#1258210).
- exec: fix unsigned loop counter wrap in transfer_args_to_stack()
(bsc#1258210).
- Bluetooth: RFCOMM: Fix session UAF in set_termios (bsc#1258210).
- Bluetooth: hci_sync: Protect UUID list traversal (bsc#1258210).
- staging: rtl8723bs: fix inverted HT40 secondary channel offset
(bsc#1258210).
- staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()
(bsc#1258210).
- wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init()
(bsc#1258210).
- wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
(bsc#1258210).
- wifi: brcmfmac: make release_scratchbuffers idempotent
(bsc#1258210).
- wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
(bsc#1258210).
- wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses
(bsc#1258210).
- wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses
(bsc#1258210).
- wifi: wilc1000: validate assoc response length before subtracting
header (bsc#1258210).
- wifi: mwifiex: fix NULL dereference when the AP has HT-cap
but no HT-oper (bsc#1258210).
- wifi: ath6kl: fix use-after-free in aggr_reset_state()
(bsc#1258210).
- wifi: ath6kl: fix OOB access from firmware ADDBA window size
(bsc#1258210).
- ALSA: timer: don't re-enter an instance callback that is still
running (bsc#1258210).
- ALSA: timer: drain a slave's callback before its master detaches
it (bsc#1258210).
- ALSA: hda: codecs: hdmi: disable keep-alive before audio format
change (bsc#1258210).
- ALSA: seq: close a re-opened queue timer in the destructor
(bsc#1258210).
- ALSA: hda/realtek: Fix speakers on Lunnen Ground 14
(bsc#1258210).
- media: vpif_capture: fix OF node reference imbalance
(bsc#1258210).
- media: vivid: fix cleanup bugs in vivid_init() (bsc#1258210).
- media: vivid: check for vb2_is_busy() when toggling caps
(bsc#1258210).
- media: vivid: add vivid_update_reduced_fps() (bsc#1258210).
- media: vimc: fix reference leak on failed device registration
(bsc#1258210).
- media: vidtv: fix reference leak on failed device registration
(bsc#1258210).
- media: verisilicon: Export only needed pixels formats
(bsc#1258210).
- media: vb2: use ssize_t for vb2_read/vb2_write (bsc#1258210).
- media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming
nicely (bsc#1258210).
- media: v4l2-fwnode: Fix subdev owner overwritten in
v4l2_async_register_subdev_sensor() (bsc#1258210).
- media: v4l2-ctrls: validate HEVC active reference counts
(bsc#1258210).
- media: v4l2-ctrls-request: add NULL check in
v4l2_ctrl_request_complete() (bsc#1258210).
- media: ti: vpe: unwind v4l2 device registration on probe error
(bsc#1258210).
- media: tegra-video: vi: fix invalid u32 return value in format
lookup (bsc#1258210).
- media: synopsys: hdmirx: Fix HPD lane hold time (bsc#1258210).
- media: sun4i-csi: Return queued buffers on start_streaming()
failure (bsc#1258210).
- media: stm32: dcmi: unregister notifier on probe failure
(bsc#1258210).
- media: stm32-dcmipp: Return queued buffers on start_streaming()
failure (bsc#1258210).
- media: saa7134: Fix a possible memory leak in saa7134_video_init1
(bsc#1258210).
- media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is used
(bsc#1258210).
- media: rtl2832_sdr: Return queued buffers on start_streaming()
failure (bsc#1258210).
- media: rtl2832: fix use-after-free in rtl2832_remove()
(bsc#1258210).
- media: radio-si476x: Unregister v4l2_device on probe failure
(bsc#1258210).
- media: qcom: camss: Fix RDI streaming for CSID GEN3
(bsc#1258210).
- media: qcom: camss: Fix RDI streaming for CSID GEN2
(bsc#1258210).
- media: qcom: camss: Fix RDI streaming for CSID 680 (bsc#1258210).
- media: pwc: Return queued buffers on start_streaming() failure
(bsc#1258210).
- media: pwc: Drain fill_buf on start_streaming() failure
(bsc#1258210).
- media: pci: dm1105: Free allocated workqueue (bsc#1258210).
- media: nxp: imx8-isi: Fix scale factor calculation for hardware
rounding (bsc#1258210).
- media: nxp: imx8-isi: Fix potential out-of-bounds issues
(bsc#1258210).
- media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in
pipe init error path (bsc#1258210).
- media: nxp: imx8-isi: Clean up already-initialized pipes on
probe failure (bsc#1258210).
- media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in
crossbar and pipe (bsc#1258210).
- media: nuvoton: npcm-video: fix memory leaks in probe and remove
(bsc#1258210).
- media: nuvoton: npcm-video: fix error handling in
npcm_video_init() (bsc#1258210).
- media: msi2500: Return queued buffers on start_streaming()
failure (bsc#1258210).
- media: meson: vdec: Fix memory leak in error path of vdec_open
(bsc#1258210).
- media: marvell-cam: fix missing pci_disable_device() on remove
(bsc#1258210).
- media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQ
(bsc#1258210).
- media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection
for overlapping ranges (bsc#1258210).
- media: imx219: Fix maximum frame length in lines (bsc#1258210).
- media: i2c: alvium: fix critical pointer access in
alvium_ctrl_init (bsc#1258210).
- media: cx23885: add ioremap return check and cleanup
(bsc#1258210).
- media: cx231xx: fix devres lifetime (bsc#1258210).
- media: chips-media: wave5: Move src_buf Removal to finish_encode
(bsc#1258210).
- media: cedrus: skip invalid H.264 reference list entries
(bsc#1258210).
- media: cedrus: Fix missing cleanup in error path (bsc#1258210).
- media: cedrus: clean up media device on probe failure
(bsc#1258210).
- media: cec: seco: unregister adapter on IR probe failure
(bsc#1258210).
- media: aspeed: fix missing of_reserved_mem_device_release()
on probe failure (bsc#1258210).
- media: amlogic-c3: Add validations for ae and awb config
(bsc#1258210).
- media: airspy: Return queued buffers on start_streaming()
failure (bsc#1258210).
- drm/v3d: Reach the GMP through the hub registers on V3D 7.x
(bsc#1258210).
- drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict
(bsc#1258210).
- drm/vc4: Prevent shader BO mappings from becoming writable
(bsc#1258210).
- drm/vmwgfx: Validate vmw_surface_metadata::array_size
(bsc#1258210).
- drm/amd/display: Fix missing DCE check in
dm_gpureset_toggle_interrupts() (bsc#1258210).
- drm/vc4: Shut down BO cache timer before teardown (bsc#1258210).
- drm/amd/display: Fix flip-done timeouts on mode1 reset
(bsc#1258210).
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved
(bsc#1258210).
- drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen
Pinnacle Ridge (bsc#1258210).
- drm/amd/display: Fix backlight max_brightness to match exported
range (bsc#1258210).
- drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05
(bsc#1258210).
- drm/amd/display: dce100: skip non-DP stream encoders for DP MST
(bsc#1258210).
- drm/amd/display: consolidate DCN vblank/flip handling onto
vupdate_no_lock (bsc#1258210).
- drm/amd/display: set new_stream to NULL after release
(bsc#1258210).
- drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X)
(bsc#1258210).
- drm/amdgpu: Fix VFCT bus number matching with soft filter
(bsc#1258210).
- drm/amdgpu: Release VFCT ACPI table reference (bsc#1258210).
- drm/panthor: return error on truncated firmware (bsc#1258210).
- drm/ttm: Account for NULL and handle pages in ttm_pool_backup
(bsc#1258210).
- drm/virtio: Don't detach GEM from a non-created context
(bsc#1258210).
- drm/gfx10: Program DB_RING_CONTROL (bsc#1258210).
- drm/amd/pm: fix smu14 power limit range calculation
(bsc#1258210).
- drm/i915/mst: limit DP MST ESI service loop (bsc#1258210).
- drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU
(bsc#1258210).
- drm/i915/gem: Do not leak siblings[] on proto context error
(bsc#1258210).
- drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
(bsc#1258210).
- drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled
(bsc#1258210).
- drm/i915/bios: range check LFP Data Block panel_type2
(bsc#1258210).
- drm/i915: Return NULL on error in active_instance (bsc#1258210).
- drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()
(bsc#1258210).
- drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()
(bsc#1258210).
- drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()
(bsc#1258210).
- drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()
(bsc#1258210).
- drm/i915/hdcp: check streams[] bounds before overflow
(bsc#1258210).
- drm/i915/hdcp: require monotonically increasing seq_num_v
(bsc#1258210).
- drm/virtio: bound EDID block reads to the response buffer
(bsc#1258210).
- drm/amd/display: detect_link_and_local_sink: DP alt mode
timeout path leaks prev_sink reference (bsc#1258210).
- drm/amd/display: Handle struct
drm_plane_state.ignore_damage_clips (bsc#1258210).
- drm/amdkfd: fix 32-bit overflow in CWSR total size calculation
(bsc#1258210).
- drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
(bsc#1258210).
- drm/amdkfd: Check bounds in allocate_event_notification_slot
(bsc#1258210).
- drm/amdkfd: Use kvcalloc to allocate arrays (bsc#1258210).
- drm/imagination: acquire vm_ctx->lock before mapping memory
to GPU VM (bsc#1258210).
- drm/imagination: fix error checking of pvr_vm_context_lookup()
(bsc#1258210).
- drm/imagination: Fix user array stride in pvr_set_uobj_array()
(bsc#1258210).
- drm/imagination: Fix double call to drm_sched_entity_fini()
(bsc#1258210).
- drm/xe: Hold a dma-buf reference for imported BOs (bsc#1258210).
- drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked
binds (bsc#1258210).
- drm/xe: Return error on non-migratable faults requiring devmem
(bsc#1258210).
- drm/radeon: fix r100_copy_blit for large BOs (bsc#1258210).
- drm/nouveau/acr: fix missing nvkm_done() in error path of
nvkm_acr_oneinit() (bsc#1258210).
- drm/i915/gem: Add missing nospec on parallel submit slot
(bsc#1258210).
- drm/displayid: fix Tiled Display Topology ID size (bsc#1258210).
- drm/sysfb: Return errno code from drm_sysfb_get_visible_size()
(bsc#1258210).
- drm/sysfb: Avoid possible truncation with calculating visible
size (bsc#1258210).
- drm/nouveau: fix reversed error cleanup order in ucopy functions
(bsc#1258210).
- drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1
(bsc#1258210).
- drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are
both GTT (bsc#1258210).
- drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2
(bsc#1258210).
- drm/sysfb: Avoid truncating maximum stride (bsc#1258210).
- drm/sysfb: Do not page-align visible size of the framebuffer
(bsc#1258210).
- drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO
(bsc#1258210).
- drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older
(bsc#1258210).
- drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when
it isn't at 0 (v2) (bsc#1258210).
- drm/amdgpu/gfx: fix cleaner shader IB buffer overflow
(bsc#1258210).
- drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply
parsers (bsc#1258210).
- drm/imagination: Fit paired fragment job in the correct CCCB
(bsc#1258210).
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation
(bsc#1258210).
- drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply
parsers (bsc#1258210).
- drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
(bsc#1258210).
- drm/imagination: Count paired job fence as dependency in
prepare_job() (bsc#1258210).
- drm/rockchip: analogix_dp: Add missing error check for
platform_get_resource() (bsc#1258210).
- drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video()
(bsc#1258210).
- drm/tidss: Fix missing drm_bridge_add() call (bsc#1258210).
- drm: renesas: rzg2l_mipi_dsi: Move
rzg2l_mipi_dsi_set_display_timing() (bsc#1258210).
- drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay
(bsc#1258210).
- bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
(bsc#1258210).
- net: airoha: fix ETS channel derivation in
airoha_tc_setup_qdisc_ets() (bsc#1258210).
- mctp: check register_netdevice_notifier() error in
mctp_device_init() (bsc#1258210).
- ptp: netc: explicitly clear TMR_OFF during initialization
(bsc#1258210).
- rds: tcp: unregister sysctl before tearing down listen socket
(bsc#1258210).
- ipv6: Change allocation flags to match rcu_read_lock section
requirements (bsc#1258210).
- ice: prevent tstamp ring allocation for non-PF VSI types
(bsc#1258210).
- ice: fix LAG recipe to profile association (bsc#1258210).
- ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV (bsc#1258210).
- net: ipv6: fix dif and sdif mismatch in raw6_icmp_error
(bsc#1258210).
- octeontx2-pf: tc: fix egress ratelimiting (bsc#1258210).
- net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation
(bsc#1258210).
- net/mlx5e: Report zero bandwidth for non-ETS traffic classes
(bsc#1258210).
- net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan
rule (bsc#1258210).
- net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
(bsc#1258210).
- net/mlx5: Refactor EEPROM query error handling to return status
separately (bsc#1258210).
- raw: annotate lockless match fields in raw_v4_match()
(bsc#1258210).
- net: qrtr: restrict socket creation to the initial network
namespace (bsc#1258210).
- hinic: remove unused ethtool RSS user configuration buffers
(bsc#1258210).
- ppp: annotate data races in ppp_generic (bsc#1258210).
- ipv4: icmp: fill flow parameters in icmp_route_lookup decoy
lookup (bsc#1258210).
- octeontx2-vf: set TC flower flag on MCAM entry allocation
(bsc#1258210).
- net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM
(bsc#1258210).
- net: stmmac: enable the MAC on link up for all supported speeds
(bsc#1258210).
- net: stmmac: reset residual action in L3L4 filters on delete
(bsc#1258210).
- net: stmmac: fix l3l4 filter rejecting unsupported offload
requests (bsc#1258210).
- net: stmmac: xgmac: fix l4 filter port overwrite on register
update (bsc#1258210).
- net: stmmac: cores: remove many xxx_SHIFT definitions
(bsc#1258210).
- net: stmmac: socfpga: Add hardware supported cross-timestamp
(bsc#1258210).
- net: stmmac: socfpga: Enable TBS support for Agilex5
(bsc#1258210).
- net: stmmac: socfpga: Agilex5 EMAC platform configuration
(bsc#1258210).
- net: stmmac: remove xstats.pcs_* members (bsc#1258210).
- bpf: tcp: fix double sock release on batch realloc (bsc#1258210).
- drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem
(bsc#1258210).
- tipc: fix u16 MTU truncation in media and bearer MTU validation
(bsc#1258210).
- iomap: correct the range of a partial dirty clear (bsc#1258210).
- drm/xe/vm: Fix SVM leak on resv obj alloc failure in
xe_vm_create() (bsc#1258210).
- drm/xe/i2c: Allow per domain unique id (bsc#1258210).
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets
(bsc#1258210).
- sctp: auth: verify auth requirement when auth_chunk is NULL
(bsc#1258210).
- net: dpaa: fix mode setting (bsc#1258210).
- net: hsr: fix memory leak on slave unregistration by removing
synced VLANs (bsc#1258210).
- net: bridge: vlan: fix vlan range dumps starting with pvid
(bsc#1258210).
- amt: make the head writable before rewriting the L2 header
(bsc#1258210).
- amt: re-read skb header pointers after every pull (bsc#1258210).
- ovl: check access to copy_file_range source with src mounter
creds (bsc#1258210).
- ovl: port ovl_copyfile() to cred guard (bsc#1258210).
- ovl: add override_creds cleanup guard extension for overlayfs
(bsc#1258210).
- cred: add scoped_with_kernel_creds() (bsc#1258210).
- drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER
(bsc#1258210).
- ovl: fix trusted xattr escape prefix matching (bsc#1258210).
- wifi: brcmfmac: fix 802.1X-SHA256 call trace warning
(bsc#1258210).
- wifi: mt76: mt7996: fix possible NULL-pointer deref in
mt7996_mcu_sta_bfer_eht() (bsc#1258210).
- wifi: mt76: mt7925: fix crash in reset link replay (bsc#1258210).
- wifi: mt76: mt7996: check pointer returned by
mt76_connac_get_he_phy_cap() (bsc#1258210).
- wifi: mt76: mt7925: fix possible NULL-pointer deref in
mt7925_mcu_bss_he_tlv() (bsc#1258210).
- wifi: mt76: connac: fix possible NULL-pointer deref in
mt76_connac_mcu_uni_bss_he_tlv() (bsc#1258210).
- wifi: mt76: mt7915: guard HE capability lookups (bsc#1258210).
- wifi: mt76: mt7925: guard link STA in decap offload
(bsc#1258210).
- ppp: annotate concurrent dev->stats accesses (bsc#1258210).
- ppp: don't store tx skb in the fastpath (bsc#1258210).
- ppp: enable TX scatter-gather (bsc#1258210).
- tipc: fix infinite loop in __tipc_nl_compat_dumpit (bsc#1258210).
- nexthop: initialize extack in nh_res_bucket_migrate()
(bsc#1258210).
- gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
(bsc#1258210).
- selftests: drv-net: increase timeout (bsc#1258210).
- selftests: ovpn: increase timeout (bsc#1258210).
- selftests: ovpn: add IPV6 and VETH configs (bsc#1258210).
- selftests: openvswitch: add config file (bsc#1258210).
- selftests: af_unix: add USER_NS config (bsc#1258210).
- tls: device: push pending open record on splice EOF
(bsc#1258210).
- net: mctp i3c: clean up notifier and buses if driver register
fails (bsc#1258210).
- sctp: validate stream count in sctp_process_strreset_inreq()
(bsc#1258210).
- pds_core: check for workqueue allocation failure (bsc#1258210).
- pds_core: fix auxiliary device add/del races (bsc#1258210).
- pds_core: order completion reads after the ownership check
(bsc#1258210).
- pds_core: yield the CPU while waiting for the adminq to drain
(bsc#1258210).
- pds_core: fix use-after-free on workqueue during remove
(bsc#1258210).
- pds_core: fix deadlock between reset thread and remove
(bsc#1258210).
- sctp: fix auth_chunk_list capacity check in
sctp_auth_ep_add_chunkid (bsc#1258210).
- net: txgbe: fix FDIR filter leak on remove (bsc#1258210).
- net: Call net_enable_timestamp() before failure in sk_clone()
(bsc#1258210).
- soreuseport: Clear sk_reuseport_cb before failure in sk_clone()
(bsc#1258210).
- amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN (bsc#1258210).
- arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL()
(bsc#1258210).
- pds_core: reject component parameter in legacy firmware update
(bsc#1258210).
- wifi: mac80211: recalculate TIM when a station enters power save
(bsc#1258210).
- iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()
(bsc#1258210).
- iommu/amd: Bound the early ACPI HID map (bsc#1258210).
- wifi: mwifiex: bound uAP association event IEs to the event
buffer (bsc#1258210).
- vhost-net: fix TX stall when vhost owns virtio-net header
(bsc#1258210).
- wan: wanxl: Only reset hardware after BAR mapping (bsc#1258210).
- nfp: Check resource mutex allocation (bsc#1258210).
- wifi: mac80211: tear down new links on vif update error path
(bsc#1258210).
- iommu/amd: Wait for completion instead of returning early in
iommu_completion_wait() (bsc#1258210).
- net: airoha: Fix DMA direction for NPU mailbox buffer
(bsc#1258210).
- dpaa2-eth: put MAC endpoint device on disconnect (bsc#1258210).
- net: airoha: Fix potential use-after-free in airoha_ppe_deinit()
(bsc#1258210).
- dpaa2-switch: put MAC endpoint device on disconnect
(bsc#1258210).
- rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()
(bsc#1258210).
- gtp: parse extension headers before reading inner protocol
(bsc#1258210).
- rds: drop incoming messages that cross network namespace
boundaries (bsc#1258210).
- bonding: fix devconf_all NULL dereference when IPv6 is disabled
(bsc#1258210).
- net/packet: avoid fanout hook re-registration after unregister
(bsc#1258210).
- netlink: specs: rt-link: convert bridge port flag attributes
to u8 (bsc#1258210).
- net: phy: marvell: fix return code (bsc#1258210).
- Bluetooth: btusb: validate Realtek vendor event length
(bsc#1258210).
- regulator: mt6358: use regmap helper to read fixed LDO
calibration (bsc#1258210).
- hwmon: occ: validate poll response sensor blocks (bsc#1258210).
- ovpn: use monotonic clock for peer keepalive timeouts
(bsc#1258210).
- ovpn: fix use after free in unlock_ovpn() (bsc#1258210).
- selftests/net: ovpn: fix getaddrinfo memory leak in
ovpn_parse_remote() (bsc#1258210).
- ovpn: avoid putting unrelated P2P peer on socket release
(bsc#1258210).
- smb: client: validate DFS referral PathConsumed (bsc#1258210).
- hwmon: (asus-ec-sensors) add missed handle for ENOMEM
(bsc#1258210).
- hwmon: (asus-ec-sensors) fix EC read intervals (bsc#1258210).
- hwmon: (asus-ec-sensors) fix looping over banks while reading
from EC (bsc#1258210).
- drivers/virt: pkvm: Fix end calculation in
mmio_guard_ioremap_hook() (bsc#1258210).
- usb: atm: ueagle-atm: reject descriptors that confuse probe
and disconnect (bsc#1258210).
- wifi: iwlwifi: mvm: fix read in wake packet notification handler
(bsc#1258210).
- wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn
(bsc#1258210).
- wifi: iwlwifi: fix pointer arithmetic in
iwl_add_mcc_to_tas_block_list (bsc#1258210).
- wifi: iwlwifi: mvm: validate SAR GEO response payload size
(bsc#1258210).
- ASoC: cs35l56: Use complete_all() to signal init_completion
(bsc#1258210).
- ASoC: cs35l56: Fix potential probe() deadlock (bsc#1258210).
- ASoC: cs35l56: Don't use devres to unregister component
(bsc#1258210).
- ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI
(bsc#1258210).
- ALSA: hda: cs35l41: validate and free ACPI mute object
(bsc#1258210).
- ASoC: sun4i-codec: Set quirks.playback_only for H616 codec
(bsc#1258210).
- ASoC: tas2781: bound firmware description string parsing
(bsc#1258210).
- btrfs: free mapping node on duplicate reloc root insert
(bsc#1258210).
- btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
(bsc#1258210).
- btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes
accounting (bsc#1258210).
- btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8
(bsc#1258210).
- wifi: carl9170: fix buffer overflow in rx_stream failover path
(bsc#1258210).
- wifi: carl9170: fix OOB read from off-by-two in TX status
handler (bsc#1258210).
- wifi: carl9170: bound memcpy length in cmd callback to prevent
OOB read (bsc#1258210).
- wifi: ath6kl: fix OOB read from firmware IE lengths in connect
event (bsc#1258210).
- wifi: ath6kl: fix OOB read from firmware num_msg in TX complete
handler (bsc#1258210).
- firewire: net: Fix fragmented datagram reassembly (bsc#1258210).
- wifi: ath12k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET (bsc#1258210).
- wifi: ath11k: Flush the posted write after writing to
PCIE_SOC_GLOBAL_RESET (bsc#1258210).
- wifi: ath11k: fix potential buffer underflow in
ath11k_hal_rx_msdu_list_get() (bsc#1258210).
- watchdog: airoha: Prevent division by zero when clock frequency
is zero (bsc#1258210).
- watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()
(bsc#1258210).
- hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop
(bsc#1258210).
- hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop
(bsc#1258210).
- hwmon: (gigabyte_waterforce) Stop device IO before calling
hid_hw_stop (bsc#1258210).
- hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop
(bsc#1258210).
- hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
(bsc#1258210).
- wifi: ath11k: fix NULL pointer dereference in
ath11k_hal_srng_access_begin (bsc#1258210).
- wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming
firmware request (bsc#1258210).
- selftests/bpf: Keep verifier_map_ptr exercising ops pointer
access (bsc#1258210).
- selftests/bpf: Adjust verifier_map_ptr for the map's excl field
(bsc#1258210).
- usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits
(bsc#1258210).
- Revert "drm/amd/display: Add missing kdoc for ALLM parameters"
(bsc#1258210).
- RISC-V: KVM: Serialize virtual interrupt pending state updates
(bsc#1258210).
- wifi: mwifiex: fix freeze for 60 seconds caused by
request_firmware (bsc#1258210).
- usb: typec: ucsi: Add duplicate detection to nvidia registration
path (bsc#1258210).
- usb: typec: ucsi: Detect and skip duplicate altmodes from
buggy firmware (bsc#1258210).
- USB: serial: option: add TDTECH MT5710-CN (bsc#1258210).
- USB: serial: keyspan_pda: fix data loss on receive throttling
(bsc#1258210).
- USB: serial: io_edgeport: cap received transmit credits
(bsc#1258210).
- USB: serial: ftdi_sio: add support for E+H FXA291 (bsc#1258210).
- usb: gadget: uvc: clamp SEND_RESPONSE length to the response
buffer (bsc#1258210).
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify
before teardown (bsc#1258210).
- usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
(bsc#1258210).
- USB: gadget: fsl-udc: fix dev_printk() device (bsc#1258210).
- USB: gadget: fsl-udc: fix device name leak on probe failure
(bsc#1258210).
- USB: gadget: snps-udc: fix device name leak on probe failure
(bsc#1258210).
- usb: gadget: printer: fix infinite loop in printer_read()
(bsc#1258210).
- usb: gadget: f_midi: cancel pending IN work before freeing
the midi object (bsc#1258210).
- usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
(bsc#1258210).
- usb: chipidea: fix usage_count leak when autosuspend_delay is
negative (bsc#1258210).
- USB: storage: add NO_ATA_1X quirk for Longmai USB Key
(bsc#1258210).
- usb: musb: omap2430: Do not put borrowed of_node in probe
(bsc#1258210).
- usb: core: port: Deattach Type-C connector on component unbind
(bsc#1258210).
- wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()
(bsc#1258210).
- usb: core: sysfs: add lock to bos_descriptors_read()
(bsc#1258210).
- mpls: fix NULL deref in mpls_valid_fib_dump_req() on
CONFIG_INET=n (bsc#1258210).
- sctp: fix auth_hmacs array size in struct sctp_cookie
(bsc#1258210).
- net/sched: act_tunnel_key: Defer dst_release to RCU callback
(bsc#1258210).
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()
(bsc#1258210).
- tcp: fix TIME_WAIT socket reference leak on PSP policy failure
(bsc#1258210).
- accel/amdxdna: Fix use-after-free of mm_struct in job scheduler
(bsc#1258210).
- drm/i915/selftests: Fix GT PM sort comparators (bsc#1258210).
- drm/i915/wm: clear the plane ddb_y entries on plane disable
(bsc#1258210).
- ksmbd: validate compound request size before reading
StructureSize2 (bsc#1258210).
- ksmbd: pin conn during async oplock break notification
(bsc#1258210).
- drm/xe/wopcm: fix WOPCM size for LNL+ (bsc#1258210).
- drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves
(bsc#1258210).
- drm/xe/vf: Shadow buffer management for CCS read/write operations
(bsc#1258210).
- drm/xe/sa: Shadow buffer support in the sub-allocator pool
(bsc#1258210).
- drm/xe: Allow the caller to pass guc_buf_cache size
(bsc#1258210).
- can: j1939: fix lockless local-destination check (bsc#1258210).
- riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus()
(bsc#1258210).
- s390/checksum: Fix csum_partial() without vector facility
(bsc#1258210).
- drm/panthor: Check debugfs GEM lock initialization (bsc#1258210).
- bpf, sockmap: Reject unhashed UDP sockets on sockmap update
(bsc#1258210).
- powerpc/vtime: Initialize starttime at boot for native accounting
(bsc#1258210).
- powerpc/time: Prepare to stop elapsing in dynticks-idle
(bsc#1258210).
- powerpc/85xx: Add fsl,ifc to common device ids (bsc#1258210).
- can: raw: add locking for raw flags bitfield (bsc#1258210).
- drm/i915/gt: use correct selftest config symbol (bsc#1258210).
- smb/client: handle overlapping allocated ranges in fallocate
(bsc#1258210).
- Bluetooth: hci_qca: Clear memdump state on invalid dump size
(bsc#1258210).
- Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds
(bsc#1258210).
- Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
(bsc#1258210).
- Bluetooth: hci_sync: extend conn_hash lookup critical sections
(bsc#1258210).
- Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update
(bsc#1258210).
- Bluetooth: qca: fix NVM tag length underflow in TLV parser
(bsc#1258210).
- ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC
(bsc#1258210).
- accel/ivpu: Fix wrong register read in LNL failure diagnostics
(bsc#1258210).
- ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion
bit-scanning (bsc#1258210).
- ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all
pending interrupts (bsc#1258210).
- ata: sata_dwc_460ex: use platform_get_irq() (bsc#1258210).
- ata: sata_dwc_460ex: enable SATA interrupts only after IRQ
handler is registered (bsc#1258210).
- scsi: core: wake eh reliably when using scsi_schedule_eh
(bsc#1258210).
- udmabuf: Ensure to perform cache synchronisation in
begin_cpu_udmabuf() (bsc#1258210).
- net/iucv: take a reference on the socket found in afiucv_hs_rcv()
(bsc#1258210).
- ipv4: fib: free fib_alias with kfree_rcu() on insert error path
(bsc#1258210).
- ppp: defer channel free to an RCU grace period to fix pppol2tp
RX UAF (bsc#1258210).
- cpufreq: Make cpufreq_update_pressure() fall back to
cpuinfo.max_freq (bsc#1258210).
- firmware: arm_scmi: Rate-limit queue-full warnings in IRQ
context (bsc#1258210).
- ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared
after lookup (bsc#1258210).
- ASoC: cs42l43: Correct report for forced microphone jack
(bsc#1258210).
- ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return
check (bsc#1258210).
- ASoC: amd: ps: fix wrong ACP version string in
pci_request_regions() (bsc#1258210).
- ASoC: amd: ps: disable MSI on resume in ACP PCI driver
(bsc#1258210).
- ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath
on start/stop (bsc#1258210).
- firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset
calculation (bsc#1258210).
- firmware: arm_ffa: Fix out-of-bound writes in
ffa_setup_and_transmit() (bsc#1258210).
- wifi: cfg80211: bound element ID read when checking
non-inheritance (bsc#1258210).
- wifi: brcmfmac: initialize SDIO data work before cleanup
(bsc#1258210).
- wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock
(bsc#1258210).
- wifi: mac80211: avoid non-S1G AID fallback for S1G assoc
(bsc#1258210).
- wifi: cfg80211: reject unsupported PMSR FTM location requests
(bsc#1258210).
- wifi: cfg80211: validate PMSR FTM preamble range (bsc#1258210).
- wifi: cfg80211: validate PMSR measurement type data
(bsc#1258210).
- wifi: nl80211: constrain MBSSID TX link ID range (bsc#1258210).
- wifi: nl80211: validate nested MBSSID IE blobs (bsc#1258210).
- wifi: cfg80211: derive S1G beacon TSF from S1G fields
(bsc#1258210).
- wifi: nl80211: free RNR data on MBSSID mismatch (bsc#1258210).
- wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix
deadlock (bsc#1258210).
- wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
(bsc#1258210).
- wifi: mac80211: defer link RX stats percpu free to RCU
(bsc#1258210).
- wifi: libertas: fix memory leak in helper_firmware_cb()
(bsc#1258210).
- wifi: mac80211: fix fils_discovery double free on alloc failure
(bsc#1258210).
- wifi: mac80211: fix unsol_bcast_probe_resp double free on
alloc failure (bsc#1258210).
- wifi: mac80211_hwsim: clamp virtio RX length before skb_put
(bsc#1258210).
- wifi: cfg80211: Fix an error handling path in
cfg80211_wext_siwscan() (bsc#1258210).
- wifi: ipw2100: fix potential memory leak in
ipw2100_pci_init_one() (bsc#1258210).
- wifi: cfg80211: cancel sched scan results work on unregister
(bsc#1258210).
- xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild
reinsert (bsc#1258210).
- xfrm6: clear dst.dev on error to avoid double netdev_put in
xfrm6_fill_dst() (bsc#1258210).
- xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()
(bsc#1258210).
- xfrm: clear mode callbacks after failed mode setup (bsc#1258210).
- RDMA/irdma: Prevent overflows in memory contiguity checks
(bsc#1258210).
- selftests/alsa: Fix memory leak in find_controls error path
(bsc#1258210).
- mtd: fix double free and WARN_ON in add_mtd_device() error paths
(bsc#1258210).
- RDMA/siw: publish QP after initialization (bsc#1258210).
- RDMA/hns: Fix potential integer overflow in mhop hem cleanup
(bsc#1258210).
- RDMA/mana_ib: initialize err for empty send WR lists
(bsc#1258210).
- RDMA/erdma: initialize ret for empty receive WR lists
(bsc#1258210).
- RDMA/irdma: Prevent user-triggered null deref on QP create
(bsc#1258210).
- RDMA/irdma: Remove redundant legacy_mode checks (bsc#1258210).
- RDMA/irdma: Prevent rereg_mr for non-mem regions (bsc#1258210).
- RDMA/umem: Add pinned revocable dmabuf import interface
(bsc#1258210).
- RDMA/cma: Fix hardware address comparison length in netevent
callback (bsc#1258210).
- xfrm: reject optional IPTFS templates in outbound policies
(bsc#1258210).
- sched_ext: Don't warn on core-sched forced idle in
put_prev_task_scx() (bsc#1258210).
- sched/ext: Avoid null ptr traversal when ->put_prev_task()
is called with NULL next (bsc#1258210).
- firmware: arm_ffa: Fix NULL dereference in
ffa_partition_info_get() (bsc#1258210).
- btrfs: fallback to transaction csum tree on a commit root csum
miss (bsc#1258210).
- btrfs: use bool type for btrfs_path members used as booleans
(bsc#1258210).
- btrfs: fix root leak if its reloc root is unexpected in
merge_reloc_roots() (bsc#1258210).
- btrfs: reject free space cache with more entries than pages
(bsc#1258210).
- mtd: nand: mtk-ecc: stop on ECC idle timeouts (bsc#1258210).
- mtd: mtdswap: remove debugfs stats file on teardown
(bsc#1258210).
- IB/mad: Drop unmatched RMPP responses before reassembly
(bsc#1258210).
- firmware: arm_ffa: Respect firmware advertised RX/TX buffer
size limits (bsc#1258210).
- xfrm: fix stale skb->prev after async crypto steals a GSO
segment (bsc#1258210).
- xfrm: propagate -EINPROGRESS from validate_xmit_xfrm()
(bsc#1258210).
- net: plumb drop reasons to __dev_queue_xmit() (bsc#1258210).
- net: dropreason: add SKB_DROP_REASON_RECURSION_LIMIT
(bsc#1258210).
- arm64: tegra: Fix CPU compatible string to cortex-a78ae on
Tegra234 (bsc#1258210).
- arm64: tegra: Remove fallback compatible for GPCDMA
(bsc#1258210).
- fuse: fix writeback array overflow when max_pages is one
(bsc#1258210).
- Input: ims-pcu - fix logic error in packet reset (bsc#1258210).
- Input: ims-pcu - fix heap-buffer-overflow in
ims_pcu_process_data() (bsc#1258210).
- xprtrdma: Clear receive-side ownership pointers on release
(bsc#1258210).
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin
(bsc#1258210).
- gpu: host1x: Fix use-after-free in
host1x_bo_clear_cached_mappings (bsc#1258210).
- dmaengine: sh: rz-dmac: Move interrupt request after everything
is set up (bsc#1258210).
- can: bcm: track a single source interface for ANYDEV
timeout/throttle ops (bsc#1258210).
- can: bcm: fix data race on rx_stamp/rx_ifindex in
bcm_rx_handler() (bsc#1258210).
- can: bcm: fix stale rx/tx ops after device removal (bsc#1258210).
- can: bcm: add missing device refcount for CAN filter removal
(bsc#1258210).
- can: bcm: validate frame length in bcm_rx_setup() for RTR
replies (bsc#1258210).
- can: bcm: extend bcm_tx_lock usage for data and timer updates
(bsc#1258210).
- can: bcm: fix CAN frame rx/tx statistics (bsc#1258210).
- can: bcm: add locking when updating filter and timer values
(bsc#1258210).
- KVM: x86/mmu: Fix use-after-free on vendor module reload
(bsc#1258210).
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1258210).
- KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired
on KVM_RUN (bsc#1258210).
- KVM: x86: Check for invalid/obsolete root *after* making MMU
pages available (bsc#1258210).
- seqlock: Allow UBSAN_ALIGNMENT to fail optimizing (bsc#1258210).
- seqlock: Allow KASAN to fail optimizing (bsc#1258210).
- seqlock: Cure some more scoped_seqlock() optimization fails
(bsc#1258210).
- fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race
(bsc#1258210).
- drm/virtio: fix deadlock in display_info_cb by removing hotplug
from dequeue worker (bsc#1258210).
- netfilter: nf_tables: revert commit_mutex usage in reset path
(bsc#1258210).
- netfilter: nft_quota: use atomic64_xchg for reset (bsc#1258210).
- netfilter: nft_counter: serialize reset with spinlock
(bsc#1258210).
- selftests/bpf: Add tests for ld_{abs,ind} failure path in
subprogs (bsc#1258210).
- bpf: Fix ld_{abs,ind} failure path analysis in subprogs
(bsc#1258210).
- platform/x86/intel-uncore-freq: Fix current_freq_khz after
CPU hotplug (bsc#1258210).
- commit 155f244
* Mon Aug 03 2026 rfrohl@suse.com
- Revert 16b0c184cc90
Part of v6.18.42 as well
- commit 01982d0
* Mon Aug 03 2026 rfrohl@suse.com
- Revert 916da6cac2fb
Fix is part of v6.18.42
- commit 7c931f8
* Thu Jul 30 2026 rfrohl@suse.com
- Linux 6.18.41 (bsc#1258210).
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race
(bsc#1258210).
- posix-timers: Expand timer_[re]arm() callbacks with a boolean
return value (bsc#1258210).
- commit 12779a8
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Move provides-obsoletes to package list
- commit 62b3949
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Move DTS prefix into package list
- commit 225c506
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: Put per-architecture package lists into a hash
- commit c4b48e1
* Tue Jul 28 2026 msuchanek@suse.de
- mkspec-dtb: re-indent
- commit 1e2a2b0
* Mon Jul 27 2026 msuchanek@suse.de
- pkspec-dtb: Fix dtb-al rename.
- commit 98ec660
* Mon Jul 27 2026 msuchanek@suse.de
- mkspec-dtb: Skip missing DTBs.
- commit 133d77b
* Fri Jul 24 2026 rfrohl@suse.com
- usb: atm: ueagle-atm: reject descriptors that confuse probe
and disconnect (git-fixes).
- commit 916da6c
* Fri Jul 24 2026 rfrohl@suse.com
- Linux 6.18.40 (bsc#1258210).
- perf strlist: Don't write to const memory (bsc#1258210).
- perf strlist: Remove dont_dupstr logic, used only once
(bsc#1258210).
- perf time-utils: Constify variables storing the result of
strchr() on const tables (bsc#1258210).
- perf jitdump: Constify variables storing the result of strchr()
on const tables (bsc#1258210).
- perf list: Remove unused 'sep' variable (bsc#1258210).
- perf tools: Switch printf("...%s", strerror(errno)) to
printf("...%m") (bsc#1258210).
- perf bpf-event: Constify variables storing the result of strchr()
on const tables (bsc#1258210).
- perf session: Don't write to memory pointed to a const pointer
(bsc#1258210).
- perf demangle-java: Constify variables storing the result of
strchr() on const tables (bsc#1258210).
- perf trace-event: Constify variables storing the result of
strchr() on const tables (bsc#1258210).
- perf metricgroup: Constify variables storing the result of
strchr() on const tables (bsc#1258210).
- perf tools: Use const for variables receiving str{str,r?chr}()
returns (bsc#1258210).
- perf hwmon_pmu: Constify the variables returning bsearch()
on const tables (bsc#1258210).
- perf units: Constify variables storing the result of strchr()
on const tables (bsc#1258210).
- perf tp_pmu: Address const-correctness errors in recent glibcs
(bsc#1258210).
- perf list: Signal changing const memory is ok (bsc#1258210).
- perf list: Don't write to const memory (bsc#1258210).
- perf diff: Constify strchr() return variables (bsc#1258210).
- perf trace: Don't change const char strings (bsc#1258210).
- perf trace: Deal with compiler const checks (bsc#1258210).
- nvme-pci: DMA unmap the correct regions in nvme_free_sgls
(bsc#1258210).
- smb/server: do not require delete access for non-replacing links
(bsc#1258210).
- tcp: Add preempt_{disable,enable}_nested() in
reqsk_queue_hash_req() (bsc#1258210).
- crypto: algif_skcipher - force synchronous processing
(bsc#1258210).
- KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU
(bsc#1258210).
- iommu/vt-d: Clear Present bit before tearing down scalable-mode
context entry (bsc#1258210).
- nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest
error path (bsc#1258210).
- nvmet-tcp: Fix potential UAF when ddgst mismatch (bsc#1258210).
- crypto: sun4i-ss - Remove insecure and unused rng_alg
(bsc#1258210).
- media: uvcvideo: Fix deadlock if uvc_status_stop is called
from async_ctrl.work (bsc#1258210).
- selftests: bpf: Add test for multiple syncs from linked register
(bsc#1258210).
- selftests/bpf: Add tests for improved linked register tracking
(bsc#1258210).
- selftests/bpf: Add a test cases for sync_linked_regs regarding
zext propagation (bsc#1258210).
- bpf: Clear delta when clearing reg id for non-{add,sub} ops
(bsc#1258210).
- selftests/bpf: Add tests for delta tracking when src_reg ==
dst_reg (bsc#1258210).
- selftests/bpf: Add tests for stale delta leaking through id
reassignment (bsc#1258210).
- exfat: preserve benign secondary entries during rename and move
(bsc#1258210).
- iommu/amd: Use maximum Event log buffer size when SNP is
enabled on Family 0x19 (bsc#1258210).
- iommu/amd: Use maximum PPR log buffer size when SNP is enabled
on Family 0x19 (bsc#1258210).
- af_unix: Drop all SCM attributes for SOCKMAP (bsc#1258210).
- ALSA: hda/realtek: Add quirk for TongFang X6xx45xU (bsc#1258210).
- ALSA: hda: conexant: Remove mic bias threshold override
(bsc#1258210).
- ALSA: hda: Fix cached processing coefficient verbs (bsc#1258210).
- ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with
codec SSID 17aa:38a7 (bsc#1258210).
- media: uvcvideo: Use hw timestaming if the clock buffer is full
(bsc#1258210).
- media: uvcvideo: Avoid partial metadata buffers (bsc#1258210).
- media: uvcvideo: Fix buffer sequence in frame gaps (bsc#1258210).
- media: uvcvideo: Fix dev_sof filtering in hw timestamp
(bsc#1258210).
- media: uvcvideo: Do not add clock samples with small sof delta
(bsc#1258210).
- media: uvcvideo: Relax the constrains for interpolating the
hw clock (bsc#1258210).
- media: uvcvideo: Fix sequence number when no EOF (bsc#1258210).
- dt-bindings: media: sun4i-a10-video-engine: Add interconnect
properties (bsc#1258210).
- dt-bindings: power: imx93: Add MIPI PHY power domain
(bsc#1258210).
- serial: msm: Disable DMA for kernel console UART (bsc#1258210).
- serial: max310x: implement gpio_chip::get_direction()
(bsc#1258210).
- serial: 8250_omap: clear rx_running on zero-length DMA completes
(bsc#1258210).
- rxrpc: serialize kernel accept preallocation with socket teardown
(bsc#1258210).
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
(bsc#1258210).
- rxrpc: Don't move a peeked OOB message onto the pending queue
(bsc#1258210).
- rxrpc: Fix UAF in rxgk_issue_challenge() (bsc#1258210).
- rxrpc: Fix socket notification race (bsc#1258210).
- rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)
(bsc#1258210).
- rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
(bsc#1258210).
- rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something
to rotate (bsc#1258210).
- rxrpc: Fix oob challenge leak in cleanup after notification
failure (bsc#1258210).
- rxrpc: Fix ACKALL packet handling (bsc#1258210).
- rxrpc: Fix the reception of a reply packet before data
transmission (bsc#1258210).
- rxrpc: Fix leak of connection from OOB challenge (bsc#1258210).
- rxrpc: Fix double unlock in rxrpc_recvmsg() (bsc#1258210).
- afs: Fix netns teardown to cancel the preallocation charger
(bsc#1258210).
- afs: fix NULL pointer dereference in afs_get_tree()
(bsc#1258210).
- afs: handle CB.InitCallBackState3 requests without a server
record (bsc#1258210).
- afs: Fix further netns teardown to cancel the preallocation
charger (bsc#1258210).
- afs: Fix uncancelled rxrpc OOB message handler (bsc#1258210).
- fbcon: fix NULL pointer dereference for a console without
vc_data (bsc#1258210).
- fbcon: Use correct type for vc_resize() return value
(bsc#1258210).
- openrisc: mm: Fix section mismatch between map_page and
__set_fixmap (bsc#1258210).
- clocksource/drivers/sun5i: Handle error returns from
devm_reset_control_get_optional_exclusive() (bsc#1258210).
- accel/amdxdna: Fix leak when pinning ubuf pages (bsc#1258210).
- drm/rockchip: dw_dp: Switch to drmm_kzalloc() (bsc#1258210).
- drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove()
(bsc#1258210).
- drm/rockchip: Test for imported buffers with
drm_gem_is_imported() (bsc#1258210).
- drm/tidss: Drop extra drm_mode_config_reset() call (bsc#1258210).
- drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating
SVM ranges (bsc#1258210).
- drm/gpuvm: Do not prepare NULL objects (bsc#1258210).
- drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
(bsc#1258210).
- drm/radeon: fix integer overflow in radeon_align_pitch()
(bsc#1258210).
- drm/radeon: fix memory leak in radeon_ring_restore() on lock
failure (bsc#1258210).
- libbpf: Report error when a negative kprobe offset is specified
(bsc#1258210).
- selftests/bpf: Fix off-by-one in bpf_cpumask_populate related
selftest (bsc#1258210).
- dt-bindings: timer: Remove sifive,fine-ctr-bits property
(bsc#1258210).
- drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR
macro (bsc#1258210).
- selftests/bpf: Use local type for flow_offload_tuple_rhash in
xdp_flowtable (bsc#1258210).
- selftests/bpf: Use local type for bpf_fou_encap in
test_tunnel_kern (bsc#1258210).
- Documentation: proc: fix section numbering in table of contents
(bsc#1258210).
- arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra
(bsc#1258210).
- arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S
(bsc#1258210).
- arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings
(bsc#1258210).
- arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning
(bsc#1258210).
- arm64: dts: qcom: sdm845-mezzanine: Fix camss ports
unit_address_vs_reg warning (bsc#1258210).
- wifi: cfg80211: fix grammar in MLO group key error message
(bsc#1258210).
- arm64: tegra: Fix Tegra234 MGBE PTP clock (bsc#1258210).
- dt-bindings: pinctrl: nvidia,tegra234: Add missing required
block (bsc#1258210).
- drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
(bsc#1258210).
- driver core: use READ_ONCE() for dev->driver in
dev_has_sync_state() (bsc#1258210).
- wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers
(bsc#1258210).
- wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers
(bsc#1258210).
- wifi: rtw89: Correct data type for scan index to avoid infinite
loop (bsc#1258210).
- wifi: rtw88: fix OOB read from firmware RX descriptor exceeding
DMA buffer (bsc#1258210).
- wifi: rtw89: add bounds check on firmware mac_id in link lookup
(bsc#1258210).
- kconfig: fix potential NULL pointer dereference in conf_askvalue
(bsc#1258210).
- soc: xilinx: Shutdown and free rx mailbox channel (bsc#1258210).
- pinctrl: mediatek: eint: Drop base from
mtk_eint_chip_write_mask() (bsc#1258210).
- wifi: ath9k: fix OOB access from firmware tx status queue ID
(bsc#1258210).
- ARM: dts: am335x-sl50: Fix audio bitclock and frame master
endpoint (bsc#1258210).
- Documentation/rv: Replace stale website link (bsc#1258210).
- watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
(bsc#1258210).
- watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and
SAMA7G5 (bsc#1258210).
- watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on
register failure (bsc#1258210).
- media: cedrus: Fix failure to clean up hardware on probe failure
(bsc#1258210).
- media: v4l2-common: Add YUV24 format info (bsc#1258210).
- memory: tegra: Wire up system sleep PM ops (bsc#1258210).
- crypto: qat - fix heartbeat error injection (bsc#1258210).
- lib/vsprintf: Fix to check field_width and precision
(bsc#1258210).
- dts: spacemit: set console baud rate on bpif3 (bsc#1258210).
- pinctrl: sunxi: fix regulator leak in sunxi_pmx_request()
error path (bsc#1258210).
- dt-bindings: vendor-prefixes: Add Displaytech Ltd (bsc#1258210).
- drm/gpuvm: take refcount on DRM device (bsc#1258210).
- drm/panel: Clean up S6E3HA2 config dependencies and fill help
text (bsc#1258210).
- ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1258210).
- arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1258210).
- arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
(bsc#1258210).
- arm64: dts: imx8x-colibri: Correct SODIMM PAD settings
(bsc#1258210).
- Revert "arm64: dts: imx8mm-kontron: Add support for reading
SD_VSEL signal" (bsc#1258210).
- Revert "arm64: dts: imx8mp-kontron: Add support for reading
SD_VSEL signal" (bsc#1258210).
- vxlan: Fix potential null-ptr-deref in
vxlan_gro_prepare_receive() (bsc#1258210).
- drm: renesas: rz-du: mipi_dsi: Fix return path on error
(bsc#1258210).
- alarmtimer: Remove stale return description from
alarm_handle_timer() (bsc#1258210).
- OPP: Fix race between OPP addition and lookup (bsc#1258210).
- crypto: ccp - Reverse the cleanup order in psp_dev_destroy()
(bsc#1258210).
- crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
(bsc#1258210).
- crypto: atmel-sha204a - fix blocking and non-blocking rng logic
(bsc#1258210).
- crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
(bsc#1258210).
- crypto: asymmetric_keys - fix OOB read in
pefile_digest_pe_contents (bsc#1258210).
- ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD
(bsc#1258210).
- dlm: fix add msg handle in send_queue ordered (bsc#1258210).
- nilfs2: fix backing_dev_info reference leak (bsc#1258210).
- media: qcom: camss: vfe: fix PIX subdev naming on VFE lite
(bsc#1258210).
- media: iris: scale MMCX power domain on SM8250 (bsc#1258210).
- media: venus: scale MMCX power domain on SM8250 (bsc#1258210).
- iommu/amd: Fix a stale comment about which legacy mode is user
visible (bsc#1258210).
- soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost
during merge (bsc#1258210).
- bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative
dentries (bsc#1258210).
- uaccess: fix ignored_trailing logic in copy_struct_to_user()
(bsc#1258210).
- arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce
buffer to host (bsc#1258210).
- rust: alloc: fix `Vec::extend_with` SAFETY comment (bsc#1258210).
- clk: scmi: Fix clock rate rounding (bsc#1258210).
- arm64: dts: qcom: kodiak: Fix ICE reg size (bsc#1258210).
- arm64: dts: qcom: sm8450: Fix ICE reg size (bsc#1258210).
- drm/hisilicon/hibmc: add updating link cap in DP detect()
(bsc#1258210).
- drm/hisilicon/hibmc: fix no showing when no connectors connected
(bsc#1258210).
- drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
(bsc#1258210).
- drm/hisilicon/hibmc: use clock to look up the PLL value
(bsc#1258210).
- evm: terminate and bound the evm_xattrs read buffer
(bsc#1258210).
- thermal: hwmon: Fix critical temperature attribute removal
(bsc#1258210).
- clk: scpi: Unregister child clock providers on remove
(bsc#1258210).
- net/sched: sch_hfsc: annotate data-races in
hfsc_dump_class_stats() (bsc#1258210).
- scsi: hisi_sas: Add slave_destroy interface for v3 hw
(bsc#1258210).
- crypto: ccp - Treat zero-length cert chain as query for blob
lengths (bsc#1258210).
- spi: hisi-kunpeng: Use dev_err_probe() for host registration
failure (bsc#1258210).
- net/sched: sch_htb: do not change sch->flags in htb_dump()
(bsc#1258210).
- net/sched: sch_htb: annotate data-races (I) (bsc#1258210).
- ipv6: addrconf: bail out of dad_failure when state is no longer
POSTDAD (bsc#1258210).
- IB/mlx5: Fix transport-domain rollback and initialize lb mutex
earlier (bsc#1258210).
- RDMA/hns: Fix arithmetic overflow in calc_hem_config()
(bsc#1258210).
- RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
(bsc#1258210).
- RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
(bsc#1258210).
- RDMA/srpt: fix integer overflow in immediate data length check
(bsc#1258210).
- RDMA/hns: Initialize seqfile before creating file (bsc#1258210).
- drm/syncobj: Fix memory leak in drm_syncobj_find_fence()
(bsc#1258210).
- selftests/bpf: Reject unsupported -k option in vmtest.sh
(bsc#1258210).
- selftests/bpf: Fix test for refinement of single-value tnum
(bsc#1258210).
- iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR
client match table (bsc#1258210).
- selftests/mm: Fix resv_sz when parsing arm64 signal frame
(bsc#1258210).
- firmware: arm_ffa: Honor partition info descriptor size
(bsc#1258210).
- arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties
(bsc#1258210).
- arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply
(bsc#1258210).
- arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply
(bsc#1258210).
- media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
(bsc#1258210).
- media: atomisp: gc2235: fix UAF and memory leak (bsc#1258210).
- staging: media: atomisp: fix loop shadowing in
ia_css_stream_destroy() (bsc#1258210).
- riscv: dts: spacemit: set console baud rate on Milk-V Jupiter
(bsc#1258210).
- firmware: smccc: Fix Arm SMCCC SOC_ID name call (bsc#1258210).
- firmware: arm_scmi: Read sensor config as 32-bit value
(bsc#1258210).
- sysfs: clamp show() return value in sysfs_kf_read()
(bsc#1258210).
- bitops: use common function parameter names (bsc#1258210).
- regulator: dt-bindings: mt6359: Drop regulator-name pattern
restrictions (bsc#1258210).
- tools/nolibc: getopt: Fix potential out of bounds access
(bsc#1258210).
- nilfs2: Fix return in nilfs_mkdir (bsc#1258210).
- net/sched: sch_drr: annotate data-races around cl->deficit
(bsc#1258210).
- media: rockchip: rga: fix too small buffer size (bsc#1258210).
- firmware: arm_scmi: Fix OOB in scmi_power_name_get()
(bsc#1258210).
- arm64: dts: qcom: lemans: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: monaco: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: sc7180: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: kodiak: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: sm8450: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: sm8550: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: sm8650: Add power-domain and iface clk for
ice node (bsc#1258210).
- arm64: dts: qcom: sm8750: Add power-domain and iface clk for
ice node (bsc#1258210).
- tracing: Bound synthetic-field strings with seq_buf
(bsc#1258210).
- arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs
(bsc#1258210).
- writeback: drop now-unnecessary rcu_barrier() in
cgroup_writeback_umount() (bsc#1258210).
- kernfs: fix suspicious RCU usage in kernfs_put() (bsc#1258210).
- device property: fix fwnode reference leak in
fwnode_graph_get_endpoint_by_id() (bsc#1258210).
- driver core: Use mod_delayed_work to prevent lost deferred
probe work (bsc#1258210).
- Revert "treewide: Fix probing of devices in DT overlays"
(bsc#1258210).
- of: dynamic: Fix overlayed devices not probing because of
fw_devlink (bsc#1258210).
- crypto: eip93 - fix reset ring register definition (bsc#1258210).
- cpufreq: Documentation: fix sampling_down_factor range
(bsc#1258210).
- cpufreq: conservative: Simplify frequency limit handling
(bsc#1258210).
- pwm: imx27: Fix variable truncation in .apply() (bsc#1258210).
- RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed
(bsc#1258210).
- bus: sunxi-rsb: Always check register address validity
(bsc#1258210).
- pinctrl: spacemit: fix NULL check in spacemit_pin_set_config
(bsc#1258210).
- RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
(bsc#1258210).
- RDMA/rxe: Fix a use-after-free problem in rxe_mmap (bsc#1258210).
- IB/mlx4: Fix refcount leak in add_port() error path
(bsc#1258210).
- RDMA/hns: Fix warning in poll cq direct mode (bsc#1258210).
- RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1258210).
- RDMA/counter: Fix incorrect port index in rdma_counter_init()
error cleanup (bsc#1258210).
- pinctrl: meson: amlogic-a4: fix gpio output glitch (bsc#1258210).
- PM: sleep: Use complete() in device_pm_sleep_init()
(bsc#1258210).
- MIPS: Fix big-endian stack argument fetching in o32 wrapper
(bsc#1258210).
- MIPS: DEC: Remove do_IRQ() call indirection (bsc#1258210).
- mips: ralink: mt7621: add missing __iomem (bsc#1258210).
- mips: n64: add __iomem for writel call (bsc#1258210).
- driver core: Fix missing jiffies conversion in
deferred_probe_extend_timeout() (bsc#1258210).
- driver core: Guard deferred probe timeout extension with
delayed_work_pending() (bsc#1258210).
- mtd: spi-nor: debugfs: Fix the flags list (bsc#1258210).
- mtd: spi-nor: Drop duplicate Kconfig dependency (bsc#1258210).
- ALSA: xen-front: Reset event channel state on stream clear
(bsc#1258210).
- ALSA: xen-front: Connect event channel after stream prepare
(bsc#1258210).
- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx
data (bsc#1258210).
- ALSA: seq: midi: Serialize output teardown with event_input
(bsc#1258210).
- selftests: Fix Makefile target for nsfs (bsc#1258210).
- pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table
(bsc#1258210).
- pinctrl: cs42l43: Fix leaked pm reference on error path
(bsc#1258210).
- pinctrl: cs42l43: Fix polarity on debounce (bsc#1258210).
- init/initramfs_test: wait_for_initramfs() before running
(bsc#1258210).
- nvmet-tcp: fix page fragment cache leak in error path
(bsc#1258210).
- nvmet-tcp: check return value of nvmet_tcp_set_queue_sock
(bsc#1258210).
- nvme-multipath: fix flex array size in struct nvme_ns_head
(bsc#1258210).
- nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools
(bsc#1258210).
- workqueue: drop spurious '*' from print_worker_info() fn
declaration (bsc#1258210).
- ipv6: guard against possible NULL deref in __in6_dev_stats_get()
(bsc#1258210).
- net/sched: cls_bpf: prevent unbounded recursion in offload
rollback (bsc#1258210).
- iommu/amd: Fix premature break in init_iommu_one() (bsc#1258210).
- rtla: Introduce for_each_action() helper (bsc#1258210).
- rtla/actions: Restore continue flag in actions_perform()
(bsc#1258210).
- drm/tegra: gr2d/gr3d: Initialize address register map before
HOST1X client is registered (bsc#1258210).
- drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove
(bsc#1258210).
- gpu: host1x: Allow entries in BO caches to be freed
(bsc#1258210).
- drm/tegra: dc: Fix device node reference leak in
tegra_dc_has_output() (bsc#1258210).
- gpu: host1x: Fix iommu_map_sgtable() return value check
(bsc#1258210).
- drm/tegra: Fix iommu_map_sgtable() return value check
(bsc#1258210).
- drm/nouveau/bios: specify correct display fuse register for
Ampere and Ada (bsc#1258210).
- libbpf: Harden parse_vma_segs() path parsing (bsc#1258210).
- bpftool: Fix typo in struct_ops map FD generation for light
skeleton (bsc#1258210).
- libbpf: Fix UAF in strset__add_str() (bsc#1258210).
- ARM: tegra: Add #{address,size}-cells to Chromium-based /firmware
(bsc#1258210).
- arm64: tegra: Add #{address,size}-cells to Chromium-based
/firmware (bsc#1258210).
- dax/kmem: account for partial discontiguous resource upon
removal (bsc#1258210).
- rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
(bsc#1258210).
- ocfs2: don't BUG_ON an invalid journal dinode (bsc#1258210).
- ocfs2: kill osb->system_file_mutex lock (bsc#1258210).
- crypto: hisilicon/qm - disable error report before flr
(bsc#1258210).
- crypto: inside-secure/eip93 - Add check for
devm_request_threaded_irq (bsc#1258210).
- crypto: tegra - Fix dma_free_coherent size error (bsc#1258210).
- crypto: tegra - Return ENOMEM when input buffer allocation
fails for ccm (bsc#1258210).
- sched/deadline: Reject debugfs dl_server writes for offline CPUs
(bsc#1258210).
- drm/msm/dp: fix HPD state status bit shift value (bsc#1258210).
- drm/msm/dp: Fix the ISR_* enum values (bsc#1258210).
- EDAC/igen6: Fix call trace due to missing release()
(bsc#1258210).
- EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in
skx_get_dimm_info (bsc#1258210).
- arm64: dts: st: Fix SAI addresses on stm32mp251 (bsc#1258210).
- RDMA/umem: Add ib_umem_is_contiguous() stub for
!CONFIG_INFINIBAND_USER_MEM (bsc#1258210).
- RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1258210).
- RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
(bsc#1258210).
- Revert "media: venus: hfi_platform: Correct supported codecs
for sc7280" (bsc#1258210).
- media: qcom: venus: drop extra padding in NV12 raw size
calculation (bsc#1258210).
- media: qcom: venus: relax encoder frame/blur dimension steps
on v4 (bsc#1258210).
- media: qcom: venus: relax encoder frame/blur step size on v6
(bsc#1258210).
- amba: use generic driver_override infrastructure (bsc#1258210).
- cdx: use generic driver_override infrastructure (bsc#1258210).
- Drivers: hv: vmbus: use generic driver_override infrastructure
(bsc#1258210).
- rpmsg: use generic driver_override infrastructure (bsc#1258210).
- md/raid10: reset read_slot when reusing r10bio for discard
(bsc#1258210).
- raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path
(bsc#1258210).
- bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
(bsc#1258210).
- selftests/bpf: add verification for BPF_PROG_QUERY attr size
boundaries (bsc#1258210).
- libbpf: Skip hash computation when loader generation failed
(bsc#1258210).
- libbpf: Skip endianness swap when loader generation failed
(bsc#1258210).
- ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode
data writeback (bsc#1258210).
- spi: atmel: fix DMA channel and bounce buffer leaks
(bsc#1258210).
- ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble
(bsc#1258210).
- NFSD: Fix delegation reference leak in nfsd4_revoke_states
(bsc#1258210).
- ARM: imx3: Fix CCM node reference leak (bsc#1258210).
- HID: wiimote: Fix table layout and whitespace errors
(bsc#1258210).
- wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in
monitor mode (bsc#1258210).
- wifi: ath12k: fix NULL deref in change_sta_links for unready
link (bsc#1258210).
- ata: libata: Fix ata_exec_internal() (bsc#1258210).
- ARM: imx31: Fix IIM mapping leak in revision check (bsc#1258210).
- x86/cpu: Keep the PROCESSOR_SELECT menu together (bsc#1258210).
- nvdimm/btt: Handle preemption in BTT lane acquisition
(bsc#1258210).
- scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard
and multi-channel scans" (bsc#1258210).
- bpf: Reject exclusive maps as inner maps in map-in-map
(bsc#1258210).
- libbpf: Reject non-exclusive metadata maps in the signed loader
(bsc#1258210).
- libbpf: Skip initial_value override on signed loaders
(bsc#1258210).
- libbpf: Skip max_entries override on signed loaders
(bsc#1258210).
- scsi: pm8001: Fix error code in non_fatal_log_show()
(bsc#1258210).
- scsi: ufs: Fix wrong value printed in unexpected UPIU response
case (bsc#1258210).
- bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
(bsc#1258210).
- mm/fake-numa: fix under-allocation detection in uniform split
(bsc#1258210).
- ext2: fix ignored return value of generic_write_sync()
(bsc#1258210).
- sched: restore timer_slack_ns when resetting RT policy on fork
(bsc#1258210).
- nvme: fix FDP fdpcidx bounds check (bsc#1258210).
- driver core: Use system_percpu_wq instead of system_wq
(bsc#1258210).
- bpf: Reject exclusive maps for bpf_map_elem iterators
(bsc#1258210).
- tick/sched: Fix TOCTOU in nohz idle time fetch (bsc#1258210).
- lib/test_meminit: use && for bools (bsc#1258210).
- riscv: dts: sophgo: sg2044: use hex for CPU unit address
(bsc#1258210).
- riscv: dts: sophgo: sg2042: use hex for CPU unit address
(bsc#1258210).
- configfs_lookup(): don't leave ->s_dentry dangling on failure
(bsc#1258210).
- lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT
(bsc#1258210).
- lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT
(bsc#1258210).
- ext4: fix fast commit wait/wake bit mapping on 64-bit
(bsc#1258210).
- drm/amdgpu: set sub_block_index for mca ras sub-blocks
(bsc#1258210).
- bpftool: Use libbpf error code for flow dissector query
(bsc#1258210).
- vhost: fix vhost_get_avail_idx for a non empty ring
(bsc#1258210).
- iommu/vt-d: Fix RB-tree corruption in probe error path
(bsc#1258210).
- perf/x86/amd/core: Always use the NMI latency mitigation
(bsc#1258210).
- perf/x86/intel/uncore: Fix discovery unit lookup for multi-die
systems (bsc#1258210).
- perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains
(bsc#1258210).
- xfrm: fix NAT-related field inheritance in SA migration
(bsc#1258210).
- cxl/fwctl: Fix __fortify_panic (bsc#1258210).
- drm/amdkfd: always resume_all after suspend_all (bsc#1258210).
- of: reserved_mem: avoid post-init UAF when
alloc_reserved_mem_array() fails (bsc#1258210).
- ocfs2: rebase copied fsdlm LVB pointers in locking_state
(bsc#1258210).
- lib: kunit_iov_iter: repeatedly call alloc_pages_bulk()
(bsc#1258210).
- ocfs2: fix buffer head management in ocfs2_read_blocks()
(bsc#1258210).
- ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1258210).
- ocfs2/dlm: require a ref for locking_state debugfs open
(bsc#1258210).
- ocfs2: fix race between ocfs2_control_install_private() and
ocfs2_control_release() (bsc#1258210).
- netfilter: nfnetlink_osf: fix mss parsing on big-endian
architectures (bsc#1258210).
- netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for
accessing helper flags (bsc#1258210).
- netfilter: synproxy: drop packets if timestamp adjustment fails
(bsc#1258210).
- netfilter: synproxy: adjust duplicate timestamp options
(bsc#1258210).
- netfilter: synproxy: fix unaligned memory access in timestamp
adjustment (bsc#1258210).
- netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack
lock (bsc#1258210).
- ALSA: usb-audio: qcom: Initialize offload control return value
(bsc#1258210).
- x86/cpu: Remove obsolete aperfmperf_get_khz() declaration
(bsc#1258210).
- netfilter: conntrack: revert ct extension genid infrastructure
(bsc#1258210).
- netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master
helper is pptp (bsc#1258210).
- RDMA/hfi1: Open-code rvt_set_ibdev_name() (bsc#1258210).
- IB/cm: Fix av cm device leak on an error path in
cm_init_av_by_path() (bsc#1258210).
- ALSA: hda: fix Kconfig dependency of HD Audio PCI (bsc#1258210).
- RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1258210).
- RDMA/irdma: Initialize iwmr->access during MR registration
(bsc#1258210).
- arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency
(bsc#1258210).
- arm64: dts: imx95: Correct PCIe outbound address space
configuration (bsc#1258210).
- arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi (bsc#1258210).
- arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio
codec as well (bsc#1258210).
- arm64: dts: imx8mp-kontron: Fix GPIO for display power switch
(bsc#1258210).
- RDMA/siw: Fix endpoint/socket association handling (bsc#1258210).
- bpf: Clear rb node linkage when freeing bpf_rb_root
(bsc#1258210).
- bpf: Check tail zero of bpf_map_info (bsc#1258210).
- bpf: Check tail zero of bpf_prog_info (bsc#1258210).
- bpf: Update transport_header when encapsulating UDP tunnel in
lwt (bsc#1258210).
- wifi: wcn36xx: fix heap overflow from oversized firmware HAL
response (bsc#1258210).
- wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO
indication (bsc#1258210).
- wifi: wcn36xx: fix OOB read from short trigger BA firmware
response (bsc#1258210).
- ALSA: seq: Fix partial userptr event expansion (bsc#1258210).
- riscv: cpu_ops: Change return value type of cpu_is_stopped()
to bool (bsc#1258210).
- riscv: stacktrace: Remove bogus -0x4 offset in non-FP
walk_stackframe (bsc#1258210).
- ALSA: seq: Clear variable event pointer on read (bsc#1258210).
- bpf: Fix NMI/tracepoint re-entry deadlock on lru locks
(bsc#1258210).
- kunit:tool: Don't write to stdout when it should be disabled
(bsc#1258210).
- powerpc/8xx: implement get_direction() in cpm1 (bsc#1258210).
- bpf: Fix NULL pointer dereference in bpf_task_from_vpid()
(bsc#1258210).
- ACPI: IPMI: Fix message kref handling on dead device
(bsc#1258210).
- cpufreq: Documentation: fix conservative governor freq_step
description (bsc#1258210).
- thermal: testing: reject missing command arguments (bsc#1258210).
- btrfs: don't force DIO writes to be serialized (bsc#1258210).
- IB/mlx5: Don't take the rereg_mr fallback without a new
translation (bsc#1258210).
- IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1258210).
- IB/mlx5: Remove unused mkc bits in
mlx5r_umr_update_mr_page_shift() (bsc#1258210).
- IB/mlx5: Pull the pdn out of the depths of the umr machinery
(bsc#1258210).
- IB/mlx5: Don't mangle the mr->pd inside the rereg callback
(bsc#1258210).
- spi: ep93xx: fix double-free of zeropage on DMA setup failure
(bsc#1258210).
- ASoC: amd: acp-sdw-legacy: Bound DAI link iteration
(bsc#1258210).
- ASoC: amd: acp-sdw-sof: Bound DAI link iteration (bsc#1258210).
- firmware_loader: Fix recursive lock in device_cache_fw_images()
(bsc#1258210).
- configfs: fix lockless traversals of ->s_children (bsc#1258210).
- watchdog: unregister PM notifier on watchdog unregister
(bsc#1258210).
- pinctrl: qcom: Fix resolving register base address from device
node (bsc#1258210).
- scsi: target: Fix hexadecimal CHAP_I handling (bsc#1258210).
- scsi: target: Remove tcm_loop target reset handling
(bsc#1258210).
- pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset
of pins 34-39 (bsc#1258210).
- pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset
of pins 34-39 (bsc#1258210).
- vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
(bsc#1258210).
- hwspinlock: qcom: avoid uninitialized struct members
(bsc#1258210).
- sched/fair: Fix cpu_util runnable_avg arithmetic (bsc#1258210).
- ARM: configs: Drop duplicated CONFIG_EXT4_FS (bsc#1258210).
- wifi: mt76: mt7925: clean up DMA on probe failure (bsc#1258210).
- wifi: mt76: use kfree_rcu for offchannel link in
mt76_put_vif_phy_link (bsc#1258210).
- wifi: mt76: mt7996: add missing max_remain_on_channel_duration
(bsc#1258210).
- wifi: mt76: mt7925: fix stale pointer comparisons in
change_vif_links (bsc#1258210).
- wifi: mt76: mt7925: keep TX BA state in the primary WCID
(bsc#1258210).
- wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX
(bsc#1258210).
- wifi: mt76: mt7925: validate skb length in testmode query
(bsc#1258210).
- wifi: mt76: mt7996: Fix possible token leak in
mt7996_tx_prepare_skb() (bsc#1258210).
- wifi: mt76: mt7996: Fix possible NULL pointer dereference in
mt7996_mac_write_txwi_80211() (bsc#1258210).
- wifi: mt76: mt7996: fix reading zeroed info->control.flags
after mt76_tx_status_skb_add() (bsc#1258210).
- wifi: mt76: mt7996: limit work in set_bitrate_mask (bsc#1258210).
- wifi: mt76: fix argument to ieee80211_is_first_frag()
(bsc#1258210).
- wifi: mt76: mt7915: fix potential tx_retries underflow
(bsc#1258210).
- wifi: mt76: mt7921: fix potential tx_retries underflow
(bsc#1258210).
- wifi: mt76: mt7925: fix potential tx_retries underflow
(bsc#1258210).
- wifi: mt76: mt7996: fix potential tx_retries underflow
(bsc#1258210).
- btrfs: fix invalid pointer dereference in
__btrfs_run_delayed_refs() (bsc#1258210).
- ALSA: aloop: Drop superfluous break (bsc#1258210).
- gpio: mt7621: fix interrupt banks mapping on gpio chips
(bsc#1258210).
- wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when
NSS ratio is reported (bsc#1258210).
- fbdev: sm501fb: Fix buffer errors in OF binding code
(bsc#1258210).
- vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS
(bsc#1258210).
- hwmon: (it87) Clamp negative values to zero in set_fan()
(bsc#1258210).
- btrfs: zoned: don't account data relocation space-info in
statfs free space (bsc#1258210).
- Revert "btrfs: fix the file offset calculation inside
btrfs_decompress_buf2page()" (bsc#1258210).
- btrfs: zoned: always set max_active_zones for zoned devices
(bsc#1258210).
- btrfs: annotate lockless read of defrag_bytes in should_nocow()
(bsc#1258210).
- btrfs: fix deadlock cloning inline extent when using
flushoncommit (bsc#1258210).
- igc: skip RX timestamp header for frame preemption verification
(bsc#1258210).
- ASoC: sma1307: Fix uevent string leaks in fault worker
(bsc#1258210).
- IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is
not specified (bsc#1258210).
- NFSD: Handle layout stid in nfsd4_drop_revoked_stid()
(bsc#1258210).
- spi: meson-spifc: fix runtime PM leak on remove (bsc#1258210).
- ASoC: codecs: aw88261: fix incorrect masks for boost regs
(bsc#1258210).
- vduse: hold vduse_lock across IDR lookup in open path
(bsc#1258210).
- vhost/vdpa: validate virtqueue index in mmap and fault paths
(bsc#1258210).
- virtio: rtc: tear down old virtqueues before restore
(bsc#1258210).
- virtio_console: read size from config space during device init
(bsc#1258210).
- vduse: Requeue failed read to send_list head (bsc#1258210).
- vhost/net: complete zerocopy ubufs only once (bsc#1258210).
- tools/virtio: check mmap return value in vringh_test
(bsc#1258210).
- vdpa/octeon_ep: Fix PF->VF mailbox data address calculation
(bsc#1258210).
- vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
(bsc#1258210).
- ASoC: cs35l56: Fix missing calls to wm_adsp2_remove()
(bsc#1258210).
- ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend
fails (bsc#1258210).
- ext4: fix ERR_PTR(0) in ext4_mkdir() (bsc#1258210).
- tools: missed broadcast_neigh if_link uapi header (bsc#1258210).
- netlink: specs: rt-link: missed broadcast-neigh (bsc#1258210).
- bonding: 3ad: add lacp_strict configuration knob (bsc#1258210).
- bonding: 3ad: fix carrier when no usable slaves (bsc#1258210).
- bonding: 3ad: fix mux port state on oper down (bsc#1258210).
- ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1258210).
- selftests/bpf: Fix bpf_iter/task_vma test (bsc#1258210).
- cxl/test: Fix integer overflow in mock LSA bounds checks
(bsc#1258210).
- cxl/test: Zero out LSA backing memory to avoid leaking to user
(bsc#1258210).
- of: cpu: add check in __of_find_n_match_cpu_property()
(bsc#1258210).
- vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1258210).
- bpf: Tighten cgroup storage cookie checks for prog arrays
(bsc#1258210).
- pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag
(bsc#1258210).
- pinctrl: airoha: generalize pins/group/function/confs handling
(bsc#1258210).
- pinctrl: airoha: an7581: add missed gpio32 pin group
(bsc#1258210).
- pinctrl: airoha: an7581: fix misprint in gpio19 pinconf
(bsc#1258210).
- arm64: dts: allwinner: a523: Add missing GPIO interrupt
(bsc#1258210).
- ASoC: cs35l56: Fix possible uninitialized value in
cs35l56_spi_system_reset() (bsc#1258210).
- s390/process: Fix kernel thread function pointer type
(bsc#1258210).
- Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr()
for non-serdev device (bsc#1258210).
- Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
(bsc#1258210).
- Bluetooth: hci_event: fix simultaneous discovery stuck in
FINDING (bsc#1258210).
- Bluetooth: hci_core: Fix UAF in hci_unregister_dev()
(bsc#1258210).
- Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
(bsc#1258210).
- Bluetooth: hci: validate codec capability element length
(bsc#1258210).
- Bluetooth: vhci: validate devcoredump state before side effects
(bsc#1258210).
- fs: efs: remove unneeded debug prints (bsc#1258210).
- RDMA/mlx5: Remove DCT restrack tracking (bsc#1258210).
- RDMA/mlx5: Remove raw RSS QP restrack tracking (bsc#1258210).
- RDMA/mlx5: Fix undefined shift of user RQ WQE size (bsc#1258210).
- =?UTF-8?q?RDMA/mlx5:=20Release=20the=20HW=E2=80=91provide?=
=?UTF-8?q?d=20UAR=20index=20rather=20than=20the=20SW=20one?=
(bsc#1258210).
- ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT
properly (bsc#1258210).
- ASoC: codecs: hdac_hdmi: Validate written enum value
(bsc#1258210).
- ASoC: fsl: fsl_audmix: Validate written enum values
(bsc#1258210).
- ASoC: tegra: tegra210_ahub: Validate written enum value
(bsc#1258210).
- net: dsa: qca8k: fix led devicename when using external mdio
bus (bsc#1258210).
- net/sched: cls_flow: Dont expose folded kernel pointers
(bsc#1258210).
- net: fib_rules: Don't dump dying fib_rule in fib_rules_dump()
(bsc#1258210).
- bridge: cfm: reject invalid CCM interval at configuration time
(bsc#1258210).
- sctp: validate embedded address parameter length (bsc#1258210).
- net: pfcp: allocate per-cpu tstats for PFCP netdevs
(bsc#1258210).
- net/sched: sch_hfsc: Don't make class passive twice
(bsc#1258210).
- tipc: require net admin for TIPCv2 netlink mutators
(bsc#1258210).
- tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1258210).
- tipc: reject inverted service ranges from peer bindings
(bsc#1258210).
- cxl/test: Unregister cxl_acpi in cxl_test_init() error path
(bsc#1258210).
- cxl/test: Add check after kzalloc() memory in alloc_mock_res()
(bsc#1258210).
- crypto: marvell/octeontx - fix DMA cleanup using wrong loop
index (bsc#1258210).
- crypto: cavium/cpt - fix DMA cleanup using wrong loop index
(bsc#1258210).
- crypto: rng - Free default RNG on module exit (bsc#1258210).
- ALSA: usb-audio: qcom: Guard sideband endpoint removal
(bsc#1258210).
- ALSA: seq: Fix kernel heap address leak in bounce_error_event()
(bsc#1258210).
- spi: xilinx: use FIFO occupancy register to determine buffer
size (bsc#1258210).
- iommu: Avoid copying the user array twice in the full-array
copy helper (bsc#1258210).
- ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset
GPIO (bsc#1258210).
- power: supply: core: fix supplied_from allocations (bsc#1258210).
- handshake: Require admin permission for DONE command
(bsc#1258210).
- tcp: clear sock_ops cb flags before force-closing a child socket
(bsc#1258210).
- virtio_net: do not allow tunnel csum offload for non GSO packets
(bsc#1258210).
- net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1258210).
- net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1258210).
- net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog
during peek before restoring qlen (bsc#1258210).
- net: mana: initialize gdma queue id to INVALID_QUEUE_ID
(bsc#1258210).
- net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE
check (bsc#1258210).
- net: watchdog: fix refcount tracking races (bsc#1258210).
- net: ethernet: mtk_wed: fix loading WO firmware for MT7986
(bsc#1258210).
- net/sched: sch_dualpi2: Add missing module alias (bsc#1258210).
- bpf: Run generic devmap egress prog on private skb (bsc#1258210).
- net/mlx5: Check max_macs devlink param value against max
capability (bsc#1258210).
- bpf: Fix setting retval to -EPERM for cgroup hooks not returning
errno (bsc#1258210).
- octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1258210).
- net: ethernet: mtk_wed: debugfs: correct index in
wed_amsdu_show() (bsc#1258210).
- net: wwan: t7xx: check skb_clone in control TX (bsc#1258210).
- dpll: Support dynamic pin index allocation (bsc#1258210).
- dpll: Enhance and consolidate reference counting logic
(bsc#1258210).
- dpll: fix stale iteration in dpll_pin_on_pin_unregister()
(bsc#1258210).
- dpll: send delete notification before unregister in on-pin
rollback (bsc#1258210).
- dpll: emit per-dpll delete notifications in
dpll_pin_on_pin_unregister() (bsc#1258210).
- dpll: guard sync-pair removal on full pin unregister
(bsc#1258210).
- dpll: balance create/delete notifications in
__dpll_pin_(un)register (bsc#1258210).
- landlock: Fix unmarked concurrent access to socket family
(bsc#1258210).
- net: bcmgenet: Use weighted round-robin TX DMA arbitration
(bsc#1258210).
- net: airoha: Fix register index for Tx-fwd counter configuration
(bsc#1258210).
- net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE
entries (bsc#1258210).
- kcm: use WRITE_ONCE() when changing lower socket callbacks
(bsc#1258210).
- ALSA: seq: oss: Serialize readq reset state with q->lock
(bsc#1258210).
- ALSA: seq: avoid stale FIFO cells during resize (bsc#1258210).
- netfilter: nf_conncount: callers must hold rcu read lock
(bsc#1258210).
- ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
(bsc#1258210).
- cifs: remove all cifs files before kill super (bsc#1258210).
- smb/client: always return a value for FS_IOC_GETFLAGS
(bsc#1258210).
- selftests/bpf: Fix typo in verify_umulti_link_info (bsc#1258210).
- selftests/bpf: Initialize operation name before use
(bsc#1258210).
- bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
(bsc#1258210).
- udf: fix nls leak on udf_fill_super() failure (bsc#1258210).
- bpf, sockmap: reject overflowing copy + len in
bpf_msg_push_data() (bsc#1258210).
- net: remove addr_len argument of recvmsg() handlers
(bsc#1258210).
- sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1258210).
- bpf, sockmap: fix integer overflow in bpf_msg_pop_data()
bounds check (bsc#1258210).
- MIPS: mm: Fix out-of-bounds write in maar_res_walk()
(bsc#1258210).
- powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
(bsc#1258210).
- powerpc/powernv: fix preempt count leak in
pnv_kexec_wait_secondaries_down (bsc#1258210).
- powerpc/kexec: fix double get_cpu() imbalance in
kexec_prepare_cpus (bsc#1258210).
- KEYS: Use acquire when reading state in keyring search
(bsc#1258210).
- tipc: fix UAF in tipc_l2_send_msg() (bsc#1258210).
- tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS
(0xFFFF) (bsc#1258210).
- net: airoha: Fix always-true condition in PPE1 queue reservation
loop (bsc#1258210).
- net: ethernet: oa_tc6: Remove FCS size in RX frame (bsc#1258210).
- ionic: Fix check in ionic_get_link_ext_stats (bsc#1258210).
- RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
(bsc#1258210).
- RDMA/bnxt_re: Avoid displaying the kernel pointer (bsc#1258210).
- RDMA/bnxt_re: Move the UAPI methods to a dedicated file
(bsc#1258210).
- RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the
feature is disabled (bsc#1258210).
- ksmbd: fix use-after-free in same_client_has_lease()
(bsc#1258210).
- mfd: rsmu: Fix page register setup (bsc#1258210).
- mfd: cs42l43: Sanity check firmware size (bsc#1258210).
- ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
(bsc#1258210).
- 9p: avoid returning ERR_PTR(0) from mkdir operations
(bsc#1258210).
- net/9p: fix race condition on rdma->state in trans_rdma.c
(bsc#1258210).
- eventpoll: rename ep_remove_safe() back to ep_remove()
(bsc#1258210).
- eventpoll: expand top-of-file overview / locking doc
(bsc#1258210).
- eventpoll: rename attach_epitem() to ep_attach_file()
(bsc#1258210).
- eventpoll: split ep_insert() into alloc + register stages
(bsc#1258210).
- eventpoll: extract ep_deliver_event() from ep_send_events()
(bsc#1258210).
- eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers
(bsc#1258210).
- eventpoll: rename epi->next and txlist for clarity (bsc#1258210).
- eventpoll: Fix epoll_wait() report false negative (bsc#1258210).
- gpiolib: acpi: Only trigger ActiveBoth interrupts on boot
(bsc#1258210).
- i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845
(bsc#1258210).
- staging: nvec: fix use-after-free in nvec_rx_completed()
(bsc#1258210).
- perf debuginfo: Fix libdw API contract violations (bsc#1258210).
- coresight: cti: Fix DT filter signals silently ignored
(bsc#1258210).
- soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached
Peripheral (bsc#1258210).
- soundwire: fix bug in sdw_add_element_group_count found by
syzkaller (bsc#1258210).
- coresight: etm4x: Remove the state_needs_restore flag
(bsc#1258210).
- coresight: ete: Always save state on power down (bsc#1258210).
- coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
(bsc#1258210).
- PCI/ASPM: Don't reconfigure ASPM entering low-power state
(bsc#1258210).
- PCI: Introduce named defines for PCI ROM (bsc#1258210).
- PCI: Check ROM header and data structure addr before accessing
(bsc#1258210).
- x86/platform/olpc: xo15: Drop wakeup source on driver removal
(bsc#1258210).
- platform/x86: xo15-ebook: Fix wakeup source and GPE handling
(bsc#1258210).
- perf sched: Add missing mmap2 handler in timehist (bsc#1258210).
- PCI: loongson: Do not ignore downstream devices on external
bridges (bsc#1258210).
- rust: alloc: fix assert in `Vec::reserve` doc test (bsc#1258210).
- bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
(bsc#1258210).
- coresight: fix missing error code when trace ID is invalid
(bsc#1258210).
- clk: qcom: cmnpll: Account for reference clock divider
(bsc#1258210).
- phy: phy-can-transceiver: Check driver match and driver data
against NULL (bsc#1258210).
- perf pmu: Skip test on Arm64 when #slots is zero (bsc#1258210).
- clk: at91: sam9x7: Fix gmac_gclk clock definition (bsc#1258210).
- soundwire: intel_ace2x: release bpt_stream when close it
(bsc#1258210).
- coresight: Fix source not disabled on idr_alloc_u32 failure
(bsc#1258210).
- mailbox: mpfs: fix check for syscon presence in
mpfs_mbox_inbox_isr() (bsc#1258210).
- mailbox: mtk-adsp: fix UAF during device teardown (bsc#1258210).
- PCI: dwc: Fix signedness bug in fault injection test code
(bsc#1258210).
- perf build-id: Fix off-by-one bug when printing kernel/module
build-id (bsc#1258210).
- perf inject: Add --convert-callchain option (bsc#1258210).
- staging: most: video: avoid double free on video register
failure (bsc#1258210).
- usb: host: max3421: Fix shift-out-of-bounds in
max3421_hub_control() (bsc#1258210).
- usb: host: max3421: Reject hub port requests for non-existent
ports (bsc#1258210).
- perf test amd ibs: Fix incorrect kernel version check
(bsc#1258210).
- gpib: Fix inappropriate ioctl error return (bsc#1258210).
- char: tlclk: fix use-after-free in tlclk_cleanup() (bsc#1258210).
- gpib: fix double decrement of descriptor_busy in command_ioctl()
(bsc#1258210).
- clk: renesas: rzg2l: Rename iterator in for_each_mod_clock()
to avoid shadowing (bsc#1258210).
- powerpc tools perf: Initialize error code in auxtrace_record_init
function (bsc#1258210).
- PCI: qcom: Disable ASPM L0s for SA8775P (bsc#1258210).
- perf header: Sanity check HEADER_EVENT_DESC attr.size before
swap (bsc#1258210).
- iio: light: si1133: reset counter to prevent race condition
(bsc#1258210).
- iio: light: si1133: prevent race condition on timeout
(bsc#1258210).
- iio: magnetometer: ak8975: fix potential kernel stack memory
leak (bsc#1258210).
- iio: adc: xilinx-ams: fix out-of-bounds channel lookup in
event handling (bsc#1258210).
- iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
(bsc#1258210).
- iio: tcs3472: power down chip on probe failure (bsc#1258210).
- clk: at91: keep securam node alive while mapping it
(bsc#1258210).
- HID: logitech-hidpp: remove excess kernel-doc member in
hidpp_scroll_counter (bsc#1258210).
- fs/ntfs3: add bounds check to run_get_highest_vcn()
(bsc#1258210).
- fs/ntfs3: fix mount failure on 64K page-size kernels
(bsc#1258210).
- drm/amd/display: Add missing kdoc for ALLM parameters
(bsc#1258210).
- thunderbolt: debugfs: Fix margining error counter buffer leak
(bsc#1258210).
- dmaengine: imx-sdma: Refine spba bus searching in probe
(bsc#1258210).
- dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional
(bsc#1258210).
- perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
(bsc#1258210).
- perf annotate: Fix crashes on empty annotate windows
(bsc#1258210).
- perf tools: Guard test_bit from out-of-bounds sample CPU
(bsc#1258210).
- perf sched: Fix thread reference leak in latency_switch_event
(bsc#1258210).
- perf tools: Add bounds check to cpu__get_node() (bsc#1258210).
- perf sched: Cap max_cpu at MAX_CPUS in timehist sample processing
(bsc#1258210).
- perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
(bsc#1258210).
- perf mmap: Guard cpu__get_node() return in aio_bind()
(bsc#1258210).
- perf stat: Bounds-check CPU index in topology aggregation
callbacks (bsc#1258210).
- perf c2c: Bounds-check CPU and node IDs before bitmap and
array access (bsc#1258210).
- perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop
(bsc#1258210).
- perf sched: Clean up idle_threads entry on init failure
(bsc#1258210).
- perf sched: Use thread__put() in free_idle_threads()
(bsc#1258210).
- perf sched: Replace BUG_ON and add NULL checks in replay event
helpers (bsc#1258210).
- perf mmap: Fix NULL deref in aio cleanup on alloc failure
(bsc#1258210).
- perf stat: Introduce perf_env__get_cpu_topology() to guard
NULL env->cpu (bsc#1258210).
- perf c2c: Fix use-after-free in he__get_c2c_hists() error path
(bsc#1258210).
- perf timechart: Fix cpu2y() OOB read on untrusted CPU index
(bsc#1258210).
- perf tools: Fix int16_t truncation of max_cpu_num in
set_max_cpu_num() (bsc#1258210).
- dt-bindings: clock: qcom: Add X1P42100 camera clock controller
(bsc#1258210).
- clk: qcom: camcc-x1e80100: Add support for camera QDSS debug
clocks (bsc#1258210).
- mshv: add bounds check on vp_index in mshv_intercept_isr()
(bsc#1258210).
- dmaengine: qcom: gpi: set DMA_PRIVATE capability (bsc#1258210).
- dmaengine: Fix possible use after free (bsc#1258210).
- dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc
(bsc#1258210).
- dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor
(bsc#1258210).
- clk: qcom: a53: Corrected frequency multiplier for 1152MHz
(bsc#1258210).
- sunrpc: Fix error handling in
rpc_sysfs_xprt_switch_add_xprt_store() (bsc#1258210).
- pNFS/filelayout: fix cheking if a layout is striped
(bsc#1258210).
- xprtrdma: Avoid 250 ms delay on backlog wakeup (bsc#1258210).
- xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
(bsc#1258210).
- xprtrdma: Post receive buffers after RPC completion
(bsc#1258210).
- xprtrdma: Use sendctx DMA state for Send signaling (bsc#1258210).
- xprtrdma: Decouple req recycling from RPC completion
(bsc#1258210).
- NFSv4/pnfs: defer return_range callbacks until after inode
unlock (bsc#1258210).
- nfs: keep PG_UPTODATE clear after read errors in page groups
(bsc#1258210).
- NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS
connect errors (bsc#1258210).
- NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in
pg_get_mirror_count_write (bsc#1258210).
- nfs: use nfsi->rwsem to protect traversal of the file lock list
(bsc#1258210).
- PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
(bsc#1258210).
- pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages
(bsc#1258210).
- PCI: meson: Propagate devm_add_action_or_reset() failure
(bsc#1258210).
- PCI: meson: Add missing remove callback (bsc#1258210).
- fs/ntfs3: resize log->one_page_buf when adopting on-disk page
size (bsc#1258210).
- platform/x86:intel/pmc: Add support for multiple DMU GUIDs
(bsc#1258210).
- platform/x86:intel/pmc: Rename PMC index variable to pmc_idx
(bsc#1258210).
- platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map
(bsc#1258210).
- platform/x86/intel/vsec: correct kernel-doc comments
(bsc#1258210).
- platform/x86/intel/vsec: Decouple add/link helpers from PCI
(bsc#1258210).
- platform/x86/intel/vsec: Switch exported helpers from pci_dev
to device (bsc#1258210).
- platform/x86/intel/vsec: Return real error codes from
registration path (bsc#1258210).
- platform/x86/intel/vsec: Restore BAR fallback for header walk
(bsc#1258210).
- perf tools: Fix get_max_num() size_t underflow on empty sysfs
file (bsc#1258210).
- perf tools: Use scnprintf() in cpu_map__snprint() to prevent
overflow (bsc#1258210).
- perf tools: Use perf_env__get_cpu_topology() in
machine__resolve() (bsc#1258210).
- PCI: rcar-host: Remove unused LIST_HEAD(res) (bsc#1258210).
- perf sched: Bounds-check prio before test_bit() in timehist
(bsc#1258210).
- perf sched: Fix idle-hist callchain display using wrong rb_first
variant (bsc#1258210).
- perf bpf: Use scnprintf() in snprintf_hex() and
synthesize_bpf_prog_name() (bsc#1258210).
- perf hists: Fix snprintf() in hists__scnprintf_title() UID
filter path (bsc#1258210).
- xprtrdma: Fix ep kref imbalance on ADDR_CHANGE (bsc#1258210).
- xprtrdma: Initialize re_id before removal registration
(bsc#1258210).
- xprtrdma: Check frwr_wp_create() during connect (bsc#1258210).
- xprtrdma: Document and assert reply-handler invariants
(bsc#1258210).
- xprtrdma: Resize reply buffers before reposting receives
(bsc#1258210).
- xprtrdma: Fix bcall rep leak and unbounded peek (bsc#1258210).
- xprtrdma: Sanitize the reply credit grant after parsing
(bsc#1258210).
- xprtrdma: Repost Receive buffers for malformed replies
(bsc#1258210).
- xprtrdma: Return sendctx slot after Send preparation failure
(bsc#1258210).
- perf s390: Fix TEXTREL in Python extension by compiling as PIC
(bsc#1258210).
- perf cs-etm: Queue context packets for frontend (bsc#1258210).
- perf pmu: Fix pmu_id() heap underwrite on empty identifier file
(bsc#1258210).
- perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty
sysfs file (bsc#1258210).
- tools lib api: Fix missing null termination in
filename__read_int/ull() (bsc#1258210).
- perf symbols: Fix signed overflow in sysfs__read_build_id()
size check (bsc#1258210).
- perf symbols: Bounds-check .gnu_debuglink section data
(bsc#1258210).
- perf intel-pt: Fix snprintf size tracking bug in insn decoder
(bsc#1258210).
- perf tools: Fix thread__set_comm_from_proc() on empty comm file
(bsc#1258210).
- perf hwmon: Fix off-by-one null termination on sysfs reads
(bsc#1258210).
- perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event()
(bsc#1258210).
- perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow
(bsc#1258210).
- perf symbols: Bounds-check descsz in sysfs__read_build_id()
GNU fallback (bsc#1258210).
- perf hwmon: Guard label read against empty or failed reads
(bsc#1258210).
- perf tools: Use snprintf() in dso__read_running_kernel_build_id()
(bsc#1258210).
- tools lib api: Fix filename__write_int() writing uninitialized
stack data (bsc#1258210).
- tools lib api: Fix mount_overload() snprintf truncation and
toupper range (bsc#1258210).
- perf bpf: Add NULL check for btf__type_by_id() in
synthesize_bpf_prog_name() (bsc#1258210).
- perf bpf: Fix map data leak in bpf_metadata_create() on alloc
failure (bsc#1258210).
- perf bpf: Fix metadata leak in perf_env__add_bpf_info() on
duplicate insert (bsc#1258210).
- perf symbols: Add bounds checks to elf_read_build_id() note
iteration (bsc#1258210).
- perf symbols: Add bounds checks to read_build_id() note
iteration in minimal build (bsc#1258210).
- dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation
register on Purwa (bsc#1258210).
- PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
(bsc#1258210).
- PCI: mediatek: Use actual physical address instead of
virt_to_phys() (bsc#1258210).
- phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing
pm_runtime_disable() on probe error path (bsc#1258210).
- PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference
when no RAS DES capability (bsc#1258210).
- Revert "PCI/MSI: Unmap MSI-X region on error" (bsc#1258210).
- apparmor: fix shadowing of plabel that prevents cache from
being updated (bsc#1258210).
- apparmor: fix race in unix socket mediation when peer_path is
used (bsc#1258210).
- apparmor: fix refcount leak when updating the sk_ctx
(bsc#1258210).
- security/apparmor/apparmorfs.c: conditionally compile
get_loaddata_common_ref() (bsc#1258210).
- apparmor: check label build before no_new_privs test
(bsc#1258210).
- apparmor: aa_label_alloc use aa_label_free on alloc failure
(bsc#1258210).
- apparmor: fix rawdata_f_data implicit flex array (bsc#1258210).
- apparmor: grab ns lock and refresh when looking up changehat
child profiles (bsc#1258210).
- apparmor: fix potential UAF in aa_replace_profiles (bsc#1258210).
- apparmor: fix NULL pointer dereference in unpack_pdb
(bsc#1258210).
- apparmor: remove or add symlinks to rawdata according to
export_binary (bsc#1258210).
- apparmor: Fix return in ns_mkdir_op (bsc#1258210).
- apparmor: fail policy unpack on accept2 allocation failure
(bsc#1258210).
- apparmor: aa_getprocattr free procattr leak on format failure
(bsc#1258210).
- apparmor: put secmark label after secid lookup (bsc#1258210).
- i3c: mipi-i3c-hci: Quieten initialization messages (bsc#1258210).
- i3c: mipi-i3c-hci: Allow for Multi-Bus Instances (bsc#1258210).
- i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc()
(bsc#1258210).
- i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring
(bsc#1258210).
- i3c: master: add WQ_PERCPU to alloc_workqueue users
(bsc#1258210).
- i3c: master: Make hot-join workqueue freezable to block hot-join
during suspend (bsc#1258210).
- i3c: add sysfs entry and attribute for Device NACK Retry count
(bsc#1258210).
- i3c: master: Replace WARN_ON() with dev_err() in
i3c_dev_free_ibi_locked() (bsc#1258210).
- i3c: master: Introduce optional Runtime PM support (bsc#1258210).
- i3c: master: Add i3c_master_do_daa_ext() for post-hibernation
address recovery (bsc#1258210).
- i3c: master: Move rstdaa error suppression (bsc#1258210).
- i3c: master: Consolidate Hot-Join DAA work in the core
(bsc#1258210).
- i3c: master: Ensure Hot-Join operations are stopped on shutdown
(bsc#1258210).
- i3c: master: Defer new-device registration out of DAA caller
context (bsc#1258210).
- i3c: master: Prevent reuse of dynamic address on device add
failure (bsc#1258210).
- apparmor: fix label can not be immediately before a declaration
(bsc#1258210).
- accel/ivpu: fix HWS command queue leak on registration failure
(bsc#1258210).
- sparc: led: avoid trimming a newline from empty writes
(bsc#1258210).
- perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz
(bsc#1258210).
- perf symbols: Validate p_filesz before use in
filename__read_build_id() (bsc#1258210).
- perf symbols: Break infinite loop on zero-filled notes in
sysfs__read_build_id() (bsc#1258210).
- perf tools: Don't read build-ids from non-regular files
(bsc#1258210).
- perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code
(bsc#1258210).
- perf tools: Fix uninitialized pathname on uncompressed fallback
in filename__decompress() (bsc#1258210).
- perf dso: Fix heap overflow in dso__get_filename() on
decompressed path (bsc#1258210).
- perf dso: Set error code when open() fails on uncompressed
fallback path (bsc#1258210).
- perf tools: Use snprintf() for root_dir path construction
(bsc#1258210).
- perf hwmon: Fix fd check to accept fd 0 in
hwmon_pmu__describe_items() (bsc#1258210).
- perf sched: Replace (void*)1 sentinel with proper runtime
allocation (bsc#1258210).
- perf bpf: Validate func_info_rec_size and sub_id in
synthesize_bpf_prog_name() (bsc#1258210).
- perf bpf: Reject oversized BPF metadata events that truncate
header.size (bsc#1258210).
- perf bpf: Bounds-check array offsets in bpil_offs_to_addr()
(bsc#1258210).
- perf: Remove redundant kernel.h include (bsc#1258210).
- perf cs-etm: Reject CPU IDs that would overflow signed comparison
(bsc#1258210).
- gpio: mlxbf3: fail probe if gpiochip registration fails
(bsc#1258210).
- drm/i915: clear CRTC color blob pointers after dropping refs
(bsc#1258210).
- drm/xe: Fix wa_oob codegen recipe for external module builds
(bsc#1258210).
- spi: dw: fix wrong BAUDR setting after resume (bsc#1258210).
- i3c: master: Update dev_nack_retry_count under maintenance lock
(bsc#1258210).
- i3c: master: Add missing runtime PM get in
dev_nack_retry_count_store() (bsc#1258210).
- ALSA: usb-audio: qcom: Free sideband sg_table objects
(bsc#1258210).
- xfrm: Fix xfrm state cache insertion race (bsc#1258210).
- xfrm: annotate data-races around xfrm_policy_count[] and
xfrm_policy_default[] (bsc#1258210).
- xfrm: validate selector family and prefixlen during match
(bsc#1258210).
- perf machine: Use snprintf() for guestmount path construction
(bsc#1258210).
- perf cs-etm: Validate num_cpu before metadata allocation
(bsc#1258210).
- perf cs-etm: Require full global header in auxtrace_info size
check (bsc#1258210).
- perf cs-etm: Bounds-check CPU in cs_etm__get_queue()
(bsc#1258210).
- perf bpf: Validate array presence before casting BPF prog info
pointers (bsc#1258210).
- perf dso: Set standard errno on decompression failure
(bsc#1258210).
- ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate
mode (bsc#1258210).
- drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
(bsc#1258210).
- drm/amd/display: Fix mem_type change detection for async flips
(bsc#1258210).
- drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
(bsc#1258210).
- drm/amdgpu: initialize irq.lock spinlock earlier (bsc#1258210).
- octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
(bsc#1258210).
- net: psample: fix info leak in PSAMPLE_ATTR_DATA (bsc#1258210).
- sctp: hold socket lock when dumping endpoints in sctp_diag
(bsc#1258210).
- ALSA: usb-audio: qcom: reject stream disable with no active
interface (bsc#1258210).
- ALSA: usb-audio: qcom: clear opened when stream enable fails
(bsc#1258210).
- PCI: iproc: Restore .map_irq() for the platform bus driver
(bsc#1258210).
- spi: rpc-if: Use correct device for hardware reinitialization
on resume (bsc#1258210).
- virtio-net: fix len check in receive_big() (bsc#1258210).
- dpaa2-switch: fix VLAN upper check not rejecting bridge join
(bsc#1258210).
- devlink: Fix parent ref leak in devl_rate_node_create()
(bsc#1258210).
- devlink: Fix parent ref leak on tc-bw failure (bsc#1258210).
- net: airoha: fix foe_check_time allocation size (bsc#1258210).
- net: macb: add TX stall timeout callback to recover from lost
TSTART write (bsc#1258210).
- flow_dissector: check device type before reading ETH_ADDRS
(bsc#1258210).
- selftests: vlan_bridge_binding: Fix flaky operational state
check (bsc#1258210).
- ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints
(bsc#1258210).
- arm64/hw_breakpoint: reject unaligned watchpoints that would
truncate BAS (bsc#1258210).
- thermal: intel: Fix dangling resources on
thermal_throttle_online() failure (bsc#1258210).
- ACPI: resource: Amend kernel-doc style (bsc#1258210).
- ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
(bsc#1258210).
- ieee802154: Restore initial state on failed device_rename()
in cfg802154_switch_netns() (bsc#1258210).
- ieee802154: Avoid calling WARN_ON() on -ENOMEM in
cfg802154_switch_netns() (bsc#1258210).
- ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
(bsc#1258210).
- ieee802154: fix kernel-infoleak in dgram_recvmsg() (bsc#1258210).
- mac802154: Prevent overwrite return code in
mac802154_perform_association() (bsc#1258210).
- md: merge mddev has_superblock into mddev_flags (bsc#1258210).
- md: merge mddev faillast_dev into mddev_flags (bsc#1258210).
- md: merge mddev serialize_policy into mddev_flags (bsc#1258210).
- md/raid1: honor REQ_NOWAIT when waiting for behind writes
(bsc#1258210).
- md/raid1: free r1_bio when REQ_NOWAIT is set and read would
block on retry (bsc#1258210).
- netfilter: ipset: Fix data race between add and dump in all
hash types (bsc#1258210).
- netfilter: ipset: annotate "pos" for concurrent readers/writers
(bsc#1258210).
- netfilter: ipset: Don't use test_bit() in lockless RCU readers
in hash types (bsc#1258210).
- netfilter: ipset: fix order of kfree_rcu() and
rcu_assign_pointer() (bsc#1258210).
- netfilter: ipset: make sure gc is properly stopped (bsc#1258210).
- netfilter: nft_payload: reject offsets exceeding 65535 bytes
(bsc#1258210).
- netfilter: nft_meta_bridge: add validate callback for get
operations (bsc#1258210).
- netfilter: flowtable: move path discovery infrastructure to
its own file (bsc#1258210).
- netfilter: nft_flow_offload: zero device address for non-ether
case (bsc#1258210).
- netfilter: nf_reject: skip iphdr options when looking for icmp
header (bsc#1258210).
- netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
(bsc#1258210).
- mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx()
(bsc#1258210).
- irqchip/crossbar: Fix parent domain resource leak (bsc#1258210).
- alloc_tag: fix use-after-free in /proc/allocinfo after module
unload (bsc#1258210).
- selftests/mm: restore default nr_hugepages value via exit trap
in charge_reserved_hugetlb.sh (bsc#1258210).
- selftests/mm: restore default nr_hugepages value via exit trap
in hugetlb_reparenting_test.sh (bsc#1258210).
- selftests/mm: fix hugetlb pathname construction in
hugetlb_reparenting_test.sh (bsc#1258210).
- selftests/mm: fix cgroup task placement and drop memory.current
checks in hugetlb_reparenting_test.sh (bsc#1258210).
- selftests/mm: size tmpfs according to PMD page size in
split_huge_page_test (bsc#1258210).
- selftests/mm: free dynamically allocated PMD-sized buffers in
split_huge_page_test (bsc#1258210).
- selftest/mm: register existing mapping with userfaultfd in
hugetlb-mremap (bsc#1258210).
- selftests/mm: ensure destination is hugetlb-backed in
hugetlb-mremap (bsc#1258210).
- selftests/mm: skip uffd-stress test when nr_pages_per_cpu is
zero (bsc#1258210).
- selftests/mm: clarify alternate unmapping in compaction_test
(bsc#1258210).
- selftests/mm: allow PUD-level entries in compound testcase of
hmm tests (bsc#1258210).
- selftests/mm: fix exclusive_cow test fork() handling
(bsc#1258210).
- net: marvell: prestera: initialize err in prestera_port_sfp_bind
(bsc#1258210).
- tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
(bsc#1258210).
- net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init
error paths (bsc#1258210).
- octeontx2-af: mcs: Fix unsupported secy stats read (bsc#1258210).
- octeontx2-pf: Clear stats of all resources when freeing resources
(bsc#1258210).
- octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
(bsc#1258210).
- net: emac: Fix NULL pointer dereference in emac_probe
(bsc#1258210).
- net/sched: act_ct: fix nf_connlabels leak on two error paths
(bsc#1258210).
- net: airoha: Fix skb->priority underflow in
airoha_dev_select_queue() (bsc#1258210).
- ipv6: ndisc: fix NULL deref in accept_untracked_na()
(bsc#1258210).
- ipv6: ioam: fix type confusion of dst_entry (bsc#1258210).
- dpaa2-switch: do not accept VLAN uppers while bridged
(bsc#1258210).
- rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
(bsc#1258210).
- rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
(bsc#1258210).
- bpf: Fix stack slot index in nospec checks (bsc#1258210).
- bpftool: Fix vmlinux BTF leak in cgroup commands (bsc#1258210).
- bpf: zero-initialize the fib lookup flow struct (bsc#1258210).
- bpf: Fix effective prog array index with BPF_F_PREORDER
(bsc#1258210).
- power: sequencing: fix ABBA deadlock in
pwrseq_device_unregister() (bsc#1258210).
- gpiolib: initialize return value in gpiochip_set_multiple()
(bsc#1258210).
- drm/edid: fix OOB read in drm_parse_tiled_block() (bsc#1258210).
- PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count'
value of 0 (bsc#1258210).
- PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count'
value of 0 (bsc#1258210).
- ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
(bsc#1258210).
- ice: fix AQ error code comparison in ice_set_pauseparam()
(bsc#1258210).
- ice: call netif_keep_dst() once when entering switchdev mode
(bsc#1258210).
- rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake()
on cleanup (bsc#1258210).
- ice: dpll: set pointers to NULL after kfree in
ice_dpll_deinit_info (bsc#1258210).
- ice: dpll: fix memory leak in ice_dpll_init_info error paths
(bsc#1258210).
- i40e: Fix i40e_debug() to use struct i40e_hw argument
(bsc#1258210).
- rtc: msc313: fix NULL deref in shared IRQ handler at probe
(bsc#1258210).
- ksmbd: fix use-after-free of conn->preauth_info in concurrent
SMB2 NEGOTIATE (bsc#1258210).
- ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() (bsc#1258210).
- eth: bnxt: gather and report HW-GRO stats (bsc#1258210).
- eth: bnxt: rename ring_err_stats -> ring_drv_stats (bsc#1258210).
- eth: bnxt: improve the timing of stats (bsc#1258210).
- ipv4: fib: Don't ignore error route in local/main tables
(bsc#1258210).
- md/raid5: use stripe state snapshot in break_stripe_batch_list()
(bsc#1258210).
- md/raid5: avoid R5_Overlap races while breaking stripe batches
(bsc#1258210).
- bpf: Disable xfrm_decode_session hook attachment (bsc#1258210).
- netfilter: nf_nat: avoid invalid nat_net pointer use on failed
nf_nat_init() (bsc#1258210).
- netfilter: nf_conncount: prevent connlimit drops for early
confirmed ct (bsc#1258210).
- netfilter: nft_synproxy: stop bypassing the priv->info snapshot
(bsc#1258210).
- netfilter: nft_compat: ebtables emulation must reject non-bridge
targets (bsc#1258210).
- gpio: davinci: fix IRQ domain leak on devm_kzalloc failure
(bsc#1258210).
- NTB: epf: Make db_valid_mask cover only real doorbell bits
(bsc#1258210).
- NTB: epf: Report 0-based doorbell vector via ntb_db_event()
(bsc#1258210).
- NTB: epf: Fix doorbell bitmask and IRQ vector handling
(bsc#1258210).
- alpha/PCI: Add security_locked_down() check to
pci_mmap_resource() (bsc#1258210).
- alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
(bsc#1258210).
- net, bpf: check master for NULL in xdp_master_redirect()
(bsc#1258210).
- net: do not acquire dev->tx_global_lock in netdev_watchdog_up()
(bsc#1258210).
- net: dsa: sja1105: round up PTP perout pin duration
(bsc#1258210).
- veth: fix NAPI leak in XDP enable error path (bsc#1258210).
- net: usb: lan78xx: restore VLAN and hash filters after link up
(bsc#1258210).
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
(bsc#1258210).
- ipv6: fix error handling in disable_ipv6 sysctl (bsc#1258210).
- ipv6: fix error handling in ignore_routes_with_linkdown sysctl
(bsc#1258210).
- ipv6: fix error handling in forwarding sysctl (bsc#1258210).
- ipv6: fix error handling in disable_policy sysctl (bsc#1258210).
- ipv6: fix state corruption during proxy_ndp sysctl restart
(bsc#1258210).
- ipv6: fix missing notification for ignore_routes_with_linkdown
(bsc#1258210).
- eth: fbnic: fix ordering of heartbeat vs ownership (bsc#1258210).
- thermal: testing: zone: Flush work items during cleanup
(bsc#1258210).
- ACPI: processor_idle: Mark LPI enter functions as __cpuidle
(bsc#1258210).
- smb/client: preserve errors from smb2_set_sparse() (bsc#1258210).
- rtc: ds1307: Fix off-by-one issue with wday for rx8130
(bsc#1258210).
- rtc: cmos: unregister HPET IRQ handler on probe failure
(bsc#1258210).
- net: dsa: realtek: fix memory leak in rtl8366rb_setup_led()
(bsc#1258210).
- net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit
(bsc#1258210).
- octeontx2-af: Validate NIX maximum LFs correctly (bsc#1258210).
- net: mvneta: re-enable percpu interrupt on resume (bsc#1258210).
- net: sungem: fix probe error cleanup (bsc#1258210).
- net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in
remove (bsc#1258210).
- LoongArch: Move struct kimage forward declaration before use
(bsc#1258210).
- LoongArch: BPF: Fix outdated tail call comments (bsc#1258210).
- LoongArch: BPF: Fix off-by-one error in tail call (bsc#1258210).
- ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel
count (bsc#1258210).
- net: udp_tunnel: prevent double queueing in
udp_tunnel_nic_device_sync (bsc#1258210).
- dt-bindings: net: renesas,ether: Drop example
"ethernet-phy-ieee802.3-c22" fallback (bsc#1258210).
- selftests: tls: size splice_short pipe by page size
(bsc#1258210).
- net: hns3: unify copper port ksettings configuration path
(bsc#1258210).
- net: hns3: refactor MAC autoneg and speed configuration
(bsc#1258210).
- net: hns3: fix permanent link down deadlock after reset
(bsc#1258210).
- net: hns3: differentiate autoneg default values between copper
and fiber (bsc#1258210).
- ALSA: FCP: Fix NULL pointer dereference in interface lookup
(bsc#1258210).
- tracing: probes: fix typo in a log message (bsc#1258210).
- spi: sh-msiof: abort transfers when reset times out
(bsc#1258210).
- ACPI: RIMT: Only defer the IOMMU configuration in init stage
(bsc#1258210).
- riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI
(bsc#1258210).
- gpio: mvebu: fail probe if gpiochip registration fails
(bsc#1258210).
- gpio: htc-egpio: use managed gpiochip registration (bsc#1258210).
- net: pse-pd: scope pse_control regulator handle to kref lifetime
(bsc#1258210).
- seg6: validate SRH length before reading fixed fields
(bsc#1258210).
- qede: fix out-of-bounds check for cqe->len_list[] (bsc#1258210).
- net: enetc: check the number of BDs needed for xdp_frame
(bsc#1258210).
- sctp: fix SCTP_RESET_STREAMS stream list length limit
(bsc#1258210).
- sctp: add INIT verification after cookie unpacking (bsc#1258210).
- MIPS: DEC: Ensure RTC platform device deregistration upon
failure (bsc#1258210).
- MIPS: mm: Add check for highmem before removing memory block
(bsc#1258210).
- ASoC: codecs: lpass-va-macro: add SM6115 compatible
(bsc#1258210).
- ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280
(bsc#1258210).
- hwmon: adm1275: Prevent reading uninitialized stack
(bsc#1258210).
- hwmon: (pmbus) Fix passing events to regulator core
(bsc#1258210).
- hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against
divide-by-zero (bsc#1258210).
- eth: fbnic: don't cache shinfo across skb realloc (bsc#1258210).
- ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch
dump (bsc#1258210).
- usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
(bsc#1258210).
- net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
(bsc#1258210).
- net: libwx: fix VMDQ mask for 1-queue mode (bsc#1258210).
- net: gianfar: dispose irq mappings on probe failure and device
removal (bsc#1258210).
- net/sched: sch_teql: Introduce slaves_lock to avoid race
condition and UAF (bsc#1258210).
- bridge: stp: Fix a potential use-after-free when deleting a
bridge (bsc#1258210).
- drm/panthor: Fix potential invalid pointer deref in
group_process_tiler_oom() (bsc#1258210).
- drm/panthor: Don't overrule pending immediate ticks in
sched_resume_tick() (bsc#1258210).
- drm/panthor: Fix a leak when a group is evicted before the
tiler OOM is serviced (bsc#1258210).
- drm/panthor: Interrupt group start/resumption if
group_bind_locked() fails (bsc#1258210).
- tracing/eprobes: Allow use of BTF names to dereference pointers
(bsc#1258210).
- tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
(bsc#1258210).
- tracing/events: Fix to check the simple_tsk_fn creation
(bsc#1258210).
- tracing: eprobe: read the complete FILTER_PTR_STRING pointer
(bsc#1258210).
- tracing/fprobe: Fix NULL pointer dereference in
fprobe_fgraph_entry() (bsc#1258210).
- tracing/probes: Make the $ prefix mandatory for comm access
(bsc#1258210).
- irqchip/gic-v3-its: Fix OF node reference leak (bsc#1258210).
- irqchip/ts4800: Fix missing chained handler cleanup on remove
(bsc#1258210).
- sctp: fix addr_wq_timer race in sctp_free_addr_wq()
(bsc#1258210).
- virtio_net: disable cb when NAPI is busy-polled (bsc#1258210).
- cxgb4: Fix decode strings dump for T6 adapters (bsc#1258210).
- selftests: drv-net: tso: don't touch dangerous feature bits
(bsc#1258210).
- net/sched: act_bpf: use rcu_dereference_bh() to read the filter
(bsc#1258210).
- ksmbd: reject undersized DACLs before parsing ACEs (bsc#1258210).
- ksmbd: fix use-after-free of fp->owner.name in durable handle
owner check (bsc#1258210).
- gpio: timberdale: Return -ENOMEM on dynamic memory allocation
in probe (bsc#1258210).
- pinctrl: meson: restore non-sleeping GPIO access (bsc#1258210).
- net/sched: dualpi2: clear stale classification on filter miss
(bsc#1258210).
- net/sched: hhf: clear heavy-hitter state on reset (bsc#1258210).
- fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid
(bsc#1258210).
- afs: Fix error code in afs_extract_vl_addrs() (bsc#1258210).
- afs: Fix double netfs initialisation in afs_root_iget()
(bsc#1258210).
- afs: use kvfree() to free memory allocated by kvcalloc()
(bsc#1258210).
- afs: Remove erroneous seq |= 1 in volume lookup loop
(bsc#1258210).
- afs: Fix bulk lookup malfunction due to change in dir_emit()
API (bsc#1258210).
- afs: Fix misplaced inc of net->cells_outstanding (bsc#1258210).
- afs: Fix reinitialisation of the inode, in particular ->lock_work
(bsc#1258210).
- afs: Fix callback service message parsers to pass through
- EAGAIN (bsc#1258210).
- afs: Fix missing NULL pointer check in afs_break_some_callbacks()
(bsc#1258210).
- afs: Fix vllist leak (bsc#1258210).
- afs: Fix lack of locking around modifications of
net->cells_dyn_ino (bsc#1258210).
- afs: Fix premature cell exposure through /afs (bsc#1258210).
- afs: Fix the volume AFS_VOLUME_RM_TREE is set on (bsc#1258210).
- afs: Fix unchecked-length string display in debug statement
(bsc#1258210).
- minix: avoid overflow in bitmap block count calculation
(bsc#1258210).
- ovl: fix comment about locking order (bsc#1258210).
- iomap: guard io_size EOF trim against concurrent truncate
underflow (bsc#1258210).
- netfs: Fix netfs_create_write_req() to handle async cache
object creation (bsc#1258210).
- netfs: Fix writethrough to use collection offload (bsc#1258210).
- netfs: Fix writeback error handling (bsc#1258210).
- netfs: Fix folio state after ENOMEM whilst under writeback
iteration (bsc#1258210).
- drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry()
(bsc#1258210).
- drm/xe/userptr: Hold notifier_lock for write on inject test path
(bsc#1258210).
- drm/xe/hw_engine: Fix double-free of managed BO in error path
(bsc#1258210).
- drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays
(bsc#1258210).
- x86/uprobes: Keep shadow stack in sync for emulated CALLs
(bsc#1258210).
- uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline
(bsc#1258210).
- cifs: Fix missing credit release on failure in cifs_issue_read()
(bsc#1258210).
- ata: sata_gemini: unwind clocks on IDE pinctrl errors
(bsc#1258210).
- ata: libata-scsi: limit simulated SCSI command copy to response
length (bsc#1258210).
- HID: picolcd: prevent NULL pointer dereference in
picolcd_send_and_wait() (bsc#1258210).
- HID: core: Fix OOB read in hid_get_report for numbered reports
(bsc#1258210).
- arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
(bsc#1258210).
- HID: bpf: Fix hid_bpf_get_data() range check (bsc#1258210).
- selftests/hid: Load only requested struct_ops maps (bsc#1258210).
- selftests/hid: Cover hid_bpf_get_data() size overflow
(bsc#1258210).
- arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1
(bsc#1258210).
- net: usb: net1080: validate packet_len before pad-byte access
in rx_fixup (bsc#1258210).
- gue: validate REMCSUM private option length (bsc#1258210).
- netfilter: xt_u32: reject invalid shift counts (bsc#1258210).
- netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
(bsc#1258210).
- netfilter: ip6tables: mark malformed IPv6 extension headers
for hotdrop (bsc#1258210).
- netfilter: nft_set_rbtree: get command skips end element with
open interval (bsc#1258210).
- netfilter: xt_connmark: reject invalid shift parameters
(bsc#1258210).
- net/mlx5: LAG, MPESW, Fix missing complete() on devcom error
(bsc#1258210).
- net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
(bsc#1258210).
- net/mlx5e: Fix HV VHCA stats agent registration race
(bsc#1258210).
- net/mlx5e: Fix publication race for priv->channel_stats[]
(bsc#1258210).
- net: microchip: vcap: fix races on the shared Super VCAP block
(bsc#1258210).
- qede: fix off-by-one in BD ring consumption on build_skb failure
(bsc#1258210).
- net: qualcomm: rmnet: validate MAP frame length before ingress
parsing (bsc#1258210).
- net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
(bsc#1258210).
- net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
(bsc#1258210).
- amt: fix size calculation in amt_get_size() (bsc#1258210).
- Bluetooth: 6lowpan: hold L2CAP conn across debugfs control
(bsc#1258210).
- Bluetooth: MGMT: Fix adv monitor add failure cleanup
(bsc#1258210).
- Bluetooth: sco: Fix a race condition in sco_sock_timeout()
(bsc#1258210).
- Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
(bsc#1258210).
- Bluetooth: bpa10x: avoid OOB read of revision string in
bpa10x_setup() (bsc#1258210).
- Bluetooth: L2CAP: fix tx ident leak for commands without a
response (bsc#1258210).
- ring-buffer: Fix event length with forced 8-byte alignment
(bsc#1258210).
- accel/amdxdna: Use unsigned long for nr_pages in
amdxdna_hmm_register() (bsc#1258210).
- net/tls: Consume empty data records in tls_sw_read_sock()
(bsc#1258210).
- net: usb: lan78xx: disable VLAN filter in promiscuous mode
(bsc#1258210).
- gpio: dwapb: Use modern PM macros (bsc#1258210).
- gpio: dwapb: reduce allocation to single kzalloc (bsc#1258210).
- gpio: dwapb: Defer clock gating until noirq (bsc#1258210).
- tracing: Make tracepoint_printk static as not exported
(bsc#1258210).
- accel/amdxdna: Fix potential amdxdna_umap lifetime race
(bsc#1258210).
- drm/v3d: Reject invalid indirect BO handle in indirect CSD setup
(bsc#1258210).
- net: mdio: select REGMAP_MMIO instead of depending on it
(bsc#1258210).
- net/sched: cake: reject overhead values that underflow length
(bsc#1258210).
- octeontx2-pf: check DMAC extraction support before filtering
(bsc#1258210).
- perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
(bsc#1258210).
- gpio: mvebu: free generic chips on unbind (bsc#1258210).
- ipv4: igmp: Fix potential UAF in igmp_gq_start_timer()
(bsc#1258210).
- ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1258210).
- ipv4: igmp: annotate data-races around im->users (bsc#1258210).
- ipv4: igmp: annotate data-races around timer-related fields
(bsc#1258210).
- ipv4: igmp: Fix potential memory leaks in igmp_mod_timer()
and igmp_stop_timer() (bsc#1258210).
- netfilter: nft_lookup: fix catchall element handling with
inverted lookups (bsc#1258210).
- ipvs: pass parsed transport offset to state handlers
(bsc#1258210).
- ipvs: use parsed transport offset in TCP state lookup
(bsc#1258210).
- ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1258210).
- ipvs: ensure inner headers in ICMP errors are in headroom
(bsc#1258210).
- s390/zcrypt: Remove the empty file (bsc#1258210).
- cifs: validate DFS referral string offsets (bsc#1258210).
- SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED
(bsc#1258210).
- SUNRPC: pin upper rpc_clnt across the TLS connect_worker
(bsc#1258210).
- dm era: fix NULL pointer dereference in metadata_open()
(bsc#1258210).
- regulator: core: regulator_lock_two() should test for EDEADLK
not EDEADLOCK (bsc#1258210).
- selftests/net: fix EVP_MD_CTX leak in tcp_mmap (bsc#1258210).
- net/mlx5: Fix L3 tunnel entropy refcount leak (bsc#1258210).
- octeontx2-af: fix VF bringup affecting PF promiscuous state
(bsc#1258210).
- drm/xe: remove duplicate <kunit/test-bug.h> include
(bsc#1258210).
- smb: client: fix overflow in passthrough ioctl bounds check
(bsc#1258210).
- idpf: add padding to PTP virtchnl structures (bsc#1258210).
- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
(bsc#1258210).
- mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
(bsc#1258210).
- vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
(bsc#1258210).
- ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put
(bsc#1258210).
- ASoC: SOF: ipc3-control: Use overflow checks in control_update
size calc (bsc#1258210).
- ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
(bsc#1258210).
- ASoC: SOF: topology: validate vendor array size before parsing
(bsc#1258210).
- tipc: restrict socket queue dumps in enqueue tracepoints
(bsc#1258210).
- net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
(bsc#1258210).
- net: atm: reject out-of-range traffic classes in QoS validation
(bsc#1258210).
- octeontx2-pf: clear stale mailbox IRQ state before request_irq()
(bsc#1258210).
- octeontx2-vf: clear stale mailbox IRQ state before request_irq()
(bsc#1258210).
- net: ife: require ETH_HLEN to be pullable in ife_decode()
(bsc#1258210).
- arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
(bsc#1258210).
- arm64: dts: s32g3: Fix SWT8 watchdog address (bsc#1258210).
- ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply
property (bsc#1258210).
- arm64: dts: qcom: sdm630: describe adsp_mem region properly
(bsc#1258210).
- arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Ringneck
(bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times
(bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1
ADC channels to board files (bsc#1258210).
- arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc
(bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC
reference (bsc#1258210).
- arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags
(bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo
(bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names
to board files (bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line
typo (bsc#1258210).
- ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander
gpio-line-names to board files (bsc#1258210).
- LoongArch: KVM: Validate irqchip index in irqfd routing
(bsc#1258210).
- LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
(bsc#1258210).
- LoongArch: KVM: Check the return values for put_user()
(bsc#1258210).
- LoongArch: KVM: Fix FPU register width with user access API
(bsc#1258210).
- LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr()
(bsc#1258210).
- powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with
KVM (bsc#1258210).
- KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
(bsc#1258210).
- KVM: arm64: vgic: Check the interrupt is still ours before
migrating it (bsc#1258210).
- KVM: arm64: vgic: Handle race between interrupt affinity change
and LPI disabling (bsc#1258210).
- KVM: s390: pci: Fix handling of AIF enable without AISB
(bsc#1258210).
- KVM: SEV: Do not allow intra-host migration/mirroring of SNP
VMs (bsc#1258210).
- KVM: x86: Ignore pending PV EOI if the vCPU has since disabled
PV EOIs (bsc#1258210).
- KVM: x86: Nullify irqfd->producer if updating IRTE for bypass
fails (bsc#1258210).
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to
invalid guest state (bsc#1258210).
- KVM: Move kvm_io_bus_get_dev() locking responsibilities to
callers (bsc#1258210).
- KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2
(bsc#1258210).
- KVM: arm64: nv: Write ESR_EL2 for injected nested SError
exceptions (bsc#1258210).
- KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
(bsc#1258210).
- KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR
(bsc#1258210).
- KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't
resolve PFN (bsc#1258210).
- KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
(bsc#1258210).
- fbdev: metronomefb: fix potential memory leak in
metronomefb_probe() (bsc#1258210).
- fbdev: broadsheetfb: fix potential memory leak in
broadsheetfb_probe() (bsc#1258210).
- fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
(bsc#1258210).
- fbdev: sm712: Fix operator precedence in big_swap macro
(bsc#1258210).
- fbdev: efifb: fix memory leak in efifb_probe() (bsc#1258210).
- fbdev: radeon: fix potential memory leak in
radeonfb_pci_register() (bsc#1258210).
- fbdev: i740fb: fix potential memory leak in i740fb_probe()
(bsc#1258210).
- fbdev: s3fb: fix potential memory leak in s3_pci_probe()
(bsc#1258210).
- fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
(bsc#1258210).
- fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
(bsc#1258210).
- fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
(bsc#1258210).
- fbdev: vesafb: fix memory leak in vesafb_probe() (bsc#1258210).
- fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
(bsc#1258210).
- fbdev: tridentfb: fix potential memory leak in
trident_pci_probe() (bsc#1258210).
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
(bsc#1258210).
- ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
(bsc#1258210).
- ASoC: mediatek: mt8192: Check runtime resume during probe
(bsc#1258210).
- ASoC: mediatek: mt8192: Release reserved memory on cleanup
(bsc#1258210).
- ASoC: mediatek: mt8183: Check runtime resume during probe
(bsc#1258210).
- ASoC: mediatek: mt8183: Release reserved memory on cleanup
(bsc#1258210).
- ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
(bsc#1258210).
- netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
(bsc#1258210).
- netfilter: nfnl_cthelper: apply per-class values when updating
policies (bsc#1258210).
- netfilter: xt_cluster: reject template conntracks in hash match
(bsc#1258210).
- netfilter: nf_queue: pin bridge device while NFQUEUE holds
fake dst (bsc#1258210).
- netfilter: nft_set_pipapo: don't leak bad clone into future
transaction (bsc#1258210).
- netfilter: nf_nat_sip: reload possible stale data pointer
(bsc#1258210).
- netfilter: nf_conntrack_reasm: guard mac_header adjustment
after IPv6 defrag (bsc#1258210).
- netfilter: nf_conncount: fix zone comparison in tuple dedup
(bsc#1258210).
- netfilter: ecache: fix inverted time_after() check (bsc#1258210).
- netfilter: xt_nat: reject unsupported target families
(bsc#1258210).
- netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
(bsc#1258210).
- gpu: host1x: Fix device reference leak in
host1x_device_parse_dt() error path (bsc#1258210).
- soc: ti: k3-ringacc: Fix access mode for
k3_ringacc_ring_pop_tail_io/proxy (bsc#1258210).
- soc: fsl: qe: panic on ioremap() failure in qe_reset()
(bsc#1258210).
- selinux: check connect-related permissions on TCP Fast Open
(bsc#1258210).
- selinux: avoid sk_socket dereference in
selinux_sctp_bind_connect() (bsc#1258210).
- selinux: fix incorrect execmem checks on overlayfs (bsc#1258210).
- leds: uleds: Fix potential buffer overread (bsc#1258210).
- mfd: sm501: Fix reference leak on failed device registration
(bsc#1258210).
- tools/power/x86/intel-speed-select: Harden daemon pidfile open
(bsc#1258210).
- x86/video: Only fall back to vga_default_device() without
screen info (bsc#1258210).
- x86/boot: Validate console=uart8250 baud rate to fix early
boot hang (bsc#1258210).
- x86/boot: Reject too long acpi_rsdp= values (bsc#1258210).
- perf/x86/amd/brs: Fix kernel address leakage (bsc#1258210).
- perf/x86/amd/lbr: Fix kernel address leakage (bsc#1258210).
- cpufreq: schedutil: Fix uncleared need_freq_update on the
.adjust_perf() path (bsc#1258210).
- cpufreq: intel_pstate: Set non-turbo capacity to
HWP_GUARANTEED_PERF() (bsc#1258210).
- s390/perf_cpum_cf: Add missing array_index_nospec() to
__hw_perf_event_init() (bsc#1258210).
- batman-adv: gw: acquire ethernet header only after skb realloc
(bsc#1258210).
- batman-adv: retrieve ethhdr after potential skb realloc on RX
(bsc#1258210).
- batman-adv: access unicast_ttvn skb->data only after skb realloc
(bsc#1258210).
- batman-adv: dat: acquire ARP hw source only after skb realloc
(bsc#1258210).
- batman-adv: bla: reacquire gw address after skb realloc
(bsc#1258210).
- batman-adv: dat: ensure accessible eth_hdr proto field
(bsc#1258210).
- batman-adv: ensure minimal ethernet header on TX (bsc#1258210).
- batman-adv: dat: fix tie-break for candidate selection
(bsc#1258210).
- batman-adv: tt: avoid request storms during pending request
(bsc#1258210).
- batman-adv: fix VLAN priority offset (bsc#1258210).
- batman-adv: frag: free unfragmentable packet (bsc#1258210).
- batman-adv: clean untagged VLAN on netdev registration failure
(bsc#1258210).
- batman-adv: frag: fix primary_if leak on failed linearization
(bsc#1258210).
- batman-adv: mcast: avoid OOB read of num_dests header
(bsc#1258210).
- batman-adv: tt: prevent TVLV OOB check overflow (bsc#1258210).
- cifs: invalidate cfid on unlink/rename/rmdir (bsc#1258210).
- mfd: tps6586x: Fix OF node refcount (bsc#1258210).
- HID: playstation: validate num_touch_reports in DualShock 4
reports (bsc#1258210).
- Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
(bsc#1258210).
- Bluetooth: SCO: hold sk properly in sco_conn_ready (bsc#1258210).
- jbd2: fix integer underflow in
jbd2_journal_initialize_fast_commit() (bsc#1258210).
- nvdimm/btt: Free arenas on btt_init() error paths (bsc#1258210).
- nvdimm/btt: Free arena sub-allocations on discover_arenas()
error path (bsc#1258210).
- sunrpc: pin svc_xprt across the asynchronous TLS handshake
callback (bsc#1258210).
- sunrpc: wait for in-flight TLS handshake callback when cancel
loses race (bsc#1258210).
- sunrpc: harden rq_procinfo lifecycle to prevent double-free
(bsc#1258210).
- lockd: Plug nlm_file leak when nlm_do_fopen() fails
(bsc#1258210).
- lockd: Plug nlm_file refcount leak on cached nlm_do_fopen()
failure (bsc#1258210).
- SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
(bsc#1258210).
- remoteproc: qcom: Fix leak when custom dump_segments addition
fails (bsc#1258210).
- MIPS: ip22-gio: fix gio device memory leak (bsc#1258210).
- MIPS: ip22-gio: fix kfree() of static object (bsc#1258210).
- MIPS: ip22-gio: fix device reference leak in probe (bsc#1258210).
- MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
(bsc#1258210).
- mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound
pages (bsc#1258210).
- power: supply: cpcap-battery: Fix missing nvmem_device_put()
causing reference leak (bsc#1258210).
- power: supply: max17042: fix OF node reference imbalance
(bsc#1258210).
- mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
(bsc#1258210).
- mm/memory_hotplug: fix incorrect altmap passing in error path
(bsc#1258210).
- mm/damon/core: make charge_addr_from aware of end-address
exclusivity (bsc#1258210).
- fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory
rename (bsc#1258210).
- fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
(bsc#1258210).
- fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
(bsc#1258210).
- fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
(bsc#1258210).
- fs/ntfs3: validate lcns_follow in log_replay conversion
(bsc#1258210).
- fs/ntfs3: add depth limit to indx_find_buffer to prevent stack
overflow (bsc#1258210).
- fs/ntfs3: bound NTFS_DE view.data_off in
UpdateRecordData{Root,Allocation} (bsc#1258210).
- ntfs3: cap RESTART_TABLE free-chain walker at rt->used
(bsc#1258210).
- ntfs3: bound to_move in indx_insert_into_root before
hdr_insert_head (bsc#1258210).
- ntfs3: validate split-point offset in indx_insert_into_buffer
(bsc#1258210).
- ntfs3: fix out-of-bounds read in decompress_lznt (bsc#1258210).
- landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path
(bsc#1258210).
- power: supply: charger-manager: fix refcount leak in
is_full_charged() (bsc#1258210).
- selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid
path (bsc#1258210).
- mips: sched: Fix CPUMASK_OFFSTACK memory corruption
(bsc#1258210).
- riscv: cacheinfo: Fix node reference leak in
populate_cache_leaves (bsc#1258210).
- mm/damon/sysfs-schemes: fix dir put orders in
access_pattern_add_dirs() (bsc#1258210).
- mm/damon/sysfs-schemes: put stats for scheme_add_dirs()
internal error (bsc#1258210).
- fs/proc/task_mmu: fix hugetlb self-deadlock in
pagemap_scan_pte_hole() (bsc#1258210).
- fs/proc/task_mmu: use huge_page_size() in
pagemap_scan_hugetlb_entry() (bsc#1258210).
- proc: only bump parent nlink when registering directories
(bsc#1258210).
- fs/proc: fix KPF_KSM reported for all anonymous pages
(bsc#1258210).
- powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later
processors (bsc#1258210).
- mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
(bsc#1258210).
- kcov: use WRITE_ONCE() for selftest mode stores (bsc#1258210).
- mtd: slram: remove failed entries from the device list
(bsc#1258210).
- 9p: skip nlink update in cacheless mode to fix WARN_ON
(bsc#1258210).
- power: supply: bq257xx: Fix VSYSMIN clamping logic (bsc#1258210).
- scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
(bsc#1258210).
- scsi: sas: Skip opt_sectors when DMA reports no real optimization
hint (bsc#1258210).
- openrisc: Add full instruction cache invalidate functions
(bsc#1258210).
- ocfs2: use kzalloc for quota recovery bitmap allocation
(bsc#1258210).
- mtd: rawnand: pl353: fix probe resource allocation (bsc#1258210).
- net/9p: fix infinite loop in p9_client_rpc on fatal signal
(bsc#1258210).
- mtd: rawnand: fix condition in 'nand_select_target()'
(bsc#1258210).
- ocfs2: avoid moving extents to occupied clusters (bsc#1258210).
- ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
(bsc#1258210).
- ocfs2: fix UBSAN array-index-out-of-bounds in
ocfs2_sum_rightmost_rec (bsc#1258210).
- ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
(bsc#1258210).
- ocfs2: reject dinodes with non-canonical i_mode type
(bsc#1258210).
- ocfs2: reject dinodes whose i_rdev disagrees with the file type
(bsc#1258210).
- ocfs2: reject non-inline dinodes with i_size and zero i_clusters
(bsc#1258210).
- fpga: dfl: add bounds check in dfh_get_param_size()
(bsc#1258210).
- bus: mhi: host: pci_generic: Fix the physical function check
(bsc#1258210).
- bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
(bsc#1258210).
- net: thunderbolt: Fix frags[] overflow by bounding frame_count
(bsc#1258210).
- fpga: microchip-spi: fix zero header_size OOB read in
mpf_ops_parse_header() (bsc#1258210).
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (bsc#1258210).
- s390/pkey: Check length in pkey_pckmo handler implementation
(bsc#1258210).
- mtd: spi-nor: swp: Improve locking user experience (bsc#1258210).
- mtd: spi-nor: spansion: use die erase for multi-die devices only
(bsc#1258210).
- mtd: rawnand: Pause continuous reads at block boundaries
(bsc#1258210).
- openrisc: Fix jump_label smp syncing (bsc#1258210).
- mtd: maps: vmu-flash: fix NULL pointer dereference in
initialization (bsc#1258210).
- taskstats: retain dead thread stats in TGID queries
(bsc#1258210).
- irqchip/crossbar: Use correct index in crossbar_domain_free()
(bsc#1258210).
- tpm: restore timeout for key creation commands (bsc#1258210).
- tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
(bsc#1258210).
- tpm: tpm2-sessions: wait for async KPP completion in
tpm_buf_append_salt (bsc#1258210).
- sunrpc: fix uninitialized xprt_create_args structure
(bsc#1258210).
- dmaengine: tegra: Fix burst size calculation (bsc#1258210).
- dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and
ABORT_INT_MASK (bsc#1258210).
- platform/x86: dell-laptop: fix missing cleanups in init error
path (bsc#1258210).
- platform/x86: ISST: Restore SST-PP control to all domains
(bsc#1258210).
- platform/x86/amd/pmc: Check for intermediate wakeup in function
(bsc#1258210).
- platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops
(bsc#1258210).
- platform/x86/amd/pmc: Add delay_suspend module parameter
(bsc#1258210).
- platform/x86/amd/pmc: Don't log during intermediate wakeups
(bsc#1258210).
- pkey: Move keytype check from pkey api to handler (bsc#1258210).
- smb: client: use kvzalloc() for megabyte buffer in simple
fallocate (bsc#1258210).
- ksmbd: fix integer overflow in set_file_allocation_info()
(bsc#1258210).
- hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
(bsc#1258210).
- hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig
(bsc#1258210).
- i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
(bsc#1258210).
- i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)
(bsc#1258210).
- i2c: mediatek: fix WRRD for SoCs without auto_restart option
(bsc#1258210).
- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
(bsc#1258210).
- i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED
(bsc#1258210).
- ice: fix ice_init_link() error return preventing probe
(bsc#1258210).
- tcp: defer md5sig_info kfree past RCU grace period in tcp_connect
(bsc#1258210).
- tcp: Decrement tcp_md5_needed static branch (bsc#1258210).
- ufs: core: tracing: Do not dereference pointers in TP_printk()
(bsc#1258210).
- xen/gntdev: fix error handling in ioctl (bsc#1258210).
- xfrm: nat_keepalive: avoid double free on send error
(bsc#1258210).
- xfrm: use compat translator only for u64 alignment mismatch
(bsc#1258210).
- xfrm: xfrm_interface: require CAP_NET_ADMIN in the device
netns for changelink (bsc#1258210).
- tpm: fix event_size output in tpm1_binary_bios_measurements_show
(bsc#1258210).
- tpm: Make the TPM character devices non-seekable (bsc#1258210).
- time: Fix off-by-one in compat settimeofday() usec validation
(bsc#1258210).
- spi: uniphier: Fix completion initialization order before
devm_request_irq() (bsc#1258210).
- sctp: validate STALE_COOKIE cause length before reading staleness
(bsc#1258210).
- NFS: Charge unstable writes by request size, not folio size
(bsc#1258210).
- nvme-apple: Prevent shared tags across queues on Apple A11
(bsc#1258210).
- nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1258210).
- nvmet-rdma: handle inline data with a nonzero offset
(bsc#1258210).
- nvmet: fix refcount leak in nvmet_sq_create() (bsc#1258210).
- netdev-genl: report NAPI thread PID in the caller's pid namespace
(bsc#1258210).
- can: esd_usb: kill anchored URBs before freeing netdevs
(bsc#1258210).
- can: isotp: use unconditional synchronize_rcu() in
isotp_release() (bsc#1258210).
- can: isotp: fix use-after-free race with concurrent
NETDEV_UNREGISTER (bsc#1258210).
- can: isotp: serialize TX state transitions under so->rx_lock
(bsc#1258210).
- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer
UAF (bsc#1258210).
- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP
failure (bsc#1258210).
- can: bcm: add missing rcu list annotations and operations
(bsc#1258210).
- bpf: Reset register bounds before narrowing retval range in
check_mem_access() (bsc#1258210).
- bpf,fork: wipe ->bpf_storage before bailouts that access it
(bsc#1258210).
- bpf: Add missing access_ok call to copy_user_syms (bsc#1258210).
- block: remove redundant GD_NEED_PART_SCAN in add_disk_final()
(bsc#1258210).
- block: fix race in blk_time_get_ns() returning 0 (bsc#1258210).
- block: fix IORING_URING_CMD_REISSUE flags check in
blkdev_uring_cmd (bsc#1258210).
- net: sparx5: unregister blocking notifier on init failure
(bsc#1258210).
- dm thin metadata: fix superblock refcount leak on snapshot
shadow failure (bsc#1258210).
- dm thin metadata: fix metadata snapshot consistency on commit
failure (bsc#1258210).
- dm era: fix out-of-bounds memory access for non-zero start
sector (bsc#1258210).
- dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
(bsc#1258210).
- dm-ioctl: fix a possible overflow in list_version_get_info
(bsc#1258210).
- dm-log: fix a bitset_size overflow on 32bit machines
(bsc#1258210).
- dm-pcache: reject option groups without values (bsc#1258210).
- dm-stats: fix dm_jiffies_to_msec64 (bsc#1258210).
- dm-stats: fix merge accounting (bsc#1258210).
- dm_early_create: fix freeing used table on dm_resume failure
(bsc#1258210).
- dm-integrity: fix leaking uninitialized kernel memory
(bsc#1258210).
- dm-integrity: fix a bug if the bio is out of limits
(bsc#1258210).
- dm-integrity: don't increment hash_offset twice (bsc#1258210).
- dm-verity: avoid double increment of &use_bh_wq_enabled
(bsc#1258210).
- dm-verity: fix a possible NULL pointer dereference (bsc#1258210).
- dm-verity: increase sprintf buffer size (bsc#1258210).
- dm-verity: make error counter atomic (bsc#1258210).
- dma-fence: Make dma_fence_dedup_array() robust against 0-count
input (bsc#1258210).
- accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()
(bsc#1258210).
- accel/ivpu: Reject firmware log with size smaller than header
(bsc#1258210).
- scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
(bsc#1258210).
- scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
(bsc#1258210).
- scsi: sg: Report request-table problems when any status is set
(bsc#1258210).
- scsi: xen: scsiback: Free the command tag on the TMR
submit-failure path (bsc#1258210).
- scsi: xen: scsiback: Free unsubmitted command instead of
double-putting it (bsc#1258210).
- scsi: target: Bound PR-OUT TransportID parsing to the received
buffer (bsc#1258210).
- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER
AND MOVE (bsc#1258210).
- scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
(bsc#1258210).
- scsi: elx: efct: Fix I/O leak on unsupported additional CDB
(bsc#1258210).
- Input: ims-pcu - fix use-after-free and double-free in disconnect
(bsc#1258210).
- Input: ims-pcu - only expose sysfs attributes on control
interface (bsc#1258210).
- Input: ims-pcu - release data interface on disconnect
(bsc#1258210).
- Input: ims-pcu - validate control endpoint type (bsc#1258210).
- Input: ims-pcu - add response length checks (bsc#1258210).
- Input: ims-pcu - fix DMA mapping violation in line setup
(bsc#1258210).
- Input: ims-pcu - fix firmware leak in async update (bsc#1258210).
- Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq()
debug logging (bsc#1258210).
- Input: ims-pcu - fix potential infinite loop in CDC union
descriptor parsing (bsc#1258210).
- Input: ims-pcu - fix race condition in reset_device sysfs
callback (bsc#1258210).
- Input: ims-pcu - fix type confusion in CDC union descriptor
parsing (bsc#1258210).
- net/mlx5e: macsec: fix use-after-free of metadata_dst on RX
SC delete (bsc#1258210).
- tracing/user_events: Fix use-after-free in user_event_mm_dup()
(bsc#1258210).
- wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
(bsc#1258210).
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
(bsc#1258210).
- posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
(bsc#1258210).
- selftests/ftrace: Drop invalid top-level local in test_ownership
(bsc#1258210).
- cpu: hotplug: Preserve per instance callback errors
(bsc#1258210).
- cpu: hotplug: Bound hotplug states sysfs output (bsc#1258210).
- gpio: mt7621: more robust management of IRQ domain teardown
(bsc#1258210).
- gpio: tegra: do not call pinctrl for GPIO direction
(bsc#1258210).
- gpio: mt7621: be sure IRQ domain is created before exposing
GPIO chips (bsc#1258210).
- gpio-f7188x: Add support for NCT6126D version B (bsc#1258210).
- gpio: mt7621: avoid corruption of shared interrupt trigger state
(bsc#1258210).
- gpios: palmas: add .get_direction() op (bsc#1258210).
- net: sit: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1258210).
- net: ethernet: ti: icssg: guard PA stat lookups (bsc#1258210).
- net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
(bsc#1258210).
- net: ixp4xx_hss: fix duplicate HDLC netdev allocation
(bsc#1258210).
- net/sched: act_ct: preserve tc_skb_cb across defragmentation
(bsc#1258210).
- selftests: net: fix file owner for broadcast_ether_dst test
(bsc#1258210).
- net: ena: clean up XDP TX queues when regular TX setup fails
(bsc#1258210).
- net: ip6_vti: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1258210).
- net: ip_vti: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1258210).
- net: ipip: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1258210).
- net: ip6_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1258210).
- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns
for changelink (bsc#1258210).
- octeontx2-af: Free BPID bitmap on setup failure (bsc#1258210).
- ieee802154: admin-gate legacy LLSEC dump operations
(bsc#1258210).
- ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict
validation (bsc#1258210).
- ieee802154: ca8210: fix cas_ctl leak on spi_async failure
(bsc#1258210).
- ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
(bsc#1258210).
- gve: fix header buffer corruption with header-split and HW-GRO
(bsc#1258210).
- platform/x86/amd/pmc: Avoid logging "(null)" for DMI values
(bsc#1258210).
- net/sched: sch_teql: move rcu_read_lock()/spin_lock() from
_bh variants (bsc#1258210).
- drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n
(bsc#1258210).
- KVM: TDX: Account all non-transient page allocations for per-TD
structures (bsc#1258210).
- selftests/bpf: Add simple strscpy() implementation (bsc#1258210).
- pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64
(bsc#1258210).
- LoongArch: Fix nr passing in set_direct_map_valid_noflush()
(bsc#1258210).
- LoongArch: Fix missing dirty page tracking in
{pte,pmd}_wrprotect() (bsc#1258210).
- ipmi: Fix user refcount underflow in event delivery
(bsc#1258210).
- espintcp: use sk_msg_free_partial to fix partial send
(bsc#1258210).
- ipmi: fix refcount leak in i_ipmi_request() (bsc#1258210).
- bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
(bsc#1258210).
- rtc: renesas-rtca3: Fix PIE clear polling condition in alarm
setup error path (bsc#1258210).
- rtc: mpfs: fix counter upload completion condition (bsc#1258210).
- hwmon: (w83627hf) remove VID sysfs files on error and remove
(bsc#1258210).
- hwmon: (w83793) remove vrm sysfs file on probe failure
(bsc#1258210).
- net: liquidio: fix BAR resource leak on PF number failure
(bsc#1258210).
- hwmon: (occ) unregister sysfs devices outside occ lock
(bsc#1258210).
- fsl/fman: Free init resources on KeyGen failure in fman_init()
(bsc#1258210).
- net: lan743x: Initialize eth_syslock spinlock before use
(bsc#1258210).
- net/sched: sch_multiq: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1258210).
- net/sched: sch_taprio: Replace direct dequeue call with peek
and qdisc_dequeue_peeked (bsc#1258210).
- fhandle: reject detached mounts in capable_wrt_mount()
(bsc#1258210).
- hwmon: (max1619) add missing 'select REGMAP' to Kconfig
(bsc#1258210).
- tracing/probes: Fix double addition of offset for @+FOFFSET
(bsc#1258210).
- orangefs: keep the readdir entry size 64-bit in fill_from_part()
(bsc#1258210).
- net/mlx5: HWS, fix matcher leak on resize target setup failure
(bsc#1258210).
- ata: pata_pxa: Fix DMA channel leak on probe error (bsc#1258210).
- net: wwan: iosm: bound device offsets in the MUX downlink
decoder (bsc#1258210).
- hwmon: (asus_atk0110) Check package count before accessing
element (bsc#1258210).
- riscv: probes: save original sp in rethook trampoline
(bsc#1258210).
- mm/compaction: handle free_pages_prepare() properly in
compaction_free() (bsc#1258210).
- irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup
failure (bsc#1258210).
- s390/monwriter: Reject buffer reuse with different data length
(bsc#1258210).
- mac802154: remove interfaces with RCU list deletion
(bsc#1258210).
- octeontx2-pf: fix SQB pointer leak on init failure (bsc#1258210).
- selftests: net: make busywait timeout clock portable
(bsc#1258210).
- llc: fix SAP refcount leak in llc_ui_autobind() (bsc#1258210).
- ipvs: use parsed transport offset in SCTP state lookup
(bsc#1258210).
- ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
(bsc#1258210).
- macsec: don't read an unset MAC header in macsec_encrypt()
(bsc#1258210).
- dibs: loopback: validate offset and size in move_data()
(bsc#1258210).
- net: macb: drop in-flight Tx SKBs on close (bsc#1258210).
- arm64: smp: Fix hot-unplug tearing by forcing unregistration
(bsc#1258210).
- cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()
(bsc#1258210).
- fs/resctrl: Free mon_data structures on rdt_get_tree() failure
(bsc#1258210).
- fs/resctrl: Fix double-add of pseudo-locked region's RMID to
free list (bsc#1258210).
- ata: libata-core: Skip HPA resize for locked drives
(bsc#1258210).
- ata: libata-core: Allow capacity transition to zero for locked
drives (bsc#1258210).
- drbd: reject data replies with an out-of-range payload size
(bsc#1258210).
- riscv: Prevent NULL pointer dereference in
machine_kexec_prepare() (bsc#1258210).
- tracing/osnoise: Call synchronize_rcu() when unregistering
(bsc#1258210).
- s390/diag: Add missing array_index_nospec() call to
memtop_get_page_count() (bsc#1258210).
- s390/mm: Fix type mismatch in get_align_mask() (bsc#1258210).
- selftests/rseq: Fix a building error for riscv arch
(bsc#1258210).
- cgroup/cpuset: rebind mm mempolicy to effective_mems, not
mems_allowed (bsc#1258210).
- pmdomain: imx: Fix i.MX8MP power notifier (bsc#1258210).
- pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
(bsc#1258210).
- selftests/landlock: Skip scoped_signal subtest with MSG_OOB
if not available (bsc#1258210).
- selftests/landlock: Fix screwed up pointers in the
scoped_signal_test (bsc#1258210).
- mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios
timing on resume (bsc#1258210).
- powerpc/pseries: fix memory leak on krealloc failure in papr_init
(bsc#1258210).
- net/mlx5: free mlx5_st_idx_data on final dealloc (bsc#1258210).
- wifi: rt2x00: avoid full teardown before work setup in probe
(bsc#1258210).
- wifi: mwifiex: fix roaming to different channel in host_mlme
mode (bsc#1258210).
- wifi: mac80211: fix memory leak in ieee80211_register_hw()
(bsc#1258210).
- wifi: brcmfmac: cyw: fix heap overflow on a short auth frame
(bsc#1258210).
- riscv: vdso: Do not use LTO for the vDSO (bsc#1258210).
- regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
(bsc#1258210).
- net: openvswitch: reject oversized nested action attrs
(bsc#1258210).
- Bluetooth: btrtl: validate firmware patch bounds (bsc#1258210).
- llc: fix SAP refcount leak when creating incoming sockets
(bsc#1258210).
- macsec: fix promiscuity refcount leak in macsec_dev_open()
(bsc#1258210).
- memstick: ms_block: reject a card that reports too many blocks
(bsc#1258210).
- ipvs: fix more places with wrong ipv6 transport offsets
(bsc#1258210).
- ipvs: reload ip header after head reallocation (bsc#1258210).
- reset: sunxi: fix memory region leak on ioremap failure
(bsc#1258210).
- powerpc/spufs: fix out-of-bounds access in
spufs_mem_mmap_access() (bsc#1258210).
- wifi: cfg80211: validate EHT MLE before MLD ID read
(bsc#1258210).
- wifi: ieee80211: validate MLE common info length (bsc#1258210).
- wifi: mac80211: free ack status frame on TX header build failure
(bsc#1258210).
- wifi: mwifiex: fix permanently busy scans after multiple roam
iterations (bsc#1258210).
- mtd: onenand: samsung: report DMA completion timeouts
(bsc#1258210).
- mtd: mchp23k256: use SPI match data for chip caps (bsc#1258210).
- mmc: vub300: defer reset until cmd_mutex is unlocked
(bsc#1258210).
- mtd: rawnand: fsl_ifc: return errors for failed page reads
(bsc#1258210).
- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
(bsc#1258210).
- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion
timeout (bsc#1258210).
- mmc: block: fix RPMB device unregister ordering (bsc#1258210).
- mmc: sdhci-of-dwcmshc: check bus clock enable result in the
probe() method (bsc#1258210).
- mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq
check for tuning save/restore (bsc#1258210).
- mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on
resume (bsc#1258210).
- mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow
default state restore (bsc#1258210).
- mmc: sdhci-esdhc-imx: disable irq during suspend to fix
unhandled interrupt (bsc#1258210).
- mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend
(bsc#1258210).
- mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in
suspend (bsc#1258210).
- mmc: sdhci-esdhc-imx: fix resume error handling (bsc#1258210).
- crypto: xilinx-trng - Remove crypto_rng interface (bsc#1258210).
- ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
(bsc#1258210).
- ACPI: driver: Check ACPI_COMPANION() against NULL during probe
(bsc#1258210).
- ACPI: bus: Introduce devm_acpi_install_notify_handler()
(bsc#1258210).
- ACPI: NFIT: core: Use devm_acpi_install_notify_handler()
(bsc#1258210).
- ACPI: NFIT: core: Fix possible deadlock and missing notifications
(bsc#1258210).
- iio: hid-sensor-rotation: Fix stale or zero output when reading
raw values (bsc#1258210).
- ALSA: scarlett2: Allow selecting config_set by firmware version
(bsc#1258210).
- ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417
(bsc#1258210).
- firmware_loader: Add cancel helper for async requests
(bsc#1258210).
- ALSA: hda/tas2781: Cancel async firmware request at unbind
(bsc#1258210).
- vfio/mlx5: Fix racy bitfields and tighten struct layout
(bsc#1258210).
- binder: Use LIST_HEAD() to initialize on stack list head
(bsc#1258210).
- binder: cache secctx size before release zeroes it (bsc#1258210).
- PCI: imx6: Fix reference clock source selection for i.MX95
(bsc#1258210).
- PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95
(bsc#1258210).
- PCI/IOV: Adjust ->barsz[] when changing BAR size (bsc#1258210).
- PCI: Change pci_dev variable from 'bridge' to 'dev'
(bsc#1258210).
- PCI: Try BAR resize even when no window was released
(bsc#1258210).
- PCI: Free saved list without holding pci_bus_sem (bsc#1258210).
- PCI: Fix restoring BARs on BAR resize rollback path
(bsc#1258210).
- PCI: Add kerneldoc for pci_resize_resource() (bsc#1258210).
- PCI: Move Resizable BAR code to rebar.c (bsc#1258210).
- PCI: Skip Resizable BAR restore on read error (bsc#1258210).
- staging: rtl8723bs: core: move constants to right side in
comparison (bsc#1258210).
- staging: rtl8723bs: fix spaces around binary operators
(bsc#1258210).
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(),
rtw_get_wapi_ie(), and rtw_get_wps_attr() (bsc#1258210).
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
(bsc#1258210).
- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify
code (bsc#1258210).
- media: nxp: imx8-isi: Fix use-after-free on remove (bsc#1258210).
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev
unregister (bsc#1258210).
- Bluetooth: L2CAP: Fix use-after-free in
l2cap_sock_new_connection_cb() (bsc#1258210).
- cifs: SMB1 split: Rename cifstransport.c (bsc#1258210).
- cifs: SMB1 split: Add some #includes (bsc#1258210).
- ksmbd: use opener credentials for FSCTL mutations (bsc#1258210).
- ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
(bsc#1258210).
- ksmbd: centralize ksmbd_conn final release to plug transport
leak (bsc#1258210).
- ksmbd: track the connection owning a byte-range lock
(bsc#1258210).
- ksmbd: Use SHA-512 library for SMB3.1.1 preauth hash
(bsc#1258210).
- ksmbd: Use HMAC-SHA256 library for message signing and key
generation (bsc#1258210).
- ksmbd: Use HMAC-MD5 library for NTLMv2 (bsc#1258210).
- ksmbd: validate NTLMv2 response before updating session key
(bsc#1258210).
- proc: rename proc_setattr to proc_nochmod_setattr (bsc#1258210).
- proc: protect ptrace_may_access() with exec_update_lock (FD
links) (bsc#1258210).
- seqlock: Introduce scoped_seqlock_read() (bsc#1258210).
- seqlock: Change do_task_stat() to use scoped_seqlock_read()
(bsc#1258210).
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
(bsc#1258210).
- hfs/hfsplus: prevent getting negative values of offset/length
(bsc#1258210).
- hfs/hfsplus: fix u32 overflow in
check_and_correct_requested_length (bsc#1258210).
- xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap
(bsc#1258210).
- bpf: Consistently use reg_state() for register access in the
verifier (bsc#1258210).
- bpf: Introduce struct bpf_map_desc in verifier (bsc#1258210).
- bpf: Keep dynamic inner array lookups nullable (bsc#1258210).
- bpf: Consistently use bpf_rcu_lock_held() everywhere
(bsc#1258210).
- bpf: Allow LPM map access from sleepable BPF programs
(bsc#1258210).
- xfs: add a xfs_groups_to_rfsbs helper (bsc#1258210).
- xfs: only log freed extents for the current RTG in zoned growfs
(bsc#1258210).
- xfs: use bio_reuse in the zone GC code (bsc#1258210).
- usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation
(bsc#1258210).
- usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in
dwc3_ulpi_setup() (bsc#1258210).
- usb: atm: ueagle-atm: use dev_dbg() for 'device found' message
(bsc#1258210).
- usb: atm: ueagle-atm: remove function entry/exit debug messages
(bsc#1258210).
- usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
(bsc#1258210).
- new helper: simple_remove_by_name() (bsc#1258210).
- functionfs: don't abuse ffs_data_closed() on fs shutdown
(bsc#1258210).
- functionfs: don't bother with ffs->ref in
ffs_data_{opened,closed}() (bsc#1258210).
- functionfs: switch to simple_remove_by_name() (bsc#1258210).
- functionfs: use spinlock for FFS_DEACTIVATED/FFS_CLOSING
transitions (bsc#1258210).
- usb: gadget: f_fs: initialize reset_work at allocation time
(bsc#1258210).
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
(bsc#1258210).
- crypto: atmel-sha204a - fail on hwrng registration error in
probe path (bsc#1258210).
- btrfs: concentrate the error handling of submit_one_sector()
(bsc#1258210).
- btrfs: replace for_each_set_bit() with for_each_set_bitmap()
(bsc#1258210).
- btrfs: remove folio parameter from ordered io related functions
(bsc#1258210).
- crypto: qat - fix restarting state leak on allocation failure
(bsc#1258210).
- btrfs: fix false IO failure after falling back to buffered write
(bsc#1258210).
- btrfs: fix incorrect buffered IO fallback for append direct
writes (bsc#1258210).
- KVM: arm64: Ensure level is always initialized when relaxing
perms (bsc#1258210).
- KVM: arm64: Fix propagation of TLBI level in
kvm_pgtable_stage2_relax_perms() (bsc#1258210).
- mm/damon/core: always put unsuccessfully committed target pids
(bsc#1258210).
- mm/damon/core: trace esz at first setup (bsc#1258210).
- samples/damon/mtier: fail early if address range parameters
are invalid (bsc#1258210).
- KVM: arm64: Deduplicate ASID retrieval code (bsc#1258210).
- KVM: arm64: nv: Re-translate VNCR before injecting abort
(bsc#1258210).
- iommufd: Propagate allocation failure in
iommufd_veventq_deliver_fetch() (bsc#1258210).
- iommufd: Move vevent memory allocation outside spinlock
(bsc#1258210).
- bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is
uninitialized (bsc#1258210).
- pinctrl: airoha: fix pinctrl function mismatch issue
(bsc#1258210).
- perf symbol: Fix ENOENT case for filename__read_build_id
(bsc#1258210).
- PCI: Fix BAR resize rollback path overwriting ret (bsc#1258210).
- PCI: Fix Resizable BAR restore order (bsc#1258210).
- perf inject: With --convert-callchain ignore the dummy event
for dwarf stacks (bsc#1258210).
- seqlock: fix scoped_seqlock_read kernel-doc (bsc#1258210).
- perf callchain: Handle multiple address spaces (bsc#1258210).
- ksmbd: fix durable reconnect double-bind race in
ksmbd_reopen_durable_fd (bsc#1258210).
- RDMA/bnxt_re: Initialize dpi variable to zero (bsc#1258210).
- RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
(bsc#1258210).
- Rename to
patches.kernel.org/6.18.40-0756-apparmor-don-t-audit-files-pointing-to-aa_nu.patch.
- Rename to
patches.kernel.org/6.18.40-0757-apparmor-fix-uninitialised-pointer-passed-to.patch.
- commit 8213708
* Fri Jul 24 2026 rfrohl@suse.com
- Delete
patches.kernel.org/smb-server-do-not-require-delete-access-for-non-replacing-.patch.
- commit bb7b62e
* Tue Jul 21 2026 rfrohl@suse.com
- udmabuf: Ensure to perform cache synchronisation in
begin_cpu_udmabuf() (git-fixes).
- smb/server: do not require delete access for non-replacing links
(git-fixes).
- commit 16b0c18
* Mon Jul 20 2026 rfrohl@suse.com
- Linux 6.18.39 (bsc#1258210).
- xfs: use rtrefcount btree cursor in xchk_xref_is_rt_cow_staging
(bsc#1258210).
- xfs: write the rg superblock when fixing it (bsc#1258210).
- xfs: fix off-by-one error when calling xchk_xref_has_rt_owner
(bsc#1258210).
- xfs: don't zap bmbt forks if they are MAXLEVELS tall
(bsc#1258210).
- xfs: fully check the parent handle when it points to the rootdir
(bsc#1258210).
- xfs: clamp timestamp nanoseconds correctly (bsc#1258210).
- xfs: handle non-inode owners for rtrmap record checking
(bsc#1258210).
- xfs: set xfarray killable sort correctly (bsc#1258210).
- xfs: use the rt version of the cow staging checker (bsc#1258210).
- xfs: grab rtrmap btree when checking rgsuper (bsc#1258210).
- xfs: don't wrap around quota ids in dqiterate (bsc#1258210).
- xfs: resample the data fork mapping after cycling ILOCK
(bsc#1258210).
- xfs: fail recovery on a committed log item with no regions
(bsc#1258210).
- xfs: fix null pointer dereference in tracepoint (bsc#1258210).
- smb: client: reject overlapping data areas in SMB2 responses
(bsc#1258210).
- Revert "f2fs: remove non-uptodate folio from the page cache
in move_data_block" (bsc#1258210).
- Bluetooth: 6lowpan: Fix using chan->conn as indication to no
remote netdev (bsc#1258210).
- timekeeping: Register default clocksource before taking
tk_core.lock (bsc#1258210).
- usb: gadget: f_fs: Initialize epfile->in early to fix endpoint
direction checks (bsc#1258210).
- sched/fair: Only update stats for allowed CPUs when looking
for dst group (bsc#1258210).
- fuse-uring: remove request-less entries from ent_w_req_queue
to fix NULL deref (bsc#1258210).
- fuse-uring: make a fuse_req on SQE commit only findable after
memcpy (bsc#1258210).
- fuse-uring: Avoid queue->stopped races and set/read that value
under lock (bsc#1258210).
- fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues
(bsc#1258210).
- fuse-uring: end fuse_req on io-uring cancel task work
(bsc#1258210).
- fuse-uring: fix moving cancelled entry to ent_in_userspace list
(bsc#1258210).
- fuse-uring: fix data races on ring->ready (bsc#1258210).
- fuse-uring: fix EFAULT clobber in fuse_uring_commit
(bsc#1258210).
- fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req
(bsc#1258210).
- fuse: fix io-uring background queue dispatch on request
completion (bsc#1258210).
- fuse: re-lock request before returning from fuse_ref_folio()
(bsc#1258210).
- fuse: fix device node leak in cuse_process_init_reply()
(bsc#1258210).
- fuse: avoid 32-bit prune notification count wrap (bsc#1258210).
- fuse: back uncached readdir buffers with pages (bsc#1258210).
- RDMA/siw: bound Read Response placement to the RREAD length
(bsc#1258210).
- RDMA/core: Fix broadcast address falsely detected as local
(bsc#1258210).
- RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in
rdma_write_sg (bsc#1258210).
- Input: maplecontrol - set driver data before registering input
device (bsc#1258210).
- Input: maplemouse - set driver data before registering input
device (bsc#1258210).
- Input: maple_keyb - set driver data before registering input
device (bsc#1258210).
- Input: mms114 - fix multi-touch slot corruption (bsc#1258210).
- Input: maplemouse - fix NULL pointer dereference in open()
(bsc#1258210).
- Input: gscps2 - advance receive buffer write index (bsc#1258210).
- Input: mms114 - reject an oversized device packet size
(bsc#1258210).
- Input: touchwin - reset the packet index on every complete
packet (bsc#1258210).
- Input: ads7846 - don't use scratch for tx_buf when clearing
register (bsc#1258210).
- Input: mms114 - fix touch indexing for MMS134S and MMS136
(bsc#1258210).
- Input: iforce - bound the device-reported force-feedback effect
index (bsc#1258210).
- Input: goodix - clamp the device-reported contact count
(bsc#1258210).
- Input: elan_i2c - prevent division by zero and arithmetic
underflow (bsc#1258210).
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED
count (bsc#1258210).
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
(bsc#1258210).
- Input: synaptics-rmi4 - unregister function handlers on physical
driver registration failure (bsc#1258210).
- i2c: i801: fix hardware state machine corruption in error path
(bsc#1258210).
- i2c: imx-lpi2c: mark I2C adapter when hardware is powered down
(bsc#1258210).
- i2c: stm32f7: truncate clock period instead of rounding it
(bsc#1258210).
- i2c: davinci: Unregister cpufreq notifier on probe failure
(bsc#1258210).
- i2c: mpc: Fix timeout calculations (bsc#1258210).
- i2c: core: fix adapter deregistration race (bsc#1258210).
- i2c: core: fix adapter debugfs creation (bsc#1258210).
- i2c: core: fix adapter probe deferral loop (bsc#1258210).
- i2c: core: fix NULL-deref on adapter registration failure
(bsc#1258210).
- i2c: core: fix irq domain leak on adapter registration failure
(bsc#1258210).
- fpga: dfl-afu: validate DMA mapping length in
afu_dma_map_region() (bsc#1258210).
- dma-buf/udmabuf: skip redundant cpu sync to fix cacheline
EEXIST warning (bsc#1258210).
- udmabuf: fix DMA direction mismatch in release_udmabuf()
(bsc#1258210).
- KVM: arm64: Don't leak PFN when kvm_translate_vncr() races
MMU notifier (bsc#1258210).
- KVM: x86: Ensure vendor's exit handler runs before fastpath
userspace exits (bsc#1258210).
- KVM: VMX: Handle bad values on proxied writes to LBR MSRs
(bsc#1258210).
- KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all
injected #DBs (bsc#1258210).
- KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that
are accelerated (bsc#1258210).
- KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM
actually supports (bsc#1258210).
- KVM: x86: Add dedicated API for getting mask of accelerated
x2APIC MSRs (bsc#1258210).
- KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM
hyp vCPU (bsc#1258210).
- LoongArch: KVM: Add missing slots_lock for device
register/unregister (bsc#1258210).
- KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
(bsc#1258210).
- selftests/landlock: Filter dealloc records in
audit_count_records() (bsc#1258210).
- landlock: Set audit_net.sk for socket access checks
(bsc#1258210).
- audit: fix removal of dangling executable rules (bsc#1258210).
- iommufd: Set upper bounds on cache invalidation entry_num and
entry_len (bsc#1258210).
- iommufd: Avoid partial fault group delivery in
iommufd_fault_fops_read() (bsc#1258210).
- iommufd: Break the loop on failure in iommufd_fault_fops_read()
(bsc#1258210).
- iommufd: Reject invalid read count in iommufd_fault_fops_read()
(bsc#1258210).
- iommufd: Reject invalid read count in iommufd_veventq_fops_read()
(bsc#1258210).
- iommufd: Rewind header length in done if
iommufd_veventq_fops_read() fails (bsc#1258210).
- iommufd: Set veventq_depth upper bound (bsc#1258210).
- iommufd: Fix data_len byte-count vs element-count mismatch
(bsc#1258210).
- iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read
(bsc#1258210).
- iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
(bsc#1258210).
- iommu/vt-d: Avoid WARNING in sva unbind path (bsc#1258210).
- crypto: loongson - Remove broken and unused loongson-rng
(bsc#1258210).
- selftests/mm: pagemap_ioctl: use the correct page size for
transact_test() (bsc#1258210).
- mm: do file ownership checks with the proper mount idmap
(bsc#1258210).
- mm: page_ext: add count limit to page_ext_iter_next to prevent
invalid PFN access (bsc#1258210).
- selftests: mm: fix and speedup "droppable" test (bsc#1258210).
- mm: fix mmap errno value when MAP_DROPPABLE is not supported
(bsc#1258210).
- riscv: mm: Unconditionally sfence.vma for spurious fault
(bsc#1258210).
- riscv: mm: Define DIRECT_MAP_PHYSMEM_END (bsc#1258210).
- NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
(bsc#1258210).
- exfat: bound uniname advance in exfat_find_dir_entry()
(bsc#1258210).
- module: decompress: check return value of
module_extend_max_pages() (bsc#1258210).
- rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow
schedule (bsc#1258210).
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
(bsc#1258210).
- audit: fix potential integer overflow in audit_log_n_hex()
(bsc#1258210).
- tracing: Prevent out-of-bounds read in glob matching
(bsc#1258210).
- perf/aux: Fix page UAF in map_range() (bsc#1258210).
- i2c: core: fix hang on adapter registration failure
(bsc#1258210).
- regulator: scmi: fix of_node refcount leak in
scmi_regulator_probe() (bsc#1258210).
- watchdog: apple: Add "apple,t8103-wdt" compatible (bsc#1258210).
- EDAC/i10nm: Don't fail probing if ADXL is missing (bsc#1258210).
- x86/mm: Fix freeing of PMD-sized vmemmap pages (bsc#1258210).
- spi: fsl-lpspi: terminate the RX channel on TX prepare failure
path (bsc#1258210).
- spi: fsl-lpspi: replace dmaengine_terminate_all() with
dmaengine_terminate_sync() (bsc#1258210).
- arm64: fpsimd: Fix type mismatch in sme_{save,load}_state()
(bsc#1258210).
- crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation
(bsc#1258210).
- crypto: talitos/hash - remove useless wrapper (bsc#1258210).
- crypto: talitos/hash - rename first_desc/last_desc to
first_request/last_request (bsc#1258210).
- crypto: talitos/hash - drop workqueue mechanism for SEC1
(bsc#1258210).
- crypto: talitos/hash - use descriptor chaining for SEC1 instead
of workqueue (bsc#1258210).
- crypto: talitos/hash - prepare SEC1 descriptor chaining,
remove additional descriptor (bsc#1258210).
- crypto: talitos - move code in current_desc_hdr() into a
standalone function (bsc#1258210).
- crypto: talitos - move dma mapping code in talitos_submit()
into a standalone dma_map_request() function (bsc#1258210).
- crypto: talitos - move dma unmapping code in flush_channel()
into a standalone dma_unmap_request() function (bsc#1258210).
- crypto: talitos - add chaining of arbitrary number of descriptor
for the SEC1 (bsc#1258210).
- crypto: talitos - use dma_sync_single_for_cpu() before reading
descriptor header (bsc#1258210).
- crypto: qat - factor out AER reset helpers (bsc#1258210).
- crypto: qat - validate RSA CRT component lengths (bsc#1258210).
- crypto: qat - skip restart for down devices (bsc#1258210).
- crypto: qat - protect service table iterations with service_lock
(bsc#1258210).
- crypto: qat - notify fatal error before AER reset preparation
(bsc#1258210).
- crypto: qat - keep VFs enabled during reset (bsc#1258210).
- crypto: qat - handle sysfs-triggered reset callbacks
(bsc#1258210).
- crypto: qat - centralize bus master enable (bsc#1258210).
- crypto: drbg - Fix the fips_enabled priority boost (bsc#1258210).
- crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
(bsc#1258210).
- crypto: drbg - Fix returning success on failure in CTR_DRBG
(bsc#1258210).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
(bsc#1258210).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD)
(bsc#1258210).
- crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)
(bsc#1258210).
- crypto: ccp - Do not initialize SNP for SEV ioctls (bsc#1258210).
- crypto: loongson - Select CRYPTO_RNG (bsc#1258210).
- crypto: tegra - fix refcount leak in tegra_se_host1x_submit()
(bsc#1258210).
- crypto: pcrypt - restore callback for non-parallel fallback
(bsc#1258210).
- crypto: hisi-trng - Remove crypto_rng interface (bsc#1258210).
- crypto: ecc - Fix carry overflow in vli multiplication
(bsc#1258210).
- crypto: crypto4xx - Remove insecure and unused rng_alg
(bsc#1258210).
- crypto: chacha20poly1305 - validate poly1305 template argument
(bsc#1258210).
- crypto: caam - use print_hex_dump_devel to guard key hex dumps
again (bsc#1258210).
- crypto: caam - use print_hex_dump_devel to guard key hex dumps
(bsc#1258210).
- crypto: af_alg - Remove zero-copy support from skcipher and aead
(bsc#1258210).
- isofs: bound Rock Ridge symlink components to the SL record
(bsc#1258210).
- partitions: aix: bound the pp_count scan to the ppe array
(bsc#1258210).
- btrfs: do not trim a device which is not writeable (bsc#1258210).
- btrfs: check and set EXTENT_DELALLOC_NEW before clearing
EXTENT_DELALLOC (bsc#1258210).
- nvmet-auth: validate reply message payload bounds against
transfer length (bsc#1258210).
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get
Log Page (bsc#1258210).
- nvme-multipath: set BIO_REMAPPED on bios remapped to per-path
namespace disks (bsc#1258210).
- dm-ioctl: report an error if a device has no table (bsc#1258210).
- block: partitions: fix of_node refcount leak in of_partition()
(bsc#1258210).
- nvme: target: rdma: fix ndev refcount leak on queue connect
(bsc#1258210).
- crypto: atmel-sha204a - drop hwrng quality reduction for
ATSHA204A (bsc#1258210).
- hwrng: jh7110 - fix refcount leak in starfive_trng_read()
(bsc#1258210).
- udf: validate sparing table length as an entry count, not a
byte count (bsc#1258210).
- udf: validate VAT header length against the VAT inode size
(bsc#1258210).
- udf: validate free block extents against the partition length
(bsc#1258210).
- bpf: Prefer dirty packs for eBPF allocations (bsc#1258210).
- bpf: Prefer packs that won't trigger an IBPB flush on allocation
(bsc#1258210).
- bpf: Skip redundant IBPB in pack allocator (bsc#1258210).
- bpf: Restrict JIT predictor flush to cBPF (bsc#1258210).
- x86/bugs: Enable IBPB flush on BPF JIT allocation (bsc#1258210).
- bpf: Support for hardening against JIT spraying (bsc#1258210).
- rust_binder: fix BINDER_GET_EXTENDED_ERROR (bsc#1258210).
- rust_binder: introduce TransactionInfo (bsc#1258210).
- x86,fs/resctrl: Prevent out-of-bounds access while offlining
CPU when SNC enabled (bsc#1258210).
- mm: shmem: fix potential livelock issue for shmem direct swapin
(bsc#1258210).
- block: skip sync_blockdev() on surprise removal in
bdev_mark_dead() (bsc#1258210).
- usb: gadget: f_fs: Fix DMA fence leak (bsc#1258210).
- usb: typec: ucsi: cancel pending work on system suspend
(bsc#1258210).
- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
(bsc#1258210).
- usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM
for DP alt mode (bsc#1258210).
- usb: typec: ucsi: Invert DisplayPort role assignment
(bsc#1258210).
- usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
(bsc#1258210).
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
(bsc#1258210).
- usb: typec: class: drop PD lookup reference (bsc#1258210).
- usb: typec: anx7411: use devm_pm_runtime_enable() (bsc#1258210).
- usbip: vudc: fix NULL deref in vep_dequeue() (bsc#1258210).
- usbip: tools: support SuperSpeedPlus devices (bsc#1258210).
- USB: usb-storage: ene_ub6250: restore media-ready check
(bsc#1258210).
- USB: ulpi: fix memory leak on registration failure (bsc#1258210).
- USB: serial: digi_acceleport: fix write buffer corruption
(bsc#1258210).
- USB: serial: digi_acceleport: fix hard lockup on disconnect
(bsc#1258210).
- USB: serial: digi_acceleport: fix broken rx after throttle
(bsc#1258210).
- USB: serial: option: add Telit Cinterion FE990D50 compositions
(bsc#1258210).
- USB: serial: keyspan_pda: fix information leak (bsc#1258210).
- usb: mtu3: unmap request DMA on queue failure (bsc#1258210).
- USB: misc: uss720: unregister parport on probe failure
(bsc#1258210).
- usb: misc: usbio: bound bulk IN response length to the received
transfer (bsc#1258210).
- USB: storage: include US_FL_NO_SAME in quirks mask (bsc#1258210).
- usb: sl811-hcd: disable controller wakeup on remove
(bsc#1258210).
- USB: legousbtower: fix use-after-free on disconnect race
(bsc#1258210).
- USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
(bsc#1258210).
- USB: iowarrior: fix use-after-free on disconnect (bsc#1258210).
- USB: ldusb: fix use-after-free on disconnect race (bsc#1258210).
- USB: idmouse: fix use-after-free on disconnect race
(bsc#1258210).
- usb: gadget: f_printer: take kref only for successful open
(bsc#1258210).
- usb: gadget: udc: Fix use-after-free in gadget_match_driver
(bsc#1258210).
- usb: gadget: composite: fix dead empty check in the USB_DT_OTG
handler (bsc#1258210).
- usb: free iso schedules on failed submit (bsc#1258210).
- usb: dwc3: meson-g12a: fix refcount leak in
dwc3_meson_g12a_resume() (bsc#1258210).
- USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
(bsc#1258210).
- usb: cdnsp: fix stream context array leak in
cdnsp_alloc_stream_info() (bsc#1258210).
- usb: cdc_acm: Add quirk for Uniden BC125AT scanner (bsc#1258210).
- net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
(bsc#1258210).
- bpf: Validate BTF repeated field counts before expansion
(bsc#1258210).
- bpf: Restore sysctl new-value from 1 to 0 (bsc#1258210).
- bpf: Reject fragmented frames in devmap (bsc#1258210).
- xfs: fix memory leak in xfs_dqinode_metadir_create()
(bsc#1258210).
- xfs: fix exchmaps reservation limit check (bsc#1258210).
- xfs: fix pointer arithmetic error on 32-bit systems
(bsc#1258210).
- xfs: fix unreachable BIGTIME check in dquot flush validation
(bsc#1258210).
- xfs: release dquot buffer after dqflush failure (bsc#1258210).
- xfs: use null daddr for unset first bad log block (bsc#1258210).
- serial: 8250_mid: Disable DMA for selected platforms
(bsc#1258210).
- media: mtk-jpeg: cancel workqueue on release for supported
platforms only (bsc#1258210).
- nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment
numbers (bsc#1258210).
- hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
(bsc#1258210).
- HID: sensor-hub: Add sensor_hub_input_attr_read_values()
for multi-byte reads (bsc#1258210).
- HID: lg-g15: cancel pending work on remove to fix a
use-after-free (bsc#1258210).
- HID: appleir: fix UAF on pending key_up_timer in remove()
(bsc#1258210).
- HID: multitouch: fix out-of-bounds bit access on mt_io_flags
(bsc#1258210).
- HID: letsketch: fix UAF on inrange_timer at driver unbind
(bsc#1258210).
- HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
(bsc#1258210).
- HID: wacom: fix slab-out-of-bounds write in
wacom_wac_queue_insert (bsc#1258210).
- HID: pidff: Use correct effect type in effect update
(bsc#1258210).
- HID: wacom: stop hardware after post-start probe failures
(bsc#1258210).
- HID: uhid: convert to hid_safe_input_report() (bsc#1258210).
- HID: hid-goodix-spi: validate report size to prevent stack
buffer overflow (bsc#1258210).
- tools/mm/slabinfo: fix total_objects attribute name
(bsc#1258210).
- tools/mm/slabinfo: Fix trace disable logic inversion
(bsc#1258210).
- mm/slab: do not limit zeroing to orig_size when only red zoning
is enabled (bsc#1258210).
- X.509: Fix validation of ASN.1 certificate header (bsc#1258210).
- perf/arm-cmn: Fix DVM node events (bsc#1258210).
- s390: Revert support for DCACHE_WORD_ACCESS (bsc#1258210).
- clocksource/drivers/timer-tegra186: Fix support for multiple
watchdog instances (bsc#1258210).
- time/jiffies: Register jiffies clocksource before usage
(bsc#1258210).
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep()
error path (bsc#1258210).
- cpufreq: pcc: fix use-after-free and double free in _OSC
evaluation (bsc#1258210).
- cpufreq: Fix hotplug-suspend race during reboot (bsc#1258210).
- sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
(bsc#1258210).
- cpufreq: intel_pstate: Sync policy->cur during CPU offline
(bsc#1258210).
- perf/x86/intel/uncore: Defer ADL global PMON enable to
enable_box() (bsc#1258210).
- libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo()
(bsc#1258210).
- firmware_loader: fix device reference leak in
firmware_upload_register() (bsc#1258210).
- cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1258210).
- OPP: of: Fix potential memory leak in opp_parse_supplies()
(bsc#1258210).
- writeback: fix race between cgroup_writeback_umount() and
inode_switch_wbs() (bsc#1258210).
- smb: client: mask server-provided mode to 07777 in modefromsid
(bsc#1258210).
- smb: client: fix atime clamp check in read completion
(bsc#1258210).
- smb: client: harden POSIX SID length parsing (bsc#1258210).
- smb: client: use unaligned reads in parse_posix_ctxt()
(bsc#1258210).
- smb: client: Fix next buffer leak in receive_encrypted_standard()
(bsc#1258210).
- smb: client: fix double-free in SMB2_close() replay
(bsc#1258210).
- smb: client: fix double-free in SMB2_open() replay (bsc#1258210).
- smb: client: fix double-free in SMB2_flush() replay
(bsc#1258210).
- smb: client: fix change notify replay double-free (bsc#1258210).
- smb: client: fix double-free in SMB2_ioctl() replay
(bsc#1258210).
- smb: client: fix query_info() replay double-free (bsc#1258210).
- smb: client: fix query directory replay double-free
(bsc#1258210).
- ksmbd: use opener credentials for ADS I/O (bsc#1258210).
- ksmbd: use opener credentials for delete-on-close (bsc#1258210).
- ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
(bsc#1258210).
- ksmbd: enforce FILE_READ_ATTRIBUTES on
SMB_FIND_FILE_POSIX_INFORMATION (bsc#1258210).
- ksmbd: run set info with opener credentials (bsc#1258210).
- ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO
SECURITY (bsc#1258210).
- ksmbd: require source read access for duplicate extents
(bsc#1258210).
- ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock
cancellation (bsc#1258210).
- ksmbd: serialize QUERY_DIRECTORY requests per file (bsc#1258210).
- ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
(bsc#1258210).
- ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
(bsc#1258210).
- smb/client: Fix error code in smb2_aead_req_alloc()
(bsc#1258210).
- smb: client: resolve SWN tcon from live registrations
(bsc#1258210).
- coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
(bsc#1258210).
- fs/ntfs3: fix missing run load for vcn0 in
attr_data_get_block_locked() (bsc#1258210).
- fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio()
(bsc#1258210).
- fs/ntfs3: fsync files by syncing parent inodes (bsc#1258210).
- fs/ntfs3: rename ni_readpage_cmpr into ni_read_folio_cmpr
(bsc#1258210).
- iommu/vt-d: Fix race condition during PASID entry replacement
(bsc#1258210).
- Bluetooth: L2CAP: validate option length before reading conf
opt value (bsc#1258210).
- Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
(bsc#1258210).
- Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()
(bsc#1258210).
- Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work
is canceled (bsc#1258210).
- Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
(bsc#1258210).
- Bluetooth: fix UAF in bt_accept_dequeue() (bsc#1258210).
- Bluetooth: btnxpuart: Fix out-of-bounds firmware read in
nxp_recv_fw_req_v3() (bsc#1258210).
- Bluetooth: bnep: pin L2CAP connection during netdev registration
(bsc#1258210).
- Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
(bsc#1258210).
- netfilter: flowtable: fix offloaded ct timeout never being
extended (bsc#1258210).
- netfilter: ebtables: terminate table name before
find_table_lock() (bsc#1258210).
- netfilter: ebtables: module names must be null-terminated
(bsc#1258210).
- netfilter: ebtables: zero chainstack array (bsc#1258210).
- netfilter: handle unreadable frags (bsc#1258210).
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
(bsc#1258210).
- mm/swap: add cond_resched() in swap_reclaim_full_clusters to
prevent softlockup (bsc#1258210).
- mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on
swapless host (bsc#1258210).
- mm: shrinker: fix NULL pointer dereference in debugfs
(bsc#1258210).
- mm: shrinker: fix shrinker_info teardown race with expansion
(bsc#1258210).
- mm/shrinker: do not hold RCU lock in
shrinker_debugfs_count_show() (bsc#1258210).
- mfd: cros_ec: Delay dev_set_drvdata() until probe success
(bsc#1258210).
- net: ipv4: bound TCP reordering sysctl writes and MTU probe
sizes (bsc#1258210).
- ipv4: igmp: remove multicast group from hash table on device
destruction (bsc#1258210).
- netpoll: fix a use-after-free on shutdown path (bsc#1258210).
- io_uring/rw: preserve partial result for iopoll (bsc#1258210).
- io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work
item (bsc#1258210).
- io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
(bsc#1258210).
- gpio: sch: use raw_spinlock_t in the irq startup path
(bsc#1258210).
- gpio: eic-sprd: use raw_spinlock_t in the irq startup path
(bsc#1258210).
- NTB: epf: Avoid calling pci_irq_vector() from hardirq context
(bsc#1258210).
- fs/ntfs3: validate Dirty Page Table capacity in log_replay
copy_lcns (bsc#1258210).
- debugobjects: Plug race against a concurrent OOM disable
(bsc#1258210).
- coresight: etb10: restore atomic_t for shared reading state
(bsc#1258210).
- Bluetooth: MGMT: Fix UAF of hci_conn_params in
add_device_complete (bsc#1258210).
- Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn
ref (bsc#1258210).
- audit: Fix data races of skb_queue_len() readers on audit_queue
(bsc#1258210).
- net: af_key: initialize alg_key_len for IPComp states
(bsc#1258210).
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE
then SMB2_CANCEL (bsc#1258210).
- crypto: krb5 - filter out async aead implementations at alloc
(bsc#1258210).
- crypto: amlogic - avoid double cleanup in meson_crypto_probe()
(bsc#1258210).
- staging: rtl8723bs: fix OOB write in HT_caps_handler()
(bsc#1258210).
- staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
(bsc#1258210).
- staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq()
and join_cmd_hdl() (bsc#1258210).
- staging: rtl8723bs: fix OOB read in update_beacon_info()
IE loop (bsc#1258210).
- staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
(bsc#1258210).
- staging: rtl8723bs: fix WEP length underflow and OOB read in
OnAuth() (bsc#1258210).
- staging: rtl8723bs: fix heap buffer overflow in
rtw_cfg80211_set_wpa_ie() (bsc#1258210).
- staging: media: ipu7: fix double-free and use-after-free in
error paths (bsc#1258210).
- staging: media: atomisp: reduce load_primary_binaries() stack
usage (bsc#1258210).
- media: staging: ipu3-imgu: Add range check for
imgu_css_cfg_acc_stripe (bsc#1258210).
- staging: vme_user: fix location monitor leak in tsi148 bridge
(bsc#1258210).
- staging: vme_user: fix location monitor leak in fake bridge
(bsc#1258210).
- smb: client: restrict implied bcc[0] exemption to responses
without data area (bsc#1258210).
- staging: vme_user: bound slave read/write to the kern_buf size
(bsc#1258210).
- tipc: fix out-of-bounds read in broadcast Gap ACK blocks
(bsc#1258210).
- 6lowpan: fix NHC entry use-after-free on error path
(bsc#1258210).
- usb: misc: usbio: fix disconnect UAF in client teardown
(bsc#1258210).
- usb: dwc3: run gadget disconnect from sleepable suspend context
(bsc#1258210).
- USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
(bsc#1258210).
- hwrng: virtio: clamp device-reported used.len at copy_data()
(bsc#1258210).
- virtio-mmio: fix device release warning on module unload
(bsc#1258210).
- virtio_pci: fix vq info pointer lookup via wrong index
(bsc#1258210).
- netfilter: ipset: fix race between dump and ip_set_list resize
(bsc#1258210).
- mm/damon/ops-common: handle extreme intervals in
damon_hot_score() (bsc#1258210).
- tcp: restore RCU grace period in tcp_ao_destroy_sock
(bsc#1258210).
- PCI/IOV: Skip VF Resizable BAR restore on read error
(bsc#1258210).
- PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM
hosts (bsc#1258210).
- PCI: mediatek: Fix IRQ domain leak when port fails to enable
(bsc#1258210).
- PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
(bsc#1258210).
- PCI: host-common: Request bus reassignment when not probe-only
(bsc#1258210).
- PCI: Always lift 2.5GT/s restriction in PCIe failed link
retraining (bsc#1258210).
- PCI: altera: Fix resource leaks on probe failure (bsc#1258210).
- PCI: altera: Do not dispose parent IRQ mapping (bsc#1258210).
- PCI: loongson: Override PCIe bridge supported speeds for
Loongson-3C6000 series (bsc#1258210).
- usb: typec: tcpci_rt1711h: unregister TCPCI port with devres
(bsc#1258210).
- xhci: sideband: fix ring sg table pages leak (bsc#1258210).
- usb: xhci: Fix sleep in atomic context in xhci_free_streams()
(bsc#1258210).
- rust_binder: clear freeze listener on node removal (bsc#1258210).
- rust_binder: synchronize Rust Binder stats with freeze commands
(bsc#1258210).
- rust_binder: reject context manager self-transaction
(bsc#1258210).
- rust_binder: use a u64 stride when cleaning up the offsets array
(bsc#1258210).
- binder: fix UAF in binder_free_transaction() (bsc#1258210).
- binder: fix UAF in binder_thread_release() (bsc#1258210).
- Bluetooth: btusb: fix wakeup source leak on probe failure
(bsc#1258210).
- Bluetooth: btusb: fix use-after-free on marvell probe failure
(bsc#1258210).
- Bluetooth: btusb: fix use-after-free on registration failure
(bsc#1258210).
- Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB
(bsc#1258210).
- vfio: Remove device debugfs before releasing devres
(bsc#1258210).
- vfio: prevent infinite loop in vfio_mig_get_next_state()
on blocked arc (bsc#1258210).
- vfio/pci: Fix racy bitfields and tighten struct layout
(bsc#1258210).
- vfio/pci: Release the VGA arbiter client on register_device()
failure (bsc#1258210).
- vfio/pci: Latch disable_idle_d3 per device (bsc#1258210).
- vfio/pci: Use a private flag to prevent power state change
with VFs (bsc#1258210).
- ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after
successful writes (bsc#1258210).
- ALSA: usb-audio: Update Babyface Pro control caches only after
successful writes (bsc#1258210).
- ALSA: usb-audio: Roll back quirk control caches on write errors
(bsc#1258210).
- ALSA: usb-audio: Propagate US-16x08 write errors in route/mix
EQ-switch put callbacks (bsc#1258210).
- ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
(bsc#1258210).
- ALSA: usb-audio: avoid kobject path lookup in DualSense match
(bsc#1258210).
- ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb
corrupts anchor list on each resubmission (bsc#1258210).
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
(bsc#1258210).
- ALSA: ice1712: check snd_ctl_new1() return value (bsc#1258210).
- ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW (bsc#1258210).
- ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for
Loongson (bsc#1258210).
- ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800
G5 Mini (bsc#1258210).
- ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1258210).
- ALSA: gus: check snd_ctl_new1() return value (bsc#1258210).
- ALSA: firewire: isight: bound the sample count to the packet
payload (bsc#1258210).
- ALSA: FCP: Add Focusrite ISA C8X support (bsc#1258210).
- ALSA: es1938: check snd_ctl_new1() return value (bsc#1258210).
- ALSA: compress: Fix task creation error unwind (bsc#1258210).
- ALSA: cmipci: check snd_ctl_new1() return value (bsc#1258210).
- ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4
input parser (bsc#1258210).
- ALSA: aoa: check snd_ctl_new1() return value (bsc#1258210).
- ALSA: ymfpci: check snd_ctl_new1() return value (bsc#1258210).
- ALSA: virtio: Validate control metadata from the device
(bsc#1258210).
- ALSA: virtio: Add missing 384 kHz PCM rate mapping (bsc#1258210).
- ALSA: usx2y: us144mkii: fix work UAF on disconnect (bsc#1258210).
- iio: temperature: tmp006: use devm_iio_trigger_register
(bsc#1258210).
- iio: temperature: ltc2983: Fix reinit_completion() called
after conversion start (bsc#1258210).
- iio: temperature: ltc2983: Fix n_wires default bypassing
rotation check (bsc#1258210).
- iio: temperature: Build mlx90635 with CONFIG_MLX90635
(bsc#1258210).
- iio: resolver: ad2s1210: notify trigger and clear state on
fault read error (bsc#1258210).
- iio: proximity: vl53l0x: notify trigger and clear IRQ on error
paths (bsc#1258210).
- iio: pressure: mpl115: fix runtime PM leak on read error
(bsc#1258210).
- iio: pressure: bmp280: zero-init bmp580 trigger handler buffer
(bsc#1258210).
- iio: magnetometer: ak8975: Add missed
pm_runtime_put_autosuspend() call (bsc#1258210).
- iio: light: veml6030: fix channel type when pushing events
(bsc#1258210).
- iio: light: tsl2591: return actual error from probe IRQ failure
(bsc#1258210).
- iio: light: opt3001: fix missing state reset on timeout
(bsc#1258210).
- iio: light: gp2ap002: fix runtime PM leak on read error
(bsc#1258210).
- iio: light: al3320a: read both ALS ADC registers again
(bsc#1258210).
- iio: light: al3320a: add missing REGMAP_I2C to Kconfig
(bsc#1258210).
- iio: light: al3010: read both ALS ADC registers again
(bsc#1258210).
- iio: light: al3010: fix incorrect scale for the highest gain
range (bsc#1258210).
- iio: light: al3010: add missing REGMAP_I2C to Kconfig
(bsc#1258210).
- iio: light: al3000a: add missing REGMAP_I2C to Kconfig
(bsc#1258210).
- iio: imu: st_lsm6dsx: deselect shub page before reading whoami
(bsc#1258210).
- iio: imu: inv_icm42600: fix timestamping by limiting FIFO
reading (bsc#1258210).
- iio: imu: inv_icm42600: fix timestamp clock period by using
lower value (bsc#1258210).
- iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
(bsc#1258210).
- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
(bsc#1258210).
- iio: gyro: bmg160: wait full startup time after mode change
at probe (bsc#1258210).
- iio: gyro: bmg160: bail out when bandwidth/filter is not in
table (bsc#1258210).
- iio: event: Fix event FIFO reset race (bsc#1258210).
- iio: dac: ad3552r-hs: fix uninitialized data ni
ad3552r_hs_write_data_source() (bsc#1258210).
- iio: core: fix uninitialized data in debugfs (bsc#1258210).
- iio: common: st_sensors: honour channel endianness in
read_axis_data (bsc#1258210).
- iio: chemical: scd30: Cleanup initializations and fix
sign-extension bug (bsc#1258210).
- iio: backend: fix uninitialized data in debugfs (bsc#1258210).
- iio: adc: ti-ads124s08: Return reset GPIO lookup errors
(bsc#1258210).
- iio: adc: ti-ads1119: fix PM reference leak in buffer preenable
(bsc#1258210).
- iio: adc: spear: Initialize completion before requesting IRQ
(bsc#1258210).
- iio: adc: lpc32xx: Initialize completion before requesting IRQ
(bsc#1258210).
- iio: adc: ad_sigma_delta: fix CS held asserted and state leaks
(bsc#1258210).
- iio: adc: ad_sigma_delta: fix clear_pending_event for
registerless devices (bsc#1258210).
- iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER'
to Kconfig (bsc#1258210).
- iio: adc: ad7768-1: Select GPIOLIB (bsc#1258210).
- iio: adc: ad7380: select REGMAP (bsc#1258210).
- iio: accel: kxsd9: fix runtime PM imbalance on write_raw()
error (bsc#1258210).
- iio: accel: bmc150: clamp the device-reported FIFO frame count
(bsc#1258210).
- usb: gadget: function: rndis: add length check for header
(bsc#1258210).
- usb: gadget: function: rndis: add length check to response query
(bsc#1258210).
- fscrypt: Replace mk_users keyring with simple list (bsc#1258210).
- fscrypt: Fix key setup in edge case with multiple data unit
sizes (bsc#1258210).
- rust: kasan: KASAN+RUST requires clang (bsc#1258210).
- perf/core: Detach event groups during remove_on_exec
(bsc#1258210).
- futex/requeue: Revert "Prevent NULL pointer dereference in
remove_waiter() on self-deadlock"" (bsc#1258210).
- rust: Kbuild: set frame-pointer llvm module flag for
CONFIG_FRAME_POINTER (bsc#1258210).
- rust: doctest: fix incorrect pattern in replacement
(bsc#1258210).
- rust: block: fix GenDisk cleanup paths (bsc#1258210).
- rust: cpufreq: clean new `clippy::map_or_identity` lint for
Rust 1.98.0 (bsc#1258210).
- LoongArch: Add PIO for early access before ACPI PCI root register
(bsc#1258210).
- platform/x86: intel-hid: Protect ACPI notify handler against
recursion (bsc#1258210).
- ACPI: NFIT: core: Fix possible NULL pointer dereference
(bsc#1258210).
- ACPI: CPPC: Suppress UBSAN warning caused by field misuse
(bsc#1258210).
- KVM: x86: Unconditionally recompute CR8 intercept on PPR update
(bsc#1258210).
- KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is
in guest mode (bsc#1258210).
- KVM: x86: Move update_cr8_intercept() to lapic.c (bsc#1258210).
- perf trace beauty fcntl: Fix build with older kernel headers
(bsc#1258210).
- slab: recognize @GFP parameter as optional in kernel-doc
(bsc#1258210).
- default_gfp(): avoid using the "newfangled" __VA_OPT__ trick
(bsc#1258210).
- add default_gfp() helper macro and use it in the new *alloc_obj()
helpers (bsc#1258210).
- slab: Introduce kmalloc_flex() and family (bsc#1258210).
- mm/khugepaged: write all dirty file folios when collapsing
(bsc#1258210).
- nfsd: change nfs4_client_to_reclaim() to allocate data
(bsc#1258210).
- nfsd: move name lookup out of nfsd4_list_rec_dir() (bsc#1258210).
- net/sched: dualpi2: fix GSO backlog accounting (bsc#1258210).
- fbdev: fbcon: fix out-of-bounds read in err_out of
fbcon_do_set_font() (bsc#1258210).
- f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
(bsc#1258210).
- f2fs: detect more inconsistent cases in
sanity_check_node_footer() (bsc#1258210).
- f2fs: optimize trace_f2fs_write_checkpoint with enums
(bsc#1258210).
- f2fs: introduce f2fs_schedule_timeout() (bsc#1258210).
- f2fs: use memalloc_retry_wait() as much as possible
(bsc#1258210).
- f2fs: fix listxattr handling of corrupted xattr entries
(bsc#1258210).
- f2fs: fix potential deadlock in gc_merge path of
f2fs_balance_fs() (bsc#1258210).
- f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1258210).
- f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
(bsc#1258210).
- f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
(bsc#1258210).
- f2fs: remove non-uptodate folio from the page cache in
move_data_block (bsc#1258210).
- device property: initialize the remaining fields of fwnode_handle
in fwnode_init() (bsc#1258210).
- userfaultfd: gate must_wait writability check on pte_present()
(bsc#1258210).
- rust: str: clean unused import for Rust >= 1.98 (bsc#1258210).
- rust: str: use the "kernel vertical" imports style (bsc#1258210).
- nfsd: release layout stid on setlease failure (bsc#1258210).
- nfsd: update mtime/ctime on COPY in presence of delegated
attributes (bsc#1258210).
- nfsd: update mtime/ctime on CLONE in presense of delegated
attributes (bsc#1258210).
- bpf, arm64: Reject out-of-range B.cond targets (bsc#1258210).
- commit 53ea9d1
* Mon Jul 20 2026 rfrohl@suse.com
- Delete
patches.kernel.org/ksmbd-fix-use-after-free-of-a-deferred-file_lock-on-SMB2_C.patch.
- commit cbe4866
* Mon Jul 06 2026 rfrohl@suse.com
- Revert "apparmor: fix use-after-free in rawdata dedup loop (bko#221513)."
This reverts commit 56e7bc4e4e6e6d21b0fe6181ce275ead50467d84.
- commit 0a98124
* Sat Jul 04 2026 rfrohl@suse.com
- Linux 6.18.38 (bsc#1258210).
- apparmor: advertise the tcp fast open fix is applied
(bsc#1258210).
- net/tcp-ao: fix use-after-free of key in del_async path
(bsc#1258210).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
fails (bsc#1258210).
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl()
(bsc#1258210).
- NFS: Prevent resource leak in nfs_alloc_server() (bsc#1258210).
- NFSv4: clear exception state on successful mkdir retry
(bsc#1258210).
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
(bsc#1258210).
- NFSv4/flexfiles: reject zero filehandle version count
(bsc#1258210).
- nfsd: reset write verifier on deferred writeback errors
(bsc#1258210).
- nfsd: avoid leaking pre-allocated openowner on unconfirmed
retry race (bsc#1258210).
- nfsd: check get_user() return when reading princhashlen
(bsc#1258210).
- nfsd: fix inverted cp_ttl check in async copy reaper
(bsc#1258210).
- nfsd: fix posix_acl leak on SETACL decode failure (bsc#1258210).
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (bsc#1258210).
- i2c: core: fix adapter registration race (bsc#1258210).
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode
(bsc#1258210).
- fbdev: modedb: fix a possible UAF in fb_find_mode()
(bsc#1258210).
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in
fb_videomode_to_var (bsc#1258210).
- riscv: kfence: Call mark_new_valid_map() for kfence_unprotect()
(bsc#1258210).
- riscv: mm: Extract helper mark_new_valid_map() (bsc#1258210).
- power: reset: linkstation-poweroff: fix use-after-free in the
linkstation_poweroff_init() (bsc#1258210).
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path
(bsc#1258210).
- KVM: x86: hyper-v: Bound the bank index when querying sparse
banks (bsc#1258210).
- MIPS: smp: report dying CPU to RCU in stop_this_cpu()
(bsc#1258210).
- 9p: avoid putting oldfid in p9_client_walk() error path
(bsc#1258210).
- ocfs2: reject oversized group bitmap descriptors (bsc#1258210).
- rpmsg: char: Fix use-after-free on probe error path
(bsc#1258210).
- fpga: region: fix use-after-free in child_regions_with_firmware()
(bsc#1258210).
- irqchip/imgpdc: Fix resource leak, add missing chained handler
cleanup on remove (bsc#1258210).
- pNFS: Fix use-after-free in pnfs_update_layout() (bsc#1258210).
- LoongArch: Report dying CPU to RCU in stop_this_cpu()
(bsc#1258210).
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done
(bsc#1258210).
- blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1258210).
- hdlc_ppp: sync per-proto timers before freeing hdlc state
(bsc#1258210).
- pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
(bsc#1258210).
- gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1258210).
- crypto: nx - fix nx_crypto_ctx_exit argument (bsc#1258210).
- KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch
with get_unaligned() (bsc#1258210).
- KVM: x86/mmu: Ensure hugepage is in by slot before checking
max mapping level (bsc#1258210).
- exfat: fix potential use-after-free in exfat_find_dir_entry()
(bsc#1258210).
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS
(bsc#1258210).
- bpf: use kvfree() for replaced sysctl write buffer (bsc#1258210).
- block: Avoid mounting the bdev pseudo-filesystem in userspace
(bsc#1258210).
- f2fs: keep atomic write retry from zeroing original data
(bsc#1258210).
- f2fs: fix incorrect FI_NO_EXTENT handling in
__destroy_extent_node() (bsc#1258210).
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk()
(bsc#1258210).
- f2fs: fix to round down start offset of fallocate for pin file
(bsc#1258210).
- f2fs: validate compress cache inode only when enabled
(bsc#1258210).
- f2fs: validate orphan inode entry count (bsc#1258210).
- f2fs: pass correct iostat type for single node writes
(bsc#1258210).
- wifi: iwlwifi: mld: validate sta_mask before ffs() in BA
session handlers (bsc#1258210).
- wifi: iwlwifi: mld: fix race condition in PTP removal
(bsc#1258210).
- wifi: iwlwifi: mvm: fix race condition in PTP removal
(bsc#1258210).
- wifi: rtw88: usb: fix memory leaks on USB write failures
(bsc#1258210).
- wifi: rtw88: increase TX report timeout to fix race condition
(bsc#1258210).
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor
(bsc#1258210).
- wifi: ath11k: fix warning when unbinding (bsc#1258210).
- wifi: mt76: mt7925: don't disable AP BSS when removing TDLS peer
(bsc#1258210).
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S
(bsc#1258210).
- userfaultfd: ensure mremap_userfaultfd_fail() releases
mmap_changing (bsc#1258210).
- keys: Pin request_key_auth payload in instantiate paths
(bsc#1258210).
- KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1258210).
- gcov: use atomic counter updates to fix concurrent access
crashes (bsc#1258210).
- err.h: use __always_inline on all error pointer helpers
(bsc#1258210).
- KVM: arm64: Omit tag sync on stage-2 mappings of the zero page
(bsc#1258210).
- block: invalidate cached plug timestamp after task switch
(bsc#1258210).
- kernel/fork: clear PF_BLOCK_TS in copy_process() (bsc#1258210).
- fbdev: fix use-after-free in store_modes() (bsc#1258210).
- NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and
CONFIG share BAR (bsc#1258210).
- apparmor: fix use-after-free in rawdata dedup loop (bsc#1258210).
- apparmor: mediate the implicit connect of TCP fast open sendmsg
(bsc#1258210).
- net: ip_gre: require CAP_NET_ADMIN in the device netns for
changelink (bsc#1258210).
- net: skmsg: preserve sg.copy across SG transforms (bsc#1258210).
- mac802154: llsec: add skb_cow_data() before in-place crypto
(bsc#1258210).
- af_unix: Set gc_in_progress to true in unix_gc() (bsc#1258210).
- wifi: mt76: add wcid publish check in mt76_sta_add (bsc#1258210).
- ntfs3: reject direct userspace writes to reserved $LX* xattrs
(bsc#1258210).
- ipv4: account for fraggap on the paged allocation path
(bsc#1258210).
- ipv6: account for fraggap on the paged allocation path
(bsc#1258210).
- batman-adv: tvlv: avoid race of cifsnotfound handler state
(bsc#1258210).
- batman-adv: tvlv: enforce 2-byte alignment (bsc#1258210).
- batman-adv: dat: prevent false sharing between VLANs
(bsc#1258210).
- batman-adv: tt: track roam count per VID (bsc#1258210).
- batman-adv: tt: don't merge change entries with different VIDs
(bsc#1258210).
- batman-adv: tp_meter: handle overlapping packets (bsc#1258210).
- batman-adv: tp_meter: prevent parallel modifications of last_recv
(bsc#1258210).
- batman-adv: tp_meter: annotate last_recv_time access with
READ/WRITE_ONCE (bsc#1258210).
- batman-adv: tp_meter: restrict number of unacked list entries
(bsc#1258210).
- batman-adv: v: prevent OGM aggregation on disabled hardif
(bsc#1258210).
- batman-adv: frag: avoid underflow of TTL (bsc#1258210).
- batman-adv: frag: ensure fragment is writable before modifying
TTL (bsc#1258210).
- batman-adv: fix (m|b)cast csum after decrementing TTL
(bsc#1258210).
- batman-adv: ensure bcast is writable before modifying TTL
(bsc#1258210).
- batman-adv: gw: don't deselect gateway with active hardif
(bsc#1258210).
- batman-adv: tp_meter: initialize last_recv_time during init
(bsc#1258210).
- batman-adv: prevent ELP transmission interval underflow
(bsc#1258210).
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE
(bsc#1258210).
- batman-adv: tp_meter: add only finished tp_vars to lists
(bsc#1258210).
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery
detection (bsc#1258210).
- batman-adv: tp_meter: fix fast recovery precondition
(bsc#1258210).
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd
(bsc#1258210).
- batman-adv: tp_meter: avoid window underflow (bsc#1258210).
- batman-adv: tp_meter: initialize dec_cwnd explicitly
(bsc#1258210).
- batman-adv: tp_meter: initialize dup_acks explicitly
(bsc#1258210).
- batman-adv: tp_meter: keep unacked list in ascending ordered
(bsc#1258210).
- lockd: fix TEST handling when not all permissions are available
(bsc#1258210).
- Revert "PCI: qcom: Advertise Hotplug Slot Capability with no
Command Completion support" (bsc#1258210).
- selinux: fix overlayfs mmap() and mprotect() access checks
(bsc#1258210).
- lsm: add backing_file LSM hooks (bsc#1258210).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
role (bsc#1258210).
- commit ddc10c7
* Sat Jun 27 2026 rfrohl@suse.com
- Linux 6.18.37 (bsc#1258210).
- mm: do not copy page tables unnecessarily for VM_UFFD_WP
(bsc#1258210).
- virtiofs: fix UAF on submount umount (bsc#1258210).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
(bsc#1258210).
- ksmbd: reject non-VALID session in compound request branch
(bsc#1258210).
- drivers/base/memory: set mem->altmap after successful device
registration (bsc#1258210).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
zero (bsc#1258210).
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent
vcs_write (bsc#1258210).
- crypto: qat - remove unused character device and IOCTLs
(bsc#1258210).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
(bsc#1258210).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
(bsc#1258210).
- net: net_failover: Fix the deadlock in slave register
(bsc#1258210).
- net: export netif_open for self_test usage (bsc#1258210).
- testing/selftests/mm: add soft-dirty merge self-test
(bsc#1258210).
- mm: propagate VM_SOFTDIRTY on merge (bsc#1258210).
- mm: set the VM_MAYBE_GUARD flag on guard region install
(bsc#1258210).
- mm: introduce copy-on-fork VMAs and make VM_MAYBE_GUARD one
(bsc#1258210).
- mm: implement sticky VMA flags (bsc#1258210).
- mm: update vma_modify_flags() to handle residual flags, document
(bsc#1258210).
- mm: add atomic VMA flags and set VM_MAYBE_GUARD as such
(bsc#1258210).
- mm: introduce VM_MAYBE_GUARD and make visible in /proc/$pid/smaps
(bsc#1258210).
- sctp: disable BH before calling udp_tunnel_xmit_skb()
(bsc#1258210).
- firmware: samsung: acpm: Fix cross-thread RX length corruption
(bsc#1258210).
- Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on
Gen2 VMs (bsc#1258210).
- hv: utils: handle and propagate errors in kvp_register
(bsc#1258210).
- regulator: core: fix locking in regulator_resolve_supply()
error path (bsc#1258210).
- rose: don't free fd-owned sockets when reaping in the heartbeat
(bsc#1258210).
- rose: clear neighbour pointer in rose_kill_by_device()
(bsc#1258210).
- rose: cancel neighbour timers in rose_neigh_put() before freeing
(bsc#1258210).
- rose: drop CALL_REQUEST in loopback timer when device is not
running (bsc#1258210).
- rose: release netdev ref and destroy orphaned incoming sockets
(bsc#1258210).
- rose: fix netdev double-hold in rose_make_new() (bsc#1258210).
- rose: disconnect orphaned STATE_2 sockets when device is gone
(bsc#1258210).
- rose: set SOCK_DESTROY in rose_kill_by_device() for prompt
cleanup (bsc#1258210).
- rose: fix notifier unregistered too early in rose_exit()
(bsc#1258210).
- rose: fix netdev double-hold in rose_rx_call_request()
(bsc#1258210).
- rose: guard rose_neigh_put() against NULL in timer expiry
(bsc#1258210).
- rose: clear neighbour pointer after rose_neigh_put() in state
machines (bsc#1258210).
- rose: fix race between loopback timer and module removal
(bsc#1258210).
- rose: hold loopback neighbour reference across timer callback
(bsc#1258210).
- rose: fix dev_put() leak in rose_loopback_timer() (bsc#1258210).
- ACPI: scan: Use async schedule function in
acpi_scan_clear_dep_fn() (bsc#1258210).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
(bsc#1258210).
- net: qualcomm: rmnet: fix endpoint use-after-free in
rmnet_dellink() (bsc#1258210).
- i2c: stub: Reject I2C block transfers with invalid length
(bsc#1258210).
- RDMA/bnxt_re: zero shared page before exposing to userspace
(bsc#1258210).
- debugobjects: Dont call fill_pool() in early boot hardirq
context (bsc#1258210).
- debugobjects: Do not fill_pool() if pi_blocked_on (bsc#1258210).
- debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP
(bsc#1258210).
- debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING
(bsc#1258210).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
(bsc#1258210).
- fuse: re-lock request before replacing page cache folio
(bsc#1258210).
- net: stmmac: fix stm32 (and potentially others) resume regression
(bsc#1258210).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
(bsc#1258210).
- commit ed39cc4
* Fri Jun 19 2026 rfrohl@suse.com
- ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE
then SMB2_CANCEL (git-fixes).
- Revert "ALSA: timer: Fix UAF at snd_timer_user_params()"
(git-fixes).
- commit 9f02549
* Fri Jun 19 2026 rfrohl@suse.com
- Update config files for v6.18.36.
- commit 1b24aff
* Fri Jun 19 2026 rfrohl@suse.com
- Linux 6.18.36 (bsc#1258210).
- netfilter: require Ethernet MAC header before using eth_hdr()
(bsc#1258210).
- cfi: Include uaccess.h for get_kernel_nofault() (bsc#1258210).
- vsock/virtio: fix skb overhead overflow on 32-bit builds
(bsc#1258210).
- block: fix handling of dead zone write plugs (bsc#1258210).
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt
100 CPU (bsc#1258210).
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
(bsc#1258210).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
(bsc#1258210).
- arm64: cputype: Add C1-Premium definitions (bsc#1258210).
- arm64: cputype: Add C1-Ultra definitions (bsc#1258210).
- vsock/virtio: fix skb overhead accounting to preserve full
buf_alloc (bsc#1258210).
- vsock/virtio: fix potential unbounded skb queue (bsc#1258210).
- ipvs: skip ipv6 extension headers for csum checks (bsc#1258210).
- RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1258210).
- RDMA: Move DMA block iterator logic into dedicated files
(bsc#1258210).
- RDMA/umem: fix kernel-doc warnings (bsc#1258210).
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register
(bsc#1258210).
- RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
(bsc#1258210).
- RDMA/umem: Add helpers for umem dmabuf revoke lock (bsc#1258210).
- RDMA/umem: Move umem dmabuf revoke logic into helper function
(bsc#1258210).
- RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
(bsc#1258210).
- sched_ext: Don't warn on NULL cgrp_moving_from in
scx_cgroup_move_task() (bsc#1258210).
- wifi: mac80211: tests: mark HT check strict (bsc#1258210).
- wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check
in non-strict mode (bsc#1258210).
- driver core: reject devices with unregistered buses
(bsc#1258210).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
(bsc#1258210).
- drm/amd/display: Use krealloc_array() in dal_vector_reserve()
(bsc#1258210).
- drm/amd/display: Fix out-of-bounds read in
dp_get_eq_aux_rd_interval() (bsc#1258210).
- drm/amd/display: Fix NULL deref and buffer over-read in SDP
debugfs (bsc#1258210).
- drm/amd/display: add missing CSC entries for BT.2020 for DCE
IPs (bsc#1258210).
- drm/amd/display: Clamp VBIOS HDMI retimer register count to
array size (bsc#1258210).
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
(bsc#1258210).
- drm/amd/display: Bound VBIOS record-chain walk loops
(bsc#1258210).
- drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in
set_soft_freq_limited_range (bsc#1258210).
- drm/amd/pm: mark metrics.energy_accumulator is invalid for
smu 14.0.2 (bsc#1258210).
- drm/amd/pm: fix smu13 power limit default/cap calculation
(bsc#1258210).
- drm/amdgpu: set noretry=1 as default for GFX 10.1.x
(Navi10/12/14) (bsc#1258210).
- drm/amdgpu: restart the CS if some parts of the VM are still
invalidated (bsc#1258210).
- drm/amdgpu: fix waiting for all submissions for userptrs
(bsc#1258210).
- drm/v3d: Skip CSD when it has zeroed workgroups (bsc#1258210).
- drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
(bsc#1258210).
- drm/v3d: Fix global performance monitor reference counting
(bsc#1258210).
- drm/v3d: Wait for pending L2T flush before cleaning caches
(bsc#1258210).
- drm/xe: Clear pending_disable before signaling suspend fence
(bsc#1258210).
- drm/xe/display: fix oops in suspend/shutdown without display
(bsc#1258210).
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore
on GFX11 (bsc#1258210).
- drm/amdkfd: fix NULL dereference in get_queue_ids()
(bsc#1258210).
- drm/gem: Try to fix change_handle ioctl, attempt 4 (bsc#1258210).
- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
(bsc#1258210).
- slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD
(bsc#1258210).
- slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
(bsc#1258210).
- slimbus: qcom-ngd-ctrl: Initialize controller resources in
controller (bsc#1258210).
- slimbus: qcom-ngd-ctrl: Register callbacks after creating the
ngd (bsc#1258210).
- slimbus: qcom-ngd-ctrl: Fix probe error path ordering
(bsc#1258210).
- slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
(bsc#1258210).
- slimbus: qcom-ngd-ctrl: fix OF node refcount (bsc#1258210).
- thunderbolt: Limit XDomain response copy to actual frame size
(bsc#1258210).
- thunderbolt: Validate XDomain request packet size before type
cast (bsc#1258210).
- thunderbolt: Clamp XDomain response data copy to allocation size
(bsc#1258210).
- thunderbolt: Bound root directory content to block size
(bsc#1258210).
- thunderbolt: Reject zero-length property entries in validator
(bsc#1258210).
- sctp: stream: fully roll back denied add-stream state
(bsc#1258210).
- sctp: diag: reject stale associations in dump_one path
(bsc#1258210).
- rxrpc: Fix the ACK parser to extract the SACK table for parsing
(bsc#1258210).
- rtase: Reset TX subqueue when clearing TX ring (bsc#1258210).
- rtase: Avoid sleeping in get_stats64() (bsc#1258210).
- pmdomain: ti_sci: add wakeup constraint to parent devices of
wakeup source (bsc#1258210).
- pmdomain: imx: fix OF node refcount (bsc#1258210).
- mmc: sdhci: add signal voltage switch in sdhci_resume_host
(bsc#1258210).
- mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC (bsc#1258210).
- mmc: litex_mmc: Set mandatory idle clocks before CMD0
(bsc#1258210).
- mmc: dw_mmc-rockchip: Add missing private data for very old
controllers (bsc#1258210).
- mmc: core: Fix host controller programming for fixed driver type
(bsc#1258210).
- mm/mincore: handle non-swap entries before !CONFIG_SWAP guard
(bsc#1258210).
- mm/list_lru: drain before clearing xarray entry on reparent
(bsc#1258210).
- mm/hugetlb: restore reservation on error in hugetlb folio copy
paths (bsc#1258210).
- mm/hugetlb: avoid false positive lockdep assertion (bsc#1258210).
- mm/damon/reclaim: handle ctx allocation failure (bsc#1258210).
- mm/damon/lru_sort: handle ctx allocation failure (bsc#1258210).
- mm/cma_debug: fix invalid accesses for inactive CMA areas
(bsc#1258210).
- mm/cma: fix reserved page leak on activation failure
(bsc#1258210).
- io_uring/wait: fix min_timeout behavior (bsc#1258210).
- io_uring/kbuf: don't truncate end buffer for bundles
(bsc#1258210).
- pinctrl: mcp23s08: Read spi-present-mask as u8 not u32
(bsc#1258210).
- octeontx2-af: fix memory leak in rvu_setup_hw_resources()
(bsc#1258210).
- nvmem: layouts: onie-tlv: fix hang on unknown types
(bsc#1258210).
- nvmem: core: fix use-after-free bugs in error paths
(bsc#1258210).
- net: sfp: initialize i2c_block_size at adapter configure time
(bsc#1258210).
- net: rds: clear i_sends on setup unwind (bsc#1258210).
- net: phonet: free phonet_device after RCU grace period
(bsc#1258210).
- net: mv643xx: fix OF node refcount (bsc#1258210).
- net: bonding: fix NULL pointer dereference in bond_do_ioctl()
(bsc#1258210).
- net: airoha: Add NULL check for of_reserved_mem_lookup()
in airoha_qdma_init_hfwd_queues() (bsc#1258210).
- net/mlx5: Reorder completion before putting command entry in
cmd_work_handler (bsc#1258210).
- firmware: samsung: acpm: Fix mailbox channel leak on probe error
(bsc#1258210).
- misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
(bsc#1258210).
- misc: fastrpc: fix DMA address corruption due to find_vma misuse
(bsc#1258210).
- misc: fastrpc: fix use-after-free race in fastrpc_map_create
(bsc#1258210).
- misc: fastrpc: fix use-after-free of fastrpc_user in workqueue
context (bsc#1258210).
- memcg: use round-robin victim selection in refill_stock
(bsc#1258210).
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
(bsc#1258210).
- ipc/shm: serialize orphan cleanup with shm_nattch updates
(bsc#1258210).
- iommu/dma: Do not try to iommu_map a 0 length region in swiotlb
(bsc#1258210).
- Input: atkbd - skip deactivate for HONOR BCC-N's internal
keyboard (bsc#1258210).
- Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
(bsc#1258210).
- i2c: tegra: Fix NOIRQ suspend/resume (bsc#1258210).
- i2c: stm32f7: fix timing computation ignoring i2c-analog-filter
(bsc#1258210).
- i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
(bsc#1258210).
- i2c: imx: fix clock and pinctrl state inconsistency in runtime
PM (bsc#1258210).
- i2c: imx-lpi2c: fix resource leaks switching to
devm_dma_request_chan() (bsc#1258210).
- futex/requeue: Prevent NULL pointer dereference in
remove_waiter() on self-deadlock (bsc#1258210).
- fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
(bsc#1258210).
- fuse: reject fuse_notify() pagecache ops on directories
(bsc#1258210).
- fs/qnx6: fix pointer arithmetic in directory iteration
(bsc#1258210).
- pidfd: refuse access to tasks that have started exiting harder
(bsc#1258210).
- inet: frags: fix use-after-free caused by the fqdir_pre_exit()
flush (bsc#1258210).
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
(bsc#1258210).
- fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()
(bsc#1258210).
- bnxt_en: Fix NULL pointer dereference (bsc#1258210).
- ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in
xMR write (bsc#1258210).
- staging: rtl8723bs: fix buffer over-read in rtw_update_protection
(bsc#1258210).
- timers/migration: Fix livelock in tmigr_handle_remote_up()
(bsc#1258210).
- vsock/vmci: fix sk_ack_backlog leak on failed handshake
(bsc#1258210).
- wifi: nl80211: reject oversized EMA RNR lists (bsc#1258210).
- wifi: iwlwifi: pcie: simplify the resume flow if fast resume
is not used (bsc#1258210).
- xfs: fix rtgroup cleanup in CoW fork repair (bsc#1258210).
- xfs: fix error returns in CoW fork repair (bsc#1258210).
- mptcp: add-addr: always drop other suboptions (bsc#1258210).
- selftests: mptcp: add test for extra_subflows underflow on
userspace PM (bsc#1258210).
- mptcp: sockopt: set sockopt on all subflows (bsc#1258210).
- mptcp: sockopt: check timestamping ret value (bsc#1258210).
- mptcp: pm: fix extra_subflows underflow on userspace PM subflow
creation (bsc#1258210).
- mptcp: allow subflow rcv wnd to shrink (bsc#1258210).
- mptcp: close TOCTOU race while computing rcv_wnd (bsc#1258210).
- mptcp: fix retransmission loop when csum is enabled
(bsc#1258210).
- arm64: mm: call pagetable dtor when freeing hot-removed page
tables (bsc#1258210).
- ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
(bsc#1258210).
- ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword
I/O (bsc#1258210).
- ARM: socfpga: Fix OF node refcount leak in SMP setup
(bsc#1258210).
- udp: clear skb->dev before running a sockmap verdict
(bsc#1258210).
- zram: fix use-after-free in zram_bvec_write_partial()
(bsc#1258210).
- RDMA/srp: bound SRP_RSP sense copy by the received length
(bsc#1258210).
- RDMA/core: Validate cpu_id against nr_cpu_ids in DMAH alloc
(bsc#1258210).
- RDMA/core: Validate the passed in fops for ib_get_ucaps()
(bsc#1258210).
- mm/huge_memory: update file PUD counter before folio_put()
(bsc#1258210).
- mm/damon/ops-common: call folio_test_lru() after folio_get()
(bsc#1258210).
- mm/huge_memory: update file PMD counter before folio_put()
(bsc#1258210).
- drm/amd/display: Reject gpio_bitshift >= 32 in
bios_parser_get_gpio_pin_info() (bsc#1258210).
- drm/virtio: fix dma_fence refcount leak on error in
virtio_gpu_dma_fence_wait() (bsc#1258210).
- io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv
retries (bsc#1258210).
- ALSA: timer: Fix UAF at snd_timer_user_params() (bsc#1258210).
- ALSA: timer: Forcibly close timer instances at closing
(bsc#1258210).
- USB: serial: kl5kusb105: fix bulk-out buffer overflow
(bsc#1258210).
- USB: serial: option: add usb-id for Dell Wireless DW5826e-m
(bsc#1258210).
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
(bsc#1258210).
- USB: serial: io_ti: fix heap overflow in get_manuf_info()
(bsc#1258210).
- xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()
(bsc#1258210).
- xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()
(bsc#1258210).
- xfrm: espintcp: do not reuse an in-progress partial send
(bsc#1258210).
- ksmbd: fix use-after-free of a deferred file_lock on double
SMB2_CANCEL (bsc#1258210).
- hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
(bsc#1258210).
- drm/i915/gem: Fix phys BO pread/pwrite with offset (bsc#1258210).
- KVM: arm64: Restore POR_EL0 access to host EL0 (bsc#1258210).
- KVM: SEV: Decouple the need to sync the GHCB SA from the need
to free the SA (bsc#1258210).
- KVM: Don't WARN if memory is dirtied without a vCPU when the
VM is dying (bsc#1258210).
- mshv: add a missing padding field (bsc#1258210).
- mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock
calculation (bsc#1258210).
- rust: kasan/kbuild: fix rustc-option when cross-compiling
(bsc#1258210).
- rust: arm64: set uwtable llvm module flag for
CONFIG_UNWIND_TABLES (bsc#1258210).
- ARM: Do not select HAVE_RUST when KASAN is enabled (bsc#1258210).
- rust: x86: support Rust >= 1.98.0 target spec (bsc#1258210).
- tracing/probes: Point the error offset correctly for eprobe
argument error (bsc#1258210).
- tracing: Fix CFI violation in probestub being called by tprobes
(bsc#1258210).
- accel/ivpu: Fix signed integer truncation in IPC receive
(bsc#1258210).
- accel/ivpu: Add buffer overflow check in MS get_info_ioctl
(bsc#1258210).
- accel/ivpu: Add bounds checks for firmware log indices
(bsc#1258210).
- mm/memory-failure: fix hugetlb_lock AA deadlock in
get_huge_page_for_hwpoison (bsc#1258210).
- soc: qcom: ice: Fix race between qcom_ice_probe() and
of_qcom_ice_get() (bsc#1258210).
- Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
(bsc#1258210).
- Bluetooth: hci_sync: reject oversized Broadcast Announcement
prepend (bsc#1258210).
- tee: shm: fix shm leak in register_shm_helper() (bsc#1258210).
- netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR
register (bsc#1258210).
- netfilter: nft_tunnel: fix use-after-free on object destroy
(bsc#1258210).
- accel/amdxdna: Fix mm_struct reference leak in
aie2_populate_range() (bsc#1258210).
- drm/xe: fix refcount leak in xe_range_fence_insert()
(bsc#1258210).
- drm/vc4: fix krealloc() memory leak (bsc#1258210).
- drm/virtio: Fix driver removal with disabled KMS (bsc#1258210).
- drm/i915/edp: Check supported link rates DPCD read (bsc#1258210).
- clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at
registration time (bsc#1258210).
- clk: samsung: gs101: Fix missing USI7_USI DIV clock in
peric0_clk_regs (bsc#1258210).
- clk: qcom: x1e80100-dispcc: Stop disp_cc_mdss_mdp_clk_src from
getting parked (bsc#1258210).
- KVM: VMX: Update SVI during runtime APICv activation
(bsc#1258210).
- ipv6: Fix a potential NPD in cleanup_prefix_route()
(bsc#1258210).
- net: txgbe: initialize module info buffer (bsc#1258210).
- net: txgbe: rename the SFP related (bsc#1258210).
- net: txgbe: support CR modules for AML devices (bsc#1258210).
- net: txgbe: optimize the flow to setup PHY for AML devices
(bsc#1258210).
- net: mvpp2: build skb from XDP-adjusted data on XDP_PASS
(bsc#1258210).
- net: mvpp2: refill RX buffers before XDP or skb use
(bsc#1258210).
- net: mvpp2: limit XDP frame size to the RX buffer (bsc#1258210).
- net: mvpp2: sync RX data at the hardware packet offset
(bsc#1258210).
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
(bsc#1258210).
- netfilter: nf_log: validate MAC header was set before dumping it
(bsc#1258210).
- netfilter: x_tables: avoid leaking percpu counter pointers
(bsc#1258210).
- netfilter: nf_conntrack: destroy stale expectfn expectations
on unregister (bsc#1258210).
- netfilter: revalidate bridge ports (bsc#1258210).
- spi: rzv2h-rspi: Fix SPDR read access width for 16-bit RX
(bsc#1258210).
- rds: mark snapshot pages dirty in rds_info_getsockopt()
(bsc#1258210).
- ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
(bsc#1258210).
- tun: zero the whole vnet header in tun_put_user() (bsc#1258210).
- net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked
atomic completion (bsc#1258210).
- net: guard timestamp cmsgs to real error queue skbs
(bsc#1258210).
- sctp: validate embedded INIT chunk and address list lengths
in cookie (bsc#1258210).
- ip6_vti: set netns_immutable on the fallback device
(bsc#1258210).
- sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
(bsc#1258210).
- ASoC: SOF: amd: fix for ipc flags check (bsc#1258210).
- net: mctp: usb: don't fail mctp_usb_rx_queue on a deferred
submission (bsc#1258210).
- net: mctp: usb: fix race between urb completion and rx_retry
cancellation (bsc#1258210).
- gpio: rockchip: fix generic IRQ chip leak on remove
(bsc#1258210).
- gpio: zynq: fix runtime PM leak on remove (bsc#1258210).
- r8152: handle the return value of usb_reset_device()
(bsc#1258210).
- net: openvswitch: fix possible kfree_skb of ERR_PTR
(bsc#1258210).
- ipv6: sit: reload inner IPv6 header after GSO offloads
(bsc#1258210).
- net/mlx5: Use effective affinity mask for IRQ selection
(bsc#1258210).
- net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit
failure (bsc#1258210).
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
(bsc#1258210).
- net: qrtr: fix refcount saturation and potential UAF in
qrtr_port_remove (bsc#1258210).
- net: phy: clean the sfp upstream if phy probing fails
(bsc#1258210).
- netdev: fix double-free in netdev_nl_bind_rx_doit()
(bsc#1258210).
- net: ibm: emac: Fix use-after-free during device removal
(bsc#1258210).
- net/mlx4: avoid GCC 10 __bad_copy_from() false positive
(bsc#1258210).
- net: add pskb_may_pull() to skb_gro_receive_list() (bsc#1258210).
- tcp: restrict SO_ATTACH_FILTER to priv users (bsc#1258210).
- ASoC: wm_adsp: Fix NULL dereference when removing firmware
controls (bsc#1258210).
- gpio: mvebu: fix NULL pointer dereference in suspend/resume
(bsc#1258210).
- netlabel: validate unlabeled address and mask attribute lengths
(bsc#1258210).
- bnge: fix context mem iteration (bsc#1258210).
- net: ena: PHC: Add missing barrier (bsc#1258210).
- idpf: fix mailbox capability for set device clock time
(bsc#1258210).
- ice: fix missing priority callbacks for U.FL DPLL pins
(bsc#1258210).
- xfrm: policy: fix use-after-free on inexact bin in
xfrm_policy_bysel_ctx() (bsc#1258210).
- dma-debug: fix physical address retrieval in
debug_dma_sync_sg_for_device (bsc#1258210).
- dma-mapping: direct: fix missing mapping for THRU_HOST_BRIDGE
segments (bsc#1258210).
- xfrm: iptfs: fix use-after-free on first_skb in
__input_process_payload (bsc#1258210).
- tap: free page on error paths in tap_get_user_xdp()
(bsc#1258210).
- verification/rvgen: Fix ltl2k writing True as a literal
(bsc#1258210).
- verification/rvgen: Fix options shared among commands
(bsc#1258210).
- tools/rv: Fix cleanup after failed trace setup (bsc#1258210).
- tools/rv: Fix substring match when listing container monitors
(bsc#1258210).
- tools/rv: Fix substring match bug in monitor name search
(bsc#1258210).
- tools/rv: Ensure monitor name and desc are NUL-terminated
(bsc#1258210).
- cpufreq/amd-pstate: drop stale @epp_cached kdoc (bsc#1258210).
- spi: cadence-quadspi: fix unclocked access on unbind
(bsc#1258210).
- ALSA: seq: dummy: fix UMP event stack overread (bsc#1258210).
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain()
on linked streams (bsc#1258210).
- time: Fix off-by-one in settimeofday() usec validation
(bsc#1258210).
- hyperv: Clean up and fix the guest ID comment in hvgdk.h
(bsc#1258210).
- signal: clear JOBCTL_PENDING_MASK for caller in
zap_other_threads() (bsc#1258210).
- selftests: harness: fix pidfd leak in __wait_for_test
(bsc#1258210).
- drm/hyperv: During panic do VMBus unload after frame buffer
is flushed (bsc#1258210).
- Drivers: hv: vmbus: Provide option to skip VMBus unload on panic
(bsc#1258210).
- Drivers: hv: VMBus protocol version 6.0 (bsc#1258210).
- sctp: purge outqueue on stale COOKIE-ECHO handling (bsc#1258210).
- net/802/mrp: fix vector attribute parsing in
mrp_pdu_parse_vecattr (bsc#1258210).
- ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
(bsc#1258210).
- vxlan: vnifilter: fix spurious notification on VNI update
(bsc#1258210).
- vxlan: vnifilter: send notification on VNI add (bsc#1258210).
- octeontx2-af: npc: Fix CPT channel mask in npc_install_flow
(bsc#1258210).
- sctp: validate cached peer INIT chunk length in COOKIE_ECHO
processing (bsc#1258210).
- net/sched: fix pedit partial COW leading to page cache corruption
(bsc#1258210).
- net: ethernet: mtk_eth_soc: Fix use-after-free in metadata
dst teardown (bsc#1258210).
- net: airoha: Fix use-after-free in metadata dst teardown
(bsc#1258210).
- ptp: vclock: Switch from RCU to SRCU (bsc#1258210).
- ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (bsc#1258210).
- af_unix: Fix inq_len update problem in partial read
(bsc#1258210).
- octeontx2-af: Fix initialization of mcam's entry2target_pffunc
field (bsc#1258210).
- octeontx2-pf: Fix NDC sync operation errors (bsc#1258210).
- xsk: cache csum_start/csum_offset to fix TOCTOU in
xsk_skb_metadata() (bsc#1258210).
- Bluetooth: MGMT: Fix backward compatibility with userspace
(bsc#1258210).
- Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect
(bsc#1258210).
- Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route
calls (bsc#1258210).
- Bluetooth: ISO: Fix not releasing hdev reference on
iso_conn_big_sync (bsc#1258210).
- Bluetooth: fix memory leak in error path of hci_alloc_dev()
(bsc#1258210).
- Bluetooth: bnep: reject short frames before parsing
(bsc#1258210).
- Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame()
extension handling (bsc#1258210).
- Bluetooth: RFCOMM: validate skb length in MCC handlers
(bsc#1258210).
- Bluetooth: MGMT: validate advertising TLV before type checks
(bsc#1258210).
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
(bsc#1258210).
- wifi: fix leak if split 6 GHz scanning fails (bsc#1258210).
- ipv6: anycast: insert aca into global hash under idev->lock
(bsc#1258210).
- net: fec: fix pinctrl default state restore order on resume
(bsc#1258210).
- net: lan743x: permit VLAN-tagged packets up to configured MTU
(bsc#1258210).
- net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
(bsc#1258210).
- hsr: Remove WARN_ONCE() in hsr_addr_is_self() (bsc#1258210).
- net: Annotate sk->sk_write_space() for UDP SOCKMAP (bsc#1258210).
- pcnet32: stop holding device spin lock during napi_complete_done
(bsc#1258210).
- wifi: mac80211: limit injected antenna index in
ieee80211_parse_tx_radiotap (bsc#1258210).
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
(bsc#1258210).
- devlink: Release nested relation on devlink free (bsc#1258210).
- l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
(bsc#1258210).
- 6lowpan: fix off-by-one in multicast context address compression
(bsc#1258210).
- net/sched: act_api: use RCU with deferred freeing for action
lifecycle (bsc#1258210).
- dm cache policy smq: check allocation under invalidate lock
(bsc#1258210).
- netfilter: bridge: make ebt_snat ARP rewrite writable
(bsc#1258210).
- netfilter: nft_ct: bail out on template ct in get eval
(bsc#1258210).
- netfilter: conntrack_irc: fix possible out-of-bounds read
(bsc#1258210).
- netfilter: synproxy: add mutex to guard hook reference counting
(bsc#1258210).
- ipvs: clear the svc scheduler ptr early on edit (bsc#1258210).
- netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (bsc#1258210).
- ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break
notifiers (bsc#1258210).
- wifi: iwlwifi: mvm: don't support the reset handshake for old
firmwares (bsc#1258210).
- erofs: fix use-after-free on sbi->sync_decompress (bsc#1258210).
- erofs: tidy up synchronous decompression (bsc#1258210).
- tee: qcomtee: add missing va_end in early return
qcomtee_object_user_init() (bsc#1258210).
- tee: fix tee_ioctl_object_invoke_arg padding (bsc#1258210).
- soc: qcom: ice: Return -ENODEV if the ICE platform device is
not found (bsc#1258210).
- ARM: dts: microchip: sam9x7: fix GMAC clock configuration
(bsc#1258210).
- arm64: dts: qcom: x1-dell-thena: remove i2c20 (battery SMBus)
and reserve its pins (bsc#1258210).
- soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE
(bsc#1258210).
- tee: optee: prevent use-after-free when the client exits before
the supplicant (bsc#1258210).
- net/smc: fix sleep-inside-lock in __smc_setsockopt() causing
local DoS (bsc#1258210).
- ipv6: mcast: Fix use-after-free when processing MLD queries
(bsc#1258210).
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
(bsc#1258210).
- KVM: arm64: Take the SRCU lock for page table walks in fault
injection and AT emulation (bsc#1258210).
- ARM: fix branch predictor hardening (bsc#1258210).
- ARM: fix hash_name() fault (bsc#1258210).
- ARM: allow __do_kernel_fault() to report execution of memory
faults (bsc#1258210).
- ARM: group is_permission_fault() with is_translation_fault()
(bsc#1258210).
- bpf: Free reuseport cBPF prog after RCU grace period
(bsc#1258210).
- commit 0175c69
* Fri Jun 19 2026 rfrohl@suse.com
- Delete
patches.kernel.org/drm-gem-Try-to-fix-change_handle-ioctl-attempt-4.patch.
- commit 4ce1d5d
* Mon Jun 15 2026 ddiss@suse.de
- apparmor: fix use-after-free in rawdata dedup loop (bko#221513).
- commit 56e7bc4
* Mon Jun 15 2026 ddiss@suse.de
- apparmor: fix uninitialised pointer passed to
audit_log_untrustedstring() (bsc#1259668).
- apparmor: don't audit files pointing to aa_null.dentry
(bsc#1259668).
- commit 926094e
* Tue Jun 09 2026 rfrohl@suse.com
- drm/gem: Try to fix change_handle ioctl, attempt 4 (git-fixes).
- commit d0893ef
* Tue Jun 09 2026 rfrohl@suse.com
- Linux 6.18.35 (bsc#1258210).
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB
buffer size (bsc#1258210).
- net/sched: cls_fw: fix NULL dereference of "old" filters before
change() (bsc#1258210).
- net: mctp: ensure our nlmsg responses are initialised
(bsc#1258210).
- xfrm: move policy_bydst RCU sync from per-netns .exit to
.pre_exit (bsc#1258210).
- net/sched: sch_sfb: Replace direct dequeue call with peek and
qdisc_dequeue_peeked (bsc#1258210).
- nfc: llcp: Fix use-after-free in llcp_sock_release()
(bsc#1258210).
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()
(bsc#1258210).
- xfrm: Check for underflow in xfrm_state_mtu (bsc#1258210).
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems
(bsc#1258210).
- tools/bootconfig: Fix buf leaks in apply_xbc (bsc#1258210).
- HID: remove duplicate hid_warn_ratelimited definition
(bsc#1258210).
- kunit: fix use-after-free in debugfs when using kunit.filter
(bsc#1258210).
- accel/rocket: fix UAF via dangling GEM handle in create_bo
(bsc#1258210).
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable
(bsc#1258210).
- netfilter: xt_cpu: prefer raw_smp_processor_id (bsc#1258210).
- netfilter: ebtables: fix OOB read in compat_mtw_from_user
(bsc#1258210).
- netfilter: nf_tables: fix dst corruption in same register
operation (bsc#1258210).
- tun: free page on short-frame rejection in tun_xdp_one()
(bsc#1258210).
- tun: free page on build_skb failure in tun_xdp_one()
(bsc#1258210).
- vsock: keep poll shutdown state consistent (bsc#1258210).
- net: netlink: fix sending unassigned nsid after assigned one
(bsc#1258210).
- net: netlink: don't set nsid on local notifications
(bsc#1258210).
- net/smc: Do not re-initialize smc hashtables (bsc#1258210).
- net/iucv: fix locking in .getsockopt (bsc#1258210).
- scsi: core: Run queues for all non-SDEV_DEL devices from
scsi_run_host_queues (bsc#1258210).
- ipv4: free net->ipv4.sysctl_local_reserved_ports after
unregister_net_sysctl_table() (bsc#1258210).
- ALSA: pcm: oss: Fix setup list UAF on proc write error
(bsc#1258210).
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors
(bsc#1258210).
- net/mlx5: HWS: Reject unsupported remove-header action
(bsc#1258210).
- net: hsr: fix potential OOB access in supervision frame handling
(bsc#1258210).
- gpio: mxc: fix irq_high handling (bsc#1258210).
- net: team: Remove unused team_mode_op, port_enabled
(bsc#1258210).
- net: team: Rename port_disabled team mode op to port_tx_disabled
(bsc#1258210).
- net: team: fix NULL pointer dereference in team_xmit during
mode change (bsc#1258210).
- net: Avoid checksumming unreadable skb tail on trim
(bsc#1258210).
- ethtool: rss: avoid modifying the RSS context response
(bsc#1258210).
- ethtool: rss: add missing errno on RSS context delete
(bsc#1258210).
- ethtool: rss: fix falsely ignoring indir table updates
(bsc#1258210).
- ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
(bsc#1258210).
- ethtool: rss: fix hkey leak when indir_size is 0 (bsc#1258210).
- ethtool: rss: avoid device context leak on reply-build failure
(bsc#1258210).
- ethtool: module: call ethnl_ops_complete() on module flash
errors (bsc#1258210).
- ethtool: module: avoid leaking a netdev ref on module flash
errors (bsc#1258210).
- ethtool: module: avoid racy updates to dev->ethtool bitfield
(bsc#1258210).
- ethtool: module: check fw_flash_in_progress under rtnl_lock
(bsc#1258210).
- ethtool: module: fix cleanup if socket used for flashing
multiple devices (bsc#1258210).
- ethtool: cmis: require exact CDB reply length (bsc#1258210).
- ethtool: cmis: fix u16-to-u8 truncation of msleep_pre_rpl
(bsc#1258210).
- ethtool: cmis: validate start_cmd_payload_size from module
(bsc#1258210).
- ethtool: cmis: validate fw->size against start_cmd_payload_size
(bsc#1258210).
- cxl/test: Update mock dev array before calling
platform_device_add() (bsc#1258210).
- tunnels: load network headers after skb_cow() in
iptunnel_pmtud_build_icmp[v6]() (bsc#1258210).
- vxlan: do not reuse cached ip_hdr() value after
skb_tunnel_check_pmtu() (bsc#1258210).
- tunnels: do not assume transport header in
iptunnel_pmtud_check_icmp() (bsc#1258210).
- ksmbd: fix FSCTL permission bypass by adding a permission
check for FSCTL_SET_SPARSE (bsc#1258210).
- ASoC: codecs: simple-mux: Fix enum control bounds check
(bsc#1258210).
- drm/xe: Restore IDLEDLY regiter on engine reset (bsc#1258210).
- Bluetooth: 6lowpan: check skb_clone() return value in
send_mcast_pkt() (bsc#1258210).
- bonding: refuse to enslave CAN devices (bsc#1258210).
- bridge: Fix sleep in atomic context in netlink path
(bsc#1258210).
- bridge: Fix sleep in atomic context in sysfs path (bsc#1258210).
- ethtool: coalesce: cap profile updates at
NET_DIM_PARAMS_NUM_PROFILES (bsc#1258210).
- ethtool: tsconfig: fix reply error handling (bsc#1258210).
- ethtool: linkstate: fix unbalanced ethnl_ops_complete() on
PHY lookup error (bsc#1258210).
- ethtool: pse-pd: fix missing ethnl_ops_complete() (bsc#1258210).
- ethtool: tsconfig: fix missing ethnl_ops_complete()
(bsc#1258210).
- ethtool: tsinfo: fix uninitialized stats on the by-PHC path
(bsc#1258210).
- ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on
prepare failure (bsc#1258210).
- ethtool: strset: fix header attribute index in
ethnl_req_get_phydev() (bsc#1258210).
- ethtool: eeprom: add missing ethnl_ops_begin() / _complete()
during fallback (bsc#1258210).
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback
(bsc#1258210).
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
(bsc#1258210).
- net/sched: Revert "net/sched: Restrict conditions for adding
duplicating netems to qdisc tree" (bsc#1258210).
- net: hibmcge: disable Relaxed Ordering to fix RX packet
corruption (bsc#1258210).
- net/handshake: Use spin_lock_bh for hn_lock (bsc#1258210).
- nvme-tcp: store negative errno in queue->tls_err (bsc#1258210).
- net/handshake: Pass negative errno through handshake_complete()
(bsc#1258210).
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration
success (bsc#1258210).
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
(bsc#1258210).
- Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device
close (bsc#1258210).
- Bluetooth: hci_sync: Reset device counters in
hci_dev_close_sync() (bsc#1258210).
- gpio: adnp: fix flow control regression caused by scoped_guard()
(bsc#1258210).
- gpio: virtuser: Fix uninitialized data bug in
gpio_virtuser_direction_do_write() (bsc#1258210).
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled()
(bsc#1258210).
- gpio: rockchip: teardown bugs and resource leaks (bsc#1258210).
- net: mana: Add NULL guards in teardown path to prevent panic
on attach failure (bsc#1258210).
- net: mana: Skip redundant detach on already-detached port
(bsc#1258210).
- sctp: fix race between sctp_wait_for_connect and peeloff
(bsc#1258210).
- vsock/virtio: bind uarg before filling zerocopy skb
(bsc#1258210).
- ipv6: fix possible infinite loop in rt6_fill_node()
(bsc#1258210).
- ipv6: fix possible infinite loop in fib6_select_path()
(bsc#1258210).
- net: skbuff: fix pskb_carve leaking zcopy pages (bsc#1258210).
- media: rc: fix race between unregister and urb/irq callbacks
(bsc#1258210).
- media: rc: ttusbir: fix inverted error logic (bsc#1258210).
- smb: client: validate the whole DACL before rewriting it in
cifsacl (bsc#1258210).
- Revert "x86/fpu: Refine and simplify the magic number check
during signal return" (bsc#1258210).
- s390/cio: Restore GFP_DMA for CHSC allocation (bsc#1258210).
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS
DPCD register (bsc#1258210).
- drm/i915/psr: Read Intel DPCD workaround register (bsc#1258210).
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior
line used (bsc#1258210).
- phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575,
VSC856X (bsc#1258210).
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer
(bsc#1258210).
- iio: imu: adis16550: fix stack leak in trigger handler
(bsc#1258210).
- iio: pressure: bmp280: fix stack leak in bmp580 trigger handler
(bsc#1258210).
- usb: typec: ucsi: ccg: reject firmware images without a ':'
record header (bsc#1258210).
- usb: typec: tcpm: validate VDO count in Discover Identity ACK
handlers (bsc#1258210).
- usb: typec: tcpm: bound altmode_desc[] per iteration in
svdm_consume_modes() (bsc#1258210).
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without
a payload VDO (bsc#1258210).
- usb: typec: altmodes/displayport: validate count before reading
Status Update VDO (bsc#1258210).
- usb: typec: wcove: don't write past struct pd_message in
wcove_read_rx_buffer() (bsc#1258210).
- usb: typec: tcpm/tcpci_maxim: validate header NDO against
RX_BYTE_CNT (bsc#1258210).
- usb: typec: ucsi: validate connector number in
ucsi_connector_change() (bsc#1258210).
- USB: serial: safe_serial: fix memory corruption with small
endpoint (bsc#1258210).
- media: rc: igorplugusb: fix control request setup packet
(bsc#1258210).
- Input: ims-pcu - fix usb_free_coherent() size in
ims_pcu_buffers_free() (bsc#1258210).
- HID: quirks: Add ALWAYS_POLL quirk for SIGMACHIP USB mouse
(bsc#1258210).
- Bluetooth: btusb: Allow firmware re-download when version
matches (bsc#1258210).
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (bsc#1258210).
- mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()
(bsc#1258210).
- ipc: limit next_id allocation to the valid ID range
(bsc#1258210).
- mm: memcontrol: propagate NMI slab stats to memcg vmstats
(bsc#1258210).
- memfd: deny writeable mappings when implying SEAL_WRITE
(bsc#1258210).
- mm/rmap: initialize nr_pages to 1 at loop start in
try_to_unmap_one (bsc#1258210).
- auxdisplay: line-display: fix OOB read on zero-length
message_store() (bsc#1258210).
- smb: client: fix uninitialized variable in smb2_writev_callback
(bsc#1258210).
- Bluetooth: L2CAP: use chan timer to close channels in
cleanup_listen() (bsc#1258210).
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout()
on !conn (bsc#1258210).
- Bluetooth: HIDP: fix missing length checks in hidp_input_report()
(bsc#1258210).
- Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1258210).
- Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock
(bsc#1258210).
- Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
(bsc#1258210).
- Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM
loading (bsc#1258210).
- Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync
(bsc#1258210).
- Input: xpad - fix out-of-bounds access for Share button
(bsc#1258210).
- parport: Fix race between port and client registration
(bsc#1258210).
- rust_binder: Avoid holding lock when dropping delivered_death
(bsc#1258210).
- rust_binder: avoid calling pending_oneway_finished() on
TF_UPDATE_TXN (bsc#1258210).
- USB: cdc-acm: Fix bit overlap and move quirk definitions to
header (bsc#1258210).
- KVM: arm64: PMU: Preserve AArch32 counter low bits (bsc#1258210).
- KVM: SVM: Flush the current TLB when transitioning from xAVIC =>
x2AVIC (bsc#1258210).
- KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
(bsc#1258210).
- KVM: SEV: Ignore Port I/O requests of length '0' (bsc#1258210).
- KVM: SEV: Use the size of the PSC header as the minimum size
for PSC requests (bsc#1258210).
- KVM: SEV: WARN if KVM attempts to setup scratch area with
min_len==0 (bsc#1258210).
- KVM: SEV: Compute the correct max length of the in-GHCB scratch
area (bsc#1258210).
- KVM: SEV: Check PSC request indices against the actual size
of the buffer (bsc#1258210).
- KVM: SEV: Use READ_ONCE() when reading entries/indices from
PSC buffer (bsc#1258210).
- KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc()
(bsc#1258210).
- Disable -Wattribute-alias for clang-23 and newer (bsc#1258210).
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for
dual mux (bsc#1258210).
- iio: adc: npcm: fix unbalanced clk_disable_unprepare()
(bsc#1258210).
- iio: dac: ad3530r: Fix AD3531/AD3531R powerdown mode strings
(bsc#1258210).
- iio: dac: max5821: fix return value check in powerdown sync
(bsc#1258210).
- iio: dac: ad5686: fix ref bit initialization for single-channel
parts (bsc#1258210).
- iio: dac: ad5686: fix input raw value check (bsc#1258210).
- iio: dac: ad5686: acquire lock when doing powerdown control
(bsc#1258210).
- iio: dac: ad5686: fix powerdown control on dual-channel devices
(bsc#1258210).
- iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
(bsc#1258210).
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw
(bsc#1258210).
- iio: adc: ad4695: Fix call ordering in offload buffer postenable
(bsc#1258210).
- iio: gyro: itg3200: fix i2c read into the wrong stack location
(bsc#1258210).
- iio: gyro: adis16260: fix division by zero in write_raw
(bsc#1258210).
- iio: ssp_sensors: cancel delayed work_refresh on remove
(bsc#1258210).
- iio: temperature: tsys01: fix broken PROM checksum validation
(bsc#1258210).
- iio: magnetometer: st_magn: fix default DRDY pin selection
for LIS2MDL (bsc#1258210).
- iio: light: veml6070: Fix resource leak in probe error path
(bsc#1258210).
- iio: Fix iio_multiply_value use in
iio_read_channel_processed_scale (bsc#1258210).
- iio: chemical: mhz19b: reject oversized serial replies
(bsc#1258210).
- iio: chemical: scd30: fix division by zero in write_raw
(bsc#1258210).
- iio: light: cm3323: fix reg_conf not being initialized correctly
(bsc#1258210).
- iio: buffer: hw-consumer: fix use-after-free in error path
(bsc#1258210).
- iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf()
(bsc#1258210).
- USB: serial: omninet: fix memory corruption with small endpoint
(bsc#1258210).
- usb: cdns3: gadget: fix request skipping after clearing halt
(bsc#1258210).
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy
acquisition failure (bsc#1258210).
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call
permanently leaks the runtime PM usage counter across bind/unbind
cycles (bsc#1258210).
- usb: dwc2: Fix use after free in debug code (bsc#1258210).
- Input: elan_i2c - validate firmware size before use
(bsc#1258210).
- i2c: davinci: fix division by zero on missing clock-frequency
(bsc#1258210).
- x86/ftrace: Relocate %rip-relative percpu refs in dynamic
trampolines (bsc#1258210).
- wireguard: send: append trailer after expanding head
(bsc#1258210).
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data
(bsc#1258210).
- macsec: fix replay protection at XPN lower-PN wrap (bsc#1258210).
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
(bsc#1258210).
- ASoC: qcom: q6asm-dai: fix error handling in prepare and
set_params (bsc#1258210).
- ipv6: exthdrs: refresh nh after handling HAO option
(bsc#1258210).
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1258210).
- ipv6: validate extension header length before copying to cmsg
(bsc#1258210).
- xfrm: input: hold netns during deferred transport reinjection
(bsc#1258210).
- l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname
(bsc#1258210).
- ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1258210).
- net: skbuff: fix missing zerocopy reference in pskb_carve
helpers (bsc#1258210).
- spi: spi-mem: avoid mutating op template in spi_mem_supports_op()
(bsc#1258210).
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
(bsc#1258210).
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings
(bsc#1258210).
- nfc: hci: fix out-of-bounds read in HCP header parsing
(bsc#1258210).
- xfrm: route MIGRATE notifications to caller's netns
(bsc#1258210).
- xfrm: ipcomp: Free destination pages on acomp errors
(bsc#1258210).
- xfrm: ah: use skb_to_full_sk in async output callbacks
(bsc#1258210).
- ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware
2417 (bsc#1258210).
- ALSA: firewire-motu: Protect register DSP event queue positions
(bsc#1258210).
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq
RST without direction check (bsc#1258210).
- ASoC: qcom: q6asm-dai: close stream only when running
(bsc#1258210).
- ASoC: qcom: q6asm-dai: do not set stream state in event and
trigger callbacks (bsc#1258210).
- xfrm: esp: restore combined single-frag length gate
(bsc#1258210).
- ALSA: hda/realtek: Fix speaker output on ASUS ROG Strix G615LP
(bsc#1258210).
- Input: xpad - add "Nova 2 Lite" from GameSir (bsc#1258210).
- Input: xpad - add support for ASUS ROG RAIKIRI II (bsc#1258210).
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk
loops (bsc#1258210).
- misc: rp1: Send IACK on IRQ activate to fix kdump/kexec
(bsc#1258210).
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem
(bsc#1258210).
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad
E490 (bsc#1258210).
- comedi: comedi_test: fix check for valid scan_begin_src in
waveform_ai_cmdtest() (bsc#1258210).
- comedi: comedi_test: Fix limiting of convert_arg in
waveform_ai_cmdtest() (bsc#1258210).
- counter: Fix refcount leak in counter_alloc() error path
(bsc#1258210).
- tty: serial: pch_uart: add check for dma_alloc_coherent()
(bsc#1258210).
- tty: serial: samsung: Remove redundant port lock acquisition
in rx helpers (bsc#1258210).
- usb: chipidea: core: convert ci_role_switch to local variable
(bsc#1258210).
- usb: core: Fix up Interrupt IN endpoints with bogus
wBytesPerInterval (bsc#1258210).
- usb: musb: omap2430: Fix use-after-free in omap2430_probe()
(bsc#1258210).
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2
hub controllers (bsc#1258210).
- usb: storage: Add quirks for PNY Elite Portable SSD
(bsc#1258210).
- usbip: vudc: Fix use after free bug in vudc_remove due to race
condition (bsc#1258210).
- usb: usbtmc: check URB actual_length for interrupt-IN
notifications (bsc#1258210).
- usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize
(bsc#1258210).
- usb: typec: tipd: Fix error code in tps6598x_probe()
(bsc#1258210).
- usb: typec: tcpm: improve handling of DISCOVER_MODES failures
(bsc#1258210).
- usb: typec: ucsi: Check if power role change actually happened
before handling (bsc#1258210).
- usb: typec: ucsi: Don't update power_supply on power role
change if not connected (bsc#1258210).
- USB: serial: option: add MeiG SRM813Q (bsc#1258210).
- USB: serial: option: add missing RSVD(5) flag for Rolling
RW135R-GL (bsc#1258210).
- USB: serial: belkin_sa: validate interrupt status length
(bsc#1258210).
- USB: serial: cypress_m8: validate interrupt packet headers
(bsc#1258210).
- USB: serial: keyspan: fix missing indat transfer sanity check
(bsc#1258210).
- USB: serial: mxuport: fix memory corruption with small endpoint
(bsc#1258210).
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity
check (bsc#1258210).
- usb: gadget: uvc: hold opts->lock across XU walks in
uvc_function_bind (bsc#1258210).
- usb: gadget: net2280: Fix double free in probe error path
(bsc#1258210).
- usb: gadget: f_hid: fix device reference leak in hidg_alloc()
(bsc#1258210).
- usb: gadget: composite: fix integer underflow in WebUSB GET_URL
handling (bsc#1258210).
- usb: gadget: dummy_hcd: Reject hub port requests for non-existent
ports (bsc#1258210).
- usb: gadget: f_fs: copy only received bytes on short ep0 read
(bsc#1258210).
- usb: gadget: f_fs: serialize DMABUF cancel against request
completion (bsc#1258210).
- thunderbolt: property: Reject u32 wrap in
tb_property_entry_valid() (bsc#1258210).
- thunderbolt: property: Reject dir_len < 4 to prevent size_t
underflow (bsc#1258210).
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL
walker (bsc#1258210).
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
(bsc#1258210).
- scsi: target: iscsi: Fix CRC overread and double-free in
iscsit_handle_text_cmd() (bsc#1258210).
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends
to rsp_buf (bsc#1258210).
- scsi: target: iscsi: Validate CHAP_R length before base64 decode
(bsc#1258210).
- drm/hyperv: validate resolution_count and fix WIN8 fallback
(bsc#1258210).
- drm/hyperv: validate VMBus packet size in receive callback
(bsc#1258210).
- drm/gem: fix race between change_handle and handle_delete
(bsc#1258210).
- drm/i915/psr: Block DC states on vblank enable when Panel
Replay supported (bsc#1258210).
- drm/i915: Fix potential UAF in TTM object purge (bsc#1258210).
- drm/amd/pm/si: Disregard vblank time when no displays are
connected (bsc#1258210).
- serial: altera_jtaguart: handle uart_add_one_port() failures
(bsc#1258210).
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (bsc#1258210).
- serial: qcom_geni: fix kfifo underflow when flush precedes
DMA completion IRQ (bsc#1258210).
- serial: sh-sci: fix memory region release in error path
(bsc#1258210).
- serial: zs: Fix swapped RI/DSR modem line transition counting
(bsc#1258210).
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in
start_rx_dma (bsc#1258210).
- drm/amdkfd: fix NULL pointer bug in svm_range_set_attr
(bsc#1258210).
- drm/amdkfd: fix a vulnerability of integer overflow in kfd
debugger (bsc#1258210).
- drm/amdkfd: Check for pdd drm file first in CRIU restore path
(bsc#1258210).
- drm/amdgpu: fix lock leak on ENOMEM in
AMDGPU_GEM_OP_GET_MAPPING_INFO (bsc#1258210).
- drm/amdgpu: fix calling VM invalidation in
amdgpu_hmm_invalidate_gfx (bsc#1258210).
- drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
(bsc#1258210).
- serial: dz: Fix bootconsole message clobbering at chip reset
(bsc#1258210).
- serial: dz: Fix bootconsole handover lockup (bsc#1258210).
- serial: dz: Convert to use a platform device (bsc#1258210).
- serial: zs: Fix bootconsole handover lockup (bsc#1258210).
- serial: zs: Switch to using channel reset (bsc#1258210).
- serial: zs: Convert to use a platform device (bsc#1258210).
- serial: core: introduce guard(uart_port_lock_check_sysrq_irqsave)
(bsc#1258210).
- serial: 8250: dispatch SysRq character in serial8250_handle_irq()
(bsc#1258210).
- serial: 8250_dw: dispatch SysRq character in dw8250_handle_irq()
(bsc#1258210).
- platform/x86/intel/vsec: Refactor base_addr handling
(bsc#1258210).
- platform/x86/intel/vsec: Make driver_data info const
(bsc#1258210).
- platform/x86/intel/vsec: Fix enable_cnt imbalance on PCIe
error recovery (bsc#1258210).
- x86/mm: Disable broadcast TLB flush when PCID is disabled
(bsc#1258210).
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer
in recvmsg (bsc#1258210).
- rxrpc: Fix RESPONSE packet verification to extract skb to a
linear buffer (bsc#1258210).
- serdev: Provide a bustype shutdown function (bsc#1258210).
- Bluetooth: hci_qca: Migrate to serdev specific shutdown function
(bsc#1258210).
- Bluetooth: hci_qca: Convert timeout from jiffies to ms
(bsc#1258210).
- selftests: mptcp: drop nanoseconds width specifier (bsc#1258210).
- net: devmem: reject dma-buf bind with non-page-aligned size
or SG length (bsc#1258210).
- mptcp: handle first subflow closing consistently (bsc#1258210).
- mptcp: borrow forward memory from subflow (bsc#1258210).
- mptcp: do not drop partial packets (bsc#1258210).
- arm64: tlb: Flush walk cache when unsharing PMD tables
(bsc#1258210).
- octeontx2-pf: avoid double free of pool->stack on AQ init
failure (bsc#1258210).
- mptcp: cleanup fallback dummy mapping generation (bsc#1258210).
- mptcp: reset rcv wnd on disconnect (bsc#1258210).
- cpufreq: intel_pstate: Add and use hybrid_get_cpu_type()
(bsc#1258210).
- cpufreq: intel_pstate: Use correct scaling factor on Raptor
Lake-E (bsc#1258210).
- xfrm: iptfs: reset runtime state when cloning SAs (bsc#1258210).
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths
(bsc#1258210).
- USB: serial: cypress_m8: fix memory corruption with small
endpoint (bsc#1258210).
- USB: serial: digi_acceleport: fix memory corruption with small
endpoints (bsc#1258210).
- USB: serial: mct_u232: fix memory corruption with small endpoint
(bsc#1258210).
- hwmon: (pmbus) Add support for guarded PMBus lock (bsc#1258210).
- hwmon: (pmbus/adm1266) serialize sequencer_state debugfs read
with pmbus_lock (bsc#1258210).
- hwmon: (pmbus/adm1266) serialize GPIO PMBus accesses with
pmbus_lock (bsc#1258210).
- mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()
(bsc#1258210).
- net: phy: micrel: fix LAN8814 QSGMII soft reset (bsc#1258210).
- xhci: tegra: Fix ghost USB device on dual-role port unplug
(bsc#1258210).
- mailbox: Fix NULL message support in mbox_send_message()
(bsc#1258210).
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank
enable (bsc#1258210).
- thunderbolt: property: Cap recursion depth in
__tb_property_parse_dir() (bsc#1258210).
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (bsc#1258210).
- tools: ynl: add scope qualifier for definitions (bsc#1258210).
- KVM: arm64: vgic-its: Drop the translation cache reference
only for the erased entry (bsc#1258210).
- KVM: arm64: Reassign nested_mmus array behind mmu_lock
(bsc#1258210).
- Rename to
patches.kernel.org/6.18.35-006-bcache-fix-uninitialized-closure-object.patch.
- commit 46a8662
* Fri Jun 05 2026 msuchanek@suse.de
- packaging: Add nvidia kernel description
- commit 5f2699f
* Wed Jun 03 2026 tiwai@suse.de
- rpm/mkspec: Conditionally set Rust BuildReqs (bsc#1258538)
This is a further optimization of kernel packaging rust-enablement.
Add the check of CONFIG_RUST at creating the spec for each kernel
flavor, and set BuildRequires conditionally only for archs that have
CONFIG_RUST. This avoids the unnecessary dependency chains due to
unused rust.
The main knob ENABLE_RUST is still needed because otherwise we can't
know whether to pass the dummy-tools or not at processing
run_oldconfig.
- commit ccf4b93
* Wed Jun 03 2026 tiwai@suse.de
- rpm/check-for-config-changes: ignore Rust-related configs (bsc#1258538)
Those configs may be dynamically changed at the build time
- commit 5251980
* Wed Jun 03 2026 tiwai@suse.de
- rpm: Add BuildRequires for Rust enablement (bsc#1258538)
Update mkspec and template to generate the spec files with
BuildRequires of Rust-related packages when ENABLE_RUST=Yes is set in
rpm/config.sh.
- commit d0f276f
* Mon Jun 01 2026 rfrohl@suse.com
- Refresh
patches.kernel.org/6.18.34-252-net-ethernet-cortina-Carry-over-frag-counter.patch.
- commit ea685f4
* Mon Jun 01 2026 rfrohl@suse.com
- Linux 6.18.34 (bsc#1258210).
- security/keys: fix missed RCU read section on lookup
(bsc#1258210).
- drm/msm: Restore second parameter name in purge() and evict()
(bsc#1258210).
- LoongArch: kprobes: Fix handling of fatal unrecoverable
recursions (bsc#1258210).
- ksmbd: fix durable reconnect error path file lifetime
(bsc#1258210).
- io_uring/nop: pass all errors to userspace (bsc#1258210).
- net: gro: don't merge zcopy skbs (bsc#1258210).
- pds_core: ensure null-termination for firmware version strings
(bsc#1258210).
- net: airoha: Disable GDM2 forwarding before configuring GDM2
loopback (bsc#1258210).
- tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
(bsc#1258210).
- net: mana: validate rx_req_idx to prevent out-of-bounds array
access (bsc#1258210).
- octeontx2-af: npc: Fix allmulticast skip logic for LBK and
SDP VFs (bsc#1258210).
- selftests: net: Fix checksums in xdp_native (bsc#1258210).
- drm/xe/oa: Fix exec_queue leak on width check in stream open
(bsc#1258210).
- ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
(bsc#1258210).
- gpio: aggregator: lock device when calling device_is_bound()
(bsc#1258210).
- gpio: aggregator: remove the software node when deactivating
the aggregator (bsc#1258210).
- gpio: aggregator: stop using dev-sync-probe (bsc#1258210).
- gpio: aggregator: fix a potential use-after-free (bsc#1258210).
- gpio: cdev: check if uAPI v2 config attributes are correctly
zeroed (bsc#1258210).
- tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
(bsc#1258210).
- bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
(bsc#1258210).
- net: ag71xx: check error for platform_get_irq (bsc#1258210).
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length
checks (bsc#1258210).
- net: shaper: rework the VALID marking (again) (bsc#1258210).
- net: shaper: annotate the data races (bsc#1258210).
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
(bsc#1258210).
- Bluetooth: btmtk: fix urb->setup_packet leak in error paths
(bsc#1258210).
- Bluetooth: btintel_pcie: Fix incorrect MAC access programming
(bsc#1258210).
- tracing: Avoid NULL return from hist_field_name() on truncation
(bsc#1258210).
- cgroup: rstat: relax NMI guard after switch to try_cmpxchg
(bsc#1258210).
- ALSA: seq: Serialize UMP output teardown with event_input
(bsc#1258210).
- wifi: wilc1000: fix dma_buffer leak on bus acquire failure
(bsc#1258210).
- wifi: mac80211: fix MLE defragmentation (bsc#1258210).
- wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
(bsc#1258210).
- erofs: fix managed cache race for unaligned extents
(bsc#1258210).
- pds_core: fix debugfs_lookup dentry leak and error handling
(bsc#1258210).
- pds_core: fix error handling in pdsc_devcmd_wait (bsc#1258210).
- net: airoha: Fix NPU RX DMA descriptor bits (bsc#1258210).
- net: phy: honor eee_disabled_modes in phy_advertise_eee_all()
(bsc#1258210).
- net: phy: honor eee_disabled_modes in phy_support_eee()
(bsc#1258210).
- bridge: mcast: Fix a possible use-after-free when removing a
bridge port (bsc#1258210).
- net: bridge: Flush multicast groups when snooping is disabled
(bsc#1258210).
- RDMA/rtrs: Fix use-after-free in path file creation cleanup
(bsc#1258210).
- RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port
(bsc#1258210).
- ASoC: soc-utils: Add missing va_end in snd_soc_ret()
(bsc#1258210).
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
(bsc#1258210).
- platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
(bsc#1258210).
- platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
(bsc#1258210).
- platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
(bsc#1258210).
- platform/surface: aggregator_registry: omit battery & AC nodes
on Surface Laptop 7 (bsc#1258210).
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
(bsc#1258210).
- net: dsa: mt7530: preserve VLAN tags on trapped link-local
frames (bsc#1258210).
- net: dsa: mt7530: fix FDB entries not aging out with short
timeout (bsc#1258210).
- kbuild: pacman-pkg: make "rc" releases adhere to pacman
versioning scheme (bsc#1258210).
- drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP
(bsc#1258210).
- igc: set tx buffer type for SMD frames (bsc#1258210).
- ice: ptp: use primary NAC semaphore on E825 (bsc#1258210).
- ice: ptp: serialize E825 PHY timer start with PTP lock
(bsc#1258210).
- cgroup/rstat: validate cpu before css_rstat_cpu() access
(bsc#1258210).
- drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable
(bsc#1258210).
- drm/mediatek: mtk_cec: Fix non-static global variable
(bsc#1258210).
- wifi: ath11k: fix peer resolution on rx path when peer_id=0
(bsc#1258210).
- drm/xe/pf: Fix CFI failure in debugfs access (bsc#1258210).
- drm/xe/vf: Fix signature of print functions (bsc#1258210).
- drm/xe/gsc: Fix double-free of managed BO in error path
(bsc#1258210).
- dma-mapping: move dma_map_resource() sanity check into debug
code (bsc#1258210).
- wifi: iwlwifi: mld: don't dereference a pointer before NULL
checking it (bsc#1258210).
- wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU
is disabled (bsc#1258210).
- hwmon: (lm90) Add lock protection to lm90_alert (bsc#1258210).
- hwmon: (lm90) Stop work before releasing hwmon device
(bsc#1258210).
- drm/msm/snapshot: fix dumping of the unaligned regions
(bsc#1258210).
- ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS
Strix Gxx5 (bsc#1258210).
- netfilter: nft_inner: release local_lock before re-enabling
softirqs (bsc#1258210).
- spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()
(bsc#1258210).
- ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging
(bsc#1258210).
- btrfs: fix squota accounting during enable generation
(bsc#1258210).
- btrfs: check for subvolume before deleting squota qgroup
(bsc#1258210).
- btrfs: relax squota parent qgroup deletion rule (bsc#1258210).
- btrfs: check squota parent usage on membership change
(bsc#1258210).
- btrfs: remaining BTRFS_PATH_AUTO_FREE conversions (bsc#1258210).
- btrfs: don't search back for dir inode item in INO_LOOKUP_USER
(bsc#1258210).
- btrfs: use the key format macros when printing keys
(bsc#1258210).
- btrfs: add macros to facilitate printing of keys (bsc#1258210).
- vsock/virtio: fix zerocopy completion for multi-skb sends
(bsc#1258210).
- io_uring/net: punt IORING_OP_BIND async if it needs file create
(bsc#1258210).
- ALSA: scarlett2: Add missing error check when initialise
Autogain Status (bsc#1258210).
- ASoC: codecs: fs210x: fix possible buffer overflow (bsc#1258210).
- scsi: sd: Fix return code handling in sd_spinup_disk()
(bsc#1258210).
- net/mlx5: Do not restore destination-less TC rules (bsc#1258210).
- tls: Preserve sk_err across recvmsg() when data has been copied
(bsc#1258210).
- ovpn: disable BHs when updating device stats (bsc#1258210).
- x86/xen: Fix xen_e820_swap_entry_with_ram() (bsc#1258210).
- gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE
(bsc#1258210).
- ovpn: fix race between deleting interface and adding new peer
(bsc#1258210).
- ovpn: respect peer refcount in CMD_NEW_PEER error path
(bsc#1258210).
- ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
(bsc#1258210).
- net: phy: DP83TC811: add reading of abilities (bsc#1258210).
- net: tls: prevent chain-after-chain in plain text SG
(bsc#1258210).
- net: tls: fix off-by-one in sg_chain entry count for wrapped
sk_msg ring (bsc#1258210).
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
(bsc#1258210).
- powerpc/time: Remove redundant preempt_disable|enable() calls
from arch_irq_work_raise() (bsc#1258210).
- drm/msm: Fix iommu_map_sgtable() return value check and avoid
WARN (bsc#1258210).
- drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
(bsc#1258210).
- Documentation: intel_pstate: Fix description of asymmetric
packing with SMT (bsc#1258210).
- x86/mce: Restore MCA polling interval halving (bsc#1258210).
- selftests: ublk: cap nthreads to kernel's actual nr_hw_queues
(bsc#1258210).
- drm/msm/dpu: don't mix devm and drmm functions (bsc#1258210).
- drm/msm/dsi: don't dump registers past the mapped region
(bsc#1258210).
- ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
(bsc#1258210).
- net/smc: avoid NULL deref of conn->lnk in smc_msg_event
tracepoint (bsc#1258210).
- accel/qaic: Add overflow check to remap_pfn_range during mmap
(bsc#1258210).
- block: bio-integrity: Fix null-ptr-deref in
bio_integrity_map_user() (bsc#1258210).
- HID: quirks: really enable the intended work around for
appledisplay (bsc#1258210).
- block: recompute nr_integrity_segments in
blk_insert_cloned_request (bsc#1258210).
- block: don't overwrite bip_vcnt in bio_integrity_copy_user()
(bsc#1258210).
- net: shaper: reject QUEUE scope handle with missing id
(bsc#1258210).
- net: shaper: enforce singleton NETDEV scope with id 0
(bsc#1258210).
- net: shaper: fix undersized reply skb allocation in GROUP
command (bsc#1258210).
- net: shaper: set ret to -ENOMEM when genlmsg_new() fails in
group_doit (bsc#1258210).
- net: shaper: reject duplicate leaves in GROUP request
(bsc#1258210).
- net: shaper: fix trivial ordering issue in net_shaper_commit()
(bsc#1258210).
- net: shaper: flip the polarity of the valid flag (bsc#1258210).
- wifi: ath10k: skip WMI and beacon transmission when device is
wedged (bsc#1258210).
- wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
(bsc#1258210).
- wifi: ath11k: fix error path leaks in some WMI WOW calls
(bsc#1258210).
- net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference
(bsc#1258210).
- net: ethernet: cortina: Carry over frag counter (bsc#1258210).
- net: ethernet: cortina: Drop half-assembled SKB (bsc#1258210).
- net: ethernet: cortina: Make RX SKB per-port (bsc#1258210).
- netfs, afs: Fix write skipping in dir/link writepages
(bsc#1258210).
- netfs: Fix netfs_read_folio() to wait on writeback (bsc#1258210).
- netfs: Fix folio->private handling in netfs_perform_write()
(bsc#1258210).
- netfs: Fix partial invalidation of streaming-write folio
(bsc#1258210).
- netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
(bsc#1258210).
- netfs: Fix leak of request in netfs_write_begin() error handling
(bsc#1258210).
- netfs: Fix early put of sink folio in netfs_read_gaps()
(bsc#1258210).
- netfs: Fix write streaming disablement if fd open O_RDWR
(bsc#1258210).
- netfs: Fix read-gaps to remove netfs_folio from filled folio
(bsc#1258210).
- netfs: Fix potential deadlock in write-through mode
(bsc#1258210).
- netfs: Fix streaming write being overwritten (bsc#1258210).
- netfs: Defer the emission of trace_netfs_folio() (bsc#1258210).
- netfs: Fix netfs_invalidate_folio() to clear dirty bit if all
changes gone (bsc#1258210).
- netfs: Fix overrun check in netfs_extract_user_iter()
(bsc#1258210).
- netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call
(bsc#1258210).
- netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
(bsc#1258210).
- netfs: Fix cancellation of a DIO and single read subrequests
(bsc#1258210).
- powerpc: fix dead default for GUEST_STATE_BUFFER_TEST
(bsc#1258210).
- powerpc: 82xx: fix uninitialized pointers with free attribute
(bsc#1258210).
- ASoC: SOF: amd: Fix error code handling in psp_send_cmd()
(bsc#1258210).
- tcp: Fix out-of-bounds access for twsk in
tcp_ao_established_key() (bsc#1258210).
- zonefs: handle integer overflow in zonefs_fname_to_fno
(bsc#1258210).
- nvme-pci: fix use-after-free in nvme_free_host_mem()
(bsc#1258210).
- nvme: fix bio leak on mapping failure (bsc#1258210).
- irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT
(bsc#1258210).
- nsfs: fix wrong error code returned for pidns ioctls
(bsc#1258210).
- ublk: reject max_sectors smaller than PAGE_SECTORS in parameter
validation (bsc#1258210).
- irqchip/ath79-cpu: Remove unused function (bsc#1258210).
- fs: Fix return in jfs_mkdir and orangefs_mkdir (bsc#1258210).
- fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap
(bsc#1258210).
- fprobe: Fix unregister_fprobe() to wait for RCU grace period
(bsc#1258210).
- ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC
(bsc#1258210).
- ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC
(bsc#1258210).
- NFSD: Fix infinite loop in layout state revocation (bsc#1258210).
- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL
register access (bsc#1258210).
- net: ti: icssm-prueth: fix eth_ports_node leak in probe
(bsc#1258210).
- net: lan966x: avoid unregistering netdev on register failure
(bsc#1258210).
- ice: fix locking in ice_dcb_rebuild() (bsc#1258210).
- ice: fix setting RSS VSI hash for E830 (bsc#1258210).
- idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
(bsc#1258210).
- net: shaper: Reject reparenting of existing nodes (bsc#1258210).
- net: napi: Avoid gro timer misfiring at end of busypoll
(bsc#1258210).
- tcp: Fix imbalanced icsk_accept_queue count (bsc#1258210).
- test_kprobes: clear kprobes between test runs (bsc#1258210).
- kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()
(bsc#1258210).
- netfilter: bridge: eb_tables: close module init race
(bsc#1258210).
- netfilter: x_tables: close dangling table module init race
(bsc#1258210).
- netfilter: ebtables: close dangling table module init race
(bsc#1258210).
- netfilter: ebtables: move to two-stage removal scheme
(bsc#1258210).
- netfilter: x_tables: add and use xtables_unregister_table_exit
(bsc#1258210).
- netfilter: x_tables: add and use xt_unregister_table_pre_exit
(bsc#1258210).
- netfilter: x_tables: unregister the templates first
(bsc#1258210).
- btrfs: tracepoints: fix sleep while in atomic context in
btrfs_sync_file() (bsc#1258210).
- ALSA: hda: cs35l41: Put ACPI device on missing physical node
(bsc#1258210).
- ALSA: hda: cs35l56: Put ACPI device after setting companion
(bsc#1258210).
- ARM: integrator: Fix early initialization (bsc#1258210).
- firmware: arm_ffa: Fix sched-recv callback partition lookup
(bsc#1258210).
- firmware: arm_ffa: Snapshot notifier callbacks under lock
(bsc#1258210).
- firmware: arm_ffa: Align RxTx buffer size before mapping
(bsc#1258210).
- firmware: arm_ffa: Validate framework notification message
layout (bsc#1258210).
- firmware: arm_ffa: Keep framework RX release under lock
(bsc#1258210).
- firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
(bsc#1258210).
- pinctrl: qcom: Fix wakeirq map by removing disconnected irqs
for sm8150 (bsc#1258210).
- kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
(bsc#1258210).
- kunit: config: Enable KUNIT_DEBUGFS by default (bsc#1258210).
- riscv: mm: Fixup no5lvl failure when vaddr is invalid
(bsc#1258210).
- riscv: errata: Fix bitwise vs logical AND in MIPS errata patching
(bsc#1258210).
- firmware: arm_ffa: Unregister bus notifier on teardown for
FF-A v1.0 (bsc#1258210).
- firmware: arm_ffa: Fix per-vcpu self notifications handling
in workqueue (bsc#1258210).
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
(bsc#1258210).
- firmware: arm_ffa: Check for NULL FF-A ID table while driver
registration (bsc#1258210).
- HID: uclogic: Fix regression of input name assignment
(bsc#1258210).
- HID: intel-thc-hid: Intel-quickspi: Fix some error codes
(bsc#1258210).
- pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615
(bsc#1258210).
- pinctrl: meson: amlogic-a4: fix deadlock issue (bsc#1258210).
- pinctrl: renesas: rzg2l: Fix SMT register cache handling
(bsc#1258210).
- pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset
for high pins during suspend/resume (bsc#1258210).
- ARM: dts: renesas: rskrza1: Drop superfluous cells (bsc#1258210).
- ARM: dts: renesas: genmai: Drop superfluous cells (bsc#1258210).
- pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function
(bsc#1258210).
- hwmon: (pmbus/adm1266) reject short block-read responses in
the GPIO accessors (bsc#1258210).
- hwmon: (pmbus/adm1266) register the nvmem device after
pmbus_do_probe() (bsc#1258210).
- hwmon: (pmbus/adm1266) register the gpio_chip after
pmbus_do_probe() (bsc#1258210).
- hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO
read in get_multiple (bsc#1258210).
- hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at
ADM1266_PDIO_NR (bsc#1258210).
- hwmon: (pmbus/adm1266) bounce blackbox records through a
protocol-sized buffer (bsc#1258210).
- hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer
read buffer (bsc#1258210).
- hwmon: (pmbus/adm1266) reject implausible blackbox record_count
(bsc#1258210).
- hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
(bsc#1258210).
- batman-adv: tt: prevent TVLV entry number overflow (bsc#1258210).
- batman-adv: tt: fix negative tt_buff_len (bsc#1258210).
- batman-adv: tt: fix negative last_changeset_len (bsc#1258210).
- batman-adv: tt: avoid empty VLAN responses (bsc#1258210).
- batman-adv: tt: reject oversized local TVLV buffers
(bsc#1258210).
- batman-adv: tt: fix TOCTOU race for reported vlans (bsc#1258210).
- batman-adv: tp_meter: avoid role confusion in tp_list
(bsc#1258210).
- batman-adv: tp_meter: fix race condition in send error reporting
(bsc#1258210).
- batman-adv: tp_meter: fix tp_vars reference leak in receiver
shutdown (bsc#1258210).
- batman-adv: tp_meter: directly shut down timer on cleanup
(bsc#1258210).
- batman-adv: tp_meter: avoid use of uninit sender vars
(bsc#1258210).
- batman-adv: bla: avoid NULL-ptr deref for claim via dropped
interface (bsc#1258210).
- batman-adv: bla: avoid double decrement of bla.num_requests
(bsc#1258210).
- batman-adv: bla: fix report_work leak on backbone_gw purge
(bsc#1258210).
- batman-adv: frag: disallow unicast fragment in fragment
(bsc#1258210).
- batman-adv: fix tp_meter counter underflow during shutdown
(bsc#1258210).
- batman-adv: fix fragment reassembly length accounting
(bsc#1258210).
- batman-adv: dat: handle forward allocation error (bsc#1258210).
- batman-adv: clear current gateway during teardown (bsc#1258210).
- batman-adv: mcast: fix use-after-free in orig_node RCU release
(bsc#1258210).
- batman-adv: iv: recover OGM scheduling after forward packet
error (bsc#1258210).
- batman-adv: tvlv: reject oversized TVLV packets (bsc#1258210).
- batman-adv: tvlv: abort OGM send on tvlv append failure
(bsc#1258210).
- batman-adv: v: stop OGMv2 on disabled interface (bsc#1258210).
- drm/amd/display: Validate payload length and link_index in
dc_process_dmub_aux_transfer_async (bsc#1258210).
- drm/amd/display: Validate GPIO pin LUT table size before
iterating (bsc#1258210).
- drm/amd/display: Fix integer overflow in bios_get_image()
(bsc#1258210).
- drm/bridge: megachips: remove bridge when irq request fails
(bsc#1258210).
- drm/bridge: it66121: acquire reset GPIO in probe (bsc#1258210).
- drm/amdgpu/vpe: Force collaborate sync after TRAP (bsc#1258210).
- drm/virtio: use uninterruptible resv lock for plane updates
(bsc#1258210).
- drm/v3d: Release indirect CSD GEM reference on CPU job free
(bsc#1258210).
- drm/v3d: Fix use-after-free of CPU job query arrays on error
path (bsc#1258210).
- drm/msm: Fix shrinker deadlock (bsc#1258210).
- device property: set fwnode->secondary to NULL in fwnode_init()
(bsc#1258210).
- LoongArch: Remove unused code to avoid build warning
(bsc#1258210).
- LoongArch: kprobes: Use larch_insn_text_copy() to patch
instructions (bsc#1258210).
- fwctl: pds: Validate RPC input size before parsing (bsc#1258210).
- RDMA/siw: Reject MPA FPDU length underflow before signed
receive math (bsc#1258210).
- spi: ti-qspi: fix use-after-free after DMA setup failure
(bsc#1258210).
- spi: sprd: fix error pointer deref after DMA setup failure
(bsc#1258210).
- spi: ep93xx: fix error pointer deref after DMA setup failure
(bsc#1258210).
- scsi: isci: Fix use-after-free in device removal path
(bsc#1258210).
- phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after
SM8650 G4 fix (bsc#1258210).
- phy: tegra: xusb: Fix per-pad high-speed termination calibration
(bsc#1258210).
- phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for
Exynos7870 (bsc#1258210).
- spi: qup: fix error pointer deref after DMA setup failure
(bsc#1258210).
- drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c
probe (bsc#1258210).
- virt: sev-guest: Explicitly leak pages in unknown state
(bsc#1258210).
- riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when
OOM (bsc#1258210).
- riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem()
when OOM (bsc#1258210).
- KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h
(erratum #1235) (bsc#1258210).
- KVM: arm64: vgic: Free private_irqs when init fails after
allocation (bsc#1258210).
- KVM: arm64: vgic-its: Reject restored DTE with out-of-range
num_eventid_bits (bsc#1258210).
- arm64: probes: Handle probes on hinted conditional branch
instructions (bsc#1258210).
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails
(bsc#1258210).
- cifs: Fix busy dentry used after unmounting (bsc#1258210).
- wifi: mac80211: consume only present negotiated TTLM maps
(bsc#1258210).
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
(bsc#1258210).
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
(bsc#1258210).
- ice: restore PTP Rx timestamp config after ethtool set-channels
(bsc#1258210).
- ice: fix setting promisc mode while adding VID filter
(bsc#1258210).
- ice: fix locking around wait_event_interruptible_locked_irq
(bsc#1258210).
- igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
(bsc#1258210).
- octeontx2-pf: fix double free in rvu_rep_rsrc_init()
(bsc#1258210).
- octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
(bsc#1258210).
- lsm: hold cred_guard_mutex for lsm_set_self_attr() (bsc#1258210).
- rbd: eliminate a race in lock_dwork draining on unmap
(bsc#1258210).
- ixgbevf: fix use-after-free in VEPA multicast source pruning
(bsc#1258210).
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1258210).
- wifi: iwlwifi: mld: stop TX during firmware restart
(bsc#1258210).
- wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
(bsc#1258210).
- wifi: ath11k: clear shared SRNG pointer state on restart
(bsc#1258210).
- ice: fix VF queue configuration with low MTU values
(bsc#1258210).
- vsock/virtio: reset connection on receiving queue overflow
(bsc#1258210).
- vsock/vmci: fix UAF when peer resets connection during handshake
(bsc#1258210).
- mptcp: pm: fix ADD_ADDR timer infinite retry on option space
insufficient (bsc#1258210).
- ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
(bsc#1258210).
- ring-buffer: Flush and stop persistent ring buffer on panic
(bsc#1258210).
- ring-buffer: Fix reporting of missed events in iterator
(bsc#1258210).
- qed: fix double free in qed_cxt_tables_alloc() (bsc#1258210).
- l2tp: use list_del_rcu in l2tp_session_unhash (bsc#1258210).
- fs/ntfs3: handle attr_set_size() errors when truncating files
(bsc#1258210).
- net: ethtool: phy: avoid NULL deref when PHY driver is unbound
(bsc#1258210).
- net: ethtool: fix NULL pointer dereference in phy_reply_size
(bsc#1258210).
- cgroup/cpuset: Reset DL migration state on can_attach() failure
(bsc#1258210).
- tracing/fprobe: Check the same type fprobe on table as the
unregistered one (bsc#1258210).
- tracing/fprobe: Avoid kcalloc() in rcu_read_lock section
(bsc#1258210).
- tracing: fprobe: use ftrace if CONFIG_DYNAMIC_FTRACE_WITH_ARGS
(bsc#1258210).
- tracing: fprobe: Remove unused local variable (bsc#1258210).
- sched_ext: Avoid UAF in scx_root_enable_workfn() init failure
path (bsc#1258210).
- sched_ext: Fix missing warning in scx_set_task_state() default
case (bsc#1258210).
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (bsc#1258210).
- netfilter: ipset: stop hash:* range iteration at end
(bsc#1258210).
- netfilter: nf_queue: hold bridge skb->dev while queued
(bsc#1258210).
- netfilter: ip6t_hbh: reject oversized option lists (bsc#1258210).
- net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()
(bsc#1258210).
- net: ifb: report ethtool stats over num_tx_queues (bsc#1258210).
- net/mlx5e: Fix use-after-free in
mlx5e_tx_reporter_timeout_recover (bsc#1258210).
- net: phy: skip EEE advertisement write when autoneg is disabled
(bsc#1258210).
- net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1258210).
- phonet/pep: disable BH around forwarded sk_receive_skb()
(bsc#1258210).
- Bluetooth: serialize accept_q access (bsc#1258210).
- Bluetooth: MGMT: validate Add Extended Advertising Data length
(bsc#1258210).
- Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not
stack pointer (bsc#1258210).
- Bluetooth: hci_uart: fix UAFs and race conditions in close
and init paths (bsc#1258210).
- Bluetooth: bnep: Fix UAF read of dev->name (bsc#1258210).
- Bluetooth: ISO: drop ISO_END frames received without prior
ISO_START (bsc#1258210).
- Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs
l2cap_conn_del() (bsc#1258210).
- net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
(bsc#1258210).
- selftests/mm: run_vmtests.sh: fix destructive tests invocation
(bsc#1258210).
- mm/page_alloc: fix initialization of tags of the huge zero
folio with init_on_free (bsc#1258210).
- mm/memory_hotplug: fix memory block reference leak on remove
(bsc#1258210).
- mm: fix __vm_normal_page() to handle missing support for
pmd_special()/pud_special() (bsc#1258210).
- mm/memory: fix spurious warning when unmapping
device-private/exclusive pages (bsc#1258210).
- ipv6: ioam: refresh hdr pointer before ioam6_event()
(bsc#1258210).
- drivers/base/memory: fix memory block reference leak in poison
accounting (bsc#1258210).
- io_uring/waitid: clear waitid info before copying it to userspace
(bsc#1258210).
- spi: amd: Set correct bus number in ACPI probe path
(bsc#1258210).
- efi: Allocate runtime workqueue before ACPI init (bsc#1258210).
- ALSA: scarlett2: Allow flash writes ending at segment boundary
(bsc#1258210).
- ALSA: asihpi: Fix potential OOB array access at reading cache
(bsc#1258210).
- ALSA: pcm: Don't setup bogus iov_iter for silencing
(bsc#1258210).
- ALSA: ua101: Reject too-short USB descriptors (bsc#1258210).
- hwmon: (pmbus/adm1266) widen blackbox-info buffer to
I2C_SMBUS_BLOCK_MAX (bsc#1258210).
- smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close
(bsc#1258210).
- smb: client: use data_len for SMB2 READ encrypted folioq copy
(bsc#1258210).
- smb: client: protect tc_count increment in
smb2_find_smb_sess_tcon_unlocked() (bsc#1258210).
- smb: client: require net admin for CIFS SWN netlink
(bsc#1258210).
- regulator: tps65219: fix irq_data.rdev not being assigned
(bsc#1258210).
- ksmbd: validate SID in parent security descriptor during ACL
inheritance (bsc#1258210).
- ksmbd: fix SID memory leak in set_posix_acl_entries_dacl()
on overflow (bsc#1258210).
- ksmbd: fix null pointer dereference in compare_guid_key()
(bsc#1258210).
- mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
(bsc#1258210).
- sysfs: don't remove existing directory on update failure
(bsc#1258210).
- drm/vblank: Fix kernel docs for vblank timer (bsc#1258210).
- drm/atomic: Increase timeout in
drm_atomic_helper_wait_for_vblanks() (bsc#1258210).
- drm/vkms: Convert to DRM's vblank timer (bsc#1258210).
- drm/vblank: Add CRTC helpers for simple use cases (bsc#1258210).
- drm/vblank: Add vblank timer (bsc#1258210).
- Revert "ice: Remove jumbo_remove step from TX path"
(bsc#1258210).
- Revert "ice: fix double-free of tx_buf skb" (bsc#1258210).
- ata: libata-scsi: do not needlessly defer commands when using
PMP with FBS (bsc#1258210).
- ata: libata-scsi: do not use the deferred QC feature on PMPs
with CBS (bsc#1258210).
- ata: libata-scsi: do not use the deferred QC feature for
ATA_DEFER_PORT (bsc#1258210).
- ata: libata-scsi: improve readability of ata_scsi_qc_issue()
(bsc#1258210).
- mfd: bcm2835-pm: Add support for BCM2712 (bsc#1258210).
- arm64: dts: broadcom: bcm2712: Add watchdog DT node
(bsc#1258210).
- dt-bindings: soc: bcm: Add bcm2712 compatible (bsc#1258210).
- smb: client: reject userspace cifs.spnego descriptions
(bsc#1258210).
- ksmbd: close durable scavenger races against m_fp_list lookups
(bsc#1258210).
- spi: spi-dw-dma: fix print error log when wait finish transaction
(bsc#1258210).
- bridge: mrp: reject zero test interval to avoid OOM panic
(bsc#1258210).
- sched/deadline: Fix missing ENQUEUE_REPLENISH during PI
de-boosting (bsc#1258210).
- sched: Employ sched_change guards (bsc#1258210).
- cxl/mbox: validate payload size before accessing contents in
cxl_payload_from_user_allowed() (bsc#1258210).
- fuse: fix uninit-value in fuse_dentry_revalidate() (bsc#1258210).
- iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
(bsc#1258210).
- iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs
(bsc#1258210).
- drm/xe/hdcp: Add NULL check for media_gt in
intel_hdcp_gsc_check_status() (bsc#1258210).
- commit f65e572
* Mon Jun 01 2026 msuchanek@suse.de
- packaging: Replace compute-PATCHVERSION with python implementation
This script is copied by kkspec to the package directory and called from
there. That means that libraries from kernel-source cannot be loaded,
and that's the reason why the script is appended to the library that is
most useful for it. compute-PATCHVERSION and mkspec are no longer
shipped in rpm packages which means compute-PATCHVERSION could be folded
into mkspec, and that in turn into tar-up. However, these are all
written in different languages.
- commit de458e0
* Wed May 27 2026 dmueller@suse.com
- Improve compatibility with awk 2.4.0 (bsc#1266214)
This was meant to match the literal '+', so it needs to be backslashed
not a repetition of the '^' symbol.
- commit fbbce3e
* Tue May 26 2026 msuchanek@suse.de
- compute-PATCHVERSION: Do not append .. to default patch directories
All the callers are either using . or a specific patch directory.
If a caller really needs to load patches from .. it should be passed as
parameter.
- commit d383394
* Tue May 26 2026 msuchanek@suse.de
- compute-PATCHVERSION: Remove unpack logic
This used to be needed when compute-PATCHVERSION was shipped as part of
the rpm package where unpacked patches are not available.
It is not done annymore, and the unpackinng is not needed.
- commit 9a8fa0e
* Tue May 26 2026 msuchanek@suse.de
- packaging: Rip out extra symbols support
Extra symbols are not supported for a long time.
The oldest branch we maintain is SLE 11 SP1 and it does not use patch
guards to select patches.
- commit 7b3d5b0
* Mon May 25 2026 msuchanek@suse.de
- packaging: compute-PATCHVERSION.sh -> compute-PATCHVERSION
- commit fc624df
* Sat May 23 2026 rfrohl@suse.com
- Linux 6.18.33 (bsc#1258210).
- blk-cgroup: wait for blkcg cleanup before initializing new disk
(bsc#1258210).
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
(bsc#1258210).
- fs/mbcache: cancel shrink work before destroying the cache
(bsc#1258210).
- md/raid1: fix the comparing region of interval tree
(bsc#1258210).
- drbd: Balance RCU calls in drbd_adm_dump_devices() (bsc#1258210).
- loop: fix partition scan race between udev and
loop_reread_partitions() (bsc#1258210).
- nilfs2: reject zero bd_oblocknr in
nilfs_ioctl_mark_blocks_dirty() (bsc#1258210).
- blk-cgroup: fix disk reference leak in
blkcg_maybe_throttle_current() (bsc#1258210).
- pstore/ram: fix resource leak when ioremap() fails (bsc#1258210).
- erofs: include the trailing NUL in FS_IOC_GETFSLABEL
(bsc#1258210).
- md: fix array_state=clear sysfs deadlock (bsc#1258210).
- erofs: handle 48-bit blocks/uniaddr for extra devices
(bsc#1258210).
- dm: add WQ_PERCPU to alloc_workqueue users (bsc#1258210).
- md: remove unused static md_wq workqueue (bsc#1258210).
- md: wake raid456 reshape waiters before suspend (bsc#1258210).
- btrfs: fix deadlock between reflink and transaction commit
when using flushoncommit (bsc#1258210).
- OPP: debugfs: Use performance level if available to distinguish
between rates (bsc#1258210).
- OPP: Move break out of scoped_guard in
dev_pm_opp_xlate_required_opp() (bsc#1258210).
- ACPI: x86: cmos_rtc: Clean up address space handler driver
(bsc#1258210).
- ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
(bsc#1258210).
- devres: fix missing node debug info in devm_krealloc()
(bsc#1258210).
- thermal/drivers/spear: Fix error condition for reading
st,thermal-flags (bsc#1258210).
- debugfs: check for NULL pointer in debugfs_create_str()
(bsc#1258210).
- debugfs: fix placement of EXPORT_SYMBOL_GPL for
debugfs_create_str() (bsc#1258210).
- soundwire: debugfs: initialize firmware_file to empty string
(bsc#1258210).
- amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()
(bsc#1258210).
- amd-pstate: Update cppc_req_cached in fast_switch case
(bsc#1258210).
- cpufreq: Pass the policy to cpufreq_driver->adjust_perf()
(bsc#1258210).
- PCI: use generic driver_override infrastructure (bsc#1258210).
- platform/wmi: use generic driver_override infrastructure
(bsc#1258210).
- vdpa: use generic driver_override infrastructure (bsc#1258210).
- s390/cio: use generic driver_override infrastructure
(bsc#1258210).
- bus: fsl-mc: use generic driver_override infrastructure
(bsc#1258210).
- irqchip/irq-pic32-evic: Address warning related to wrong printf()
formatter (bsc#1258210).
- hrtimer: Avoid pointless reprogramming in
__hrtimer_start_range_ns() (bsc#1258210).
- hrtimer: Reduce trace noise in hrtimer_start() (bsc#1258210).
- perf/amd/ibs: Preserve PhyAddrVal bit when clearing PhyAddr MSR
(bsc#1258210).
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS
NMI handler (bsc#1258210).
- x86/tdx: Fix the typo in TDX_ATTR_MIGRTABLE (bsc#1258210).
- rust: sync: atomic: Remove bound `T: Sync` for
`Atomic::from_ptr()` (bsc#1258210).
- sparc64: vdso: Link with -z noexecstack (bsc#1258210).
- scripts/gdb: timerlist: Adapt to move of tk_core (bsc#1258210).
- locking: Fix rwlock support in <linux/spinlock_up.h>
(bsc#1258210).
- sched/topology: Compute sd_weight considering cpuset partitions
(bsc#1258210).
- sched/topology: Fix sched_domain_span() (bsc#1258210).
- irqchip/renesas-rzg2l: Fix error path in
rzg2l_irqc_common_probe() (bsc#1258210).
- ASoC: Intel: avs: Check maximum valid CPUID leaf (bsc#1258210).
- ASoC: Intel: avs: Include CPUID header at file scope
(bsc#1258210).
- x86/vdso: Clean up remnants of VDSO32_NOTE_MASK (bsc#1258210).
- firmware: dmi: Correct an indexing error in dmi.h (bsc#1258210).
- sched/rt: Skip group schedulable check with rt_group_sched=0
(bsc#1258210).
- wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
(bsc#1258210).
- wifi: rtlwifi: pci: fix possible use-after-free caused by
unfinished irq_prepare_bcn_tasklet (bsc#1258210).
- bpf: test_run: Fix the null pointer dereference issue in
bpf_lwt_xmit_push_encap (bsc#1258210).
- wifi: ieee80211: split mesh definitions out (bsc#1258210).
- wifi: ieee80211: split HT definitions out (bsc#1258210).
- wifi: ieee80211: split VHT definitions out (bsc#1258210).
- wifi: ieee80211: split HE definitions out (bsc#1258210).
- wifi: ieee80211: split EHT definitions out (bsc#1258210).
- wifi: ieee80211: fix definition of EHT-MCS 15 in MRU
(bsc#1258210).
- dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
(bsc#1258210).
- dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (bsc#1258210).
- s390/bpf: Zero-extend bpf prog return values and kfunc arguments
(bsc#1258210).
- powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy
(bsc#1258210).
- params: Replace __modinit with __init_or_module (bsc#1258210).
- module: Fix freeing of charp module parameters when
CONFIG_SYSFS=n (bsc#1258210).
- wifi: libertas: use USB anchors for tracking in-flight URBs
(bsc#1258210).
- wifi: libertas: don't kill URBs in interrupt context
(bsc#1258210).
- tools/nolibc: implement %m if errno is not defined (bsc#1258210).
- tools/nolibc/printf: Change variables 'c' to 'ch' and 'tmpbuf[]'
to 'outbuf[]' (bsc#1258210).
- tools/nolibc/printf: Move snprintf length check to callback
(bsc#1258210).
- wifi: mt76: mt7996: fix the behavior of radar detection
(bsc#1258210).
- wifi: mt76: mt7996: fix iface combination for different chipsets
(bsc#1258210).
- wifi: mt76: mt7996: Set mtxq->wcid just for primary link
(bsc#1258210).
- wifi: mt76: mt7996: Reset mtxq->idx if primary link is removed
in mt7996_vif_link_remove() (bsc#1258210).
- wifi: mt76: mt7996: Clear wcid pointer in
mt7996_mac_sta_deinit_link() (bsc#1258210).
- wifi: mt76: mt7996: Reset ampdu_state state in case of failure
in mt7996_tx_check_aggr() (bsc#1258210).
- wifi: mt76: mt7921: Reset ampdu_state state in case of failure
in mt76_connac2_tx_check_aggr() (bsc#1258210).
- wifi: mt76: mt7925: Fix incorrect MLO mode in firmware control
(bsc#1258210).
- wifi: mt76: mt7615: fix use_cts_prot support (bsc#1258210).
- wifi: mt76: mt7915: fix use_cts_prot support (bsc#1258210).
- wifi: mt76: mt7925: prevent NULL pointer dereference in
mt7925_tx_check_aggr() (bsc#1258210).
- wifi: mt76: mt7925: prevent NULL vif dereference in
mt7925_mac_write_txwi (bsc#1258210).
- wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
(bsc#1258210).
- wifi: mt76: mt7921: Place upper limit on station AID
(bsc#1258210).
- wifi: mt76: Fix memory leak destroying device (bsc#1258210).
- wifi: mt76: mt7925: cqm rssi low/high event notify (bsc#1258210).
- wifi: mt76: mt7925: drop puncturing handling from BSS change
path (bsc#1258210).
- wifi: mt76: mt7925: fix potential deadlock in
mt7925_roc_abort_sync (bsc#1258210).
- wifi: mt76: mt7921: fix potential deadlock in
mt7921_roc_abort_sync (bsc#1258210).
- wifi: mt76: fix deadlock in remain-on-channel (bsc#1258210).
- arm64: cpufeature: Make PMUVer and PerfMon unsigned
(bsc#1258210).
- wifi: mt76: mt7996: fix wrong DMAD length when using MAC TXP
(bsc#1258210).
- wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
(bsc#1258210).
- wifi: mt76: mt7915: fix use-after-free bugs in
mt7915_mac_dump_work() (bsc#1258210).
- wifi: mt76: mt7996: fix use-after-free bugs in
mt7996_mac_dump_work() (bsc#1258210).
- wifi: mt76: mt7921: fix 6GHz regulatory update on connection
(bsc#1258210).
- wifi: mt76: mt7996: Add missing CHANCTX_STA_CSA property
(bsc#1258210).
- wifi: mt76: mt7996: Remove link pointer dependency in
mt7996_mac_sta_remove_links() (bsc#1258210).
- wifi: mt76: mt7996: use correct link_id when filling TXD and
TXP (bsc#1258210).
- wifi: mt76: mt7996: Switch to the secondary link if the default
one is removed (bsc#1258210).
- wifi: mt76: mt7996: Decrement sta counter removing the link
in mt7996_mac_reset_sta_iter() (bsc#1258210).
- wifi: mt76: fix multi-radio on-channel scanning (bsc#1258210).
- wifi: mt76: support upgrading passive scans to active
(bsc#1258210).
- wifi: mt76: mt7996: fix RRO EMU configuration (bsc#1258210).
- bpf: Fix refcount check in check_struct_ops_btf_id()
(bsc#1258210).
- bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
(bsc#1258210).
- bpf: Fix variable length stack write over spilled pointers
(bsc#1258210).
- bpf,arc_jit: Fix missing newline in pr_err messages
(bsc#1258210).
- wifi: rtw89: phy: fix uninitialized variable access in
rtw89_phy_cfo_set_crystal_cap() (bsc#1258210).
- vfio: refactor vfio_pci_mmap_huge_fault function (bsc#1258210).
- drivers/vfio_pci_core: Change PXD_ORDER check from switch case
to if/else block (bsc#1258210).
- r8152: fix incorrect register write to USB_UPHY_XTAL
(bsc#1258210).
- powerpc/crash: fix backup region offset update to elfcorehdr
(bsc#1258210).
- powerpc/crash: Update backup region offset in elfcorehdr on
memory hotplug (bsc#1258210).
- selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
(bsc#1258210).
- bpf: Fix abuse of kprobe_write_ctx via freplace (bsc#1258210).
- macvlan: annotate data-races around port->bc_queue_len_used
(bsc#1258210).
- bpf: fix end-of-list detection in cgroup_storage_get_next_key()
(bsc#1258210).
- bpf: Fix stale offload->prog pointer after constant blinding
(bsc#1258210).
- net: ethernet: ti-cpsw:: rename soft_reset() function
(bsc#1258210).
- net: ethernet: ti-cpsw: fix linking built-in code to modules
(bsc#1258210).
- wifi: brcmfmac: Fix error pointer dereference (bsc#1258210).
- wifi: mac80211: handle VHT EXT NSS in
ieee80211_determine_our_sta_mode() (bsc#1258210).
- bpf: Drop task_to_inode and inet_conn_established from lsm
sleepable hooks (bsc#1258210).
- bpf: reject negative CO-RE accessor indices in
bpf_core_parse_spec() (bsc#1258210).
- wifi: ath10k: fix station lookup failure during disconnect
(bsc#1258210).
- bpf: Support negative offsets, BPF_SUB, and alu32 for linked
register tracking (bsc#1258210).
- bpf: Fix linked reg delta tracking when src_reg == dst_reg
(bsc#1258210).
- arm64: entry: Don't preempt with SError or Debug masked
(bsc#1258210).
- ACPI: AGDI: fix missing newline in error message (bsc#1258210).
- arm64: kexec: Remove duplicate allocation for trans_pgd
(bsc#1258210).
- macsec: Support VLAN-filtering lower devices (bsc#1258210).
- net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (bsc#1258210).
- net: bcmgenet: fix leaking free_bds (bsc#1258210).
- net: bcmgenet: fix racing timeout handler (bsc#1258210).
- net: airoha: Add dma_rmb() and READ_ONCE() in
airoha_qdma_rx_process() (bsc#1258210).
- eth: fbnic: Use wake instead of start (bsc#1258210).
- netfilter: xt_socket: enable defrag after all other checks
(bsc#1258210).
- netfilter: nft_fwd_netdev: check ttl/hl before forwarding
(bsc#1258210).
- bpf: fix mm lifecycle in open-coded task_vma iterator
(bsc#1258210).
- bpf: switch task_vma iterator from mmap_lock to per-VMA locks
(bsc#1258210).
- bpf: return VMA snapshot from task_vma iterator (bsc#1258210).
- bpf: Fix RCU stall in bpf_fd_array_map_clear() (bsc#1258210).
- net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
(bsc#1258210).
- net: airoha: Add airoha_ppe_get_num_stats_entries() and
airoha_ppe_get_num_total_stats_entries() (bsc#1258210).
- net: airoha: Add airoha_eth_soc_data struct (bsc#1258210).
- net: airoha: Generalize airoha_ppe2_is_enabled routine
(bsc#1258210).
- net: airoha: Fix FE_PSE_BUF_SET configuration if PPE2 is
available (bsc#1258210).
- bpf: Relax scalar id equivalence for state pruning (bsc#1258210).
- bpf: Enforce regsafe base id consistency for BPF_ADD_CONST
scalars (bsc#1258210).
- selftests/bpf: fix __jited_unpriv tag name (bsc#1258210).
- net/sched: act_ct: Only release RCU read lock after ct_ft
(bsc#1258210).
- selftests: netfilter: nft_tproxy.sh: adjust to socat changes
(bsc#1258210).
- net: mana: Use pci_name() for debugfs directory naming
(bsc#1258210).
- net: mana: Support HW link state events (bsc#1258210).
- net: mana: Move current_speed debugfs file to mana_init_port()
(bsc#1258210).
- net: airoha: Add missing RX_CPU_IDX() configuration in
airoha_qdma_cleanup_rx_queue() (bsc#1258210).
- bpf: Allow instructions with arena source and non-arena dest
registers (bsc#1258210).
- selftests/bpf: Fix reg_bounds to match new tnum-based refinement
(bsc#1258210).
- net/rds: Optimize rds_ib_laddr_check (bsc#1258210).
- net/rds: Restrict use of RDS/IB to the initial network namespace
(bsc#1258210).
- bpf: Fix OOB in pcpu_init_value (bsc#1258210).
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
(bsc#1258210).
- net: ipa: Fix programming of QTIME_TIMESTAMP_CFG (bsc#1258210).
- net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ (bsc#1258210).
- dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional
for sja1110 (bsc#1258210).
- net: phy: fix a return path in get_phy_c45_ids() (bsc#1258210).
- net/mlx5e: Fix features not applied during netdev registration
(bsc#1258210).
- net/mlx5e: IPsec, fix ASO poll timeout with
read_poll_timeout_atomic() (bsc#1258210).
- bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
(bsc#1258210).
- Bluetooth: L2CAP: Fix printing wrong information if SDU length
exceeds MTU (bsc#1258210).
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
(bsc#1258210).
- Bluetooth: fix locking in hci_conn_request_evt() with
HCI_PROTO_DEFER (bsc#1258210).
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp
(bsc#1258210).
- Bluetooth: SCO: check for codecs->num_codecs == 1 before
assigning to sco_pi(sk)->codec (bsc#1258210).
- net: phy: qcom: at803x: Use the correct bit to disable extended
next page (bsc#1258210).
- udp: Force compute_score to always inline (bsc#1258210).
- tcp: Don't set treq->req_usec_ts in cookie_tcp_reqsk_init()
(bsc#1258210).
- sctp: fix missing encap_port propagation for GSO fragments
(bsc#1258210).
- net, bpf: fix null-ptr-deref in xdp_master_redirect() for down
master (bsc#1258210).
- net: airoha: Add missing PPE configurations in
airoha_ppe_hw_init() (bsc#1258210).
- selftests/futex: Fix incorrect result reporting of futex_requeue
test item (bsc#1258210).
- drm/komeda: fix integer overflow in AFBC framebuffer size check
(bsc#1258210).
- drm/virtio: Allow importing prime buffers when 3D is enabled
(bsc#1258210).
- ASoC: soc-compress: use function to clear symmetric params
(bsc#1258210).
- PCI/TPH: Allow TPH enable for RCiEPs (bsc#1258210).
- PCI: endpoint: pci-epf-test: Don't free doorbell IRQ unless
requested (bsc#1258210).
- PCI: endpoint: pci-ep-msi: Fix error unwind and prevent double
alloc (bsc#1258210).
- drm/sun4i: backend: fix error pointer dereference (bsc#1258210).
- PCI: imx6: Fix device node reference leak in imx_pcie_probe()
(bsc#1258210).
- ASoC: SDCA: Update counting of SU/GE DAPM routes (bsc#1258210).
- crypto: inside-secure/eip93 - fix register definition
(bsc#1258210).
- ASoC: sti: Return errors from regmap_field_alloc() (bsc#1258210).
- ASoC: sti: use managed regmap_field allocations (bsc#1258210).
- dm cache: fix null-deref with concurrent writes in passthrough
mode (bsc#1258210).
- dm cache: fix write path cache coherency in passthrough mode
(bsc#1258210).
- dm cache: fix write hang in passthrough mode (bsc#1258210).
- dm cache policy smq: fix missing locks in invalidating cache
blocks (bsc#1258210).
- dm cache: fix concurrent write failure in passthrough mode
(bsc#1258210).
- dm cache: fix dirty mapping checking in passthrough mode
switching (bsc#1258210).
- dm-mpath: don't stop probing paths at presuspend (bsc#1258210).
- platform/chrome: chromeos_tbmc: Drop wakeup source on remove
(bsc#1258210).
- PCI: dwc: ep: Fix MSI-X Table Size configuration in
dw_pcie_ep_set_msix() (bsc#1258210).
- PCI: dwc: Invoke post_init in dw_pcie_resume_noirq()
(bsc#1258210).
- PCI: dwc: Perform cleanup in the error path of
dw_pcie_resume_noirq() (bsc#1258210).
- dm cache metadata: fix memory leak on metadata abort retry
(bsc#1258210).
- dm log: fix out-of-bounds write due to region_count overflow
(bsc#1258210).
- iopoll: fix function parameter names in
read_poll_timeout_atomic() (bsc#1258210).
- drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector
earlier in atomic_enable() (bsc#1258210).
- drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook
to drm_bridge_funcs (bsc#1258210).
- drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in
bridge atomic check (bsc#1258210).
- spi: nxp-fspi: Use reinit_completion() for repeated operations
(bsc#1258210).
- spi: fsl-qspi: Use reinit_completion() for repeated operations
(bsc#1258210).
- media: i2c: og01a1b: Fix V4L2 subdevice data initialization
on probe (bsc#1258210).
- drm/amd/pm: Fix xgmi max speed reporting (bsc#1258210).
- selftests/sched_ext: Add missing error check for exit__load()
(bsc#1258210).
- drm/v3d: Handle error from drm_sched_entity_init() (bsc#1258210).
- drm/sun4i: Fix resource leaks (bsc#1258210).
- crypto: inside-secure/eip93 - register hash before authenc
algorithms (bsc#1258210).
- iommu/riscv: Add IOTINVAL after updating DDT/PDT entries
(bsc#1258210).
- iommu/riscv: Add missing GENERIC_MSI_IRQ (bsc#1258210).
- iommu/riscv: Stop polling when CQCSR reports an error
(bsc#1258210).
- drm/amdgpu: Add default case in DVI mode validation
(bsc#1258210).
- dm init: ensure device probing has finished in dm-mod.waitfor=
(bsc#1258210).
- fbdev: matroxfb: Mark variable with __maybe_unused to avoid
W=1 build break (bsc#1258210).
- crypto: tegra - Disable softirqs before finalizing request
(bsc#1258210).
- crypto: atmel - Use unregister_{aeads,ahashes,skciphers}
(bsc#1258210).
- crypto: atmel-aes - guard unregister on error in
atmel_aes_register_algs (bsc#1258210).
- padata: Remove cpu online check from cpu add and removal
(bsc#1258210).
- padata: Put CPU offline callback in ONLINE section to allow
failure (bsc#1258210).
- PCI: dwc: rcar-gen4: Change EPC BAR alignment to 4K as per
the documentation (bsc#1258210).
- drm/amdgpu/gfx10: look at the right prop for gfx queue priority
(bsc#1258210).
- drm/amdgpu/gfx11: look at the right prop for gfx queue priority
(bsc#1258210).
- spi: hisi-kunpeng: prevent infinite while() loop in
hisi_spi_flush_fifo (bsc#1258210).
- drm/imagination: Switch reset_reason fields from enum to u32
(bsc#1258210).
- iommu/tegra241-cmdqv: Set supports_cmd op in
tegra241_vcmdq_hw_init() (bsc#1258210).
- iommu/tegra241-cmdqv: Update uAPI to clarify HYP_OWN requirement
(bsc#1258210).
- drm/msm: add missing MODULE_DEVICE_ID definitions (bsc#1258210).
- drm/msm/dpu: fix mismatch between power and frequency
(bsc#1258210).
- drm/msm/dsi: add the missing parameter description (bsc#1258210).
- drm/msm/dpu: don't try using 2 LMs if only one DSC is available
(bsc#1258210).
- drm/msm/dsi: fix bits_per_pclk (bsc#1258210).
- drm/msm/dsi: fix hdisplay calculation for CMD mode panel
(bsc#1258210).
- drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
(bsc#1258210).
- ASoC: rockchip: rockchip_sai: Set slot width for non-TDM mode
(bsc#1258210).
- drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
(bsc#1258210).
- drm/panel: simple: Correct G190EAN01 prepare timing
(bsc#1258210).
- PCI: qcom: Advertise Hotplug Slot Capability with no Command
Completion support (bsc#1258210).
- PCI: Use res_to_dev_res() in reassign_resources_sorted()
(bsc#1258210).
- PCI: Fix premature removal from realloc_head list during
resource assignment (bsc#1258210).
- crypto: hisilicon/sec2 - prevent req used-after-free for sec
(bsc#1258210).
- PCI: Fix alignment calculation for resource size larger than
align (bsc#1258210).
- iommu/riscv: Skip IRQ count check when using MSI interrupts
(bsc#1258210).
- iommu/riscv: Fix signedness bug (bsc#1258210).
- ALSA: core: Validate compress device numbers without dynamic
minors (bsc#1258210).
- ASoC: amd: acp: update dmic_num logic for acp pdm dmic
(bsc#1258210).
- drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
(bsc#1258210).
- drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
(bsc#1258210).
- drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
(bsc#1258210).
- drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
(bsc#1258210).
- drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
(bsc#1258210).
- drm/amd/pm/ci: Fill DW8 fields from SMC (bsc#1258210).
- drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
(bsc#1258210).
- drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled
(bsc#1258210).
- PCI/DPC: Log AER error info for DPC/EDR uncorrectable errors
(bsc#1258210).
- hwmon: (aspeed-g6-pwm-tach): remove redundant driver remove
callback (bsc#1258210).
- ALSA: hda/realtek: fix code style (ERROR: else should follow
close brace '}') (bsc#1258210).
- ASoC: SOF: Intel: hda: Place check before dereference
(bsc#1258210).
- drm/msm/vma: Avoid lock in VM_BIND fence signaling path
(bsc#1258210).
- drm/msm: Reject fb creation from _NO_SHARE objs (bsc#1258210).
- drm/msm: Fix VM_BIND UNMAP locking (bsc#1258210).
- drm/msm/a6xx: Fix HLSQ register dumping (bsc#1258210).
- drm/msm/shrinker: Fix can_block() logic (bsc#1258210).
- drm/msm/a6xx: Fix dumping A650+ debugbus blocks (bsc#1258210).
- drm/msm/a6xx: Use barriers while updating HFI Q headers
(bsc#1258210).
- ALSA: hda/cmedia: Remove duplicate pin configuration parsing
(bsc#1258210).
- pmdomain: ti: omap_prm: Fix a reference leak on device node
(bsc#1258210).
- pmdomain: imx: scu-pd: Fix device_node reference leak during
- >probe() (bsc#1258210).
- PM: domains: De-constify fields in struct
dev_pm_domain_attach_data (bsc#1258210).
- drm/msm/dpu: drop INTF_0 on MSM8953 (bsc#1258210).
- ASoC: fsl_micfil: Add access property for "VAD Detected"
(bsc#1258210).
- ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
(bsc#1258210).
- ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
(bsc#1258210).
- ASoC: fsl_micfil: Fix event generation in
micfil_put_dc_remover_state() (bsc#1258210).
- ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
(bsc#1258210).
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
(bsc#1258210).
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
(bsc#1258210).
- ASoC: fsl_easrc: Check the variable range in
fsl_easrc_iec958_put_bits() (bsc#1258210).
- ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
(bsc#1258210).
- ASoC: fsl_easrc: Change the type for iec958 channel status
controls (bsc#1258210).
- iommu/amd: Fix clone_alias() to use the original device's devid
(bsc#1258210).
- iommu/riscv: Remove overflows on the invalidation path
(bsc#1258210).
- ASoC: qcom: qdsp6: topology: check widget type before accessing
data (bsc#1258210).
- PCI: dwc: Fix type mismatch for kstrtou32_from_user() return
value (bsc#1258210).
- crypto: qat - disable 4xxx AE cluster when lead engine is
fused off (bsc#1258210).
- crypto: qat - disable 420xx AE cluster when lead engine is
fused off (bsc#1258210).
- crypto: qat - fix compression instance leak (bsc#1258210).
- crypto: qat - fix type mismatch in RAS sysfs show functions
(bsc#1258210).
- crypto: iaa - fix per-node CPU counter reset in
rebalance_wq_table() (bsc#1258210).
- crypto: qat - use swab32 macro (bsc#1258210).
- ASoC: rsnd: Fix potential out-of-bounds access of
component_dais[] (bsc#1258210).
- PCI: Enable AtomicOps only if Root Port supports them
(bsc#1258210).
- PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not
found (bsc#1258210).
- gpu: nova-core: register: use field type for Into implementation
(bsc#1258210).
- gpu: nova-core: bitfield: Move bitfield-specific code from
register! into new macro (bsc#1258210).
- gpu: nova-core: bitfield: fix broken Default implementation
(bsc#1258210).
- selftests/mm: skip migration tests if NUMA is unavailable
(bsc#1258210).
- kho: make debugfs interface optional (bsc#1258210).
- Documentation: fix a hugetlbfs reservation statement
(bsc#1258210).
- selftest: memcg: skip memcg_sock test if address family not
supported (bsc#1258210).
- ALSA: scarlett2: Add missing sentinel initializer field
(bsc#1258210).
- ASoC: SOF: compress: return the configured codec from get_params
(bsc#1258210).
- PCI/NPEM: Set LED_HW_PLUGGABLE for hotplug-capable ports
(bsc#1258210).
- ALSA: usb-audio: qcom: Fix incorrect type in enable_audio_stream
(bsc#1258210).
- PCI: tegra194: Fix polling delay for L2 state (bsc#1258210).
- PCI: tegra194: Increase LTSSM poll time on surprise link down
(bsc#1258210).
- PCI: tegra194: Disable LTSSM after transition to Detect on
surprise link down (bsc#1258210).
- PCI: tegra194: Don't force the device into the D0 state before
L2 (bsc#1258210).
- PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
(bsc#1258210).
- PCI: tegra194: Use devm_gpiod_get_optional() to parse
"nvidia,refclk-select" (bsc#1258210).
- PCI: tegra194: Disable direct speed change for Endpoint mode
(bsc#1258210).
- PCI: tegra194: Set LTR message request before PCIe link up in
Endpoint mode (bsc#1258210).
- PCI: tegra194: Allow system suspend when the Endpoint link is
not up (bsc#1258210).
- PCI: tegra194: Free up Endpoint resources during remove()
(bsc#1258210).
- PCI: tegra194: Use DWC IP core version (bsc#1258210).
- PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
(bsc#1258210).
- PCI: tegra194: Remove unnecessary L1SS disable code
(bsc#1258210).
- PCI: tegra194: Disable L1.2 capability of Tegra234 EP
(bsc#1258210).
- PCI: tegra194: Fix CBB timeout caused by DBI access before
core power-on (bsc#1258210).
- spi: mtk-snfi: unregister ECC engine on probe failure and
remove() callback (bsc#1258210).
- ALSA: sc6000: Keep the programmed board state in card-private
data (bsc#1258210).
- dm cache: fix missing return in invalidate_committed's error
path (bsc#1258210).
- sched_ext: Track @p's rq lock across set_cpus_allowed_scx ->
ops.set_cpumask (bsc#1258210).
- sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq
tracking (bsc#1258210).
- crypto: jitterentropy - replace long-held spinlock with mutex
(bsc#1258210).
- ALSA: usb-audio: Exclude Scarlett 18i20 1st Gen from
SKIP_IFACE_SETUP (bsc#1258210).
- ALSA: hda/realtek - fixed speaker no sound update (bsc#1258210).
- gfs2: Call unlock_new_inode before d_instantiate (bsc#1258210).
- fanotify: avoid/silence premature LSM capability checks
(bsc#1258210).
- fanotify: call fanotify_events_supported() before
path_permission() and security_path_notify() (bsc#1258210).
- ktest: Avoid undef warning when WARNINGS_FILE is unset
(bsc#1258210).
- ktest: Honor empty per-test option overrides (bsc#1258210).
- ktest: Run POST_KTEST hooks on failure and cancellation
(bsc#1258210).
- rtla: Fix -C/--cgroup interface (bsc#1258210).
- rtla: Replace atoi() with a robust strtoi() (bsc#1258210).
- rtla/utils: Fix resource leak in set_comm_sched_attr()
(bsc#1258210).
- gfs2: less aggressive low-memory log flushing (bsc#1258210).
- quota: Fix race of dquot_scan_active() with quota deactivation
(bsc#1258210).
- vfio: unhide vdev->debug_root (bsc#1258210).
- gfs2: add some missing log locking (bsc#1258210).
- gfs2: prevent NULL pointer dereference during unmount
(bsc#1258210).
- efi/capsule-loader: fix incorrect sizeof in phys array
reallocation (bsc#1258210).
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto
engine (bsc#1258210).
- arm64: dts: mediatek: mt8365: Describe infracfg-nao as a pure
syscon (bsc#1258210).
- ARM: dts: mediatek: mt7623: fix efuse fallback compatible
(bsc#1258210).
- memory: tegra124-emc: Fix dll_change check (bsc#1258210).
- memory: tegra30-emc: Fix dll_change check (bsc#1258210).
- arm64: dts: imx8-apalis: Fix LEDs name collision (bsc#1258210).
- arm64: dts: imx91-11x11-evk: change usdhc tuning step for eMMC
and SD (bsc#1258210).
- arm64: dts: rockchip: Make Jaguar PCIe-refclk pin use pull-up
config (bsc#1258210).
- arm64: dts: imx8mp-evk: Enable pull select bit for PCIe
regulator GPIO (M.2 W_DISABLE1) (bsc#1258210).
- iommufd: vfio compatibility extension check for noiommu mode
(bsc#1258210).
- arm64: dts: qcom: sm6125-ginkgo: Fix missing msm-id subtype
(bsc#1258210).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove board-id
(bsc#1258210).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Correct reserved memory
ranges (bsc#1258210).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Remove extcon
(bsc#1258210).
- arm64: dts: qcom: sm6125-xiaomi-ginkgo: Fix reserved gpio ranges
(bsc#1258210).
- arm64: dts: qcom: talos: Add missing clock-names to GCC
(bsc#1258210).
- arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
(bsc#1258210).
- arm64: dts: mediatek: mt7981b: Fix gpio-ranges pin count
(bsc#1258210).
- arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
(bsc#1258210).
- iommufd/selftest: Fix page leaks in mock_viommu_{init,destroy}
(bsc#1258210).
- arm64: dts: imx8mp-kontron: Fix touch reset configuration on
DL devices (bsc#1258210).
- arm64: dts: imx8mp-kontron: Drop vmmc-supply to fix SD card
on SMARC eval carrier (bsc#1258210).
- arm64: dts: imx8mp-hummingboard-pulse: fix mini-hdmi dsi port
reference (bsc#1258210).
- arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
(bsc#1258210).
- arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
(bsc#1258210).
- arm64: dts: rockchip: Fix Bluetooth stability on LCKFB TaiShan
Pi (bsc#1258210).
- Revert "arm64: dts: rockchip: add SPDIF audio to Beelink A1"
(bsc#1258210).
- arm64: dts: rockchip: Correct Fan Supply for Gameforce Ace
(bsc#1258210).
- arm64: dts: rockchip: Correct Joystick Axes on Gameforce Ace
(bsc#1258210).
- soc: qcom: ocmem: make the core clock optional (bsc#1258210).
- soc: qcom: ocmem: register reasons for probe deferrals
(bsc#1258210).
- soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
(bsc#1258210).
- arm64: dts: rockchip: Fix RK3562 EVB2 model name (bsc#1258210).
- arm64: dts: rockchip: Add mphy reset to ufshc node (bsc#1258210).
- bus: rifsc: fix RIF configuration check for peripherals
(bsc#1258210).
- arm64: dts: qcom: hamoa: correct Iris corners for the MXC rail
(bsc#1258210).
- arm64: dts: qcom: lemans: correct Iris corners for the MXC rail
(bsc#1258210).
- arm64: dts: qcom: monaco: correct Iris corners for the MXC rail
(bsc#1258210).
- arm64: dts: qcom: sm8550: correct Iris corners for the MXC rail
(bsc#1258210).
- arm64: dts: qcom: sm8650: correct Iris corners for the MXC rail
(bsc#1258210).
- arm64: dts: qcom: sm8450: Fix GIC_ITS range length (bsc#1258210).
- arm64: dts: qcom: sm8550: Fix GIC_ITS range length (bsc#1258210).
- arm64: dts: qcom: sm8650: Fix GIC_ITS range length (bsc#1258210).
- arm64: dts: qcom: sm8750: Fix GIC_ITS range length (bsc#1258210).
- arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD
host controller (bsc#1258210).
- arm64: dts: qcom: sm8650: Fix xo clock supply of SD host
controller (bsc#1258210).
- arm64: dts: qcom: hamoa: Fix xo clock supply of platform SD
host controller (bsc#1258210).
- arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1258210).
- arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1258210).
- arm64: dts: qcom: sm8650: Enable UHS-I SDR50 and SDR104 SD
card modes (bsc#1258210).
- arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias
pinctrl (bsc#1258210).
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator
as powered during boot (bsc#1258210).
- arm64: dts: qcom: msm8917-xiaomi-riva: Fix board-id for all
bootloader (bsc#1258210).
- arm64: dts: ti: k3-am62p5-sk: Disable MMC1 internal pulls on
data pins (bsc#1258210).
- arm64: dts: ti: k3-am62-lp-sk: Enable internal pulls for MMC0
data pins (bsc#1258210).
- arm64: dts: ti: k3-am62-verdin: Fix SPI_1 GPIO CS pinctrl label
(bsc#1258210).
- arm64: dts: freescale: imx8mp-tqma8mpql-mba8mp-ras314: fix
UART1 RTS/CTS muxing (bsc#1258210).
- arm64: dts: imx8mp-kontron: Fix boot order for PMIC and RTC
(bsc#1258210).
- arm64: dts: imx8dxl-evk: Use audio-graph-card2 for wm8960-2
and wm8960-3 (bsc#1258210).
- arm64: dts: lx2160a: change i2c0 (iic1) pinmux mask to one bit
(bsc#1258210).
- arm64: dts: lx2160a: remove duplicate pinmux nodes (bsc#1258210).
- arm64: dts: lx2160a: rename pinmux nodes for readability
(bsc#1258210).
- arm64: dts: lx2160a: add sda gpio references for i2c bus recovery
(bsc#1258210).
- arm64: dts: lx2160a: change zeros to hexadecimal in pinmux nodes
(bsc#1258210).
- arm64: dts: lx2160a: complete pinmux for rcwsr12 configuration
word (bsc#1258210).
- arm64: dts: imx8qm-mek: switch Type-C connector power-role to
dual (bsc#1258210).
- arm64: dts: imx8qxp-mek: switch Type-C connector power-role
to dual (bsc#1258210).
- soc/tegra: cbb: Set ERD on resume for err interrupt
(bsc#1258210).
- soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables
(bsc#1258210).
- soc/tegra: cbb: Fix cross-fabric target timeout lookup
(bsc#1258210).
- unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts()
failure (bsc#1258210).
- ocfs2/dlm: validate qr_numregions in dlm_match_regions()
(bsc#1258210).
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region
comparison (bsc#1258210).
- soc: qcom: llcc: fix v1 SB syndrome register offset
(bsc#1258210).
- soc: qcom: aoss: compare against normalized cooling state
(bsc#1258210).
- arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
(bsc#1258210).
- ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
(bsc#1258210).
- arm64/xor: fix conflicting attributes for xor_block_template
(bsc#1258210).
- slab: Introduce kmalloc_obj() and family (bsc#1258210).
- lib: kunit_iov_iter: fix memory leaks (bsc#1258210).
- ARM: dts: imx27-eukrea: replace interrupts with
interrupts-extended (bsc#1258210).
- firmware: arm_ffa: Use the correct buffer size during RXTX_MAP
(bsc#1258210).
- fwctl: Fix class init ordering to avoid NULL pointer dereference
on device removal (bsc#1258210).
- ocfs2: fix listxattr handling when the buffer is full
(bsc#1258210).
- ocfs2: validate bg_bits during freefrag scan (bsc#1258210).
- ocfs2: validate group add input before caching (bsc#1258210).
- dmaengine: dw-axi-dmac: Remove unnecessary return statement
from void function (bsc#1258210).
- soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
(bsc#1258210).
- soundwire: Intel: test bus.bpt_stream before assigning it
(bsc#1258210).
- dmaengine: mxs-dma: Fix missing return value from
of_dma_controller_register() (bsc#1258210).
- soundwire: cadence: Clear message complete before signaling
waiting thread (bsc#1258210).
- tracing: remove size parameter in __trace_puts() (bsc#1258210).
- tracing: move tracing declarations from kernel.h to a dedicated
header (bsc#1258210).
- tracing: move __printf() attribute on __ftrace_vbprintk()
(bsc#1258210).
- tracing: Rebuild full_name on each hist_field_name() call
(bsc#1258210).
- hte: tegra194: remove Kconfig dependency on Tegra194 SoC
(bsc#1258210).
- remoteproc: xlnx: Fix sram property parsing (bsc#1258210).
- stop_machine: Fix the documentation for a NULL cpus argument
(bsc#1258210).
- remoteproc: imx_rproc: Check return value of regmap_attach_dev()
in imx_rproc_mmio_detect_mode() (bsc#1258210).
- ima: check return value of crypto_shash_final() in boot aggregate
(bsc#1258210).
- HID: asus: make asus_resume adhere to linux kernel coding
standards (bsc#1258210).
- HID: asus: do not abort probe when not necessary (bsc#1258210).
- mtd: physmap_of_gemini: Fix disabled pinctrl state check
(bsc#1258210).
- ima_fs: Correctly create securityfs files for unsupported hash
algos (bsc#1258210).
- dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
(bsc#1258210).
- mtd: spi-nor: core: correct the op.dummy.nbytes when check
read operations (bsc#1258210).
- mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook
(bsc#1258210).
- mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook
(bsc#1258210).
- mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
(bsc#1258210).
- mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
(bsc#1258210).
- mtd: parsers: ofpart: call of_node_put() only in ofpart_fail
path (bsc#1258210).
- mtd: parsers: ofpart: call of_node_get() for dedicated
subpartitions (bsc#1258210).
- cxl/pci: Check memdev driver binding status in cxl_reset_done()
(bsc#1258210).
- mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
(bsc#1258210).
- mtd: spinand: Add missing check (bsc#1258210).
- mtd: spinand: Decouple write enable and write disable operations
(bsc#1258210).
- mtd: spinand: Create an array of operation templates
(bsc#1258210).
- mtd: spinand: winbond: Rename IO_MODE register macro
(bsc#1258210).
- mtd: spinand: winbond: Configure the IO mode after the dummy
cycles (bsc#1258210).
- mtd: spinand: Gather all the bus interface steps in one single
function (bsc#1258210).
- mtd: spinand: Add support for setting a bus interface
(bsc#1258210).
- mtd: spinand: Give the bus interface to the configuration helper
(bsc#1258210).
- mtd: spinand: winbond: Clarify when to enable the HS bit
(bsc#1258210).
- HID: usbhid: fix deadlock in hid_post_reset() (bsc#1258210).
- ext4: fix possible null-ptr-deref in mbt_kunit_exit()
(bsc#1258210).
- bpf, arm64: Fix off-by-one in check_imm signed range check
(bsc#1258210).
- bpf, arm64: Remove redundant bpf_flush_icache() after pack
allocator finalize (bsc#1258210).
- bpf, riscv: Remove redundant bpf_flush_icache() after pack
allocator finalize (bsc#1258210).
- bpf, sockmap: Fix af_unix iter deadlock (bsc#1258210).
- bpf, sockmap: Fix af_unix null-ptr-deref in proto update
(bsc#1258210).
- bpf, sockmap: Take state lock for af_unix iter (bsc#1258210).
- bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
(bsc#1258210).
- bpf: Fix NULL deref in map_kptr_match_type for scalar regs
(bsc#1258210).
- bpf: allow UTF-8 literals in bpf_bprintf_prepare() (bsc#1258210).
- libbpf: Prevent double close and leak of btf objects
(bsc#1258210).
- bpf: Validate node_id in arena_alloc_pages() (bsc#1258210).
- bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
(bsc#1258210).
- perf trace: Fix IS_ERR() vs NULL check bug (bsc#1258210).
- pinctrl: pinctrl-pic32: Fix resource leak (bsc#1258210).
- perf trace: Avoid an ERR_PTR in syscall_stats (bsc#1258210).
- pinctrl: cy8c95x0: remove duplicate error message (bsc#1258210).
- pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
(bsc#1258210).
- pinctrl: cy8c95x0: Avoid returning positive values to user space
(bsc#1258210).
- perf branch: Avoid incrementing NULL (bsc#1258210).
- perf: tools: cs-etm: Fix print issue for Coresight debug in
ETE/TRBE trace (bsc#1258210).
- pinctrl: pinconf-generic: Fully validate 'pinmux' property
(bsc#1258210).
- pinctrl: realtek: Fix function signature for config argument
(bsc#1258210).
- pinctrl: abx500: Fix type of 'argument' variable (bsc#1258210).
- pinctrl: renesas: rzg2l: Fix save/restore of {IOLH,IEN,PUPD,SMT}
registers (bsc#1258210).
- perf lock: Fix option value type in parse_max_stack
(bsc#1258210).
- perf stat: Fix opt->value type for parse_cache_level
(bsc#1258210).
- memblock: reserve_mem: fix end caclulation in
reserve_mem_release_by_name() (bsc#1258210).
- perf tools: Fix module symbol resolution for non-zero .text
sh_addr (bsc#1258210).
- perf expr: Return -EINVAL for syntax error in expr__find_ids()
(bsc#1258210).
- ipmi: ssif_bmc: fix missing check for copy_to_user() partial
failure (bsc#1258210).
- ipmi: ssif_bmc: fix message desynchronization after truncated
response (bsc#1258210).
- ipmi: ssif_bmc: change log level to dbg in irq callback
(bsc#1258210).
- perf cgroup: Update metric leader in evlist__expand_cgroup
(bsc#1258210).
- pinctrl: sophgo: pinctrl-sg2042: Fix wrong module description
(bsc#1258210).
- pinctrl: sophgo: pinctrl-sg2044: Fix wrong module description
(bsc#1258210).
- perf maps: Fix fixup_overlap_and_insert that can break sorted
by name order (bsc#1258210).
- perf maps: Fix copy_from that can break sorted by name order
(bsc#1258210).
- perf util: Kill die() prototype, dead for a long time
(bsc#1258210).
- i3c: master: dw-i3c: Fix missing reset assertion in remove()
callback (bsc#1258210).
- i3c: master: renesas: Fix memory leak in renesas_i3c_i3c_xfers()
(bsc#1258210).
- i3c: dw: Fix memory leak in dw_i3c_master_i3c_xfers()
(bsc#1258210).
- i3c: master: adi: Fix error propagation for CCCs (bsc#1258210).
- i3c: mipi-i3c-hci: fix IBI payload length calculation for
final status (bsc#1258210).
- backlight: sky81452-backlight: Check return value of
devm_gpiod_get_optional() in sky81452_bl_parse_dt()
(bsc#1258210).
- platform/surface: surfacepro3_button: Drop wakeup source on
remove (bsc#1258210).
- leds: lgm-sso: Remove duplicate assignments for priv->mmap
(bsc#1258210).
- usb: typec: Fix error pointer dereference (bsc#1258210).
- tty: hvc_iucv: fix off-by-one in number of supported devices
(bsc#1258210).
- usb: typec: ps883x: Fix Oops at unbind (bsc#1258210).
- platform/x86: panasonic-laptop: Fix OPTD notifier registration
and cleanup (bsc#1258210).
- platform/x86: barco-p50-gpio: normalize return value of gpio_get
(bsc#1258210).
- mfd: mc13xxx-core: Fix memory leak in
mc13xxx_add_subdevice_pdata() (bsc#1258210).
- nfs/blocklayout: Fix compilation error (`make W=1`) in
bl_write_pagelist() (bsc#1258210).
- NFSD: fix nfs4_file access extra count in
nfsd4_add_rdaccess_to_wrdeleg (bsc#1258210).
- platform/x86: asus-wmi: adjust screenpad power/brightness
handling (bsc#1258210).
- platform/x86: asus-wmi: fix screenpad brightness range
(bsc#1258210).
- tty: serial: ip22zilog: Fix section mispatch warning
(bsc#1258210).
- fs/ntfs3: terminate the cached volume label after UTF-8
conversion (bsc#1258210).
- platform/x86: dell_rbu: avoid uninit value usage in
packet_size_write() (bsc#1258210).
- platform/x86: dell-wmi-sysman: bound enumeration string
aggregation (bsc#1258210).
- RDMA/core: Prefer NLA_NUL_STRING (bsc#1258210).
- dt-bindings: clock: qcom: Add GCC video axi reset clock for
Glymur (bsc#1258210).
- clk: qcom: gcc-glymur: Add video axi clock resets for glymur
(bsc#1258210).
- clk: qcom: dispcc-glymur: use RCG2 ops for DPTX1 AUX clock
source (bsc#1258210).
- clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock
source (bsc#1258210).
- clk: sunxi-ng: sun55i-a523-r: Add missing r-spi module clock
(bsc#1258210).
- scsi: sg: Fix sysctl sg-big-buff register during sg_init()
(bsc#1258210).
- scsi: sg: Resolve soft lockup issue when opening /dev/sgX
(bsc#1258210).
- clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from
byte_div_clk_src dividers (bsc#1258210).
- clk: qcom: dispcc-glymur: Fix DSI byte clock rate setting
(bsc#1258210).
- clk: qcom: dispcc-milos: Fix DSI byte clock rate setting
(bsc#1258210).
- clk: qcom: dispcc-sm4450: Fix DSI byte clock rate setting
(bsc#1258210).
- clk: qcom: dispcc[01]-sa8775p: Fix DSI byte clock rate setting
(bsc#1258210).
- clk: renesas: r9a09g057: Add clock and reset entries for RTC
(bsc#1258210).
- clk: renesas: r9a09g057: Add entries for RSCIs (bsc#1258210).
- clk: renesas: r9a09g057: Fix ordering of module clocks array
(bsc#1258210).
- clk: renesas: r9a09g057: Remove entries for WDT{0,2,3}
(bsc#1258210).
- scsi: target: core: Fix integer overflow in UNMAP bounds check
(bsc#1258210).
- scsi: ufs: rockchip,rk3576-ufshc: dt-bindings: Add new mphy
reset item (bsc#1258210).
- dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
(bsc#1258210).
- clk: qcom: gcc-sc8180x: Add missing GDSCs (bsc#1258210).
- clk: qcom: gcc-sc8180x: Use retention for USB power domains
(bsc#1258210).
- clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
(bsc#1258210).
- clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
(bsc#1258210).
- clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
(bsc#1258210).
- clk: imx: imx6q: Fix device node reference leak in
pll6_bypassed() (bsc#1258210).
- clk: imx: imx6q: Fix device node reference leak in
of_assigned_ldb_sels() (bsc#1258210).
- clk: imx8mq: Correct the CSI PHY sels (bsc#1258210).
- x86/um/vdso: Drop VDSO64-y from Makefile (bsc#1258210).
- x86/um: fix vDSO installation (bsc#1258210).
- clk: qoriq: avoid format string warning (bsc#1258210).
- clk: xgene: Fix mapping leak in xgene_pllclk_init()
(bsc#1258210).
- dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets
(bsc#1258210).
- clk: qcom: dispcc-sc7180: Add missing MDSS resets (bsc#1258210).
- clk: spacemit: ccu_mix: fix inverted condition in
ccu_mix_trigger_fc() (bsc#1258210).
- f2fs: use f2fs_filemap_get_folio() instead of
f2fs_pagecache_get_page() (bsc#1258210).
- f2fs: avoid reading already updated pages during GC
(bsc#1258210).
- clk: qcom: gdsc: Fix error path on registration of multiple
pm subdomains (bsc#1258210).
- lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
(bsc#1258210).
- f2fs: expand scalability of f2fs mount option (bsc#1258210).
- f2fs: fix to preserve previous reserve_{blocks,node} value
when remount (bsc#1258210).
- clk: qcom: gcc-x1e80100: Keep GCC USB QTB clock always ON
(bsc#1258210).
- clk: visconti: pll: initialize clk_init_data to zero
(bsc#1258210).
- f2fs: allow empty mount string for Opt_usr|grp|projjquota
(bsc#1258210).
- f2fs: protect extension_list reading with sb_lock in
f2fs_sbi_show() (bsc#1258210).
- drm/i915/wm: Verify the correct plane DDB entry (bsc#1258210).
- virt: arm-cca-guest: fix error check for RSI_INCOMPLETE
(bsc#1258210).
- crypto: eip93 - fix hmac setkey algo selection (bsc#1258210).
- crypto: sa2ul - Fix AEAD fallback algorithm names (bsc#1258210).
- crypto: ccp - copy IV using skcipher ivsize (bsc#1258210).
- erofs: unify lcn as u64 for 32-bit platforms (bsc#1258210).
- arm64: dts: imx8mp-debix-model-a: Correct PAD settings for
PMIC_nINT (bsc#1258210).
- arm64: dts: imx8mp-debix-som-a: Correct PAD settings for
PMIC_nINT (bsc#1258210).
- arm64: dts: imx8mp-navqp: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for
PMIC_nINT (bsc#1258210).
- arm64: dts: imx8mp-edm-g: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: imx8mp-aristainetos3a-som-v1: Correct PAD settings
for PMIC_nINT (bsc#1258210).
- arm64: dts: imx8mp-nitrogen-som: Correct PAD settings for
PMIC_nINT (bsc#1258210).
- arm64: dts: imx8mp-sr-som: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: imx8mp-ultra-mach-sbc: Correct PAD settings for
PMIC_nINT (bsc#1258210).
- arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings
for PMIC_nINT (bsc#1258210).
- PCMCIA: Fix garbled log messages for KERN_CONT (bsc#1258210).
- reset: amlogic: t7: Fix null reset ops (bsc#1258210).
- arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
(bsc#1258210).
- arm64: dts: marvell: armada-37xx: use 'usb2-phy' in USB3
controller's phy-names (bsc#1258210).
- pwm: stm32: Fix rounding issue for requests with inverted
polarity (bsc#1258210).
- net/sched: act_mirred: fix wrong device for mac_header_xmit
check in tcf_blockcast_redir (bsc#1258210).
- macvlan: fix macvlan_get_size() not reserving space for
IFLA_MACVLAN_BC_CUTOFF (bsc#1258210).
- net/sched: sch_cake: fix NAT destination port not being updated
in cake_update_flowkeys (bsc#1258210).
- nexthop: fix IPv6 route referencing IPv4 nexthop (bsc#1258210).
- net: airoha: Wait for NPU PPE configuration to complete in
airoha_ppe_offload_setup() (bsc#1258210).
- net/sched: taprio: fix use-after-free in advance_sched()
on schedule switch (bsc#1258210).
- net: dsa: cpu_dp->orig_ethtool_ops might be NULL (bsc#1258210).
- net: dsa: use kernel data types for ethtool ops on conduit
(bsc#1258210).
- net: dsa: append ethtool counters of all hidden ports to conduit
(bsc#1258210).
- net: dsa: remove redundant netdev_lock_ops() from conduit
ethtool ops (bsc#1258210).
- net: enetc: correct the command BD ring consumer index
(bsc#1258210).
- net: enetc: fix NTMP DMA use-after-free issue (bsc#1258210).
- smb: move smb_version_values to common/smbglob.h (bsc#1258210).
- ksmbd: fix use-after-free in smb2_open during durable reconnect
(bsc#1258210).
- tcp: move tp->chrono_type next tp->chrono_stat[] (bsc#1258210).
- tcp: inline tcp_chrono_start() (bsc#1258210).
- tcp: annotate data-races in tcp_get_info_chrono_stats()
(bsc#1258210).
- tcp: add data-race annotations around tp->data_segs_out and
tp->total_retrans (bsc#1258210).
- tcp: add data-races annotations around tp->reordering,
tp->snd_cwnd (bsc#1258210).
- tcp: annotate data-races around tp->snd_ssthresh (bsc#1258210).
- tcp: annotate data-races around tp->delivered and
tp->delivered_ce (bsc#1258210).
- tcp: add data-race annotations for TCP_NLA_SNDQ_SIZE
(bsc#1258210).
- tcp: annotate data-races around tp->bytes_sent (bsc#1258210).
- tcp: annotate data-races around tp->bytes_retrans (bsc#1258210).
- tcp: annotate data-races around tp->dsack_dups (bsc#1258210).
- tcp: annotate data-races around tp->reord_seen (bsc#1258210).
- tcp: better handle TCP_TX_DELAY on established flows
(bsc#1258210).
- tcp: annotate data-races around tp->srtt_us (bsc#1258210).
- tcp: annotate data-races around tp->timeout_rehash (bsc#1258210).
- tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
(bsc#1258210).
- tcp: annotate data-races around tp->plb_rehash (bsc#1258210).
- ice: fix 'adjust' timer programming for E830 devices
(bsc#1258210).
- ice: update PCS latency settings for E825 10G/25Gb modes
(bsc#1258210).
- ice: Remove jumbo_remove step from TX path (bsc#1258210).
- ice: fix double-free of tx_buf skb (bsc#1258210).
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (bsc#1258210).
- i40e: don't advertise IFF_SUPP_NOFCS (bsc#1258210).
- iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2
(bsc#1258210).
- e1000e: Unroll PTP in probe error handling (bsc#1258210).
- ipv6: fix possible UAF in icmpv6_rcv() (bsc#1258210).
- sctp: fix OOB write to userspace in
sctp_getsockopt_peer_auth_chunks (bsc#1258210).
- pppoe: drop PFC frames (bsc#1258210).
- net/mlx5: Fix HCA caps leak on notifier init failure
(bsc#1258210).
- openvswitch: cap upcall PID array size and pre-size vport
replies (bsc#1258210).
- net: airoha: Fix possible TX queue stall in
airoha_qdma_tx_napi_poll() (bsc#1258210).
- netfilter: nft_osf: restrict it to ipv4 (bsc#1258210).
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
(bsc#1258210).
- netfilter: conntrack: remove sprintf usage (bsc#1258210).
- netfilter: xtables: restrict several matches to inet family
(bsc#1258210).
- netfilter: nat: use kfree_rcu to release ops (bsc#1258210).
- ipvs: fix MTU check for GSO packets in tunnel mode (bsc#1258210).
- netfilter: nfnetlink_osf: fix out-of-bounds read on option
matching (bsc#1258210).
- netfilter: nfnetlink_osf: fix potential NULL dereference in
ttl check (bsc#1258210).
- slip: reject VJ receive packets on instances with no rstate
array (bsc#1258210).
- slip: bound decode() reads against the compressed packet length
(bsc#1258210).
- net/sched: sch_dualpi2: drain both C-queue and L-queue in
dualpi2_change() (bsc#1258210).
- arm64: dts: amlogic: meson-axg: Add missing cache information
to cpu0 (bsc#1258210).
- arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
(bsc#1258210).
- pwm: atmel-tcb: Cache clock rates and mark chip as atomic
(bsc#1258210).
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
(bsc#1258210).
- ksmbd: destroy async_ida in ksmbd_conn_free() (bsc#1258210).
- ksmbd: fix durable fd leak on ClientGUID mismatch in durable
v2 open (bsc#1258210).
- ksmbd: scope conn->binding slowpath to bound sessions only
(bsc#1258210).
- net: validate skb->napi_id in RX tracepoints (bsc#1258210).
- bnge: fix initial HWRM sequence (bsc#1258210).
- bnge: remove unsupported backing store type (bsc#1258210).
- net/rds: zero per-item info buffer before handing it to visitors
(bsc#1258210).
- ice: fix timestamp interrupt configuration for E825C
(bsc#1258210).
- ice: perform PHY soft reset for E825C ports at initialization
(bsc#1258210).
- ice: fix ready bitmap check for non-E822 devices (bsc#1258210).
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (bsc#1258210).
- net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
(bsc#1258210).
- net/sched: sch_pie: annotate data-races in pie_dump_stats()
(bsc#1258210).
- net/sched: sch_fq_codel: remove data-races from
fq_codel_dump_stats() (bsc#1258210).
- net/sched: sch_red: annotate data-races in red_dump_stats()
(bsc#1258210).
- net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
(bsc#1258210).
- net: airoha: ppe: Dynamically allocate foe_check_time array
in airoha_ppe struct (bsc#1258210).
- net: airoha: ppe: Move PPE memory info in airoha_eth_soc_data
struct (bsc#1258210).
- net: airoha: Refactor src port configuration in
airhoha_set_gdm2_loopback (bsc#1258210).
- net: airoha: Add AN7583 SoC support (bsc#1258210).
- net: airoha: Add the capability to consume out-of-order DMA
tx descriptors (bsc#1258210).
- net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue()
(bsc#1258210).
- net: dsa: realtek: rtl8365mb: fix mode mask calculation
(bsc#1258210).
- net: airoha: Move ndesc initialization at end of
airoha_qdma_init_rx_queue() (bsc#1258210).
- net: airoha: Rework the code flow in airoha_remove() and in
airoha_probe() error path (bsc#1258210).
- net: airoha: Add size check for TX NAPIs in airoha_qdma_cleanup()
(bsc#1258210).
- net: mana: Init link_change_work before potential error paths
in probe (bsc#1258210).
- net: mana: Guard mana_remove against double invocation
(bsc#1258210).
- net: mana: Move hardware counter stats from per-port to per-VF
context (bsc#1258210).
- net: mana: Add standard counter rx_missed_errors (bsc#1258210).
- net: mana: Don't overwrite port probe error with add_adev result
(bsc#1258210).
- net: mana: Handle SKB if TX SGEs exceed hardware limit
(bsc#1258210).
- net: mana: Handle hardware recovery events when probing the
device (bsc#1258210).
- net: mana: Implement ndo_tx_timeout and serialize queue resets
per port (bsc#1258210).
- net: mana: Fix EQ leak in mana_remove on NULL port (bsc#1258210).
- vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting
(bsc#1258210).
- virtio_net: sync rss_trailer.max_tx_vq on queue_pairs change
via VQ_PAIRS_SET (bsc#1258210).
- nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
(bsc#1258210).
- tcp: send a challenge ACK on SEG.ACK > SND.NXT (bsc#1258210).
- tipc: fix double-free in tipc_buf_append() (bsc#1258210).
- vhost_net: fix sleeping with preempt-disabled in
vhost_net_busy_poll() (bsc#1258210).
- nstree: fix func. parameter kernel-doc warnings (bsc#1258210).
- eventpoll: use hlist_is_singular_node() in __ep_remove()
(bsc#1258210).
- eventpoll: split __ep_remove() (bsc#1258210).
- eventpoll: kill __ep_remove() (bsc#1258210).
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
(bsc#1258210).
- eventpoll: move epi_fget() up (bsc#1258210).
- eventpoll: fix ep_remove struct eventpoll / struct file UAF
(bsc#1258210).
- fs/adfs: validate nzones in adfs_validate_bblk() (bsc#1258210).
- rtc: abx80x: Disable alarm feature if no interrupt attached
(bsc#1258210).
- kbuild: builddeb - avoid recompiles for non-cross-compiles
(bsc#1258210).
- fbdev: offb: fix PCI device reference leak on probe failure
(bsc#1258210).
- tools/power turbostat.8: Document the "--force" option
(bsc#1258210).
- tools/power turbostat: Use strtoul() for iteration parsing
(bsc#1258210).
- tools/power turbostat: Fix and document --header_iterations
(bsc#1258210).
- tools/power turbostat: Fix unrecognized option '-P'
(bsc#1258210).
- kbuild: Never respect CONFIG_WERROR / W=e to fixdep
(bsc#1258210).
- mailbox: mtk-cmdq: Fix CURR and END addr for task insert case
(bsc#1258210).
- mailbox: mailbox-test: free channels on probe error
(bsc#1258210).
- sched/psi: fix race between file release and pressure write
(bsc#1258210).
- cgroup/rdma: fix integer overflow in rdmacg_try_charge()
(bsc#1258210).
- mailbox: add sanity check for channel array (bsc#1258210).
- mailbox: mailbox-test: don't free the reused channel
(bsc#1258210).
- mailbox: mailbox-test: initialize struct earlier (bsc#1258210).
- mailbox: mailbox-test: make data_ready a per-instance variable
(bsc#1258210).
- fsnotify: fix inode reference leak in fsnotify_recalc_mask()
(bsc#1258210).
- btrfs: fix double-decrement of bytes_may_use in
submit_one_async_extent() (bsc#1258210).
- cgroup: Increment nr_dying_subsys_* from rmdir context
(bsc#1258210).
- tracing: branch: Fix inverted check on stat tracer registration
(bsc#1258210).
- nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to
its callers (bsc#1258210).
- netfilter: arp_tables: fix IEEE1394 ARP payload parsing
(bsc#1258210).
- netfilter: nf_tables: use list_del_rcu for netlink hooks
(bsc#1258210).
- nvme-pci: fix missed admin queue sq doorbell write (bsc#1258210).
- drm/amdgpu/gmc: Fix AMDGPU_GART_PLACEMENT_LOW to not overlap
with VRAM (bsc#1258210).
- drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG (bsc#1258210).
- drm/amdgpu/uvd3.1: Don't validate the firmware when already
validated (bsc#1258210).
- drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs
(v2) (bsc#1258210).
- netfilter: xt_policy: fix strict mode inbound policy matching
(bsc#1258210).
- netfilter: nf_conntrack_sip: don't use simple_strtoul
(bsc#1258210).
- ASoC: amd: acp: Add DMI quirk for Valve Steam Deck OLED
(bsc#1258210).
- spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
(bsc#1258210).
- ASoC: tas2764: Mark die temp register as volatile (bsc#1258210).
- ASoC: tas2770: Fix order of operations for temperature
calculation (bsc#1258210).
- drm/sysfb: ofdrm: fix PCI device reference leaks (bsc#1258210).
- drm/color-mgmt: Typo s/R332/RGB332/ (bsc#1258210).
- arm64/scs: Fix potential sign extension issue of advance_loc4
(bsc#1258210).
- ACPICA: Provide #defines for EINJV2 error types (bsc#1258210).
- ACPI: APEI: EINJ: Fix EINJV2 memory error injection
(bsc#1258210).
- cdrom, scsi: sr: propagate read-only status to block layer
via set_disk_ro() (bsc#1258210).
- netdevsim: zero initialize struct iphdr in dummy sk_buff
(bsc#1258210).
- net/sched: netem: fix probability gaps in 4-state loss model
(bsc#1258210).
- net/sched: netem: fix queue limit check to include reordered
packets (bsc#1258210).
- net/sched: netem: only reseed PRNG when seed is explicitly
provided (bsc#1258210).
- net/sched: netem: validate slot configuration (bsc#1258210).
- net/sched: netem: fix slot delay calculation overflow
(bsc#1258210).
- net/sched: netem: check for negative latency and jitter
(bsc#1258210).
- net: airoha: stop net_device TX queue before updating CPU index
(bsc#1258210).
- net: airoha: fix typo in function name (bsc#1258210).
- net: airoha: Do not wake all netdev TX queues in
airoha_qdma_wake_netdev_txqs() (bsc#1258210).
- net: airoha: Do not read uninitialized fragment address in
airoha_dev_xmit() (bsc#1258210).
- net/sched: sch_choke: annotate data-races in choke_dump_stats()
(bsc#1258210).
- net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()
(bsc#1258210).
- vrf: Fix a potential NPD when removing a port from a VRF
(bsc#1258210).
- net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
(bsc#1258210).
- net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
(bsc#1258210).
- spi: amlogic-spisg: initialize completion before requesting IRQ
(bsc#1258210).
- NFC: trf7970a: Ignore antenna noise when checking for RF field
(bsc#1258210).
- net/sched: taprio: fix NULL pointer dereference in class dump
(bsc#1258210).
- neigh: let neigh_xmit take skb ownership (bsc#1258210).
- tcp: make probe0 timer handle expired user timeout (bsc#1258210).
- netpoll: fix IPv6 local-address corruption (bsc#1258210).
- ALSA: usb-audio: Fix potential leak of pd at parsing UAC3
streams (bsc#1258210).
- sched/fair: Reimplement NEXT_BUDDY to align with EEVDF goals
(bsc#1258210).
- sched/fair: Fix wakeup_preempt_fair() vs delayed dequeue
(bsc#1258210).
- sched/fair: Clear rel_deadline when initializing forked entities
(bsc#1258210).
- net: mctp i2c: check length before marking flow active
(bsc#1258210).
- md/raid1,raid10: don't fail devices for invalid IO errors
(bsc#1258210).
- md: add fallback to correct bitmap_ops on version mismatch
(bsc#1258210).
- md: factor bitmap creation away from sysfs handling
(bsc#1258210).
- md/md-bitmap: split bitmap sysfs groups (bsc#1258210).
- md/md-bitmap: add a none backend for bitmap grow (bsc#1258210).
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access()
(bsc#1258210).
- net: phy: dp83869: fix setting CLK_O_SEL field (bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0 enc ring
(bsc#1258210).
- drm/amdgpu/vcn: set no_user_fence for VCN v5.0.1 enc ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.5 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.0 ring
(bsc#1258210).
- drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0.1 ring
(bsc#1258210).
- io_uring/napi: cap busy_poll_to 10 msec (bsc#1258210).
- net: psp: check for device unregister when creating assoc
(bsc#1258210).
- net: psp: require admin permission for dev-set and key-rotate
(bsc#1258210).
- ASoC: codecs: ab8500: Fix casting of private data (bsc#1258210).
- netfilter: skip recording stale or retransmitted INIT
(bsc#1258210).
- sctp: discard stale INIT after handshake completion
(bsc#1258210).
- bareudp: fix NULL pointer dereference in
bareudp_fill_metadata_dst() (bsc#1258210).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(III) (bsc#1258210).
- net/sched: sch_cake: annotate data-races in cake_dump_stats()
(V) (bsc#1258210).
- netconsole: propagate device name truncation in dev_name_store()
(bsc#1258210).
- ALSA: hda/conexant: Fix missing error check for jack detection
(bsc#1258210).
- ALSA: hda: cs35l56: Fix uninitialized value in
cs35l56_hda_read_acpi() (bsc#1258210).
- ALSA: hda/tas2781: Fix incorrect bit update for non-book-zero
or book 0 pages >1 (bsc#1258210).
- futex: Prevent lockup in requeue-PI during signal/ timeout
wakeup (bsc#1258210).
- drm/amd/display: Allow DCE link encoder without AUX registers
(bsc#1258210).
- drm/amd/display: Allow constructing DCE6 link encoder without
DDC (bsc#1258210).
- drm/amd/display: Allow constructing DCE8 link encoder without
DDC (bsc#1258210).
- drm/amd/display: Read EDID from VBIOS embedded panel info
(bsc#1258210).
- drm/xe/debugfs: Correct printing of register whitelist ranges
(bsc#1258210).
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl()
(bsc#1258210).
- drm/xe/eustall: Fix drm_dev_put called before stream disable
in close (bsc#1258210).
- drm/xe/gsc: Fix BO leak on error in query_compatibility_version()
(bsc#1258210).
- net: airoha: fix BQL imbalance in TX path (bsc#1258210).
- net: airoha: Do not return err in ndo_stop() callback
(bsc#1258210).
- bonding: print churn state via netlink (bsc#1258210).
- bonding: 3ad: implement proper RCU rules for port->aggregator
(bsc#1258210).
- page_pool: fix memory-provider leak in page_pool_create_percpu()
error path (bsc#1258210).
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (bsc#1258210).
- iavf: stop removing VLAN filters from PF on interface down
(bsc#1258210).
- iavf: wait for PF confirmation before removing VLAN filters
(bsc#1258210).
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
(bsc#1258210).
- ice: fix NULL pointer dereference in ice_reset_all_vfs()
(bsc#1258210).
- ice: fix infinite recursion in ice_cfg_tx_topo via
ice_init_dev_hw (bsc#1258210).
- ice: fix missing SMA pin initialization in DPLL subsystem
(bsc#1258210).
- ice: fix SMA and U.FL pin state changes affecting paired pin
(bsc#1258210).
- ice: fix missing dpll notifications for SW pins (bsc#1258210).
- dpll: Allow associating dpll pin with a firmware node
(bsc#1258210).
- dpll: Add notifier chain for dpll events (bsc#1258210).
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock
(bsc#1258210).
- ice: add dpll peer notification for paired SMA and U.FL pins
(bsc#1258210).
- net: tls: fix strparser anchor skb leak on offload RX setup
failure (bsc#1258210).
- sfc: fix error code in efx_devlink_info_running_versions()
(bsc#1258210).
- net/sched: cls_flower: revert unintended changes (bsc#1258210).
- kselftest/arm64: Include <asm/ptrace.h> for user_gcs definition
(bsc#1258210).
- arm64: Reserve an extra page for early kernel mapping
(bsc#1258210).
- futex: Drop CLONE_THREAD requirement for private default hash
alloc (bsc#1258210).
- Revert "pseries/papr-hvpipe: Fix race with interrupt handler"
(bsc#1258210).
- Revert "papr-hvpipe: convert papr_hvpipe_dev_create_handle()
to FD_PREPARE()" (bsc#1258210).
- PCI: Initialize temporary device in new_id_store() (bsc#1258210).
- bpf: Fix sync_linked_regs regarding BPF_ADD_CONST32 zext
propagation (bsc#1258210).
- net: airoha: Fix a copy and paste bug in probe() (bsc#1258210).
- rtla: Fix parse_cpu_set() bug introduced by strtoi()
(bsc#1258210).
- net: airoha: Move entries to queue head in case of DMA mapping
failure in airoha_dev_xmit() (bsc#1258210).
- net: airoha: Move ndesc initialization at end of
airoha_qdma_init_tx() (bsc#1258210).
- net/sched: sch_pie: annotate more data-races in pie_dump_stats()
(bsc#1258210).
- net: airoha: Remove code duplication in airoha_regs.h
(bsc#1258210).
- net: airoha: Use gdm port enum value whenever possible
(bsc#1258210).
- net: airoha: Fix VIP configuration for AN7583 SoC (bsc#1258210).
- net: mana: Fix use-after-free in reset service rescan path
(bsc#1258210).
- net: mana: Init gf_stats_work before potential error paths in
probe (bsc#1258210).
- sched/fair: Fix wakeup_preempt_fair() for not waking up task
(bsc#1258210).
- sched/fair: Revert force wakeup preemption (bsc#1258210).
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1258210).
- i40e: Cleanup PTP pins on probe failure (bsc#1258210).
- workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs()
WQ_UNBOUND path (bsc#1258210).
- net: ena: PHC: Fix potential use-after-free in get_timestamp
(bsc#1258210).
- netfilter: nf_conntrack_sip: get helper before allocating
expectation (bsc#1258210).
- audit: fix incorrect inheritable capability in CAPSET records
(bsc#1258210).
- net: ena: PHC: Check return code before setting timestamp output
(bsc#1258210).
- cgroup/dmem: Return -ENOMEM on failed pool preallocation
(bsc#1258210).
- idpf: fix double free and use-after-free in aux device error
paths (bsc#1258210).
- Revert "ACPI: CPPC: Adjust debug messages in
amd_set_max_freq_ratio() to warn" (bsc#1258210).
- netfilter: nft_ct: fix missing expect put in obj eval
(bsc#1258210).
- net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL
enabled (bsc#1258210).
- audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
(bsc#1258210).
- KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
(bsc#1258210).
- KVM: s390: pci: fix GAIT table indexing due to double-scaling
pointer arithmetic (bsc#1258210).
- KVM: x86: Fix Xen hypercall tracepoint argument assignment
(bsc#1258210).
- HID: pass the buffer size to hid_report_raw_event (bsc#1258210).
- HID: core: introduce hid_safe_input_report() (bsc#1258210).
- HID: core: Fix size_t specifier in hid_report_raw_event()
(bsc#1258210).
- fuse: avoid 0x10 fault in fuse_readahead when max_pages == 0
(bsc#1258210).
- ata: libata-scsi: fix requeue of deferred ATA PASS-THROUGH
commands (bsc#1258210).
- media: staging: imx: configure src_mux in csi_start
(bsc#1258210).
- Bluetooth: btmtk: accept too short WMT FUNC_CTRL events
(bsc#1258210).
- nvme-apple: Reset q->sq_tail during queue init (bsc#1258210).
- smb/client: fix possible infinite loop and oob read in
symlink_data() (bsc#1258210).
- drm/loongson: Use managed KMS polling (bsc#1258210).
- drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
(bsc#1258210).
- platform/x86: intel: Move debugfs register before creating
devices (bsc#1258210).
- platform/x86: lenovo-wmi-helpers: Move gamezone enums to
wmi-helpers (bsc#1258210).
- platform/x86: lenovo-wmi-other: Fix tunable_attr_01 struct
members (bsc#1258210).
- accel/rocket: Fix prep_bo ioctl leaking positive return from
dma_resv_wait_timeout() (bsc#1258210).
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion Laptop
16-ag0xxx (bsc#1258210).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book5 360
headphone (bsc#1258210).
- ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
(bsc#1258210).
- ALSA: usb-audio: Bound MIDI endpoint descriptor scans
(bsc#1258210).
- ALSA: usb-audio: qcom: Check offload mapping failures
(bsc#1258210).
- btrfs: only release the dirty pages io tree after successful
writes (bsc#1258210).
- ceph: fix a buffer leak in __ceph_setxattr() (bsc#1258210).
- ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale
blob size (bsc#1258210).
- io-wq: check that the predecessor is hashed in
io_wq_remove_pending() (bsc#1258210).
- iommu/amd: Bounds-check devid in __rlookup_amd_iommu()
(bsc#1258210).
- x86/kexec: Push kjump return address even for non-kjump kexec
(bsc#1258210).
- xfs: fix memory leak on error in xfs_alloc_zone_info()
(bsc#1258210).
- virt: sev-guest: Do not use host-controlled page order in
cleanup path (bsc#1258210).
- powerpc/warp: Fix error handling in pika_dtm_thread
(bsc#1258210).
- netfs: fix error handling in netfs_extract_user_iter()
(bsc#1258210).
- nfsd: fix file change detection in CB_GETATTR (bsc#1258210).
- irqchip/riscv-imsic: Clear interrupt move state during CPU
offlining (bsc#1258210).
- irqchip/meson-gpio: Use the correct register in
meson_s4_gpio_irq_set_type() (bsc#1258210).
- irqchip/gic-v5: Move LPI allocation into the LPI domain
(bsc#1258210).
- irqchip/gic-v5: Support range allocation for LPIs (bsc#1258210).
- irqchip/gic-v5: Allocate ITS parent LPIs as a range
(bsc#1258210).
- libceph: Fix potential out-of-bounds access in osdmap_decode()
(bsc#1258210).
- libceph: Fix potential null-ptr-deref in decode_choose_args()
(bsc#1258210).
- libceph: Fix potential out-of-bounds access in crush_decode()
(bsc#1258210).
- libceph: handle rbtree insertion error in decode_choose_args()
(bsc#1258210).
- iommu/vt-d: Disable DMAR for Intel Q35 IGFX (bsc#1258210).
- iommu/vt-d: Fix oops due to out of scope access (bsc#1258210).
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
(bsc#1258210).
- drm/i915: skip __i915_request_skip() for already signaled
requests (bsc#1258210).
- drm/panfrost: Fix wait_bo ioctl leaking positive return from
dma_resv_wait_timeout() (bsc#1258210).
- drm/xe/dma-buf: handle empty bo and UAF races (bsc#1258210).
- drm/xe/dma-buf: fix UAF with retry loop (bsc#1258210).
- drm/ttm: Convert -EAGAIN from dmem_cgroup_try_charge to -ENOSPC
(bsc#1258210).
- drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
(bsc#1258210).
- drm/gma500/oaktrail_lvds: fix hang on init failure (bsc#1258210).
- drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
(bsc#1258210).
- drm/v3d: Reject empty multisync extension to prevent infinite
loop (bsc#1258210).
- eventfs: Use list_add_tail_rcu() for SRCU-protected children
list (bsc#1258210).
- smb: client: Use FullSessionKey for AES-256 encryption key
derivation (bsc#1258210).
- btrfs: do not mark inode incompressible after inline attempt
fails (bsc#1258210).
- perf/x86/intel: Disable PMI for self-reloaded ACR events
(bsc#1258210).
- sched_ext: Guard scx_dsq_move() against NULL kit->dsq after
failed iter_new (bsc#1258210).
- sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before
(bsc#1258210).
- f2fs: fix false alarm of lockdep on cp_global_sem lock
(bsc#1258210).
- spi: sifive: Simplify clock handling with devm_clk_get_enabled()
(bsc#1258210).
- spi: sifive: fix controller deregistration (bsc#1258210).
- net/rds: reset op_nents when zerocopy page pin fails
(bsc#1258210).
- net: skbuff: preserve shared-frag marker during coalescing
(bsc#1258210).
- net: skbuff: propagate shared-frag marker through frag-transfer
helpers (bsc#1258210).
- selftests/bpf: Remove test_access_variable_array (bsc#1258210).
- netfs: Fix potential uninitialised var in
netfs_extract_user_iter() (bsc#1258210).
- Rename to
patches.kernel.org/6.18.33-895-drm-Replace-old-pointer-to-new-idr.patch.
- commit 603b891
* Thu May 21 2026 msuchanek@suse.de
- kernel-binary: Only apply vmlinux workaround on SLE15 and later
To create debuginfo for vmlinux the file needs to be present even if
it's not packaged because a compressed file is packaged insteand.
To accomplish that the file is marked as ghost in the file list. Then
rpm does not complain that the file exists but does not package it.
However, rpm still reserves space for ghost files when installing a
package. To avoid reserving space for a file that is not used the file
is truncated.
That works on SLE 15 but on SLE 12 rpm then fails packaging the
debuginfo complaiing that extra debuginfo files are present. Limit the
workaround to SLE 15 and later.
Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit 1ef7451
* Thu May 21 2026 msuchanek@suse.de
- Kernel-binary: Do not truncate vmlinux when it's the boot image
Some architectures use vmlinux to boot. Truncating vmlinux on those
architectures causes signing failure during build. Also if the signing
was disabled a brokne kernel would be produced.
Fixes: 222edac2a18 (kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements)
- commit d3cf603
* Wed May 20 2026 sangeetha.thackarajan@suse.com
- kernel-binary: prevent uncompressed vmlinux from inflating rpm size requirements
define %__spec_install_post to truncate the uncompressed vmlinux
to 0 bytes after find-debuginfo.sh and brp-* scripts run. This prevents
rpmbuild from baking the %ghost file size into the FILESIZES
header, which can cause installation failures on smaller /boot partitions.
Fixes: bsc#1265456
- commit 222edac
* Mon May 18 2026 rfrohl@suse.com
- drm: Replace old pointer to new idr (git-fixes).
- commit 393f68f
* Mon May 18 2026 rfrohl@suse.com
- Linux 6.18.32 (bsc#1258210).
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (bsc#1258210).
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (bsc#1258210).
- vsock/virtio: fix accept queue count leak on transport mismatch
(bsc#1258210).
- vsock/virtio: fix empty payload in tap skb for non-linear
buffers (bsc#1258210).
- vsock/virtio: fix length and offset in tap skb for split packets
(bsc#1258210).
- vsock: fix buffer size clamping order (bsc#1258210).
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure
(bsc#1258210).
- tracing/fprobe: Remove fprobe from hash in failure path
(bsc#1258210).
- tracing/fprobe: Unregister fprobe even if memory allocation
fails (bsc#1258210).
- tracing: fprobe: optimization for entry only case (bsc#1258210).
- tracing: fprobe: use rhltable for fprobe_ip_table (bsc#1258210).
- btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which
can lead to info-leak (bsc#1258210).
- btrfs: fix double free in create_space_info_sub_group() error
path (bsc#1258210).
- btrfs: remove fs_info argument from
btrfs_sysfs_add_space_info_type() (bsc#1258210).
- usb: dwc3: Move GUID programming after PHY initialization
(bsc#1258210).
- usb: dwc3: Add dwc pointer to dwc3_readl/writel (bsc#1258210).
- usb: dwc3: Remove of dep->regs (bsc#1258210).
- sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup
setters (bsc#1258210).
- sched/ext: Implement cgroup_set_idle() callback (bsc#1258210).
- Bluetooth: hci_conn: fix potential UAF in create_big_sync
(bsc#1258210).
- spi: zynq-qspi: fix controller deregistration (bsc#1258210).
- spi: zynq-qspi: Simplify clock handling with
devm_clk_get_enabled() (bsc#1258210).
- spi: tegra114: fix controller deregistration (bsc#1258210).
- spi: tegra20-sflash: fix controller deregistration (bsc#1258210).
- spi: uniphier: fix controller deregistration (bsc#1258210).
- spi: uniphier: Simplify clock handling with
devm_clk_get_enabled() (bsc#1258210).
- pseries/papr-hvpipe: Fix race with interrupt handler
(bsc#1258210).
- papr-hvpipe: convert papr_hvpipe_dev_create_handle() to
FD_PREPARE() (bsc#1258210).
- EDAC/versalnet: Fix device name memory leak (bsc#1258210).
- block: fix zone write plug removal (bsc#1258210).
- fbcon: Avoid OOB font access if console rotation fails
(bsc#1258210).
- fbcon: Rename struct fbcon_ops to struct fbcon_par (bsc#1258210).
- drm/amdgpu: rework how we handle TLB fences (bsc#1258210).
- Revert "drm/amdgpu: don't attach the tlb fence for SI"
(bsc#1258210).
- drm/amdgpu: Fix validating flush_gpu_tlb_pasid() (bsc#1258210).
- drm/amdgpu: validate the flush_gpu_tlb_pasid() (bsc#1258210).
- mm/damon/core: disallow time-quota setting zero esz
(bsc#1258210).
- usb: typec: tcpm: reset internal port states on soft reset AMS
(bsc#1258210).
- mm/damon/reclaim: detect and use fresh enabled and kdamond_pid
values (bsc#1258210).
- mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid
values (bsc#1258210).
- mm/damon/core: implement damon_kdamond_pid() (bsc#1258210).
- LoongArch: KVM: Compile switch.S directly into the kernel
(bsc#1258210).
- io_uring/zcrx: warn on freelist violations (bsc#1258210).
- io_uring/zcrx: use guards for locking (bsc#1258210).
- batman-adv: bla: put backbone reference on failed claim hash
insert (bsc#1258210).
- batman-adv: bla: only purge non-released claims (bsc#1258210).
- batman-adv: bla: prevent use-after-free when deleting claims
(bsc#1258210).
- batman-adv: stop caching unowned originator pointers in BAT IV
(bsc#1258210).
- batman-adv: stop tp_meter sessions during mesh teardown
(bsc#1258210).
- batman-adv: reject new tp_meter sessions during teardown
(bsc#1258210).
- batman-adv: fix integer overflow on buff_pos (bsc#1258210).
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc()
in SCTP_SENDALL (bsc#1258210).
- arm64: dts: ti: k3-am62a7-sk: Fix pin name in comment from
M19 to N22 (bsc#1258210).
- arm64: dts: qcom: lemans: Correct QUP interrupt numbers
(bsc#1258210).
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon
(bsc#1258210).
- drm/amdgpu/pm: add missing revision check for CI (bsc#1258210).
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
(bsc#1258210).
- drm/amdkfd: Make all TLB-flushes heavy-weight (bsc#1258210).
- drm/panel: boe-tv101wum-nl6: restore MODE_LPM after sending
disable cmds (bsc#1258210).
- drm/bridge: tda998x: Use __be32 for audio port OF property
pointer (bsc#1258210).
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in
KIQ (bsc#1258210).
- drm/panel: himax-hx83102: restore MODE_LPM after sending
disable cmds (bsc#1258210).
- drm/exynos: remove bridge when component_add fails (bsc#1258210).
- drm/amdgpu: zero-initialize GART table on allocation
(bsc#1258210).
- drm/radeon: add missing revision check for CI (bsc#1258210).
- drm: Set old handle to NULL before prime swap in change_handle
(bsc#1258210).
- drm/xe/uapi: Reject coh_none PAT index for CPU cached memory
in madvise (bsc#1258210).
- drm/xe/bo: Fix bo leak on unaligned size validation in
xe_bo_init_locked() (bsc#1258210).
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()
(bsc#1258210).
- drm/xe/bo: Fix bo leak on GGTT flag validation in
xe_bo_init_locked() (bsc#1258210).
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation
failure (bsc#1258210).
- drm/udl: Increase GET_URB_TIMEOUT (bsc#1258210).
- drm/amdkfd: validate SVM ioctl nattr against buffer size
(bsc#1258210).
- drm/appletbdrm: Use kvzalloc for big allocations (bsc#1258210).
- drm/gem: Fix inconsistent plane dimension calculation in
drm_gem_fb_init_with_funcs() (bsc#1258210).
- drm/amd/display: Change dither policy for 10 bpc output back
to dithering (bsc#1258210).
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
(bsc#1258210).
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
(bsc#1258210).
- drm/amdgpu/vce: Prevent partial address patches (bsc#1258210).
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (bsc#1258210).
- drm/amdgpu: Add bounds checking to ib_{get,set}_value
(bsc#1258210).
- drm/amdkfd: Add upper bound check for num_of_nodes (bsc#1258210).
- drm/amd/pm: fix incorrect FeatureCtrlMask setting on smu v14.0.x
(bsc#1258210).
- drm/amdgpu: gate VM CPU HDP flush on reset lock (bsc#1258210).
- drm/amdgpu: Use SMUIO 15.0.0 offsets for TSC upper and lower
count (bsc#1258210).
- drm/amdkfd: Clear VRAM on allocation to prevent stale data
exposure (bsc#1258210).
- drm/i915/psr: Init variable to avoid early exit from et
alignment loop (bsc#1258210).
- drm/msm: always recover the gpu (bsc#1258210).
- drm/imx: parallel-display: Prefer bus format set via legacy
"interface-pix-fmt" DT property (bsc#1258210).
- drm/msm/gem: fix error handling in
msm_ioctl_gem_info_get_metadata() (bsc#1258210).
- spi: cadence: fix clock imbalance on probe failure (bsc#1258210).
- spi: cadence: fix unclocked access on unbind (bsc#1258210).
- spi: cadence: fix controller deregistration (bsc#1258210).
- spi: mpc52xx: fix use-after-free on unbind (bsc#1258210).
- spi: mpc52xx: fix controller deregistration (bsc#1258210).
- spi: mpc52xx: fix use-after-free on registration failure
(bsc#1258210).
- spi: orion: fix clock imbalance on registration failure
(bsc#1258210).
- spi: orion: fix runtime pm leak on unbind (bsc#1258210).
- spi: orion: fix controller deregistration (bsc#1258210).
- spi: mxic: fix controller deregistration (bsc#1258210).
- spi: imx: fix runtime pm leak on probe deferral (bsc#1258210).
- spi: mpfs: fix controller deregistration (bsc#1258210).
- spi: img-spfi: fix controller deregistration (bsc#1258210).
- spi: slave-mt27xx: fix controller deregistration (bsc#1258210).
- spi: sh-msiof: fix controller deregistration (bsc#1258210).
- spi: rspi: fix controller deregistration (bsc#1258210).
- spi: sprd: fix controller deregistration (bsc#1258210).
- spi: pic32-sqi: fix controller deregistration (bsc#1258210).
- spi: cavium-thunderx: fix controller deregistration
(bsc#1258210).
- spi: npcm-pspi: fix controller deregistration (bsc#1258210).
- spi: coldfire-qspi: fix controller deregistration (bsc#1258210).
- spi: bcmbca-hsspi: fix controller deregistration (bsc#1258210).
- spi: fsl: fix controller deregistration (bsc#1258210).
- spi: sh-hspi: fix controller deregistration (bsc#1258210).
- spi: ch341: fix devres lifetime (bsc#1258210).
- spi: pl022: fix controller deregistration (bsc#1258210).
- spi: mtk-nor: fix controller deregistration (bsc#1258210).
- spi: pic32: fix controller deregistration (bsc#1258210).
- spi: omap2-mcspi: fix controller deregistration (bsc#1258210).
- spi: fsl-espi: fix controller deregistration (bsc#1258210).
- spi: s3c64xx: fix controller deregistration (bsc#1258210).
- spi: dln2: fix controller deregistration (bsc#1258210).
- spi: mt65xx: fix controller deregistration (bsc#1258210).
- spi: mxs: fix controller deregistration (bsc#1258210).
- media: qcom: camss: Add missing clocks for VFE lite on sa8775p
(bsc#1258210).
- media: iris: Fix dma_free_attrs() size in iris_hfi_queues_init()
(bsc#1258210).
- media: venus: fix QCOM_MDT_LOADER dependency (bsc#1258210).
- media: qcom: iris: increase H265D_MAX_SLICE to fix H.265
decoding on SC7280 (bsc#1258210).
- media: qcom: camss: Fix csid IRQ offset for sa8775p
(bsc#1258210).
- media: qcom: camss: Fix csid clock configuration for sa8775p
(bsc#1258210).
- media: iris: Fix use-after-free in
iris_release_internal_buffers() (bsc#1258210).
- media: iris: fix QCOM_MDT_LOADER dependency (bsc#1258210).
- media: omap3isp: drop the use count of v4l2 pipeline
(bsc#1258210).
- media: i2c: ov08d10: fix runtime PM handling in probe
(bsc#1258210).
- media: i2c: ov08d10: fix image vertical start setting
(bsc#1258210).
- media: staging: imx: request mbus_config in csi_start
(bsc#1258210).
- media: i2c: imx412: Assert reset GPIO during probe (bsc#1258210).
- media: dib8000: avoid division by 0 in dib8000_set_dds()
(bsc#1258210).
- media: pci: zoran: fix potential memory leak in zoran_probe()
(bsc#1258210).
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt
(bsc#1258210).
- arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for
pinctrl/pinctrl_aon (bsc#1258210).
- vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating
bytes to copy (bsc#1258210).
- platform/x86: hp-wmi: Ignore backlight and FnLock events
(bsc#1258210).
- spi: aspeed-smc: fix controller deregistration (bsc#1258210).
- spi: amlogic-spisg: fix controller deregistration (bsc#1258210).
- media: saa7164: add ioremap return checks and cleanups
(bsc#1258210).
- spi: at91-usart: fix controller deregistration (bsc#1258210).
- spi: qup: fix controller deregistration (bsc#1258210).
- spi: meson-spicc: fix controller deregistration (bsc#1258210).
- spi: lantiq-ssc: fix controller deregistration (bsc#1258210).
- regulator: bd9571mwv: fix OF node reference imbalance
(bsc#1258210).
- regulator: s2dos05: fix OF node reference imbalance
(bsc#1258210).
- regulator: act8945a: fix OF node reference imbalance
(bsc#1258210).
- media: i2c: imx283: Fix hang when going from large to small
resolution (bsc#1258210).
- media: intel/ipu6: fix error pointer dereference (bsc#1258210).
- media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1258210).
- regulator: rk808: fix OF node reference imbalance (bsc#1258210).
- regulator: bq257xx: fix OF node reference imbalance
(bsc#1258210).
- media: i2c: imx283: Enter full standby when stopping streaming
(bsc#1258210).
- media: rc: streamzap: Error handling in probe (bsc#1258210).
- media: rc: xbox_remote: heed DMA restrictions (bsc#1258210).
- regulator: max77650: fix OF node reference imbalance
(bsc#1258210).
- spi: st-ssc4: fix controller deregistration (bsc#1258210).
- regulator: mt6357: fix OF node reference imbalance (bsc#1258210).
- staging: media: atomisp: Disallow all private IOCTLs
(bsc#1258210).
- arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio
pinmux (bsc#1258210).
- spi: atmel: fix controller deregistration (bsc#1258210).
- spi: bcm63xx: fix controller deregistration (bsc#1258210).
- drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
(bsc#1258210).
- media: chips-media: wave5: add missing spinlock protection
for handle_dynamic_resolution_change() (bsc#1258210).
- media: chips-media: wave5: add missing spinlock protection
for send_eos_event() (bsc#1258210).
- media: chips-media: wave5: fix a potential memory leak in
wave5_vdi_init() (bsc#1258210).
- media: dt-bindings: rockchip,vdec: Mark reg-names required
for RK35{76,88} (bsc#1258210).
- media: dt-bindings: rockchip,vdec: Add alternative reg-names
order for RK35{76,88} (bsc#1258210).
- media: i2c: ov8856: free control handler on error in
ov8856_init_controls() (bsc#1258210).
- media: renesas: vin: Fix RAW8 (again) (bsc#1258210).
- media: renesas: vsp1: Fix NULL pointer deref on module unload
(bsc#1258210).
- media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
(bsc#1258210).
- drm/msm/hdmi: Fix wrong CTRL1 register used in writing info
frames (bsc#1258210).
- media: uvcvideo: Enable VB2_DMABUF for metadata stream
(bsc#1258210).
- HID: pidff: Fix integer overflow in pidff_rescale (bsc#1258210).
- HID: appletb-kbd: run inactivity autodim from workqueues
(bsc#1258210).
- HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
(bsc#1258210).
- HID: playstation: Clamp num_touch_reports (bsc#1258210).
- commit 68ec18d
* Fri May 15 2026 rfrohl@suse.com
- Linux 6.18.31 (bsc#1258210).
- ptrace: slightly saner 'get_dumpable()' logic (bsc#1258210).
- commit 84c0873
* Thu May 14 2026 rfrohl@suse.com
- Linux 6.18.30 (bsc#1258210).
- ksmbd: validate inherited ACE SID length (bsc#1258210).
- x86/CPU/AMD: Prevent improper isolation of shared resources
in Zen2's op cache (bsc#1258210).
- rust: pin-init: fix incorrect accessor reference lifetime
(bsc#1258210).
- net: stmmac: Prevent NULL deref when RX memory exhausted
(bsc#1258210).
- net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
(bsc#1258210).
- crypto: caam - guard HMAC key hex dumps in hash_digest_key
(bsc#1258210).
- printk: add print_hex_dump_devel() (bsc#1258210).
- erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
(bsc#1258210).
- erofs: tidy up z_erofs_lz4_handle_overlap() (bsc#1258210).
- hfsplus: fix held lock freed on hfsplus_fill_super()
(bsc#1258210).
- hfsplus: fix uninit-value by validating catalog record size
(bsc#1258210).
- firmware: exynos-acpm: Drop fake 'const' on handle pointer
(bsc#1258210).
- mm, swap: speed up hibernation allocation and writeout
(bsc#1258210).
- crypto: qat - fix firmware loading failure for GEN6 devices
(bsc#1258210).
- crypto: qat - fix indentation of macros in qat_hal.c
(bsc#1258210).
- mmc: core: Optimize time for secure erase/trim for some Kingston
eMMCs (bsc#1258210).
- mmc: core: Add quirk for incorrect manufacturing date
(bsc#1258210).
- mmc: core: Adjust MDT beyond 2025 (bsc#1258210).
- octeon_ep_vf: add NULL check for napi_build_skb() (bsc#1258210).
- hwmon: (powerz) Avoid cacheline sharing for DMA buffer
(bsc#1258210).
- dma-mapping: add __dma_from_device_group_begin()/end()
(bsc#1258210).
- fbdev: defio: Disconnect deferred I/O from the lifetime of
struct fb_info (bsc#1258210).
- mm/damon/core: disallow non-power of two min_region_sz on
damon_start() (bsc#1258210).
- bpf: Fix use-after-free in arena_vm_close on fork (bsc#1258210).
- io_uring/tw: serialize ctx->retry_llist with ->uring_lock
(bsc#1258210).
- io_uring/kbuf: support min length left for incremental buffers
(bsc#1258210).
- LoongArch: Use per-root-bridge PCIH flag to skip mem resource
fixup (bsc#1258210).
- LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
(bsc#1258210).
- LoongArch: KVM: Move unconditional delay into timer clear
scenery (bsc#1258210).
- LoongArch: KVM: Fix HW timer interrupt lost when inject
interrupt by software (bsc#1258210).
- LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
(bsc#1258210).
- LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
(bsc#1258210).
- LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
(bsc#1258210).
- KVM: arm64: Fix pin leak and publication ordering in
__pkvm_init_vcpu() (bsc#1258210).
- KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer
(bsc#1258210).
- KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer
(bsc#1258210).
- KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
(bsc#1258210).
- KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
value (bsc#1258210).
- KVM: arm64: Wake-up from WFI when iqrchip is in userspace
(bsc#1258210).
- f2fs: fix fsck inconsistency caused by FGGC of node block
(bsc#1258210).
- f2fs: fix inline data not being written to disk in writeback
path (bsc#1258210).
- f2fs: refactor f2fs_move_node_folio function (bsc#1258210).
- f2fs: fix uninitialized kobject put in f2fs_init_sysfs()
(bsc#1258210).
- f2fs: fix node_cnt race between extent node destroy and writeback
(bsc#1258210).
- f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
(bsc#1258210).
- f2fs: fix incorrect file address mapping when inline inode is
unwritten (bsc#1258210).
- f2fs: fix fsck inconsistency caused by incorrect nat_entry
flag usage (bsc#1258210).
- f2fs: fix fiemap boundary handling when read extent cache is
incomplete (bsc#1258210).
- f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
(bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: return early if no retrans
(bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
(bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: free sk if last (bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
(bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: allow ID 0 (bsc#1258210).
- mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
(bsc#1258210).
- mptcp: pm: prio: skip closed subflows (bsc#1258210).
- mptcp: fix scheduling with atomic in timestamp sockopt
(bsc#1258210).
- mptcp: fix rx timestamp corruption on fastopen (bsc#1258210).
- mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf
(bsc#1258210).
- mptcp: sockopt: set timestamp flags on subflow socket, not msk
(bsc#1258210).
- mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
(bsc#1258210).
- mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
(bsc#1258210).
- mptcp: fastclose msk when linger time is 0 (bsc#1258210).
- selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl
(bsc#1258210).
- selftests: mptcp: check output: catch cmd errors (bsc#1258210).
- sched_ext: idle: Recheck prev_cpu after narrowing allowed mask
(bsc#1258210).
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext()
error path (bsc#1258210).
- RDMA/rxe: Reject unknown opcodes before ICRC processing
(bsc#1258210).
- RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (bsc#1258210).
- RDMA/ocrdma: Don't NULL deref uctx on errors in
ocrdma_copy_pd_uresp() (bsc#1258210).
- RDMA/mlx5: Fix error path fall-through in
mlx5_ib_dev_res_srq_init() (bsc#1258210).
- RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
(bsc#1258210).
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (bsc#1258210).
- RDMA/mana: Validate rx_hash_key_len (bsc#1258210).
- RDMA/mana: Remove user triggerable WARN_ON() in
mana_ib_create_qp_rss() (bsc#1258210).
- RDMA/mana: Fix mana_destroy_wq_obj() cleanup in
mana_ib_create_qp_rss() (bsc#1258210).
- RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
(bsc#1258210).
- RDMA/ionic: Fix typo in format string (bsc#1258210).
- RDMA/ionic: bound node_desc sysfs read with %.64s (bsc#1258210).
- perf/x86/intel: Always reprogram ACR events to prevent stale
masks (bsc#1258210).
- powerpc/xive: fix kmemleak caused by incorrect chip_data lookup
(bsc#1258210).
- power: supply: max17042: avoid overflow when determining health
(bsc#1258210).
- PCI/ASPM: Fix pci_clear_and_set_config_dword() usage
(bsc#1258210).
- PCI/AER: Stop ruling out unbound devices as error source
(bsc#1258210).
- PCI/AER: Clear only error bits in PCIe Device Status
(bsc#1258210).
- PCI: Update saved_config_space upon resource assignment
(bsc#1258210).
- mm/damon/sysfs-schemes: protect memcg_path kfree() with
damon_sysfs_lock (bsc#1258210).
- mm/damon/stat: detect and use fresh enabled value (bsc#1258210).
- KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is
empty (bsc#1258210).
- KVM: x86: check for nEPT/nNPT in slow flush hypercalls
(bsc#1258210).
- smb: client: validate dacloffset before building DACL pointers
(bsc#1258210).
- smb: client: use kzalloc to zero-initialize security descriptor
buffer (bsc#1258210).
- smb/client: fix out-of-bounds read in symlink_data()
(bsc#1258210).
- smb/client: fix out-of-bounds read in smb2_compound_op()
(bsc#1258210).
- scsi: mpt3sas: Limit NVMe request size to 2 MiB (bsc#1258210).
- s390/debug: Reject zero-length input before trimming a newline
(bsc#1258210).
- s390/debug: Reject zero-length input in debug_input_flush_fn()
(bsc#1258210).
- riscv: kvm: fix vector context allocation leak (bsc#1258210).
- RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
(bsc#1258210).
- psp: strip variable-length PSP header in psp_dev_rcv()
(bsc#1258210).
- pmdomain: core: Fix detach procedure for virtual devices in
genpd (bsc#1258210).
- openvswitch: vport: fix self-deadlock on release of tunnel ports
(bsc#1258210).
- nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
(bsc#1258210).
- nvmet-tcp: fix race between ICReq handling and queue teardown
(bsc#1258210).
- nvme-apple: drop invalid put of admin queue reference count
(bsc#1258210).
- md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
(bsc#1258210).
- libceph: Fix slab-out-of-bounds access in auth message processing
(bsc#1258210).
- lib/scatterlist: fix temp buffer in extract_user_to_sg()
(bsc#1258210).
- lib/scatterlist: fix length calculations in extract_kvec_to_sg
(bsc#1258210).
- lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
(bsc#1258210).
- iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE
update (bsc#1258210).
- iommu/vt-d: Block PASID attachment to nested domain with dirty
tracking (bsc#1258210).
- iommufd: Fix return value of iommufd_fault_fops_write()
(bsc#1258210).
- isofs: validate block number from NFS file handle in
isofs_export_iget (bsc#1258210).
- isofs: validate Rock Ridge CE continuation extent against
volume size (bsc#1258210).
- dm-verity-fec: correctly reject too-small hash devices
(bsc#1258210).
- dm-verity-fec: correctly reject too-small FEC devices
(bsc#1258210).
- eventfs: Hold eventfs_mutex and SRCU when remount walks events
(bsc#1258210).
- dm: fix a buffer overflow in ioctl processing (bsc#1258210).
- dm: don't report warning when doing deferred remove
(bsc#1258210).
- dm-thin: fix metadata refcount underflow (bsc#1258210).
- btrfs: fix missing last_unlink_trans update when removing a
directory (bsc#1258210).
- btrfs: fix double free in create_space_info() error path
(bsc#1258210).
- ASoC: qcom: q6apm: remove child devices when apm is removed
(bsc#1258210).
- ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
(bsc#1258210).
- ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
(bsc#1258210).
- ASoC: Intel: bytcr_wm5102: Fix MCLK leak on
platform_clock_control error (bsc#1258210).
- ASoC: fsl_easrc: fix comment typo (bsc#1258210).
- ASoC: ES8389: convert to devm_clk_get_optional() to get clock
(bsc#1258210).
- ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product
line in quirk table (bsc#1258210).
- cpuidle: powerpc: avoid double clear when breaking snooze
(bsc#1258210).
- clk: microchip: mpfs-ccc: fix out of bounds access during
output registration (bsc#1258210).
- clk: imx: imx8-acm: fix flags for acm clocks (bsc#1258210).
- tracing/probes: Limit size of event probe to 3K (bsc#1258210).
- spi: topcliff-pch: fix use-after-free on unbind (bsc#1258210).
- spi: topcliff-pch: fix controller deregistration (bsc#1258210).
- thermal/drivers/sprd: Fix raw temperature clamping in
sprd_thm_rawdata_to_temp (bsc#1258210).
- thermal/drivers/sprd: Fix temperature clamping in
sprd_thm_temp_to_rawdata (bsc#1258210).
- thermal: core: Free thermal zone ID later during removal
(bsc#1258210).
- udf: reject descriptors with oversized CRC length (bsc#1258210).
- tracefs: Fix default permissions not being applied on initial
mount (bsc#1258210).
- spi: microchip-core-qspi: control built-in cs manually
(bsc#1258210).
- spi: microchip-core-qspi: don't attempt to transmit during
emulated read-only dual/quad operations (bsc#1258210).
- spi: microchip-core-qspi: fix controller deregistration
(bsc#1258210).
- ice: fix double free in ice_sf_eth_activate() error path
(bsc#1258210).
- ibmveth: Disable GSO for packets with small MSS (bsc#1258210).
- hv_sock: Return -EIO for malformed/short packets (bsc#1258210).
- hv_sock: Report EOF instead of -EIO for FIN (bsc#1258210).
- hv_sock: fix ARM64 support (bsc#1258210).
- hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS
(bsc#1258210).
- gpio: of: clear OF_POPULATED on hog nodes in remove path
(bsc#1258210).
- extcon: ptn5150: handle pending IRQ events during system resume
(bsc#1258210).
- cifs: change_conf needs to be called for session setup
(bsc#1258210).
- cifs: abort open_cached_dir if we don't request leases
(bsc#1258210).
- block: only read from sqe on initial invocation of
blkdev_uring_cmd() (bsc#1258210).
- block: add pgmap check to biovec_phys_mergeable (bsc#1258210).
- pmdomain: mediatek: fix use-after-free in
scpsys_get_bus_protection_legacy() (bsc#1258210).
- arm64/fpsimd: ptrace: zero target's fpsimd_state, not the
tracer's (bsc#1258210).
- af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1258210).
- hwmon: (corsair-psu) Close HID device on probe errors
(bsc#1258210).
- clk: rk808: fix OF node reference imbalance (bsc#1258210).
- hwmon: (ltc2992) Fix u32 overflow in power read path
(bsc#1258210).
- hwmon: (ltc2992) Clamp threshold writes to hardware range
(bsc#1258210).
- x86/efi: Fix graceful fault handling after FPU softirq changes
(bsc#1258210).
- parisc: Fix IRQ leak in LASI driver (bsc#1258210).
- platform/chrome: cros_ec_typec: Init mutex in Thunderbolt
registration (bsc#1258210).
- net: wwan: t7xx: validate port_count against message length
in t7xx_port_enum_msg_handler (bsc#1258210).
- net/rds: handle zerocopy send cleanup before the message is
queued (bsc#1258210).
- netpoll: pass buffer size to egress_dev() to avoid MAC truncation
(bsc#1258210).
- net: libwx: use request_irq for VF misc interrupt (bsc#1258210).
- ip6_gre: Use cached t->net in ip6erspan_changelink()
(bsc#1258210).
- net: libwx: fix VF illegal register access (bsc#1258210).
- pseries/papr-hvpipe: Fix the usage of copy_to_user()
(bsc#1258210).
- pseries/papr-hvpipe: Fix & simplify error handling in
papr_hvpipe_init() (bsc#1258210).
- pseries/papr-hvpipe: Prevent kernel stack memory leak to
userspace (bsc#1258210).
- sound: ua101: fix division by zero at probe (bsc#1258210).
- perf/x86/intel: Improve validation and configuration of ACR
masks (bsc#1258210).
- mptcp: pm: ADD_ADDR rtx: skip inactive subflows (bsc#1258210).
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak
in rtnl_fill_vfinfo (bsc#1258210).
- LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT
(bsc#1258210).
- mm/hugetlb_cma: round up per_node before logging it
(bsc#1258210).
- arm64: signal: Preserve POR_EL0 if poe_context is missing
(bsc#1258210).
- mtd: spi-nor: debugfs: fix out-of-bounds read in
spi_nor_params_show() (bsc#1258210).
- KVM: arm64: Fix kvm_vcpu_initialized() macro parameter
(bsc#1258210).
- fanotify: fix false positive on permission events (bsc#1258210).
- staging: vme_user: fix root device leak on init failure
(bsc#1258210).
- spi: s3c64xx: fix NULL-deref on driver unbind (bsc#1258210).
- spi: zynqmp-gqspi: fix controller deregistration (bsc#1258210).
- spi: sun6i: fix controller deregistration (bsc#1258210).
- spi: ti-qspi: fix controller deregistration (bsc#1258210).
- spi: sun4i: fix controller deregistration (bsc#1258210).
- spi: syncuacer: fix controller deregistration (bsc#1258210).
- rust: allow `clippy::collapsible_if` globally (bsc#1258210).
- rust: allow `clippy::collapsible_match` globally (bsc#1258210).
- rust: drm: gem: clean up GEM state in init failure case
(bsc#1258210).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_get_sndtimeo_cb() (bsc#1258210).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_state_change_cb() (bsc#1258210).
- Bluetooth: L2CAP: Fix null-ptr-deref in
l2cap_sock_new_connection_cb() (bsc#1258210).
- Bluetooth: hci_event: Fix OOB read and infinite loop in
hci_le_create_big_complete_evt (bsc#1258210).
- Bluetooth: btmtk: validate WMT event SKB length before struct
access (bsc#1258210).
- Bluetooth: virtio_bt: validate rx pkt_type header length
(bsc#1258210).
- Bluetooth: virtio_bt: clamp rx length before skb_put
(bsc#1258210).
- LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
(bsc#1258210).
- selinux: prune /sys/fs/selinux/user (bsc#1258210).
- selinux: prune /sys/fs/selinux/disable (bsc#1258210).
- selinux: prune /sys/fs/selinux/checkreqprot (bsc#1258210).
- selinux: shrink critical section in sel_write_load()
(bsc#1258210).
- selinux: don't reserve xattr slot when we won't fill it
(bsc#1258210).
- selinux: use sk blob accessor in socket permission helpers
(bsc#1258210).
- selinux: fix avdcache auditing (bsc#1258210).
- xfrm: ah: account for ESN high bits in async callbacks
(bsc#1258210).
- ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
(bsc#1258210).
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
(bsc#1258210).
- xfrm: provide message size for XFRM_MSG_MAPPING (bsc#1258210).
- x86/efi: Restore IRQ state in EFI page fault handler
(bsc#1258210).
- powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
(bsc#1258210).
- ALSA: seq: Fix UMP group 16 filtering (bsc#1258210).
- ALSA: core: Serialize deferred fasync state checks (bsc#1258210).
- ALSA: firewire-tascam: Do not drop unread control events
(bsc#1258210).
- ALSA: hda/realtek: Fix speaker silence after S3 resume on
Xiaomi Mi Laptop Pro 15 (bsc#1258210).
- ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
(bsc#1258210).
- ALSA: hda: cs35l56: Propagate ASP TX source control errors
(bsc#1258210).
- usb: typec: tcpm: fix debug accessory mode detection for sink
ports (bsc#1258210).
- usb: ulpi: fix memory leak on ulpi_register() error paths
(bsc#1258210).
- USB: serial: option: add Telit Cinterion LE910Cx compositions
(bsc#1258210).
- USB: omap_udc: DMA: Don't enable burst 4 mode (bsc#1258210).
- ALSA: usb-audio: Fix UAC3 cluster descriptor size check
(bsc#1258210).
- ALSA: usb-audio: Avoid potential endless loop in
convert_chmap_v3() (bsc#1258210).
- ALSA: usb-audio: midi2: Restart output URBs on resume
(bsc#1258210).
- usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
(bsc#1258210).
- usb: usblp: fix heap leak in IEEE 1284 device ID via short
response (bsc#1258210).
- wifi: brcmfmac: Fix potential use-after-free issue when stopping
watchdog task (bsc#1258210).
- wifi: b43: enforce bounds check on firmware key index in b43_rx()
(bsc#1258210).
- wifi: mac80211: remove station if connection prep fails
(bsc#1258210).
- wifi: ath5k: do not access array OOB (bsc#1258210).
- wifi: mac80211: use safe list iteration in radar detect work
(bsc#1258210).
- wifi: rsi: fix kthread lifetime race between self-exit and
external-stop (bsc#1258210).
- wifi: mac80211: drop stray 'static' from fast-RX rx_result
(bsc#1258210).
- wifi: b43legacy: enforce bounds check on firmware key index
in RX path (bsc#1258210).
- wifi: mt76: mt7921: fix ROC abort flow interruption in
mt7921_roc_work (bsc#1258210).
- wifi: mt76: mt7921: fix a potential clc buffer length underflow
(bsc#1258210).
- wifi: mt76: mt7925: fix incorrect length field in txpower
command (bsc#1258210).
- wifi: mt76: mt7925: fix AMPDU state handling in
mt7925_tx_check_aggr (bsc#1258210).
- exit: prevent preemption of oopsing TASK_DEAD task (bsc#1258210).
- net/sched: sch_red: Replace direct dequeue call with peek and
qdisc_dequeue_peeked (bsc#1258210).
- net: stmmac: Disable EEE RX clock stop when VLAN is enabled
(bsc#1258210).
- KVM: SVM: check validity of VMCB controls when returning from
SMM (bsc#1258210).
- net: af_key: zero aligned sockaddr tail in PF_KEY exports
(bsc#1258210).
- smb: client/smbdirect: fix MR registration for coalesced SG
lists (bsc#1258210).
- mptcp: sync the msk->sndbuf at accept() time (bsc#1258210).
- flow_dissector: do not dissect PPPoE PFC frames (bsc#1258210).
- ceph: fix num_ops off-by-one when crypto allocation fails
(bsc#1258210).
- KVM: x86: Fix shadow paging use-after-free due to unexpected
GFN (bsc#1258210).
- ksmbd: rewrite stop_sessions() with restartable iteration
(bsc#1258210).
- spi: rockchip: fix controller deregistration (bsc#1258210).
- wifi: mt76: mt7925: fix incorrect TLV length in CLC command
(bsc#1258210).
- ASoC: SOF: Don't allow pointer operations on unconfigured
streams (bsc#1258210).
- iommufd: Fix a race with concurrent allocation and unmap
(bsc#1258210).
- tracepoint: balance regfunc() on func_add() failure in
tracepoint_add_func() (bsc#1258210).
- ACPI: video: force native backlight on HP OMEN 16 (8A44)
(bsc#1258210).
- ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
(bsc#1258210).
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770
AIO (bsc#1258210).
- ACPI: scan: Use acpi_dev_put() in object add error paths
(bsc#1258210).
- fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent
use-after-free (bsc#1258210).
- ipmi:si: Return state to normal if message allocation fails
(bsc#1258210).
- ipmi: Check event message buffer response for bad data
(bsc#1258210).
- ipmi: Add limits to event and receive message requests
(bsc#1258210).
- scsi: target: configfs: Bound snprintf() return in
tg_pt_gp_members_show() (bsc#1258210).
- commit 25e4e07
* Mon May 11 2026 msuchanek@suse.de
- mkspec: Add signature to source list only when it exists
- commit e496e84
* Mon May 11 2026 rfrohl@suse.com
- Linux 6.18.29 (bsc#1258210).
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags
are present (bsc#1258210).
- commit 015befa
* Fri May 08 2026 rfrohl@suse.com
- Linux 6.18.28 (bsc#1258210).
- xfrm: esp: avoid in-place decrypt on shared skb frags
(bsc#1258210).
- commit bd30deb
* Thu May 07 2026 rfrohl@suse.com
- Linux 6.18.27 (bsc#1258210).
- ipmi:ssif: NULL thread on error (bsc#1258210).
- ipmi:ssif: Remove unnecessary indention (bsc#1258210).
- netfilter: reject zero shift in nft_bitwise (bsc#1258210).
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
(bsc#1258210).
- mm/slab: return NULL early from kmalloc_nolock() in NMI on UP
(bsc#1258210).
- mm/page_alloc: return NULL early from alloc_frozen_pages_nolock()
in NMI on UP (bsc#1258210).
- vmalloc: fix buffer overflow in vrealloc_node_align()
(bsc#1258210).
- ALSA: aloop: Fix peer runtime UAF during format-change stop
(bsc#1258210).
- ALSA: caiaq: fix usb_dev refcount leak on probe failure
(bsc#1258210).
- drm/amdgpu: fix zero-size GDS range init on RDNA4 (bsc#1258210).
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
(bsc#1258210).
- ALSA: caiaq: Don't abort when no input device is available
(bsc#1258210).
- ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path
(bsc#1258210).
- driver core: Add kernel-doc for DEV_FLAG_COUNT enum value
(bsc#1258210).
- crypto: authencesn - reject short ahash digests during instance
creation (bsc#1258210).
- net: qrtr: ns: Limit the total number of nodes (bsc#1258210).
- net: qrtr: ns: Limit the maximum number of lookups (bsc#1258210).
- net: qrtr: ns: Limit the maximum server registration per node
(bsc#1258210).
- iio: frequency: admv1013: fix NULL pointer dereference on str
(bsc#1258210).
- iio: frequency: admv1013: add dev variable (bsc#1258210).
- media: rc: igorplugusb: heed coherency rules (bsc#1258210).
- media: rc: ttusbir: respect DMA coherency rules (bsc#1258210).
- wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
(bsc#1258210).
- wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
(bsc#1258210).
- phy: qcom: m31-eusb2: clear PLL_EN during init (bsc#1258210).
- phy: qcom: m31-eusb2: Update init sequence to set PHY_ENABLE
(bsc#1258210).
- mei: me: add nova lake point H DID (bsc#1258210).
- mei: me: use PCI_DEVICE_DATA macro (bsc#1258210).
- lib: test_hmm: evict device pages on file close to avoid
use-after-free (bsc#1258210).
- arm64: mm: Fix rodata=full block mapping support for realm
guests (bsc#1258210).
- arm64: mm: Simplify check in arch_kfence_init_pool()
(bsc#1258210).
- mm: prevent droppable mappings from being locked (bsc#1258210).
- seg6: fix seg6 lwtunnel output redirect for L2 reduced encap
mode (bsc#1258210).
- scsi: sd: fix missing put_disk() when device_add(&disk_dev)
fails (bsc#1258210).
- sched_ext: Documentation: Clarify ops.dispatch() role in task
lifecycle (bsc#1258210).
- rxgk: Fix potential integer overflow in length check
(bsc#1258210).
- rtmutex: Use waiter::task instead of current in remove_waiter()
(bsc#1258210).
- ntfs3: fix integer overflow in run_unpack() volume boundary
check (bsc#1258210).
- ntfs3: add buffer boundary checks to run_unpack() (bsc#1258210).
- NFSv4.1: Apply session size limits on clone path (bsc#1258210).
- ktest: Fix the month in the name of the failure directory
(bsc#1258210).
- IB/core: Fix zero dmac race in neighbor resolution (bsc#1258210).
- gtp: disable BH before calling udp_tunnel_xmit_skb()
(bsc#1258210).
- ceph: only d_add() negative dentries when they are unhashed
(bsc#1258210).
- dm mirror: fix integer overflow in create_dirty_log()
(bsc#1258210).
- crypto: nx - Fix packed layout in struct nx842_crypto_header
(bsc#1258210).
- crypto: nx - fix context leak in nx842_crypto_free_ctx
(bsc#1258210).
- crypto: nx - fix bounce buffer leaks in
nx842_crypto_{alloc,free}_ctx (bsc#1258210).
- crypto: atmel-sha204a - Fix uninitialized data access on OTP
read error (bsc#1258210).
- crypto: atmel-sha204a - Fix potential UAF and memory leak in
remove path (bsc#1258210).
- crypto: atmel-sha204a - Fix error codes in OTP reads
(bsc#1258210).
- crypto: atmel-tdes - fix DMA sync direction (bsc#1258210).
- crypto: ccree - fix a memory leak in cc_mac_digest()
(bsc#1258210).
- crypto: hisilicon - Fix dma_unmap_single() direction
(bsc#1258210).
- crypto: atmel-ecc - Release client on allocation failure
(bsc#1258210).
- crypto: atmel-aes - Fix 3-page memory leak in
atmel_aes_buff_cleanup (bsc#1258210).
- crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated
as 64-bit (bsc#1258210).
- crypto: acomp - fix wrong pointer stored by acomp_save_req()
(bsc#1258210).
- can: ucan: fix devres lifetime (bsc#1258210).
- bus: mhi: host: pci_generic: Switch to async power up to avoid
boot delays (bsc#1258210).
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
(bsc#1258210).
- apparmor: use target task's context in apparmor_getprocattr()
(bsc#1258210).
- mfd: core: Preserve OF node when ACPI handle is present
(bsc#1258210).
- taskstats: set version in TGID exit notifications (bsc#1258210).
- tcp: call sk_data_ready() after listener migration (bsc#1258210).
- wifi: rtl8xxxu: fix potential use of uninitialized value
(bsc#1258210).
- x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1258210).
- x86/cpu: Disable FRED when PTI is forced on (bsc#1258210).
- inotify: fix watch count leak when
fsnotify_add_inode_mark_locked() fails (bsc#1258210).
- HID: apple: ensure the keyboard backlight is off if suspending
(bsc#1258210).
- check-uapi: link into shared objects (bsc#1258210).
- md/raid5: validate payload size before accessing journal metadata
(bsc#1258210).
- md/raid5: fix soft lockup in retry_aligned_read() (bsc#1258210).
- md/md-llbitmap: raise barrier before state machine transition
(bsc#1258210).
- md/md-llbitmap: skip reading rdevs that are not in_sync
(bsc#1258210).
- amdgpu/jpeg: fix deepsleep register for jpeg 5_0_0 and 5_0_2
(bsc#1258210).
- mtd: spinand: winbond: Declare the QE bit on W25NxxJW
(bsc#1258210).
- mtd: spi-nor: sst: Fix write enable before AAI sequence
(bsc#1258210).
- ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
(bsc#1258210).
- ext4: fix bounds check in check_xattrs() to prevent out-of-bounds
access (bsc#1258210).
- ring-buffer: Do not double count the reader_page (bsc#1258210).
- ARM: 9472/1: fix race condition on PG_dcache_clean in
__sync_icache_dcache() (bsc#1258210).
- perf annotate: Use jump__delete when freeing LoongArch jumps
(bsc#1258210).
- KVM: nSVM: Always intercept VMMCALL when L2 is active
(bsc#1258210).
- KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted
by L1 (bsc#1258210).
- KVM: nSVM: Add missing consistency check for nCR3 validity
(bsc#1258210).
- KVM: nSVM: Drop the non-architectural consistency check for
NP_ENABLE (bsc#1258210).
- KVM: nSVM: Add missing consistency check for EFER, CR0, CR4,
and CS (bsc#1258210).
- KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested
[#]VMEXIT (bsc#1258210).
- KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
(bsc#1258210).
- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (bsc#1258210).
- KVM: nSVM: Triple fault if mapping VMCB12 fails on nested
[#]VMEXIT (bsc#1258210).
- KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper
(bsc#1258210).
- KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into
a helper (bsc#1258210).
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on
nested VMRUN (bsc#1258210).
- KVM: SVM: Add missing save/restore handling of LBR MSRs
(bsc#1258210).
- KVM: SVM: Switch svm_copy_lbrs() to a macro (bsc#1258210).
- KVM: nSVM: Delay setting soft IRQ RIP tracking fields until
vCPU run (bsc#1258210).
- KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1258210).
- KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested
[#]VMEXIT (bsc#1258210).
- KVM: nSVM: Delay stuffing L2's current RIP into NextRIP until
vCPU run (bsc#1258210).
- KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first
L2 VMRUN (bsc#1258210).
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to
guest mode (bsc#1258210).
- KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB
intercepts (bsc#1258210).
- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (bsc#1258210).
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN
of L2 (bsc#1258210).
- KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2
(bsc#1258210).
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
(bsc#1258210).
- KVM: x86: Defer non-architectural deliver of exception payload
to userspace read (bsc#1258210).
- LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel()
(bsc#1258210).
- userfaultfd: allow registration of ranges below mmap_min_addr
(bsc#1258210).
- mm/damon/core: use time_in_range_open() for damos quota window
start (bsc#1258210).
- mm/damon/core: validate damos_quota_goal->nid for
node_mem_{used,free}_bp (bsc#1258210).
- mm/damon/stat: fix memory leak on damon_start() failure in
damon_stat_start() (bsc#1258210).
- mm/mempolicy: fix memory leaks in
weighted_interleave_auto_store() (bsc#1258210).
- mm/vmalloc: take vmap_purge_lock in shrinker (bsc#1258210).
- rtc: ntxec: fix OF node reference imbalance (bsc#1258210).
- tpm: tpm_tis: stop transmit if retries are exhausted
(bsc#1258210).
- tpm: tpm_tis: add error logging for data transfer (bsc#1258210).
- tpm: Use kfree_sensitive() to free auth session in
tpm_dev_release() (bsc#1258210).
- tpm: Fix auth session leak in tpm2_get_random() error path
(bsc#1258210).
- tpm2-sessions: Fix missing tpm_buf_destroy() in
tpm2_read_public() (bsc#1258210).
- pwm: imx-tpm: Count the number of enabled channels in probe
(bsc#1258210).
- crypto: talitos - rename first/last to first_desc/last_desc
(bsc#1258210).
- crypto: talitos - fix SEC1 32k ahash request limitation
(bsc#1258210).
- firmware: google: framebuffer: Do not unregister platform device
(bsc#1258210).
- xfs: fix a resource leak in xfs_alloc_buftarg() (bsc#1258210).
- xfs: start gc on zonegc_low_space attribute updates
(bsc#1258210).
- crypto: qat - fix IRQ cleanup on 6xxx probe failure
(bsc#1258210).
- arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
(bsc#1258210).
- mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
(bsc#1258210).
- mmc: block: use single block write in retry (bsc#1258210).
- randomize_kstack: Maintain kstack_offset per task (bsc#1258210).
- hwmon: (pt5161l) Fix bugs in pt5161l_read_block_data()
(bsc#1258210).
- ASoC: Intel: avs: replace strcmp with sysfs_streq (bsc#1258210).
- drm/amd: Fix set but not used warnings (bsc#1258210).
- fs: prepare for adding LSM blob to backing_file (bsc#1258210).
- hwmon: (isl28022) Fix integer overflow in power calculation
on 32-bit (bsc#1258210).
- power: supply: axp288_charger: Do not cancel work before
initializing it (bsc#1258210).
- LoongArch: Show CPU vulnerabilites correctly (bsc#1258210).
- tpm: avoid -Wunused-but-set-variable (bsc#1258210).
- extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
(bsc#1258210).
- spi: fix resource leaks on device setup failure (bsc#1258210).
- libceph: Prevent potential null-ptr-deref in
ceph_handle_auth_reply() (bsc#1258210).
- ipv4: icmp: validate reply type before using icmp_pointers
(bsc#1258210).
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
(bsc#1258210).
- tracing/fprobe: Reject registration of a registered fprobe
before init (bsc#1258210).
- slub: fix data loss and overflow in krealloc() (bsc#1258210).
- drm/arcpgu: fix device node leak (bsc#1258210).
- net: ks8851: Avoid excess softirq scheduling (bsc#1258210).
- net: mctp: fix don't require received header reserved bits to
be zero (bsc#1258210).
- netconsole: avoid out-of-bounds access on empty string in
trim_newline() (bsc#1258210).
- net: bridge: use a stable FDB dst snapshot in RCU readers
(bsc#1258210).
- net: ks8851: Reinstate disabling of BHs around IRQ handler
(bsc#1258210).
- net/smc: avoid early lgr access in smc_clc_wait_msg
(bsc#1258210).
- net: txgbe: fix firmware version check (bsc#1258210).
- net: rds: fix MR cleanup on copy error (bsc#1258210).
- net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1258210).
- arm64: dts: marvell: uDPU: add ethernet aliases (bsc#1258210).
- net: txgbe: fix RTNL assertion warning when remove module
(bsc#1258210).
- tools/accounting: handle truncated taskstats netlink messages
(bsc#1258210).
- EDAC/versalnet: Fix memory leak in remove and probe error paths
(bsc#1258210).
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
(bsc#1258210).
- rxrpc: Fix re-decryption of RESPONSE packets (bsc#1258210).
- rxrpc: Fix error handling in rxgk_extract_token() (bsc#1258210).
- rxrpc: Fix rxkad crypto unalignment handling (bsc#1258210).
- rxrpc: Fix conn-level packet handling to unshare RESPONSE
packets (bsc#1258210).
- rxrpc: Fix memory leaks in rxkad_verify_response() (bsc#1258210).
- rxrpc: Fix potential UAF after skb_unshare() failure
(bsc#1258210).
- iio: adc: ad7768-1: remove switch to one-shot mode (bsc#1258210).
- iio: adc: ad7768-1: fix one-shot mode data acquisition
(bsc#1258210).
- ALSA: pcmtest: Fix resource leaks in module init error paths
(bsc#1258210).
- ALSA: pcmtest: fix reference leak on failed device registration
(bsc#1258210).
- ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa2xxx
(bsc#1258210).
- ALSA: 6fire: Fix input volume change detection (bsc#1258210).
- ALSA: caiaq: Handle probe errors properly (bsc#1258210).
- ALSA: caiaq: Fix control_put() result and cache rollback
(bsc#1258210).
- ALSA: core: Fix potential data race at fasync handling
(bsc#1258210).
- io_uring/poll: ensure EPOLL_ONESHOT is propagated for
EPOLL_URING_WAKE (bsc#1258210).
- io_uring/poll: fix signed comparison in io_poll_get_ownership()
(bsc#1258210).
- iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()
(bsc#1258210).
- block: relax pgmap check in bio_add_page for compatible zone
device pages (bsc#1258210).
- io_uring/timeout: check unused sqe fields (bsc#1258210).
- block: fix zone write plugs refcount handling in
disk_zone_wplug_schedule_bio_work() (bsc#1258210).
- rbd: fix null-ptr-deref when device_add_disk() fails
(bsc#1258210).
- selftests/landlock: Skip stale records in audit_match_record()
(bsc#1258210).
- selftests/landlock: Fix snprintf truncation checks in audit
helpers (bsc#1258210).
- selftests/landlock: Fix format warning for __u64 in net_test
(bsc#1258210).
- selftests/landlock: Drain stale audit records on init
(bsc#1258210).
- landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()
(bsc#1258210).
- selftests/mqueue: Fix incorrectly named file (bsc#1258210).
- sched: Use u64 for bandwidth ratio calculations (bsc#1258210).
- reset: rzv2h-usb2phy: Keep PHY clock enabled for entire device
lifetime (bsc#1258210).
- remoteproc: xlnx: Only access buffer information if IPI is
buffered (bsc#1258210).
- RDMA/mana_ib: Disable RX steering on RSS QP destroy
(bsc#1258210).
- PCI: cadence: Use cdns_pcie_read_sz() for byte or word read
access (bsc#1258210).
- parisc: Drop ip_fast_csum() inline assembly implementation
(bsc#1258210).
- parisc: _llseek syscall is only available for 32-bit userspace
(bsc#1258210).
- nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
(bsc#1258210).
- nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston
OM3SGP4 (bsc#1258210).
- mtd: docg3: fix use-after-free in docg3_release() (bsc#1258210).
- mm/hugetlb: fix early boot crash on parameters without '='
separator (bsc#1258210).
- mm/damon/core: fix damon_call() vs kdamond_fn() exit race
(bsc#1258210).
- mm/alloc_tag: clear codetag for pages allocated before page_ext
initialization (bsc#1258210).
- mfd: stpmic1: Attempt system shutdown twice in case PMIC is
confused (bsc#1258210).
- io_uring/register: fix ring resizing with mixed/large SQEs/CQEs
(bsc#1258210).
- md/raid10: fix deadlock with check operation and nowait requests
(bsc#1258210).
- KVM: selftests: Fix reserved value WRMSR testcase for
multi-feature MSRs (bsc#1258210).
- jbd2: fix deadlock in jbd2_journal_cancel_revoke() (bsc#1258210).
- ipmi:ssif: Clean up kthread on errors (bsc#1258210).
- erofs: fix the out-of-bounds nameoff handling for trailing
dirents (bsc#1258210).
- ALSA: seq_oss: return full count for successful SEQ_FULLSIZE
writes (bsc#1258210).
- ALSA: ctxfi: Add fallback to default RSR for S/PDIF
(bsc#1258210).
- ALSA: aoa: Skip devices with no codecs in i2sbus_resume()
(bsc#1258210).
- ALSA: aoa: i2sbus: fix OF node lifetime handling (bsc#1258210).
- ALSA: aoa: i2sbus: clear stale prepared state (bsc#1258210).
- mm/zsmalloc: copy KMSAN metadata in zs_page_migrate()
(bsc#1258210).
- ext2: reject inodes with zero i_nlink and valid mode in
ext2_iget() (bsc#1258210).
- net: qrtr: ns: Fix use-after-free in driver remove()
(bsc#1258210).
- media: i2c: imx219: Check return value of
devm_gpiod_get_optional() in imx219_probe() (bsc#1258210).
- lib/ts_kmp: fix integer overflow in pattern length calculation
(bsc#1258210).
- PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops
complete (bsc#1258210).
- Revert "ALSA: usb: Increase volume range that triggers a warning"
(bsc#1258210).
- PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
(bsc#1258210).
- crypto: atmel-sha204a - Fix OTP sysfs read and error handling
(bsc#1258210).
- media: mtk-jpeg: fix use-after-free in release path due to
uncancelled work (bsc#1258210).
- net: strparser: fix skb_head leak in strp_abort_strp()
(bsc#1258210).
- net: caif: clear client service pointer on teardown
(bsc#1258210).
- ALSA: control: Validate buf_len before strnlen() in
snd_ctl_elem_init_enum_names() (bsc#1258210).
- media: amphion: Fix race between m2m job_abort and device_run
(bsc#1258210).
- PCI: imx6: Skip waiting for L2/L3 Ready on i.MX6SX (bsc#1258210).
- EDAC/versalnet: Fix device_node leak in mc_probe() (bsc#1258210).
- hwmon: (powerz) Fix missing usb_kill_urb() on signal interrupt
(bsc#1258210).
- of: unittest: fix use-after-free in testdrv_probe()
(bsc#1258210).
- of: unittest: fix use-after-free in of_unittest_changeset()
(bsc#1258210).
- dt-bindings: display: ti, am65x-dss: Fix AM62L DSS reg and
clock constraints (bsc#1258210).
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests
(bsc#1258210).
- crypto: algif_aead - snapshot IV for async AEAD requests
(bsc#1258210).
- mm: call ->free_folio() directly in folio_unmap_invalidate()
(bsc#1258210).
- spi: ch341: fix memory leaks on probe failures (bsc#1258210).
- spi: imx: fix use-after-free on unbind (bsc#1258210).
- thermal: core: Fix thermal zone governor cleanup issues
(bsc#1258210).
- um: drivers: call kernel_strrchr() explicitly in cow_user.c
(bsc#1258210).
- vfio/cdx: Fix NULL pointer dereference in interrupt trigger path
(bsc#1258210).
- vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex
(bsc#1258210).
- vfio/virtio: Convert list_lock from spinlock to mutex
(bsc#1258210).
- vfio: selftests: Fix VLA initialisation in vfio_pci_irq_set()
(bsc#1258210).
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
(bsc#1258210).
- wifi: rtw88: check for PCI upstream bridge existence
(bsc#1258210).
- zram: do not forget to endio for partial discard requests
(bsc#1258210).
- Input: edt-ft5x06 - fix use-after-free in debugfs teardown
(bsc#1258210).
- ocfs2: split transactions in dio completion to avoid credit
exhaustion (bsc#1258210).
- mm: migrate: requeue destination folio on deferred split queue
(bsc#1258210).
- arm64/mm: Enable batched TLB flush in unmap_hotplug_range()
(bsc#1258210).
- firmware: google: framebuffer: Do not mark framebuffer as busy
(bsc#1258210).
- fs: afs: revert mmap_prepare() change (bsc#1258210).
- kbuild: rust: allow `clippy::uninlined_format_args`
(bsc#1258210).
- rust: dma: remove DMA_ATTR_NO_KERNEL_MAPPING from public attrs
(bsc#1258210).
- drm/nouveau: fix nvkm_device leak on aperture removal failure
(bsc#1258210).
- device property: Make modifications of fwnode "flags" thread
safe (bsc#1258210).
- driver core: Don't let a device probe until it's ready
(bsc#1258210).
- ibmasm: fix heap over-read in ibmasm_send_i2o_message()
(bsc#1258210).
- ibmasm: fix OOB reads in command_file_write due to missing
size checks (bsc#1258210).
- misc: ibmasm: fix OOB MMIO read in
ibmasm_handle_mouse_interrupt() (bsc#1258210).
- greybus: gb-beagleplay: fix sleep in atomic context in
hdlc_tx_frames() (bsc#1258210).
- greybus: gb-beagleplay: bound bootloader receive buffering
(bsc#1258210).
- leds: qcom-lpg: Check for array overflow when selecting the
high resolution (bsc#1258210).
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
(bsc#1258210).
- LoongArch: Add spectre boundry for syscall dispatch table
(bsc#1258210).
- ALSA: usb-audio: Evaluate packsize caps at the right place
(bsc#1258210).
- usb: chipidea: core: allow ci_irq_handler() handle both ID
and VBUS change (bsc#1258210).
- usb: chipidea: otg: not wait vbus drop if use role_switch
(bsc#1258210).
- usb: xhci: Make usb_host_endpoint.hcpriv survive
endpoint_disable() (bsc#1258210).
- ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
(bsc#1258210).
- ALSA: usb-audio: Avoid false E-MU sample-rate notifications
(bsc#1258210).
- ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
(bsc#1258210).
- commit 0d3da0e
* Thu Apr 30 2026 rfrohl@suse.com
- Linux 6.18.26 (bsc#1258210).
- Buffer overflow in drivers/xen/sys-hypervisor.c (bsc#1258210).
- xen/privcmd: fix double free via VMA splitting (bsc#1258210).
- commit f326d63
* Mon Apr 27 2026 rfrohl@suse.com
- Update config files for v6.18.25.
- commit 6608d6e
* Mon Apr 27 2026 rfrohl@suse.com
- Linux 6.18.25 (bsc#1258210).
- crypto: authencesn - Fix src offset when decrypting in-place
(bsc#1258210).
- ipv6: add NULL checks for idev in SRv6 paths (bsc#1258210).
- net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU
registers (bsc#1258210).
- drm/amdgpu: replace PASID IDR with XArray (bsc#1258210).
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch
(bsc#1258210).
- crypto: krb5enc - fix async decrypt skipping hash verification
(bsc#1258210).
- scripts: generate_rust_analyzer.py: define scripts (bsc#1258210).
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable
scavenger (bsc#1258210).
- ksmbd: validate owner of durable handle on reconnect
(bsc#1258210).
- arm64: tlb: Allow XZR argument to TLBI ops (bsc#1258210).
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (bsc#1258210).
- arm64: tlb: Introduce __tlbi_sync_s1ish_{kernel,batch}()
for TLB maintenance (bsc#1258210).
- arm64: tlb: Pass the corresponding mm to __tlbi_sync_s1ish()
(bsc#1258210).
- arm64: cputype: Add C1-Pro definitions (bsc#1258210).
- arm64: errata: Work around early CME DVMSync acknowledgement
(bsc#1258210).
- sched/debug: Fix avg_vruntime() usage (bsc#1258210).
- lib/crc: tests: Make crc_kunit test only the enabled CRC variants
(bsc#1258210).
- lib/crc: tests: Add CRC_ENABLE_ALL_FOR_KUNIT (bsc#1258210).
- lib/crc: tests: Add a .kunitconfig file (bsc#1258210).
- kunit: configs: Enable all CRC tests in all_tests.config
(bsc#1258210).
- lib/crypto: tests: Add a .kunitconfig file (bsc#1258210).
- lib/crypto: tests: Introduce CRYPTO_LIB_ENABLE_ALL_FOR_KUNIT
(bsc#1258210).
- kunit: configs: Enable all crypto library tests in
all_tests.config (bsc#1258210).
- lib/crypto: tests: Drop the default to CRYPTO_SELFTESTS
(bsc#1258210).
- scripts/dtc: Remove unused dts_version in dtc-lexer.l
(bsc#1258210).
- fs/ntfs3: validate rec->used in journal-replay file record check
(bsc#1258210).
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt
conditionally (bsc#1258210).
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in
f2fs_write_end_io() (bsc#1258210).
- f2fs: fix to avoid memory leak in f2fs_rename() (bsc#1258210).
- f2fs: fix to avoid uninit-value access in
f2fs_sanity_check_node_footer (bsc#1258210).
- fuse: reject oversized dirents in page cache (bsc#1258210).
- fuse: abort on fatal signal during sync init (bsc#1258210).
- fuse: Check for large folio with SPLICE_F_MOVE (bsc#1258210).
- fuse: quiet down complaints in fuse_conn_limit_write
(bsc#1258210).
- fuse: fuse_dev_ioctl_clone() should wait for device file to
be initialized (bsc#1258210).
- ksmbd: require minimum ACE size in smb_check_perm_dacl()
(bsc#1258210).
- smb: server: fix active_num_conn leak on transport allocation
failure (bsc#1258210).
- smb: server: fix max_connections off-by-one in tcp accept path
(bsc#1258210).
- smb: client: require a full NFS mode SID before reading mode
bits (bsc#1258210).
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO
path (bsc#1258210).
- ksmbd: validate response sizes in ipc_validate_msg()
(bsc#1258210).
- ksmbd: validate num_aces and harden ACE walk in
smb_inherit_dacl() (bsc#1258210).
- ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment
(bsc#1258210).
- ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
(bsc#1258210).
- ksmbd: reset rcount per connection in
ksmbd_conn_wait_idle_sess_id() (bsc#1258210).
- f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
(bsc#1258210).
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (bsc#1258210).
- ALSA: hda/realtek: Add quirk for Legion S7 15IMH (bsc#1258210).
- ALSA: caiaq: take a reference on the USB device in create_card()
(bsc#1258210).
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
(bsc#1258210).
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP
command failed (bsc#1258210).
- crypto: ccp: Don't attempt to copy PDH cert to userspace if
PSP command failed (bsc#1258210).
- crypto: ccp: Don't attempt to copy ID to userspace if PSP
command failed (bsc#1258210).
- rxrpc: Fix missing validation of ticket length in non-XDR key
preparsing (bsc#1258210).
- Rename to
patches.kernel.org/6.18.25-046-writeback-Fix-use-after-free-in-inode_switch_.patch.
- commit 635fb4b
* Wed Apr 22 2026 rfrohl@suse.com
- usb: gadget: f_hid: Add missing error code (git-fixes).
- bcache: fix uninitialized closure object (git-fixes).
- commit 00d43d4
* Wed Apr 22 2026 rfrohl@suse.com
- Linux 6.18.24 (bsc#1258210).
- dmaengine: idxd: Fix lockdep warnings when calling
idxd_device_config() (bsc#1258210).
- RDMA/irdma: Fix double free related to rereg_user_mr
(bsc#1258210).
- ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA
(bsc#1258210).
- ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk
(bsc#1258210).
- ALSA: hda/realtek: add quirk for Lenovo Yoga 7 2-in-1 16AKP10
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC
(bsc#1258210).
- media: rkvdec: reduce stack usage in
rkvdec_init_v4l2_vp9_count_tbl() (bsc#1258210).
- ALSA: asihpi: avoid write overflow check warning (bsc#1258210).
- Bluetooth: hci_sync: annotate data-races around hdev->req_status
(bsc#1258210).
- ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF (bsc#1258210).
- ASoC: SOF: topology: reject invalid vendor array size in token
parser (bsc#1258210).
- can: mcp251x: add error handling for power enable in open and
resume (bsc#1258210).
- ASoC: amd: acp: add ASUS HN7306EA quirk for legacy SDW machine
(bsc#1258210).
- ALSA:usb:qcom: add AUXILIARY_BUS to Kconfig dependencies
(bsc#1258210).
- platform/x86: asus-nb-wmi: add DMI quirk for ASUS ROG Flow
Z13-KJP GZ302EAC (bsc#1258210).
- btrfs: fix zero size inode with non-zero size after log replay
(bsc#1258210).
- platform/x86: hp-wmi: Add support for Omen 16-wf1xxx (8C76)
(bsc#1258210).
- btrfs: tracepoints: get correct superblock from dentry in
event btrfs_sync_file() (bsc#1258210).
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx
(bsc#1258210).
- netfilter: ctnetlink: ensure safe access to master conntrack
(bsc#1258210).
- drm/amdgpu: Handle GPU page faults correctly on non-4K page
systems (bsc#1258210).
- ALSA: hda/realtek: add HP Laptop 15-fd0xxx mute LED quirk
(bsc#1258210).
- netfilter: nft_set_pipapo_avx2: don't return non-matching
entry on expiry (bsc#1258210).
- ALSA: hda/realtek: add quirk for Framework F111:000F
(bsc#1258210).
- wifi: wl1251: validate packet IDs before indexing tx_frames
(bsc#1258210).
- ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for Samsung Book2 Pro 360 (NP950QED)
(bsc#1258210).
- ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Slim 7 14AKP10
(bsc#1258210).
- drm/amdkfd: Fix queue preemption/eviction failures by aligning
control stack size to GPU page size (bsc#1258210).
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
(bsc#1258210).
- ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IMH9
(bsc#1258210).
- pinctrl: intel: Fix the revision for new features (1kOhm PD,
HW debouncer) (bsc#1258210).
- platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug
(bsc#1258210).
- HID: Intel-thc-hid: Intel-quickspi: Add NVL Device IDs
(bsc#1258210).
- HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10
(bsc#1258210).
- HID: roccat: fix use-after-free in roccat_report_event
(bsc#1258210).
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585
(bsc#1258210).
- wifi: brcmfmac: validate bsscfg indices in IF events
(bsc#1258210).
- net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules
(bsc#1258210).
- x86: shadow stacks: proper error handling for mmap lock
(bsc#1258210).
- ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B,
LEFT_J (bsc#1258210).
- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
matching (bsc#1258210).
- arm64: dts: qcom: hamoa/x1: fix idle exit latency (bsc#1258210).
- arm64: dts: qcom: qcm6490-idp: Fix WCD9370 reset GPIO polarity
(bsc#1258210).
- arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency
(bsc#1258210).
- arm64: dts: imx93-9x9-qsb: change usdhc tuning step for eMMC
and SD (bsc#1258210).
- arm64: dts: imx91-tqma9131: improve eMMC pad configuration
(bsc#1258210).
- arm64: dts: imx93-tqma9352: improve eMMC pad configuration
(bsc#1258210).
- arm64: dts: qcom: monaco: Fix UART10 pinconf (bsc#1258210).
- soc: qcom: pd-mapper: Fix element length in
servreg_loc_pfr_req_ei (bsc#1258210).
- tools/power/turbostat: Fix microcode patch level output for
AMD/Hygon (bsc#1258210).
- tools/power turbostat: Fix --show/--hide for individual cpuidle
counters (bsc#1258210).
- arm64: dts: qcom: monaco: Reserve full Gunyah metadata region
(bsc#1258210).
- ARM: dts: microchip: sam9x7: fix gpio-lines count for pioB
(bsc#1258210).
- PCI: hv: Set default NUMA node to 0 for devices without affinity
info (bsc#1258210).
- HID: amd_sfh: don't log error when device discovery fails with
- EOPNOTSUPP (bsc#1258210).
- xfrm: account XFRMA_IF_ID in aevent size calculation
(bsc#1258210).
- dma-mapping: add DMA_ATTR_CPU_CACHE_CLEAN (bsc#1258210).
- dma-debug: track cache clean flag in entries (bsc#1258210).
- dma-debug: suppress cacheline overlap warning when arch has
no DMA alignment requirement (bsc#1258210).
- drm/vc4: Release runtime PM reference after binding V3D
(bsc#1258210).
- drm/vc4: Fix memory leak of BO array in hang state (bsc#1258210).
- drm/vc4: Fix a memory leak in hang state error path
(bsc#1258210).
- drm/vc4: Protect madv read in vc4_gem_object_mmap() with
madv_lock (bsc#1258210).
- eventpoll: defer struct eventpoll free to RCU grace period
(bsc#1258210).
- net: sched: act_csum: validate nested VLAN headers (bsc#1258210).
- net: lapbether: handle NETDEV_PRE_TYPE_CHANGE (bsc#1258210).
- net: airoha: Fix memory leak in airoha_qdma_rx_process()
(bsc#1258210).
- ipv6: ioam: fix potential NULL dereferences in
__ioam6_fill_trace_data() (bsc#1258210).
- bridge: guard local VLAN-0 FDB helpers against NULL vlan group
(bsc#1258210).
- rtnetlink: add missing netlink_ns_capable() check for peer netns
(bsc#1258210).
- ipv4: nexthop: avoid duplicate NHA_HW_STATS_ENABLE on nexthop
group dump (bsc#1258210).
- ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
(bsc#1258210).
- ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
(bsc#1258210).
- net: increase IP_TUNNEL_RECURSION_LIMIT to 5 (bsc#1258210).
- nfc: s3fwrn5: allocate rx skb before consuming bytes
(bsc#1258210).
- net: stmmac: Fix PTP ref clock for Tegra234 (bsc#1258210).
- dt-bindings: net: Fix Tegra234 MGBE PTP clock (bsc#1258210).
- tracing/probe: reject non-closed empty immediate strings
(bsc#1258210).
- ice: ptp: don't WARN when controlling PF is unavailable
(bsc#1258210).
- ixgbe: stop re-reading flash on every get_drvinfo for e610
(bsc#1258210).
- ixgbevf: add missing negotiate_features op to Hyper-V ops table
(bsc#1258210).
- e1000: check return value of e1000_read_eeprom (bsc#1258210).
- xsk: tighten UMEM headroom validation to account for tailroom
and min frame (bsc#1258210).
- xsk: respect tailroom for ZC setups (bsc#1258210).
- xsk: fix XDP_UMEM_SG_FLAG issues (bsc#1258210).
- xsk: validate MTU against usable frame size on bind
(bsc#1258210).
- xfrm: Wait for RCU readers during policy netns exit
(bsc#1258210).
- xfrm: fix refcount leak in xfrm_migrate_policy_find
(bsc#1258210).
- xfrm_user: fix info leak in build_mapping() (bsc#1258210).
- ASoC: Intel: avs: Fix memory leak in
avs_register_i2s_test_boards() (bsc#1258210).
- drm/xe: Fix bug in idledly unit conversion (bsc#1258210).
- selftests: net: bridge_vlan_mcast: wait for h1 before querier
check (bsc#1258210).
- ipvs: fix NULL deref in ip_vs_add_service error path
(bsc#1258210).
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE
terminator (bsc#1258210).
- netfilter: xt_multiport: validate range encoding in checkentry
(bsc#1258210).
- netfilter: ip6t_eui64: reject invalid MAC header for all packets
(bsc#1258210).
- netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC ->
GFP_KERNEL_ACCOUNT allocation (bsc#1258210).
- netfilter: nfnetlink_queue: make hash table per queue
(bsc#1258210).
- ASoC: SDCA: Fix overwritten var within for loop (bsc#1258210).
- ASoC: amd: acp: update DMI quirk and add ACP DMIC for Lenovo
platforms (bsc#1258210).
- net: mdio: realtek-rtl9300: use scoped device_for_each_child_node
loop (bsc#1258210).
- net: ioam6: fix OOB and missing lock (bsc#1258210).
- net: txgbe: leave space for null terminators on property_entry
(bsc#1258210).
- af_unix: read UNIX_DIAG_VFS data under unix_state_lock
(bsc#1258210).
- devlink: Fix incorrect skb socket family dumping (bsc#1258210).
- net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
(bsc#1258210).
- net: ipa: fix event ring index not programmed for IPA v5.0+
(bsc#1258210).
- l2tp: Drop large packets with UDP encap (bsc#1258210).
- gpio: tegra: fix irq_release_resources calling enable instead
of disable (bsc#1258210).
- crypto: af_alg - limit RX SG extraction by receive buffer budget
(bsc#1258210).
- perf/x86/intel/uncore: Skip discovery table for offline dies
(bsc#1258210).
- sched/deadline: Use revised wakeup rule for dl_server
(bsc#1258210).
- crypto: af_alg - Fix page reassignment overflow in
af_alg_pull_tsgl (bsc#1258210).
- crypto: algif_aead - Fix minimum RX size check for decryption
(bsc#1258210).
- netfilter: conntrack: add missing netlink policy validations
(bsc#1258210).
- nfc: llcp: add missing return after LLCP_CLOSED checks
(bsc#1258210).
- can: raw: fix ro->uniq use-after-free in raw_rcv() (bsc#1258210).
- i2c: s3c24xx: check the size of the SMBUS message before using
it (bsc#1258210).
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
(bsc#1258210).
- HID: alps: fix NULL pointer dereference in alps_raw_event()
(bsc#1258210).
- HID: core: clamp report_size in s32ton() to avoid undefined
shift (bsc#1258210).
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
(bsc#1258210).
- NFC: digital: Bounds check NFC-A cascade depth in SDD response
handler (bsc#1258210).
- drm/vc4: platform_get_irq_byname() returns an int (bsc#1258210).
- ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0
(bsc#1258210).
- ALSA: fireworks: bound device-supplied status before string
array lookup (bsc#1258210).
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
(bsc#1258210).
- usb: gadget: f_ncm: validate minimum block_len in
ncm_unwrap_ntb() (bsc#1258210).
- usb: gadget: f_phonet: fix skb frags[] overflow in
pn_rx_complete() (bsc#1258210).
- usb: gadget: renesas_usb3: validate endpoint index in standard
request handlers (bsc#1258210).
- smb: client: fix off-by-8 bounds check in check_wsl_eas()
(bsc#1258210).
- smb: client: fix OOB reads parsing symlink error response
(bsc#1258210).
- ksmbd: validate EaNameLength in smb2_get_ea() (bsc#1258210).
- ksmbd: require 3 sub-authorities before reading sub_auth[2]
(bsc#1258210).
- ksmbd: fix mechToken leak when SPNEGO decode fails after token
alloc (bsc#1258210).
- smb: client: avoid double-free in smbd_free_send_io() after
smbd_send_batch_flush() (bsc#1258210).
- smb: server: avoid double-free in smb_direct_free_sendmsg
after smb_direct_flush_send_list() (bsc#1258210).
- usbip: validate number_of_packets in usbip_pack_ret_submit()
(bsc#1258210).
- usb: typec: fusb302: Switch to threaded IRQ handler
(bsc#1258210).
- usb: storage: Expand range of matched versions for VL817 quirks
entry (bsc#1258210).
- USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC
touchscreen (bsc#1258210).
- usb: gadget: f_hid: don't call cdev_init while cdev in use
(bsc#1258210).
- usb: port: add delay after usb_hub_set_port_power()
(bsc#1258210).
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
(bsc#1258210).
- scripts: generate_rust_analyzer.py: avoid FD leak (bsc#1258210).
- wifi: rtw88: fix device leak on probe failure (bsc#1258210).
- staging: sm750fb: fix division by zero in ps_to_hz()
(bsc#1258210).
- USB: serial: option: add Telit Cinterion FN990A MBIM composition
(bsc#1258210).
- Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param
updates race (bsc#1258210).
- ALSA: ctxfi: Limit PTP to a single page (bsc#1258210).
- dcache: Limit the minimal number of bucket to two (bsc#1258210).
- arm64: mm: Handle invalid large leaf mappings correctly
(bsc#1258210).
- media: vidtv: fix NULL pointer dereference in
vidtv_channel_pmt_match_sections (bsc#1258210).
- ocfs2: fix possible deadlock between unlink and dio_end_io_write
(bsc#1258210).
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
(bsc#1258210).
- ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1258210).
- PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in
epf_ntb_epc_cleanup (bsc#1258210).
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
(bsc#1258210).
- KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in
SEV-ES migrate test (bsc#1258210).
- KVM: SEV: Reject attempts to sync VMSA of an
already-launched/encrypted vCPU (bsc#1258210).
- KVM: SEV: Protect *all* of sev_mem_enc_register_region()
with kvm->lock (bsc#1258210).
- KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being
created (bsc#1258210).
- KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch
finish (bsc#1258210).
- KVM: SEV: Drop WARN on large size for
KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1258210).
- selftests/bpf: Test refinement of single-value tnum
(bsc#1258210).
- KVM: Remove subtle "struct kvm_stats_desc" pseudo-overlay
(bsc#1258210).
- KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with
VLAs (bsc#1258210).
- ocfs2: add inline inode consistency check to
ocfs2_validate_inode_block() (bsc#1258210).
- ocfs2: validate inline data i_size during inode read
(bsc#1258210).
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
(bsc#1258210).
- checkpatch: add support for Assisted-by tag (bsc#1258210).
- x86-64: rename misleadingly named '__copy_user_nocache()'
function (bsc#1258210).
- x86: rename and clean up __copy_from_user_inatomic_nocache()
(bsc#1258210).
- x86-64/arm64/powerpc: clean up and rename
__copy_from_user_flushcache (bsc#1258210).
- KVM: x86: Use scratch field in MMIO fragment to hold small
write values (bsc#1258210).
- ASoC: qcom: q6apm: move component registration to unmanaged
version (bsc#1258210).
- mm/kasan: fix double free for kasan pXds (bsc#1258210).
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
(bsc#1258210).
- media: vidtv: fix nfeeds state corruption on start_streaming
failure (bsc#1258210).
- media: mediatek: vcodec: fix use-after-free in encoder release
path (bsc#1258210).
- media: em28xx: fix use-after-free in em28xx_v4l2_open()
(bsc#1258210).
- hwmon: (powerz) Fix use-after-free on USB disconnect
(bsc#1258210).
- ALSA: 6fire: fix use-after-free on disconnect (bsc#1258210).
- bcache: fix cached_dev.sb_bio use-after-free and crash
(bsc#1258210).
- wireguard: device: use exit_rtnl callback instead of manual
rtnl_lock in pre_exit (bsc#1258210).
- media: as102: fix to not free memory after the device is
registered in as102_usb_probe() (bsc#1258210).
- nilfs2: fix NULL i_assoc_inode dereference in
nilfs_mdt_save_to_shadow_map (bsc#1258210).
- media: vidtv: fix pass-by-value structs causing MSAN warnings
(bsc#1258210).
- media: hackrf: fix to not free memory after the device is
registered in hackrf_probe() (bsc#1258210).
- mm/userfaultfd: fix hugetlb fault mutex hash calculation
(bsc#1258210).
- dma-debug: Allow multiple invocations of overlapping entries
(bsc#1258210).
- dma-mapping: handle DMA_ATTR_CPU_CACHE_CLEAN in trace output
(bsc#1258210).
- Refresh patches.suse/vfs-add-super_operations-get_inode_dev.
- commit 33a88ba
* Sat Apr 18 2026 rfrohl@suse.com
- Linux 6.18.23 (bsc#1258210).
- x86/CPU: Fix FPDSS on Zen1 (bsc#1258210).
- net: skb: fix cross-cache free of KFENCE-allocated skb head
(bsc#1258210).
- rxrpc: proc: size address buffers for %pISpc output
(bsc#1258210).
- rxrpc: only handle RESPONSE during service challenge
(bsc#1258210).
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
(bsc#1258210).
- rxrpc: Fix leak of rxgk context in rxgk_verify_response()
(bsc#1258210).
- rxrpc: Fix integer overflow in rxgk_verify_response()
(bsc#1258210).
- rxrpc: Fix missing error checks for rxkad encryption/decryption
failure (bsc#1258210).
- rxrpc: Fix key/keyring checks in
setsockopt(RXRPC_SECURITY_KEY/KEYRING) (bsc#1258210).
- rxrpc: fix reference count leak in rxrpc_server_keyring()
(bsc#1258210).
- rxrpc: fix oversized RESPONSE authenticator length check
(bsc#1258210).
- rxrpc: fix RESPONSE authenticator parser OOB read (bsc#1258210).
- rxrpc: reject undecryptable rxkad response tickets (bsc#1258210).
- rxrpc: Only put the call ref if one was acquired (bsc#1258210).
- rxrpc: Fix to request an ack if window is limited (bsc#1258210).
- rxrpc: Fix key reference count leak from call->key (bsc#1258210).
- rxrpc: Fix rack timer warning to report unexpected mode
(bsc#1258210).
- rxrpc: Fix use of wrong skb when comparing queued RESP challenge
serial (bsc#1258210).
- rxrpc: Fix RxGK token loading to check bounds (bsc#1258210).
- rxrpc: Fix call removal to use RCU safe deletion (bsc#1258210).
- rxrpc: Fix anonymous key handling (bsc#1258210).
- rxrpc: Fix key parsing memleak (bsc#1258210).
- rxrpc: Fix key quota calculation for multitoken keys
(bsc#1258210).
- net: lan966x: fix use-after-free and leak in
lan966x_fdma_reload() (bsc#1258210).
- net: lan966x: fix page pool leak in error paths (bsc#1258210).
- net: lan966x: fix page_pool error handling in
lan966x_fdma_rx_alloc_page_pool() (bsc#1258210).
- idpf: set the payload size before calling the async handler
(bsc#1258210).
- idpf: improve locking around idpf_vc_xn_push_free()
(bsc#1258210).
- idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC
handling (bsc#1258210).
- mm: filemap: fix nr_pages calculation overflow in
filemap_map_pages() (bsc#1258210).
- net: stmmac: fix integer underflow in chain mode (bsc#1258210).
- net: qualcomm: qca_uart: report the consumed byte on RX skb
allocation failure (bsc#1258210).
- mmc: vub300: fix use-after-free on disconnect (bsc#1258210).
- mmc: vub300: fix NULL-deref on disconnect (bsc#1258210).
- mm/damon/stat: deallocate damon_call() failure leaking damon_ctx
(bsc#1258210).
- mm/damon/sysfs: dealloc repeat_call_control if damon_call()
fails (bsc#1258210).
- mm/memory_hotplug: maintain N_NORMAL_MEMORY during hotplug
(bsc#1258210).
- igb: remove napi_synchronize() in igb_down() (bsc#1258210).
- pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
(bsc#1258210).
- net/mlx5: Update the list of the PCI supported devices
(bsc#1258210).
- drm/i915/psr: Do not use pipe_src as borders for SU area
(bsc#1258210).
- drm/i915/gt: fix refcount underflow in
intel_engine_park_heartbeat (bsc#1258210).
- batman-adv: hold claim backbone gateways by reference
(bsc#1258210).
- net: altera-tse: fix skb leak on DMA mapping error in
tse_start_xmit() (bsc#1258210).
- net/tls: fix use-after-free in -EBUSY error path of
tls_do_encryption (bsc#1258210).
- EDAC/mc: Fix error path ordering in edac_mc_alloc()
(bsc#1258210).
- X.509: Fix out-of-bounds access when parsing extensions
(bsc#1258210).
- batman-adv: reject oversized global TT response buffers
(bsc#1258210).
- nfc: pn533: allocate rx skb before consuming bytes (bsc#1258210).
- arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges
(bsc#1258210).
- arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity
(bsc#1258210).
- arm64: dts: renesas: sparrow-hawk: Reserve first 128 MiB of DRAM
(bsc#1258210).
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to
0.85V (bsc#1258210).
- Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"
(bsc#1258210).
- Revert "arm64: dts: rockchip: Further describe the WiFi for
the Pinebook Pro" (bsc#1258210).
- platform/x86/intel-uncore-freq: Handle autonomous UFS status
bit (bsc#1258210).
- platform/x86: ISST: Reset core count to 0 (bsc#1258210).
- wifi: brcmsmac: Fix dma_free_coherent() size (bsc#1258210).
- tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
(bsc#1258210).
- xfrm: hold dev ref until after transport_finish NF_HOOK
(bsc#1258210).
- xfrm: clear trailing padding in build_polexpire() (bsc#1258210).
- modpost: Declare extra_warn with unused attribute (bsc#1258210).
- workqueue: Add pool_workqueue to pending_pwqs list when
unplugging multiple inactive works (bsc#1258210).
- firmware: thead: Fix buffer overflow and use standard endian
macros (bsc#1258210).
- netfilter: nft_ct: fix use-after-free in timeout object destroy
(bsc#1258210).
- i2c: imx: zero-initialize dma_slave_config for eDMA
(bsc#1258210).
- af_unix: Give up GC if MSG_PEEK intervened (bsc#1258210).
- af_unix: Simplify GC state (bsc#1258210).
- af_unix: Count cyclic SCC (bsc#1258210).
- btrfs: fix incorrect return value after changing leaf in
lookup_extent_data_ref() (bsc#1258210).
- btrfs: remove pointless out labels from extent-tree.c
(bsc#1258210).
- MIPS: mm: Rewrite TLB uniquification for the hidden bit feature
(bsc#1258210).
- MIPS: mm: Suppress TLB uniquification on EHINV hardware
(bsc#1258210).
- MIPS: Always record SEGBITS in cpu_data.vmbits (bsc#1258210).
- Input: uinput - take event lock when submitting FF request
"event" (bsc#1258210).
- Input: uinput - fix circular locking dependency with ff-core
(bsc#1258210).
- seg6: separate dst_cache for input and output paths in seg6
lwtunnel (bsc#1258210).
- mptcp: fix slab-use-after-free in __inet_lookup_established
(bsc#1258210).
- Revert "mptcp: add needs_id for netlink appending addr"
(bsc#1258210).
- Revert "ALSA: hda/realtek: Add quirk for Gigabyte Technology
to fix headphone" (bsc#1258210).
- net: rfkill: prevent unlimited numbers of rfkill events from
being created (bsc#1258210).
- xfrm_user: fix info leak in build_report() (bsc#1258210).
- wifi: rt2x00usb: fix devres lifetime (bsc#1258210).
- usb: typec: ucsi: skip connector validation before init
(bsc#1258210).
- commit a4ee290
* Fri Apr 17 2026 rfrohl@suse.com
- writeback: Fix use after free in inode_switch_wbs_work_fn()
(bsc#1259701 git-fixes).
- commit 0c4313e
* Thu Apr 16 2026 msuchanek@suse.de
- check-for-config-changes: Exclude CC_MS_EXTENSIONS
- commit c04d7e7
* Mon Apr 13 2026 msuchanek@suse.de
- check-for-config-changes: Exclude HAVE_CFI_ICALL_NORMALIZE_INTEGERS{,_RUSTC}
- commit ba5597d
* Sat Apr 11 2026 rfrohl@suse.com
- Linux 6.18.22 (bsc#1258210).
- sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
(bsc#1258210).
- sched_ext: Refactor do_enqueue_task() local and global DSQ paths
(bsc#1258210).
- mm/memory: fix PMD/PUD checks in follow_pfnmap_start()
(bsc#1258210).
- mm: replace READ_ONCE() with standard page table accessors
(bsc#1258210).
- scsi: target: tcm_loop: Drain commands in target_reset handler
(bsc#1258210).
- scsi: target: file: Use kzalloc_flex for aio_cmd (bsc#1258210).
- net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
(bsc#1258210).
- net: mana: fix use-after-free in add_adev() error path
(bsc#1258210).
- drm/amd/display: Fix DCE LVDS handling (bsc#1258210).
- drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid
for smu v13 (bsc#1258210).
- wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
(bsc#1258210).
- kallsyms: prevent module removal when printing module name
and buildid (bsc#1258210).
- kallsyms: cleanup code for appending the module buildid
(bsc#1258210).
- kallsyms: clean up modname and modbuildid initialization in
kallsyms_lookup_buildid() (bsc#1258210).
- kallsyms: clean up @namebuf initialization in
kallsyms_lookup_buildid() (bsc#1258210).
- usb: gadget: f_uac1_legacy: validate control request size
(bsc#1258210).
- usb: gadget: f_hid: move list and spinlock inits from bind to
alloc (bsc#1258210).
- usb: gadget: f_rndis: Fix net_device lifecycle with device_move
(bsc#1258210).
- usb: gadget: f_subset: Fix net_device lifecycle with device_move
(bsc#1258210).
- usb: gadget: f_eem: Fix net_device lifecycle with device_move
(bsc#1258210).
- usb: gadget: f_ecm: Fix net_device lifecycle with device_move
(bsc#1258210).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
(bsc#1258210).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
(bsc#1258210).
- usb: gadget: uvc: fix NULL pointer dereference during unbind
race (bsc#1258210).
- usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
(bsc#1258210).
- usb: gadget: u_ether: Fix race between gether_disconnect and
eth_stop (bsc#1258210).
- ice: Fix memory leak in ice_set_ringparam() (bsc#1258210).
- HID: appletb-kbd: add .resume method in PM (bsc#1258210).
- usb: typec: ucsi: validate connector number in
ucsi_notify_common() (bsc#1258210).
- usb: gadget: dummy_hcd: fix premature URB completion when ZLP
follows partial transfer (bsc#1258210).
- USB: dummy-hcd: Fix interrupt synchronization error
(bsc#1258210).
- USB: dummy-hcd: Fix locking/synchronization error (bsc#1258210).
- thunderbolt: Fix property read in nhi_wake_supported()
(bsc#1258210).
- usb: typec: thunderbolt: Set enter_vdo during initialization
(bsc#1258210).
- misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe
(bsc#1258210).
- misc: fastrpc: possible double-free of cctx->remote_heap
(bsc#1258210).
- thermal: core: Fix thermal zone device registration error path
(bsc#1258210).
- thermal: core: Address thermal zone removal races with resume
(bsc#1258210).
- gpio: Fix resource leaks on errors in
gpiochip_add_data_with_key() (bsc#1258210).
- gpio: mxc: map Both Edge pad wakeup to Rising Edge
(bsc#1258210).
- sched_ext: Fix is_bpf_migration_disabled() false negative on
non-PREEMPT_RCU (bsc#1258210).
- cpufreq: governor: fix double free in
cpufreq_dbs_governor_init() error path (bsc#1258210).
- virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
(bsc#1258210).
- net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled
(bsc#1258210).
- net: ftgmac100: fix ring allocation unwind on open failure
(bsc#1258210).
- vxlan: validate ND option lengths in vxlan_na_create
(bsc#1258210).
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (bsc#1258210).
- counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev
member (bsc#1258210).
- counter: rz-mtu3-cnt: prevent counter from being toggled
multiple times (bsc#1258210).
- vt: resize saved unicode buffer on alt screen exit after resize
(bsc#1258210).
- vt: discard stale unicode buffer on alt screen exit after resize
(bsc#1258210).
- gpib: Fix fluke driver s390 compile issue (bsc#1258210).
- netfilter: ipset: drop logically empty buckets in mtype_del
(bsc#1258210).
- nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy
(bsc#1258210).
- nvmem: imx: assign nvmem_cell_info::raw_len (bsc#1258210).
- s390/cpum_sf: Cap sampling rate to prevent lsctl exception
(bsc#1258210).
- s390/zcrypt: Fix memory leak with CCA cards used as accelerator
(bsc#1258210).
- spi: cadence-qspi: Fix exec_mem_op error handling (bsc#1258210).
- dt-bindings: connector: add pd-disable dependency (bsc#1258210).
- firmware: microchip: fail auto-update probe if no flash found
(bsc#1258210).
- comedi: me4000: Fix potential overrun of firmware buffer
(bsc#1258210).
- comedi: me_daq: Fix potential overrun of firmware buffer
(bsc#1258210).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
(bsc#1258210).
- comedi: Reinit dev->spinlock between attachments to low-level
drivers (bsc#1258210).
- comedi: dt2815: add hardware detection to prevent crash
(bsc#1258210).
- cdc-acm: new quirk for EPSON HMD (bsc#1258210).
- bridge: br_nd_send: validate ND option lengths (bsc#1258210).
- ASoC: qcom: sc7280: make use of common helpers (bsc#1258210).
- io_uring: protect remaining lockless ctx->rings accesses with
RCU (bsc#1258210).
- usb: core: use dedicated spinlock for offload state
(bsc#1258210).
- usb: cdns3: gadget: fix state inconsistency on gadget init
failure (bsc#1258210).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
(bsc#1258210).
- usb: core: phy: avoid double use of 'usb3-phy' (bsc#1258210).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
dwc2_hsotg_udc_stop() (bsc#1258210).
- usb: ehci-brcm: fix sleep during atomic (bsc#1258210).
- usb: host: xhci-sideband: delegate offload_usage tracking to
class drivers (bsc#1258210).
- usb: misc: usbio: Fix URB memory leak on submit failure
(bsc#1258210).
- usb: usbtmc: Flush anchored URBs in usbtmc_release
(bsc#1258210).
- usb: ulpi: fix double free in ulpi_register_interface() error
path (bsc#1258210).
- usb: quirks: add DELAY_INIT quirk for another Silicon Motion
flash drive (bsc#1258210).
- gpib: lpvo_usb: fix memory leak on disconnect (bsc#1258210).
- mei: me: reduce the scope on unexpected reset (bsc#1258210).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq()
(bsc#1258210).
- iio: gyro: mpu3050: Move iio_device_register() to correct
location (bsc#1258210).
- iio: gyro: mpu3050: Fix irq resource leak (bsc#1258210).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
(bsc#1258210).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
gyroscope only (bsc#1258210).
- iio: imu: bmi160: Remove potential undefined behavior in
bmi160_config_pin() (bsc#1258210).
- iio: light: veml6070: fix veml6070_read() return value
(bsc#1258210).
- iio: light: vcnl4035: fix scan buffer on big-endian
(bsc#1258210).
- iio: imu: adis16550: fix swapped gyro/accel filter functions
(bsc#1258210).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
(bsc#1258210).
- iio: accel: adxl313: add missing error check in predisable
(bsc#1258210).
- iio: accel: adxl380: fix FIFO watermark bit 8 always written
as 0 (bsc#1258210).
- iio: accel: fix ADXL355 temperature signature value
(bsc#1258210).
- iio: adc: aspeed: clear reference voltage bits before
configuring vref (bsc#1258210).
- iio: adc: ade9000: move mutex init before IRQ registration
(bsc#1258210).
- iio: adc: ade9000: fix wrong register in CALIBBIAS case for
active power (bsc#1258210).
- iio: adc: ade9000: fix wrong return type in streaming push
(bsc#1258210).
- iio: adc: ti-ads7950: do not clobber gpio state in
ti_ads7950_get() (bsc#1258210).
- iio: adc: ti-ads7950: normalize return value of gpio_get
(bsc#1258210).
- Input: xpad - add support for Razer Wolverine V3 Pro
(bsc#1258210).
- Input: xpad - add support for BETOP BTP-KP50B/C controller's
wireless mode (bsc#1258210).
- Input: bcm5974 - recover from failed mode switch (bsc#1258210).
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to
i8042 quirk table (bsc#1258210).
- Input: synaptics-rmi4 - fix a locking bug in an error path
(bsc#1258210).
- USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam
(bsc#1258210).
- USB: serial: option: add support for Rolling Wireless RW135R-GL
(bsc#1258210).
- USB: serial: io_edgeport: add support for Blackbox IC135A
(bsc#1258210).
- drm/amdgpu/pm: drop SMU driver if version not matched messages
(bsc#1258210).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
(bsc#1258210).
- drm/amdgpu: validate doorbell_offset in user queue creation
(bsc#1258210).
- drm/amdgpu: Fix wait after reset sequence in S4 (bsc#1258210).
- drm/i915/dp: Use crtc_state->enhanced_framing properly on
ivb/hsw CPU eDP (bsc#1258210).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
command mode (bsc#1258210).
- drm/ast: dp501: Fix initialization of SCU2C (bsc#1258210).
- iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD
(bsc#1258210).
- iio: adc: ti-ads1119: Reinit completion before
wait_for_completion_timeout() (bsc#1258210).
- iio: adc: ti-ads1119: Fix unbalanced pm reference count in
ds1119_single_conversion() (bsc#1258210).
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
(bsc#1258210).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
(bsc#1258210).
- iio: orientation: hid-sensor-rotation: add timestamp hack to
not break userspace (bsc#1258210).
- iio: orientation: hid-sensor-rotation: fix quaternion alignment
(bsc#1258210).
- iio: add IIO_DECLARE_QUATERNION() macro (bsc#1258210).
- gpib: fix use-after-free in IO ioctl handlers (bsc#1258210).
- drm/amdgpu: fix the idr allocation flags (bsc#1258210).
- x86/kexec: Disable KCOV instrumentation after load_segments()
(bsc#1258210).
- mips: mm: Allocate tlb_vpn array atomically (bsc#1258210).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
(bsc#1258210).
- MIPS: Fix the GCC version check for `__multi3' workaround
(bsc#1258210).
- MIPS: SiByte: Bring back cache initialisation (bsc#1258210).
- ksmbd: fix OOB write in QUERY_INFO for compound requests
(bsc#1258210).
- Bluetooth: hci_sync: fix stack buffer overflow in
hci_le_big_create_sync (bsc#1258210).
- Bluetooth: SMP: force responder MITM requirements before
building the pairing response (bsc#1258210).
- Bluetooth: SMP: derive legacy responder STK authentication
from MITM state (bsc#1258210).
- io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()
(bsc#1258210).
- ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15
(bsc#1258210).
- ALSA: ctxfi: Fix missing SPDIFI1 index handling (bsc#1258210).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
(bsc#1258210).
- lib/crypto: chacha: Zeroize permuted_state before it leaves
scope (bsc#1258210).
- sched_ext: Fix inconsistent NUMA node lookup in
scx_select_cpu_dfl() (bsc#1258210).
- drm/amd/display: Fix NULL pointer dereference in
dcn401_init_hw() (bsc#1258210).
- USB: serial: option: add MeiG Smart SRM825WN (bsc#1258210).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
iwl_mvm_nd_match_info_handler() (bsc#1258210).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
calculation (bsc#1258210).
- rust_binder: use AssertSync for BINDER_VM_OPS (bsc#1258210).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
(bsc#1258210).
- ACPI: RIMT: Add dependency between iommu and devices
(bsc#1258210).
- riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set
(bsc#1258210).
- riscv: kgdb: fix several debug register assignment bugs
(bsc#1258210).
- perf/x86: Fix potential bad container_of in intel_pmu_hw_config
(bsc#1258210).
- sched/fair: Fix zero_vruntime tracking fix (bsc#1258210).
- mips: ralink: update CPU clock index (bsc#1258210).
- hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI
(bsc#1258210).
- drm/sysfb: Fix efidrm error handling and memory type mismatch
(bsc#1258210).
- hwmon: (occ) Fix missing newline in occ_show_extended()
(bsc#1258210).
- spi: amlogic: spifc-a4: unregister ECC engine on probe failure
and remove() callback (bsc#1258210).
- hwmon: (tps53679) Fix device ID comparison and printing in
tps53676_identify() (bsc#1258210).
- drm/xe/pxp: Clear restart flag in pxp_start after jumping back
(bsc#1258210).
- drm/xe/pxp: Remove incorrect handling of impossible state
during suspend (bsc#1258210).
- drm/xe/pxp: Clean up termination status on failure
(bsc#1258210).
- spi: stm32-ospi: Fix reset control leak on probe error
(bsc#1258210).
- spi: stm32-ospi: Fix resource leak in remove() callback
(bsc#1258210).
- dt-bindings: gpio: fix microchip #interrupt-cells (bsc#1258210).
- hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")
(bsc#1258210).
- hwmon: (pxe1610) Check return value of page-select write in
probe (bsc#1258210).
- hwmon: (tps53679) Fix array access with zero-length block read
(bsc#1258210).
- io_uring/rsrc: reject zero-length fixed buffer import
(bsc#1258210).
- accel/qaic: Handle DBC deactivation if the owner went away
(bsc#1258210).
- gpiolib: clear requested flag if line is invalid (bsc#1258210).
- gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio() (bsc#1258210).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
(bsc#1258210).
- Revert "drm: Fix use-after-free on framebuffers and property
blobs when calling drm_dev_unplug" (bsc#1258210).
- bpf: Reject sleepable kprobe_multi programs at attach time
(bsc#1258210).
- bpf: reject direct access to nullable PTR_TO_BUF pointers
(bsc#1258210).
- eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 (bsc#1258210).
- ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1258210).
- net: hsr: fix VLAN add unwind on slave errors (bsc#1258210).
- net/sched: cls_flow: fix NULL pointer dereference on shared
blocks (bsc#1258210).
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks
(bsc#1258210).
- net/x25: Fix overflow when accumulating packets (bsc#1258210).
- net/x25: Fix potential double free of skb (bsc#1258210).
- bnxt_en: Restore default stat ctxs for ULP when resource is
available (bsc#1258210).
- net/mlx5: Fix switchdev mode rollback in case of failure
(bsc#1258210).
- net/mlx5: Avoid "No data available" when FW version queries fail
(bsc#1258210).
- net/mlx5: lag: Check for LAG device before creating debugfs
(bsc#1258210).
- net: macb: properly unregister fixed rate clocks (bsc#1258210).
- net: macb: fix clk handling on PCI glue driver removal
(bsc#1258210).
- net/sched: sch_netem: fix out-of-bounds access in packet
corruption (bsc#1258210).
- bpf: sockmap: Fix use-after-free of sk->sk_socket in
sk_psock_verdict_data_ready() (bsc#1258210).
- rds: ib: reject FRMR registration before IB connection is
established (bsc#1258210).
- Bluetooth: MGMT: validate mesh send advertising payload length
(bsc#1258210).
- Bluetooth: hci_event: fix potential UAF in
hci_le_remote_conn_param_req_evt (bsc#1258210).
- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
(bsc#1258210).
- Bluetooth: MGMT: validate LTK enc_size on load (bsc#1258210).
- Bluetooth: hci_h4: Fix race during initialization (bsc#1258210).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
(bsc#1258210).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
immediate (bsc#1258210).
- netfilter: nf_tables: reject immediate NF_QUEUE verdict
(bsc#1258210).
- netfilter: x_tables: restrict xt_check_match/xt_check_target
extensions for NFPROTO_ARP (bsc#1258210).
- netfilter: ctnetlink: ignore explicit helper on new expectations
(bsc#1258210).
- netfilter: nf_conntrack_expect: store netns and zone in
expectation (bsc#1258210).
- netfilter: nf_conntrack_expect: use expect->helper
(bsc#1258210).
- netfilter: nf_conntrack_expect: honor expectation helper field
(bsc#1258210).
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT
absent (bsc#1258210).
- netfilter: nf_conntrack_helper: pass helper to expect cleanup
(bsc#1258210).
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr
(bsc#1258210).
- netfilter: x_tables: ensure names are nul-terminated
(bsc#1258210).
- netfilter: nfnetlink_log: account for netlink header size
(bsc#1258210).
- netfilter: flowtable: strictly check for maximum number of
actions (bsc#1258210).
- ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from
SKIP_IFACE_SETUP (bsc#1258210).
- net: stmmac: skip VLAN restore when VLAN hash ops are missing
(bsc#1258210).
- mptcp: fix soft lockup in mptcp_recvmsg() (bsc#1258210).
- mptcp: add eat_recv_skb helper (bsc#1258210).
- net: ipv6: flowlabel: defer exclusive option free until RCU
teardown (bsc#1258210).
- bpf: Fix regsafe() for pointers to packet (bsc#1258210).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
(bsc#1258210).
- net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets
(bsc#1258210).
- net: xilinx: axienet: Correct BD length masks to match AXIDMA
IP spec (bsc#1258210).
- NFC: pn533: bound the UART receive buffer (bsc#1258210).
- net: bonding: fix use-after-free in bond_xmit_broadcast()
(bsc#1258210).
- crypto: authencesn - Do not place hiseq at end of dst for
out-of-place decryption (bsc#1258210).
- crypto: algif_aead - Revert to operating out-of-place
(bsc#1258210).
- bnxt_en: set backing store type from query type (bsc#1258210).
- net: sched: cls_api: fix tc_chain_fill_node to initialize
tcm_info to zero to prevent an info-leak (bsc#1258210).
- net: use skb_header_pointer() for TCPv4 GSO frag_off check
(bsc#1258210).
- net: introduce mangleid_features (bsc#1258210).
- net: airoha: Add missing cleanup bits in
airoha_qdma_cleanup_rx_queue() (bsc#1258210).
- ipv6: prevent possible UaF in addrconf_permanent_addr()
(bsc#1258210).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
rollback on failure (bsc#1258210).
- ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from
SKIP_IFACE_SETUP (bsc#1258210).
- net: enetc: do not allow VF to configure the RSS key
(bsc#1258210).
- net: enetc: check whether the RSS algorithm is Toeplitz
(bsc#1258210).
- net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
(bsc#1258210).
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
(bsc#1258210).
- bridge: br_nd_send: linearize skb before parsing ND options
(bsc#1258210).
- eth: fbnic: Account for page fragments when updating BDQ tail
(bsc#1258210).
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1258210).
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
(bsc#1258210).
- tg3: Fix race for querying speed/duplex (bsc#1258210).
- net/ipv6: ioam6: prevent schema length wraparound in trace fill
(bsc#1258210).
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize
nduseropt_padX fields to zero to prevent an info-leak
(bsc#1258210).
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix
memory leak (bsc#1258210).
- net: enetc: reset PIR and CIR if they are not equal when
initializing TX ring (bsc#1258210).
- net: fec: fix the PTP periodic output sysfs interface
(bsc#1258210).
- netdevsim: fix build if SKB_EXTENSIONS=n (bsc#1258210).
- net: mana: Fix RX skb truesize accounting (bsc#1258210).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
(bsc#1258210).
- crypto: deflate - fix spurious -ENOSPC (bsc#1258210).
- crypto: caam - fix overflow on long hmac keys (bsc#1258210).
- crypto: caam - fix DMA corruption on long hmac keys
(bsc#1258210).
- wifi: ath11k: Pass the correct value of each TID during a stop
AMPDU session (bsc#1258210).
- wifi: iwlwifi: mld: correctly set wifi generation data
(bsc#1258210).
- wifi: iwlwifi: disable EHT if the device doesn't allow it
(bsc#1258210).
- wifi: iwlwifi: cfg: add new device names (bsc#1258210).
- wifi: iwlwifi: mvm: don't send a 6E related command when not
supported (bsc#1258210).
- wifi: iwlwifi: mld: Fix MLO scan timing (bsc#1258210).
- wifi: iwlwifi: fix remaining kernel-doc warnings (bsc#1258210).
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties
to fix common property warning (bsc#1258210).
- spi: geni-qcom: Check DMA interrupts early in ISR (bsc#1258210).
- smb: client: fix generic/694 due to wrong ->i_blocks
(bsc#1258210).
- btrfs: reject root items with drop_progress and zero drop_level
(bsc#1258210).
- i2c: tegra: Don't mark devices with pins as IRQ safe
(bsc#1258210).
- btrfs: reserve enough transaction items for qgroup ioctls
(bsc#1258210).
- HID: multitouch: Check to ensure report responses match the
request (bsc#1258210).
- HID: core: Mitigate potential OOB by removing bogus memset()
(bsc#1258210).
- HID: logitech-hidpp: Prevent use-after-free on force feedback
initialisation failure (bsc#1258210).
- objtool: Fix Clang jump table detection (bsc#1258210).
- tg3: replace placeholder MAC address with device property
(bsc#1258210).
- btrfs: don't take device_list_mutex when querying zone info
(bsc#1258210).
- atm: lec: fix use-after-free in sock_def_readable()
(bsc#1258210).
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
(bsc#1258210).
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper
(bsc#1258210).
- HID: logitech-hidpp: Enable MX Master 4 over bluetooth
(bsc#1258210).
- arm64/scs: Fix handling of advance_loc4 (bsc#1258210).
- commit 3681c40
* Thu Apr 02 2026 rfrohl@suse.com
- Linux 6.18.21 (bsc#1258210).
- Bluetooth: L2CAP: Fix regressions caused by reusing ident
(bsc#1258210).
- futex: Fix UaF between futex_key_to_node_opt() and
vma_replace_policy() (bsc#1258210).
- futex: Require sys_futex_requeue() to have identical flags
(bsc#1258210).
- irqchip/renesas-rzv2h: Fix error path in rzv2h_icu_probe_common()
(bsc#1258210).
- netfs: Fix the handling of stream->front by removing it
(bsc#1258210).
- xen/privcmd: unregister xenstore notifier on module exit
(bsc#1258210).
- btrfs: fix lost error when running device stats on multiple
devices fs (bsc#1258210).
- btrfs: fix leak of kobject name for sub-group space_info
(bsc#1258210).
- btrfs: fix super block offset in error message in
btrfs_validate_super() (bsc#1258210).
- netfs: Fix read abandonment during retry (bsc#1258210).
- selftests/mount_setattr: increase tmpfs size for idmapped
mount tests (bsc#1258210).
- dmaengine: xilinx_dma: Fix reset related timeout with two-channel
AXIDMA (bsc#1258210).
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
(bsc#1258210).
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for
cyclic DMA (bsc#1258210).
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions
(bsc#1258210).
- dmaengine: idxd: fix possible wrong descriptor completion in
llist_abort_desc() (bsc#1258210).
- netfs: Fix NULL pointer dereference in netfs_unbuffered_write()
on retry (bsc#1258210).
- netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC
iterators (bsc#1258210).
- dmaengine: xilinx: xdma: Fix regmap init error handling
(bsc#1258210).
- dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE
and CYCLE_BIT bits for HDMA (bsc#1258210).
- phy: ti: j721e-wiz: Fix device node reference leak in
wiz_get_lane_phy_types() (bsc#1258210).
- dmaengine: idxd: Fix leaking event log memory (bsc#1258210).
- dmaengine: idxd: Fix freeing the allocated ida too late
(bsc#1258210).
- dmaengine: idxd: Fix memory leak when a wq is reset
(bsc#1258210).
- dmaengine: idxd: Fix not releasing workqueue on .release()
(bsc#1258210).
- dmaengine: idxd: Fix possible invalid memory access after FLR
(bsc#1258210).
- dmaengine: idxd: Fix crash when the event log is disabled
(bsc#1258210).
- mm/mseal: update VMA end correctly on merge (bsc#1258210).
- ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
(bsc#1258210).
- mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
(bsc#1258210).
- mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx()
failure (bsc#1258210).
- mm/damon/core: avoid use of half-online-committed context
(bsc#1258210).
- mm/damon/stat: monitor all System RAM resources (bsc#1258210).
- drm/amd/pm: fix amdgpu_irq enabled counter unbalanced on smu
v11.0 (bsc#1258210).
- rust: pin-init: internal: init: document load-bearing fact of
field accessors (bsc#1258210).
- unwind_user/x86: Fix arch=um build (bsc#1258210).
- powerpc64/bpf: do not increment tailcall count when prog is NULL
(bsc#1258210).
- arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off (bsc#1258210).
- ext4: always drain queued discard work in ext4_mb_release()
(bsc#1258210).
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
(bsc#1258210).
- ext4: handle wraparound when searching for blocks for indirect
mapped blocks (bsc#1258210).
- ext4: fix the might_sleep() warnings in kvfree() (bsc#1258210).
- ext4: fix use-after-free in update_super_work when racing with
umount (bsc#1258210).
- ext4: reject mount if bigalloc with s_first_data_block != 0
(bsc#1258210).
- ext4: avoid allocate block from corrupted group in
ext4_mb_find_by_goal() (bsc#1258210).
- ext4: avoid infinite loops caused by residual data (bsc#1258210).
- ext4: validate p_idx bounds in ext4_ext_correct_indexes
(bsc#1258210).
- ext4: test if inode's all dirty pages are submitted to disk
(bsc#1258210).
- ext4: publish jinode after initialization (bsc#1258210).
- ext4: replace BUG_ON with proper error handling in
ext4_read_inline_folio (bsc#1258210).
- ext4: make recently_deleted() properly work with lazy itable
initialization (bsc#1258210).
- ext4: fix fsync(2) for nojournal mode (bsc#1258210).
- ext4: do not check fast symlink during orphan recovery
(bsc#1258210).
- ext4: fix stale xarray tags after writeback (bsc#1258210).
- ext4: convert inline data to extents when truncate exceeds
inline size (bsc#1258210).
- ext4: fix journal credit check when setting fscrypt context
(bsc#1258210).
- xfs: remove file_path tracepoint data (bsc#1258210).
- xfs: don't irele after failing to iget in xfs_attri_recover_work
(bsc#1258210).
- xfs: fix ri_total validation in xlog_recover_attri_commit_pass2
(bsc#1258210).
- xfs: scrub: unlock dquot before early return in quota scrub
(bsc#1258210).
- xfs: avoid dereferencing log items after push callbacks
(bsc#1258210).
- xfs: save ailp before dropping the AIL lock in push callbacks
(bsc#1258210).
- xfs: stop reclaim before pushing AIL during unmount
(bsc#1258210).
- mm/pagewalk: fix race between concurrent split and refault
(bsc#1258210).
- mm/damon/sysfs: check contexts->nr in repeat_call_fn
(bsc#1258210).
- mm/damon/sysfs: check contexts->nr before accessing
contexts_arr[0] (bsc#1258210).
- drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on
smu_v13_0_6 (bsc#1258210).
- LoongArch: KVM: Handle the case that EIOINTC's coremap is empty
(bsc#1258210).
- LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust
(bsc#1258210).
- LoongArch: Workaround LS2K/LS7A GPU DMA hang bug (bsc#1258210).
- LoongArch: vDSO: Emit GNU_EH_FRAME correctly (bsc#1258210).
- LoongArch: Fix missing NULL checks for kstrdup() (bsc#1258210).
- drm/i915: Unlink NV12 planes earlier (bsc#1258210).
- drm/i915: Order OP vs. timeout correctly in __wait_for()
(bsc#1258210).
- drm/i915/dp_tunnel: Fix error handling when clearing stream
BW in atomic state (bsc#1258210).
- drm/amd/display: Fix drm_edid leak in amdgpu_dm (bsc#1258210).
- drm/amdgpu: prevent immediate PASID reuse case (bsc#1258210).
- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
(bsc#1258210).
- dmaengine: sh: rz-dmac: Protect the driver specific lists
(bsc#1258210).
- dmaengine: fsl-edma: fix channel parameter config for fixed
channel requests (bsc#1258210).
- i2c: imx: ensure no clock is generated after last read
(bsc#1258210).
- i2c: imx: fix i2c issue when reading multiple messages
(bsc#1258210).
- futex: Clear stale exiting pointer in futex_lock_pi() retry path
(bsc#1258210).
- i2c: designware: amdisp: Fix resume-probe race condition issue
(bsc#1258210).
- irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment
(bsc#1258210).
- jbd2: gracefully abort on checkpointing state corruptions
(bsc#1258210).
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting
shadow-present SPTE (bsc#1258210).
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating
an MMIO SPTE (bsc#1258210).
- net: macb: Use dev_consume_skb_any() to free TX SKBs
(bsc#1258210).
- net: macb: Protect access to net_device::ip_ptr with RCU lock
(bsc#1258210).
- net: macb: Move devm_{free,request}_irq() out of spin lock area
(bsc#1258210).
- scsi: ses: Handle positive SCSI error from ses_recv_diag()
(bsc#1258210).
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
(bsc#1258210).
- ovl: fix wrong detection of 32bit inode numbers (bsc#1258210).
- ovl: make fsync after metadata copy-up opt-in mount option
(bsc#1258210).
- phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4
(bsc#1258210).
- x86/fred: Fix early boot failures on SEV-ES/SNP guests
(bsc#1258210).
- x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask
(bsc#1258210).
- x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
(bsc#1258210).
- writeback: don't block sync for filesystems with no data
integrity guarantees (bsc#1258210).
- alarmtimer: Fix argument order in alarm_timer_forward()
(bsc#1258210).
- erofs: add GFP_NOIO in the bio completion if needed
(bsc#1258210).
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is
cleared and napi_tx is false (bsc#1258210).
- virt: tdx-guest: Fix handling of host controlled 'quote'
buffer length (bsc#1258210).
- xfrm: iptfs: only publish mode_data after clone setup
(bsc#1258210).
- xfrm: iptfs: validate inner IPv4 header length in IPTFS payload
(bsc#1258210).
- media: mc, v4l2: serialize REINIT and REQBUFS with
req_queue_mutex (bsc#1258210).
- hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible()
(bsc#1258210).
- hwmon: (peci/cputemp) Fix crit_hyst returning delta instead
of absolute temperature (bsc#1258210).
- hwmon: (pmbus/isl68137) Add mutex protection for AVS enable
sysfs attributes (bsc#1258210).
- hwmon: (pmbus/ina233) Fix error handling and sign extension
in shunt voltage read (bsc#1258210).
- KVM: arm64: Discard PC update state on vcpu reset (bsc#1258210).
- platform/x86: ISST: Correct locked bit width (bsc#1258210).
- RDMA/ionic: Preserve and set Ethernet source MAC after
ib_ud_header_init() (bsc#1258210).
- thermal: intel: int340x: soc_slider: Set offset only for
balanced mode (bsc#1258210).
- kbuild: Delete .builtin-dtbs.S when running make clean
(bsc#1258210).
- cpufreq: conservative: Reset requested_freq on limits change
(bsc#1258210).
- can: netlink: can_changelink(): add missing error handling to
call can_ctrlmode_changelink() (bsc#1258210).
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
(bsc#1258210).
- can: gw: fix OOB heap access in cgw_csum_crc8_rel()
(bsc#1258210).
- ASoC: SOF: ipc4-topology: Allow bytes controls without initial
payload (bsc#1258210).
- ASoC: sma1307: fix double free of devm_kzalloc() memory
(bsc#1258210).
- ASoC: codecs: wcd934x: fix typo in dt parsing (bsc#1258210).
- ALSA: firewire-lib: fix uninitialized local variable
(bsc#1258210).
- ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR
(bsc#1258210).
- Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist"
(bsc#1258210).
- ksmbd: do not expire session on binding failure (bsc#1258210).
- ksmbd: fix memory leaks and NULL deref in smb2_lock()
(bsc#1258210).
- ksmbd: fix potencial OOB in get_file_all_info() for compound
requests (bsc#1258210).
- ksmbd: replace hardcoded hdr2_len with offsetof() in
smb2_calc_max_out_buf_len() (bsc#1258210).
- drm/xe: always keep track of remap prev/next (bsc#1258210).
- tracing: Fix potential deadlock in cpu hotplug with osnoise
(bsc#1258210).
- s390/entry: Scrub r12 register on kernel entry (bsc#1258210).
- s390/barrier: Make array_index_mask_nospec() __always_inline
(bsc#1258210).
- s390/syscalls: Add spectre boundary for syscall dispatch table
(bsc#1258210).
- ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from
SKIP_IFACE_SETUP (bsc#1258210).
- spi: spi-fsl-lpspi: fix teardown order issue (UAF) (bsc#1258210).
- ASoC: adau1372: Fix clock leak on PLL lock failure (bsc#1258210).
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
(bsc#1258210).
- sysctl: fix uninitialized variable in proc_do_large_bitmap
(bsc#1258210).
- hwmon: (pmbus/core) Protect regulator operations with mutex
(bsc#1258210).
- hwmon: (pmbus) Introduce the concept of "write-only" attributes
(bsc#1258210).
- hwmon: (pmbus) Mark lowest/average/highest/rated attributes
as read-only (bsc#1258210).
- hwmon: (adm1177) fix sysfs ABI violation and current unit
conversion (bsc#1258210).
- drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
(bsc#1258210).
- ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
(bsc#1258210).
- spi: use generic driver_override infrastructure (bsc#1258210).
- drm/xe: Implement recent spec updates to Wa_16025250150
(bsc#1258210).
- rust: regulator: do not assume that regulator_get() returns
non-null (bsc#1258210).
- ASoC: dt-bindings: stm32: Fix incorrect compatible string in
stm32h7-sai match (bsc#1258210).
- drm/amd/display: Do not skip unrelated mode changes in DSC
validation (bsc#1258210).
- spi: meson-spicc: Fix double-put in remove path (bsc#1258210).
- ASoC: Intel: catpt: Fix the device initialization (bsc#1258210).
- spi: sn-f-ospi: Fix resource leak in f_ospi_probe()
(bsc#1258210).
- PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()
(bsc#1258210).
- PM: hibernate: Drain trailing zero pages on userspace restore
(bsc#1258210).
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
(bsc#1258210).
- drm/mediatek: dsi: Store driver data before invoking
mipi_dsi_host_register (bsc#1258210).
- x86/efi: efi_unmap_boot_services: fix calculation of
ranges_to_free size (bsc#1258210).
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue
(bsc#1258210).
- ASoC: fsl: imx-card: initialize playback_only and capture_only
(bsc#1258210).
- RDMA/irdma: Harden depth calculation functions (bsc#1258210).
- RDMA/irdma: Return EINVAL for invalid arp index error
(bsc#1258210).
- RDMA/irdma: Fix deadlock during netdev reset with active
connections (bsc#1258210).
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
(bsc#1258210).
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node
(bsc#1258210).
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
(bsc#1258210).
- RDMA/irdma: Update ibqp state to error if QP is already in
error state (bsc#1258210).
- RDMA/irdma: Initialize free_qp completion before using it
(bsc#1258210).
- ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from
SKIP_IFACE_SETUP (bsc#1258210).
- RDMA/efa: Fix possible deadlock (bsc#1258210).
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion
(bsc#1258210).
- ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter
(bsc#1258210).
- regmap: Synchronize cache for the page selector (bsc#1258210).
- RDMA/efa: Fix use of completion ctx after free (bsc#1258210).
- RDMA/efa: Improve admin completion context state machine
(bsc#1258210).
- RDMA/efa: Check stored completion CTX command ID with received
one (bsc#1258210).
- net: macb: use the current queue number for stats (bsc#1258210).
- netfilter: ctnetlink: use netlink policy range checks
(bsc#1258210).
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr
in process_sdp (bsc#1258210).
- netfilter: nf_conntrack_expect: skip expectations in other
netns via proc (bsc#1258210).
- netfilter: nft_set_rbtree: revisit array resize logic
(bsc#1258210).
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
(bsc#1258210).
- netfilter: nfnetlink_log: fix uninitialized padding leak in
NFULA_PAYLOAD (bsc#1258210).
- tls: Purge async_hold in tls_decrypt_async_wait() (bsc#1258210).
- Bluetooth: btusb: clamp SCO altsetting table indices
(bsc#1258210).
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite
loop (bsc#1258210).
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1258210).
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident
(bsc#1258210).
- Bluetooth: btintel: serialize btintel_hw_error() with
hci_req_sync_lock (bsc#1258210).
- Bluetooth: L2CAP: Fix send LE flow credits in ACL link
(bsc#1258210).
- dma-mapping: add missing `inline` for `dma_free_attrs`
(bsc#1258210).
- rtnetlink: fix leak of SRCU struct in rtnl_link_register
(bsc#1258210).
- net: lan743x: fix duplex configuration in mac_link_up
(bsc#1258210).
- team: fix header_ops type confusion with non-Ethernet ports
(bsc#1258210).
- virtio-net: correct hdr_len handling for tunnel gso
(bsc#1258210).
- virtio-net: correct hdr_len handling for
VIRTIO_NET_F_GUEST_HDRLEN (bsc#1258210).
- net: enetc: fix the output issue of 'ethtool --show-ring'
(bsc#1258210).
- udp: Fix wildcard bind conflict check when using hash2
(bsc#1258210).
- net: airoha: add RCU lock around dev_fill_forward_path
(bsc#1258210).
- net: fix fanout UAF in packet_release() via NETDEV_UP race
(bsc#1258210).
- ipv6: Don't remove permanent routes with exceptions from
tb6_gc_hlist (bsc#1258210).
- ipv6: Remove permanent routes from tb6_gc_hlist when all
exceptions expire (bsc#1258210).
- iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
(bsc#1258210).
- ice: use ice_update_eth_stats() for representor stats
(bsc#1258210).
- ice: fix inverted ready check for VF representors (bsc#1258210).
- platform/x86: intel-hid: disable wakeup_mode during hibernation
(bsc#1258210).
- platform/olpc: olpc-xo175-ec: Fix overflow error message to
print inlen (bsc#1258210).
- platform/x86: lenovo: wmi-gamezone: Drop gz_chain_head
(bsc#1258210).
- platform/x86: ISST: Check HWP support before MSR access
(bsc#1258210).
- net: bcmasp: fix double disable of clk (bsc#1258210).
- net: bcmasp: fix double free of WoL irq (bsc#1258210).
- net: bcmasp: streamline early exit in probe (bsc#1258210).
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
(bsc#1258210).
- rtnetlink: count IFLA_PARENT_DEV_{NAME,BUS_NAME} in if_nlmsg_size
(bsc#1258210).
- net/smc: fix double-free of smc_spd_priv when tee() duplicates
splice pipe buffer (bsc#1258210).
- openvswitch: validate MPLS set/set_masked payload length
(bsc#1258210).
- openvswitch: defer tunnel netdev_put to RCU release
(bsc#1258210).
- net: openvswitch: Avoid releasing netdev before teardown
completes (bsc#1258210).
- nfc: nci: fix circular locking dependency in nci_close_device
(bsc#1258210).
- ionic: fix persistent MAC address override on PF (bsc#1258210).
- pinctrl: mediatek: common: Fix probe failure for devices
without EINT (bsc#1258210).
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
(bsc#1258210).
- Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1258210).
- Bluetooth: MGMT: Fix dangling pointer on
mgmt_add_adv_patterns_monitor_complete (bsc#1258210).
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to
missing sock_hold (bsc#1258210).
- Bluetooth: L2CAP: Validate PDU length before reading SDU length
in l2cap_ecred_data_rcv() (bsc#1258210).
- Bluetooth: L2CAP: Fix stack-out-of-bounds read in
l2cap_ecred_conn_req (bsc#1258210).
- pinctrl: stm32: fix HDP driver dependency on GPIO_GENERIC
(bsc#1258210).
- can: statistics: add missing atomic access in hot path
(bsc#1258210).
- erofs: set fileio bio failed in short read case (bsc#1258210).
- dma: swiotlb: add KMSAN annotations to swiotlb_bounce()
(bsc#1258210).
- af_key: validate families in pfkey_send_migrate() (bsc#1258210).
- xfrm: prevent policy_hthresh.work from racing with netns teardown
(bsc#1258210).
- xfrm: Fix work re-schedule after cancel in
xfrm_nat_keepalive_net_fini() (bsc#1258210).
- pinctrl: renesas: rza1: Normalize return value of gpio_get()
(bsc#1258210).
- xfrm: iptfs: fix skb_put() panic on non-linear skb during
reassembly (bsc#1258210).
- pinctrl: renesas: rzt2h: Fix device node leak in
rzt2h_gpio_register() (bsc#1258210).
- esp: fix skb leak with espintcp and async crypto (bsc#1258210).
- xfrm: call xdo_dev_state_delete during state update
(bsc#1258210).
- xfrm: fix the condition on x->pcpu_num in xfrm_sa_len
(bsc#1258210).
- xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and
allocspi (bsc#1258210).
- i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter
(bsc#1258210).
- ALSA: hda/realtek: add quirk for ASUS UM6702RC (bsc#1258210).
- spi: intel-pci: Add support for Nova Lake mobile SPI flash
(bsc#1258210).
- usb: core: new quirk to handle devices with zero configurations
(bsc#1258210).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
(bsc#1258210).
- nvmet: move async event work off nvmet-wq (bsc#1258210).
- objtool: Handle Clang RSP musical chairs (bsc#1258210).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix
headphone (bsc#1258210).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
(bsc#1258210).
- powerpc64/ftrace: fix OOL stub count with clang (bsc#1258210).
- btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
(bsc#1258210).
- sched_ext: Use WRITE_ONCE() for the write side of dsq->seq
update (bsc#1258210).
- HID: apple: avoid memory leak in apple_report_fixup()
(bsc#1258210).
- bpf: Fix u32/s32 bounds when ranges cross min/max boundary
(bsc#1258210).
- ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts
(bsc#1258210).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (bsc#1258210).
- ALSA: hda/senary: Ensure EAPD is enabled during init
(bsc#1258210).
- block: break pcpu_alloc_mutex dependency on freeze_lock
(bsc#1258210).
- dma-buf: Include ioctl.h in UAPI header (bsc#1258210).
- ASoC: cs35l56: Only patch ASP registers if the DAI is part of
a DAIlink (bsc#1258210).
- ASoC: fsl_easrc: Fix event generation in
fsl_easrc_iec958_put_bits() (bsc#1258210).
- ALSA: hda/hdmi: Add Tegra238 HDA codec device ID (bsc#1258210).
- ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025)
0CCD SKU (bsc#1258210).
- scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP
(bsc#1258210).
- ASoC: rt1321: fix DMIC ch2/3 mask issue (bsc#1258210).
- scsi: mpi3mr: Clear reset history on ready and recheck state
after timeout (bsc#1258210).
- ASoC: fsl_easrc: Fix event generation in
fsl_easrc_iec958_set_reg() (bsc#1258210).
- module: Fix kernel panic when a symbol st_shndx is out of bounds
(bsc#1258210).
- HID: asus: add xg mobile 2023 external hardware support
(bsc#1258210).
- HID: mcp2221: cancel last I2C command on read error
(bsc#1258210).
- platform/x86: oxpec: Add support for OneXPlayer X1 Air
(bsc#1258210).
- platform/x86: oxpec: Add support for Aokzoe A2 Pro (bsc#1258210).
- kbuild: install-extmod-build: Package resolve_btfids if necessary
(bsc#1258210).
- net: usb: r8152: add TRENDnet TUC-ET2G (bsc#1258210).
- platform/x86: oxpec: Add support for OneXPlayer X1z
(bsc#1258210).
- HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list
(bsc#1258210).
- platform/x86: oxpec: Add support for OneXPlayer APEX
(bsc#1258210).
- HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs
(bsc#1258210).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
(bsc#1258210).
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad
2 (bsc#1258210).
- nvme-pci: ensure we're polling a polled queue (bsc#1258210).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
touchscreen on SUPI S10 (bsc#1258210).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
Fold 16 Gen 1 (bsc#1258210).
- platform/x86: hp-wmi: Add Omen 16-xd0xxx fan and thermal support
(bsc#1258210).
- nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
(bsc#1258210).
- nvme-pci: cap queue creation to used queues (bsc#1258210).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
dmi_vgbs_allow_list (bsc#1258210).
- HID: asus: avoid memory leak in asus_report_fixup()
(bsc#1258210).
- platform/x86: hp-wmi: Add Omen 16-wf0xxx fan and thermal support
(bsc#1258210).
- tracing: Revert "tracing: Remove pid in task_rename tracing
output" (bsc#1258210).
- bpf: Fix unsound scalar forking in maybe_fork_scalars() for
BPF_OR (bsc#1258210).
- bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
(bsc#1258210).
- bpf: Fix exception exit lock checking for subprogs (bsc#1258210).
- cxl: Adjust the startup priority of cxl_pmem to be higher than
that of cxl_acpi (bsc#1258210).
- bpf: Release module BTF IDR before module unload (bsc#1258210).
- driver core: platform: use generic driver_override infrastructure
(bsc#1258210).
- driver core: generalize driver_override in struct device
(bsc#1258210).
- sh: platform_early: remove pdev->driver_override check
(bsc#1258210).
- hwmon: axi-fan: don't use driver_override as IRQ name
(bsc#1258210).
- cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are
enabled (bsc#1258210).
- s390/mm: Add missing secure storage access fixups for donated
memory (bsc#1258210).
- perf: Make sure to use pmu_ctx->pmu for groups (bsc#1258210).
- x86/perf: Make sure to program the counter value for stopped
events on migration (bsc#1258210).
- bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1258210).
- bpf: Reset register ID for BPF_END value tracking (bsc#1258210).
- cxl/port: Fix use after free of parent_port in cxl_detach_ep()
(bsc#1258210).
- commit 9a82156
* Fri Mar 27 2026 rfrohl@suse.com
- Update config files: allow syzkaller build if enabled
The kernel config atleast allows to build the kernel, but not 100% sure
if these options also make sense.
- commit f79ff81
* Wed Mar 25 2026 rfrohl@suse.com
- tools/sched_ext: update scx_show_state.py for scx_aborting
change (git-fixes).
- sched_ext: Use WRITE_ONCE() for the write side of scx_enable
helper pointer (git-fixes).
- commit c378ace
* Wed Mar 25 2026 rfrohl@suse.com
- Linux 6.18.20 (bsc#1258210).
- NFSD: Defer sub-object cleanup in export put callbacks
(bsc#1258210).
- NFSD: Hold net reference for the lifetime of
/proc/fs/nfs/exports fd (bsc#1258210).
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
(bsc#1258210).
- selftests/hid: fix compilation when bpf_wq and hid_device are
not exported (bsc#1258210).
- HID: bpf: prevent buffer overflow in hid_hw_request
(bsc#1258210).
- sunrpc: fix cache_request leak in cache_release (bsc#1258210).
- nvdimm/bus: Fix potential use after free in asynchronous
initialization (bsc#1258210).
- crash_dump: don't log dm-crypt key bytes in
read_key_from_user_keying (bsc#1258210).
- mm/rmap: fix incorrect pte restoration for lazyfree folios
(bsc#1258210).
- mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
(bsc#1258210).
- mm/huge_memory: fix early failure try_to_migrate() when split
huge pmd for shared THP (bsc#1258210).
- LoongArch: Give more information if kmem access failed
(bsc#1258210).
- LoongArch: No need to flush icache if text copy failed
(bsc#1258210).
- NFC: nxp-nci: allow GPIOs to sleep (bsc#1258210).
- net: macb: fix use-after-free access to PTP clock (bsc#1258210).
- bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
(bsc#1258210).
- parisc: Flush correct cache in cacheflush() syscall
(bsc#1258210).
- batman-adv: avoid OGM aggregation when skb tailroom is
insufficient (bsc#1258210).
- mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN
stations (bsc#1258210).
- crypto: padlock-sha - Disable for Zhaoxin processor
(bsc#1258210).
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
(bsc#1258210).
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before
access (bsc#1258210).
- smb: client: fix krb5 mount with username option (bsc#1258210).
- ksmbd: unset conn->binding on failed binding request
(bsc#1258210).
- ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
(bsc#1258210).
- drm/i915/dsc: Add Selective Update register definitions
(bsc#1258210).
- drm/i915/dsc: Add helper for writing DSC Selective Update ET
parameters (bsc#1258210).
- drm/i915/psr: Write DSC parameters on Selective Update in ET
mode (bsc#1258210).
- net: macb: Introduce gem_init_rx_ring() (bsc#1258210).
- net: macb: Reinitialize tx/rx queue pointer registers and rx
ring during resume (bsc#1258210).
- LoongArch: Check return values for set_memory_{rw,rox}
(bsc#1258210).
- ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
(bsc#1258210).
- netconsole: fix sysdata_release_enabled_show checking wrong flag
(bsc#1258210).
- crypto: atmel-sha204a - Fix OOM ->tfm_count leak (bsc#1258210).
- cifs: open files should not hold ref on superblock
(bsc#1258210).
- drm/xe: Fix memory leak in xe_vm_madvise_ioctl (bsc#1258210).
- drm/i915/vrr: Move HAS_VRR() check into
intel_vrr_set_transcoder_timings() (bsc#1258210).
- drm/i915/vrr: Configure VRR timings after enabling
TRANS_DDI_FUNC_CTL (bsc#1258210).
- net: macb: sort #includes (bsc#1258210).
- net: macb: Shuffle the tx ring before enabling tx (bsc#1258210).
- ksmbd: Don't log keys in SMB3 signing and encryption key
generation (bsc#1258210).
- fgraph: Fix thresh_return nosleeptime double-adjust
(bsc#1258210).
- drm/xe/sync: Fix user fence leak on alloc failure (bsc#1258210).
- nsfs: tighten permission checks for ns iteration ioctls
(bsc#1258210).
- sched_ext: Fix starvation of scx_enable() under fair-class
saturation (bsc#1258210).
- sched_ext: Simplify breather mechanism with scx_aborting flag
(bsc#1258210).
- sched_ext: Disable preemption between scx_claim_exit() and
kicking helper work (bsc#1258210).
- ipmi: Consolidate the run to completion checking for xmit msgs
lock (bsc#1258210).
- ipmi:msghandler: Handle error returns from the SMI sender
(bsc#1258210).
- mm/huge_memory: fix a folio_split() race condition with
folio_try_get() (bsc#1258210).
- ata: libata-core: disable LPM on ADATA SU680 SSD (bsc#1258210).
- ata: libata-scsi: report correct sense field pointer in
ata_scsiop_maint_in() (bsc#1258210).
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
(bsc#1258210).
- mmc: sdhci: fix timing selection for 1-bit bus width
(bsc#1258210).
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout
(bsc#1258210).
- spi: fix use-after-free on controller registration failure
(bsc#1258210).
- spi: fix statistics allocation (bsc#1258210).
- mtd: rawnand: pl353: make sure optimal timings are applied
(bsc#1258210).
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent()
in cadence_nand_init() (bsc#1258210).
- mtd: Avoid boot crash in RedBoot partition table parser
(bsc#1258210).
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
(bsc#1258210).
- iommu/vt-d: Only handle IOPF for SVA when PRI is supported
(bsc#1258210).
- io_uring/poll: fix multishot recv missing EOF on wakeup race
(bsc#1258210).
- io_uring/kbuf: fix missing BUF_MORE for incremental buffers
at EOF (bsc#1258210).
- io_uring/kbuf: propagate BUF_MORE through early buffer commit
path (bsc#1258210).
- vt: save/restore unicode screen buffer for alternate screen
(bsc#1258210).
- serial: 8250_pci: add support for the AX99100 (bsc#1258210).
- serial: 8250: Fix TX deadlock when using DMA (bsc#1258210).
- serial: 8250: always disable IRQ during THRE test (bsc#1258210).
- serial: 8250: Protect LCR write in shutdown (bsc#1258210).
- serial: 8250_dw: Avoid unnecessary LCR writes (bsc#1258210).
- serial: 8250: Add serial8250_handle_irq_locked() (bsc#1258210).
- serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR
handling (bsc#1258210).
- serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt
storm (bsc#1258210).
- serial: 8250: Add late synchronize_irq() to shutdown to handle
DW UART BUSY (bsc#1258210).
- serial: 8250_dw: Ensure BUSY is deasserted (bsc#1258210).
- serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
(bsc#1258210).
- serial: uartlite: fix PM runtime usage count underflow on probe
(bsc#1258210).
- drm: Fix use-after-free on framebuffers and property blobs
when calling drm_dev_unplug (bsc#1258210).
- drm/amd/display: Wrap dcn32_override_min_req_memclk() in
DC_FP_{START, END} (bsc#1258210).
- drm/amdgpu/gmc9.0: add bounds checking for cid (bsc#1258210).
- drm/amdgpu/mmhub2.0: add bounds checking for cid (bsc#1258210).
- drm/amdgpu/mmhub2.3: add bounds checking for cid (bsc#1258210).
- drm/amdgpu/mmhub3.0.1: add bounds checking for cid
(bsc#1258210).
- drm/amdgpu/mmhub3.0.2: add bounds checking for cid
(bsc#1258210).
- drm/amdgpu/mmhub3.0: add bounds checking for cid (bsc#1258210).
- drm/amdgpu/mmhub4.1.0: add bounds checking for cid
(bsc#1258210).
- drm/imagination: Fix deadlock in soft reset sequence
(bsc#1258210).
- drm/imagination: Synchronize interrupts before suspending the
GPU (bsc#1258210).
- drm/radeon: apply state adjust rules to some additional HAINAN
vairants (bsc#1258210).
- drm/amdgpu: apply state adjust rules to some additional HAINAN
vairants (bsc#1258210).
- drm/amdgpu: Limit BO list entry count to prevent resource
exhaustion (bsc#1258210).
- drm/i915/dmc: Fix an unlikely NULL pointer deference at probe
(bsc#1258210).
- drm/xe/guc: Ensure CT state transitions via STOP before DISABLED
(bsc#1258210).
- drm/xe/oa: Allow reading after disabling OA stream
(bsc#1258210).
- drm/xe: Open-code GGTT MMIO access protection (bsc#1258210).
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
(bsc#1258210).
- drm/i915/psr: Compute PSR entry_setup_frames into
intel_crtc_state (bsc#1258210).
- btrfs: log new dentries when logging parent dir of a conflicting
inode (bsc#1258210).
- btrfs: tree-checker: fix misleading root drop_level error
message (bsc#1258210).
- soc: microchip: mpfs: Fix memory leak in
mpfs_sys_controller_probe() (bsc#1258210).
- cache: starfive: fix device node leak in starlink_cache_init()
(bsc#1258210).
- cache: ax45mp: Fix device node reference leak in
ax45mp_cache_init() (bsc#1258210).
- soc: rockchip: grf: Add missing of_node_put() when returning
(bsc#1258210).
- soc: fsl: qbman: fix race condition in qman_destroy_fq
(bsc#1258210).
- soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource()
in qmc_qe_init_resources() (bsc#1258210).
- tee: shm: Remove refcounting of kernel pages (bsc#1258210).
- wifi: mac80211: remove keys after disabling beaconing
(bsc#1258210).
- wifi: mac80211: use jiffies_delta_to_msecs() for sta_info
inactive times (bsc#1258210).
- wifi: mac80211: Fix static_branch_dec() underflow for
aql_disable (bsc#1258210).
- wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
(bsc#1258210).
- arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0
card regulator (bsc#1258210).
- arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0
regulator (bsc#1258210).
- arm64: dts: renesas: r9a09g057: Add RTC node (bsc#1258210).
- arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes
(bsc#1258210).
- arm64: dts: renesas: r9a09g077: Fix CPG register region sizes
(bsc#1258210).
- arm64: dts: renesas: r9a09g087: Fix CPG register region sizes
(bsc#1258210).
- arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2
(bsc#1258210).
- firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()
(bsc#1258210).
- firmware: arm_scpi: Fix device_node reference leak in probe path
(bsc#1258210).
- firmware: arm_scmi: Fix NULL dereference on notify error path
(bsc#1258210).
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU
exceeds IMTU (bsc#1258210).
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed
SDU (bsc#1258210).
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (bsc#1258210).
- Bluetooth: ISO: Fix defer tests being unstable (bsc#1258210).
- Bluetooth: hci_sync: Fix hci_le_create_conn_sync (bsc#1258210).
- Bluetooth: MGMT: Fix list corruption and UAF in command complete
handlers (bsc#1258210).
- Bluetooth: HIDP: Fix possible UAF (bsc#1258210).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
(bsc#1258210).
- Bluetooth: qca: fix ROM version reading on WCN3998 chips
(bsc#1258210).
- bridge: cfm: Fix race condition in peer_mep deletion
(bsc#1258210).
- net/rose: fix NULL pointer dereference in rose_transmit_link
on reconnect (bsc#1258210).
- mpls: add missing unregister_netdevice_notifier to mpls_init
(bsc#1258210).
- netfilter: ctnetlink: fix use-after-free in
ctnetlink_dump_exp_ct() (bsc#1258210).
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation
in sip_help_tcp() (bsc#1258210).
- netfilter: nf_conntrack_h323: fix OOB read in decode_int()
CONS case (bsc#1258210).
- nf_tables: nft_dynset: fix possible stateful expression memleak
in error path (bsc#1258210).
- netfilter: nft_ct: drop pending enqueued packets on removal
(bsc#1258210).
- netfilter: xt_CT: drop pending enqueued packets on template
removal (bsc#1258210).
- netfilter: xt_time: use unsigned int for monthday bit shift
(bsc#1258210).
- netfilter: nf_conntrack_h323: check for zero length in
DecodeQ931() (bsc#1258210).
- crypto: ccp - Fix leaking the same page twice (bsc#1258210).
- net: bcmgenet: increase WoL poll timeout (bsc#1258210).
- net: mana: fix use-after-free in mana_hwc_destroy_channel()
by reordering teardown (bsc#1258210).
- sched: idle: Consolidate the handling of two special cases
(bsc#1258210).
- PM: runtime: Fix a race condition related to device removal
(bsc#1258210).
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
(bsc#1258210).
- net/sched: teql: Fix double-free in teql_master_xmit
(bsc#1258210).
- net: airoha: Remove airoha_dev_stop() in airoha_remove()
(bsc#1258210).
- net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
(bsc#1258210).
- net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
(bsc#1258210).
- clsact: Fix use-after-free in init/destroy rollback asymmetry
(bsc#1258210).
- net: usb: aqc111: Do not perform PM inside suspend callback
(bsc#1258210).
- ACPICA: Update the format of Arg3 of _DSM (bsc#1258210).
- igc: fix missing update of skb->tail in igc_xmit_frame()
(bsc#1258210).
- igc: fix page fault in XDP TX timestamps handling (bsc#1258210).
- iavf: fix VLAN filter lost on add/delete race (bsc#1258210).
- libie: prevent memleak in fwlog code (bsc#1258210).
- wifi: mac80211: fix NULL deref in mesh_matches_local()
(bsc#1258210).
- wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is
not enough headroom (bsc#1258210).
- wifi: mac80211: always free skb on ieee80211_tx_prepare_skb()
failure (bsc#1258210).
- ACPI: processor: Fix previous acpi_processor_errata_piix4()
fix (bsc#1258210).
- netdevsim: drop PSP ext ref on forward failure (bsc#1258210).
- net: macb: fix uninitialized rx_fs_lock (bsc#1258210).
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
(bsc#1258210).
- net/mlx5e: Prevent concurrent access to IPSec ASO context
(bsc#1258210).
- net/mlx5e: Fix race condition during IPSec ESN update
(bsc#1258210).
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when
CONFIG_IPV6=n (bsc#1258210).
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show
(bsc#1258210).
- netfilter: bpf: defer hook memory release until rcu readers
are done (bsc#1258210).
- netfilter: nf_tables: release flowtable after rcu grace period
on error (bsc#1258210).
- nfnetlink_osf: validate individual option lengths in
fingerprints (bsc#1258210).
- net: mvpp2: guard flow control update with global_tx_fc in
buffer switching (bsc#1258210).
- net: shaper: protect late read accesses to the hierarchy
(bsc#1258210).
- net: shaper: protect from late creation of hierarchy
(bsc#1258210).
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in
error paths (bsc#1258210).
- icmp: fix NULL pointer dereference in icmp_tag_validation()
(bsc#1258210).
- MPTCP: fix lock class name family in pm_nl_create_listen_socket
(bsc#1258210).
- hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data()
return value (bsc#1258210).
- hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data()
return value (bsc#1258210).
- hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before
using its return value (bsc#1258210).
- hwmon: (pmbus/isl68137) Fix unchecked return value and use
sysfs_emit() (bsc#1258210).
- USB: serial: f81232: fix incomplete serial port generation
(bsc#1258210).
- i2c: cp2615: fix serial string NULL-deref at probe
(bsc#1258210).
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (bsc#1258210).
- i2c: pxa: defer reset on Armada 3700 when recovery is used
(bsc#1258210).
- irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in
rpmi_sysmsi_probe() (bsc#1258210).
- perf/x86/intel: Add missing branch counters constraint apply
(bsc#1258210).
- perf/x86: Move event pointer setup earlier in x86_pmu_enable()
(bsc#1258210).
- ring-buffer: Fix to update per-subbuf entries of persistent
ring buffer (bsc#1258210).
- tracing: Fix failure to read user space from system call trace
events (bsc#1258210).
- x86/platform/uv: Handle deconfigured sockets (bsc#1258210).
- tracing: Fix trace_marker copy link list updates (bsc#1258210).
- binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3
and ELF_HWCAP4 (bsc#1258210).
- mtd: rawnand: serialize lock/unlock against other NAND
operations (bsc#1258210).
- mtd: rawnand: brcmnand: skip DMA during panic write
(bsc#1258210).
- spi: amlogic: spifc-a4: Remove redundant clock cleanup
(bsc#1258210).
- spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
(bsc#1258210).
- drm/vmwgfx: Don't overwrite KMS surface dirty tracker
(bsc#1258210).
- iommu/sva: Fix crash in iommu_sva_unbind_device() (bsc#1258210).
- drm/amd/display: Fix DisplayID not-found handling in
parse_edid_displayid_vrr() (bsc#1258210).
- drm/amd: fix dcn 2.01 check (bsc#1258210).
- drm/bridge: dw-hdmi-qp: fix multi-channel audio output
(bsc#1258210).
- ksmbd: fix use-after-free of share_conf in compound request
(bsc#1258210).
- ksmbd: fix use-after-free in durable v2 replay of active file
handles (bsc#1258210).
- drm/i915/gt: Check set_default_submission() before deferencing
(bsc#1258210).
- fs/tests: exec: Remove bad test vector (bsc#1258210).
- lib/bootconfig: check xbc_init_node() return in override path
(bsc#1258210).
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat
failure (bsc#1258210).
- arm64: realm: Fix PTE_NS_SHARED for 52bit PA support
(bsc#1258210).
- hwmon: (max6639) Fix pulses-per-revolution implementation
(bsc#1258210).
- xen/privcmd: restrict usage in unprivileged domU (bsc#1258210).
- xen/privcmd: add boot control for restricted usage in domU
(bsc#1258210).
- Rename to
patches.kernel.org/6.18.20-147-bonding-prevent-potential-infinite-loop-in-bo.patch.
- commit 4abd626
* Fri Mar 20 2026 rfrohl@suse.com
- bonding: prevent potential infinite loop in bond_header_parse()
(git-fixes).
- commit 60abb01
* Fri Mar 20 2026 rfrohl@suse.com
- Linux 6.18.19 (bsc#1258210).
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
(bsc#1258210).
- ACPI: PM: Save NVS memory on Lenovo G70-35 (bsc#1258210).
- scsi: ufs: core: Reset urgent_bkops_lvl to allow runtime PM
power mode (bsc#1258210).
- fs: init flags_valid before calling vfs_fileattr_get
(bsc#1258210).
- scsi: mpi3mr: Add NULL checks when resetting request and reply
queues (bsc#1258210).
- ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter
(bsc#1258210).
- unshare: fix unshare_fs() handling (bsc#1258210).
- wifi: mac80211: set default WMM parameters on all links
(bsc#1258210).
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (bsc#1258210).
- scsi: ses: Fix devices attaching to different hosts
(bsc#1258210).
- ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
(bsc#1258210).
- ASoC: cs42l43: Report insert for exotic peripherals
(bsc#1258210).
- scsi: ufs: core: Fix possible NULL pointer dereference in
ufshcd_add_command_trace() (bsc#1258210).
- scsi: ufs: core: Fix shift out of bounds when MAXQ=32
(bsc#1258210).
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB
Audio 2.0 (bsc#1258210).
- drm/amdgpu/vcn5: Add SMU dpm interface type (bsc#1258210).
- ALSA: usb-audio: Check max frame size for implicit feedback
mode, too (bsc#1258210).
- powerpc/uaccess: Fix inline assembly for clang build on PPC32
(bsc#1258210).
- kexec: Include kernel-end even without crashkernel
(bsc#1258210).
- powerpc/kexec/core: use big-endian types for crash variables
(bsc#1258210).
- powerpc/crash: adjust the elfcorehdr size (bsc#1258210).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
(bsc#1258210).
- remoteproc: mediatek: Unprepare SCP clock during system suspend
(bsc#1258210).
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (bsc#1258210).
- smb/server: Fix another refcount leak in smb2_open()
(bsc#1258210).
- nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
(bsc#1258210).
- drm/msm/dsi: fix hdisplay calculation when programming dsi
registers (bsc#1258210).
- xprtrdma: Decrement re_receiving on the early exit paths
(bsc#1258210).
- btrfs: hold space_info->lock when clearing periodic reclaim
ready (bsc#1258210).
- workqueue: Use POOL_BH instead of WQ_BH when checking pool flags
(bsc#1258210).
- perf disasm: Fix off-by-one bug in outside check (bsc#1258210).
- dt-bindings: display/msm: qcom,sm8750-mdss: Fix model typo
(bsc#1258210).
- net: dsa: realtek: rtl8365mb: remove ifOutDiscards from
rx_packets (bsc#1258210).
- drm/msm/dsi: fix pclk rate calculation for bonded dsi
(bsc#1258210).
- drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT
for smu v13 (bsc#1258210).
- drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT
for smu v14 (bsc#1258210).
- bonding: do not set usable_slaves for broadcast mode
(bsc#1258210).
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link
states (bsc#1258210).
- net/mlx5: Fix deadlock between devlink lock and esw->wq
(bsc#1258210).
- net/mlx5: Fix crash when moving to switchdev mode (bsc#1258210).
- net/mlx5: Fix peer miss rules host disabled checks
(bsc#1258210).
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
(bsc#1258210).
- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
(bsc#1258210).
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ
(bsc#1258210).
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
on TEQL slave xmit (bsc#1258210).
- rxrpc, afs: Fix missing error pointer check after
rxrpc_kernel_lookup_peer() (bsc#1258210).
- net: spacemit: Fix error handling in
emac_alloc_rx_desc_buffers() (bsc#1258210).
- net: spacemit: Fix error handling in emac_tx_mem_map()
(bsc#1258210).
- drm/sitronix/st7586: fix bad pixel data due to byte swap
(bsc#1258210).
- spi: amlogic: spifc-a4: Fix DMA mapping error handling
(bsc#1258210).
- spi: rockchip-sfc: Fix double-free in remove() callback
(bsc#1258210).
- ASoC: soc-core: drop delayed_work_pending() check before flush
(bsc#1258210).
- ASoC: soc-core: flush delayed work before removing DAIs and
widgets (bsc#1258210).
- ASoC: simple-card-utils: fix graph_util_is_ports0() for DT
overlays (bsc#1258210).
- net: sfp: improve Huawei MA5671a fixup (bsc#1258210).
- serial: caif: hold tty->link reference in ldisc_open and
ser_release (bsc#1258210).
- bnxt_en: Fix RSS table size check when changing ethtool channels
(bsc#1258210).
- mctp: i2c: fix skb memory leak in receive path (bsc#1258210).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
return value (bsc#1258210).
- bonding: use common function to compute the features
(bsc#1258210).
- bonding: fix type confusion in bond_setup_by_slave()
(bsc#1258210).
- mctp: route: hold key->lock in mctp_flow_prepare_output()
(bsc#1258210).
- amd-xgbe: fix link status handling in xgbe_rx_adaptation
(bsc#1258210).
- amd-xgbe: prevent CRC errors during RX adaptation with AN
disabled (bsc#1258210).
- net: add xmit recursion limit to tunnel xmit functions
(bsc#1258210).
- netfilter: nf_tables: Fix for duplicate device in netdev hooks
(bsc#1258210).
- netfilter: nf_tables: always walk all pending catchall elements
(bsc#1258210).
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in
pipapo_drop() (bsc#1258210).
- netfilter: x_tables: guard option walkers against 1-byte tail
reads (bsc#1258210).
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict
error path (bsc#1258210).
- netfilter: nfnetlink_cthelper: fix OOB read in
nfnl_cthelper_dump_table() (bsc#1258210).
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
(bsc#1258210).
- perf annotate: Fix hashmap__new() error checking (bsc#1258210).
- regulator: pca9450: Correct interrupt type (bsc#1258210).
- regulator: pca9450: Add support for setting debounce settings
(bsc#1258210).
- regulator: pca9450: Correct probed name for PCA9452
(bsc#1258210).
- perf ftrace: Fix hashmap__new() error checking (bsc#1258210).
- sched: idle: Make skipping governor callbacks more consistent
(bsc#1258210).
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
(bsc#1258210).
- nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1258210).
- drivers: net: ice: fix devlink parameters get without irdma
(bsc#1258210).
- iavf: fix PTP use-after-free during reset (bsc#1258210).
- iavf: fix incorrect reset handling in callbacks (bsc#1258210).
- i40e: fix src IP mask checks and memcpy argument names in
cloud filter (bsc#1258210).
- e1000/e1000e: Fix leak in DMA error cleanup (bsc#1258210).
- page_pool: store detach_time as ktime_t to avoid false-negatives
(bsc#1258210).
- net: bcmgenet: fix broken EEE by converting to phylib-managed
state (bsc#1258210).
- ACPI: OSL: fix __iomem type on return from
acpi_os_map_generic_address() (bsc#1258210).
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for
clock acquisition (bsc#1258210).
- ASoC: detect empty DMI strings (bsc#1258210).
- drm/amdkfd: Unreserve bo if queue update failed (bsc#1258210).
- perf synthetic-events: Fix stale build ID in module MMAP2
records (bsc#1258210).
- net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
(bsc#1258210).
- net: dsa: realtek: Fix LED group port bit for non-zero LED group
(bsc#1258210).
- neighbour: restore protocol != 0 check in pneigh update
(bsc#1258210).
- net/mana: Null service_wq on setup error to prevent double
destroy (bsc#1258210).
- net: ti: am65-cpsw: move hw timestamping to ndo callback
(bsc#1258210).
- net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for
PTP support (bsc#1258210).
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition
(bsc#1258210).
- octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt
status (bsc#1258210).
- net: prevent NULL deref in ip[6]tunnel_xmit() (bsc#1258210).
- iio: imu: inv-mpu9150: fix irq ack preventing irq storms
(bsc#1258210).
- usb: gadget: f_mass_storage: Fix potential integer overflow
in check_command_size_in_blocks() (bsc#1258210).
- drm/amdgpu: ensure no_hw_access is visible before MMIO
(bsc#1258210).
- cgroup: fix race between task migration and iteration
(bsc#1258210).
- sched_ext: Remove redundant css_put() in scx_cgroup_init()
(bsc#1258210).
- ALSA: pcm: fix use-after-free on linked stream runtime in
snd_pcm_drain() (bsc#1258210).
- ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2
mixer interfaces (bsc#1258210).
- can: gs_usb: gs_can_open(): always configure bitrates before
starting device (bsc#1258210).
- net: usb: lan78xx: fix silent drop of packets with checksum
errors (bsc#1258210).
- net: usb: lan78xx: fix TX byte statistics for small packets
(bsc#1258210).
- net: usb: lan78xx: fix WARN in __netif_napi_del_locked on
disconnect (bsc#1258210).
- net: usb: lan78xx: skip LTM configuration for LAN7850
(bsc#1258210).
- rust_binder: fix oneway spam detection (bsc#1258210).
- rust_binder: check ownership before using vma (bsc#1258210).
- rust_binder: avoid reading the written value in offsets array
(bsc#1258210).
- rust_binder: call set_notification_done() without proc lock
(bsc#1258210).
- rust: kbuild: allow `unused_features` (bsc#1258210).
- rust: str: make NullTerminatedFormatter public (bsc#1258210).
- ata: libata-core: Add BRIDGE_OK quirk for QEMU drives
(bsc#1258210).
- ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
(bsc#1258210).
- KVM: arm64: Fix protected mode handling of pages larger than
4kB (bsc#1258210).
- KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM
(bsc#1258210).
- KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with
in-kernel APIC (bsc#1258210).
- KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2
fault (bsc#1258210).
- USB: add QUIRK_NO_BOS for video capture several devices
(bsc#1258210).
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
(bsc#1258210).
- USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb
speed (bsc#1258210).
- usb: xhci: Fix memory leak in xhci_disable_slot() (bsc#1258210).
- usb: xhci: Prevent interrupt storm on host controller error
(HCE) (bsc#1258210).
- usb: yurex: fix race in probe (bsc#1258210).
- usb: dwc3: pci: add support for the Intel Nova Lake -H
(bsc#1258210).
- usb: misc: uss720: properly clean up reference in uss720_probe()
(bsc#1258210).
- usb: core: don't power off roothub PHYs if phy_set_mode()
fails (bsc#1258210).
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343
(bsc#1258210).
- usb: roles: get usb role switch from parent only for
usb-b-connector (bsc#1258210).
- usb: typec: altmode/displayport: set displayport signaling
rate in configure message (bsc#1258210).
- USB: usbcore: Introduce usb_bulk_msg_killable() (bsc#1258210).
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified
timeouts (bsc#1258210).
- USB: core: Limit the length of unkillable synchronous timeouts
(bsc#1258210).
- usb: class: cdc-wdm: fix reordering issue in read code path
(bsc#1258210).
- usb: renesas_usbhs: fix use-after-free in ISR during device
removal (bsc#1258210).
- usb: gadget: f_hid: fix SuperSpeed descriptors (bsc#1258210).
- usb: mdc800: handle signal and read racing (bsc#1258210).
- usb: gadget: uvc: fix interval_duration calculation
(bsc#1258210).
- usb: image: mdc800: kill download URB on timeout (bsc#1258210).
- usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus
handling (bsc#1258210).
- usb: gadget: f_ncm: Fix atomic context locking issue
(bsc#1258210).
- usb: legacy: ncm: Fix NPE in gncm_bind (bsc#1258210).
- Revert "usb: gadget: f_ncm: Fix atomic context locking issue"
(bsc#1258210).
- Revert "usb: legacy: ncm: Fix NPE in gncm_bind" (bsc#1258210).
- Revert "usb: gadget: u_ether: Add auto-cleanup helper for
freeing net_device" (bsc#1258210).
- Revert "usb: gadget: f_ncm: align net_device lifecycle with
bind/unbind" (bsc#1258210).
- Revert "usb: gadget: u_ether: add gether_opts for config
caching" (bsc#1258210).
- usb: gadget: f_ncm: Fix net_device lifecycle with device_move
(bsc#1258210).
- mm/tracing: rss_stat: ensure curr is false from kthread context
(bsc#1258210).
- mm/kfence: fix KASAN hardware tag faults during late enablement
(bsc#1258210).
- mmc: mmci: Fix device_node reference leak in
of_get_dml_pipe_index() (bsc#1258210).
- mm/kfence: disable KFENCE upon KASAN HW tags enablement
(bsc#1258210).
- mmc: core: Avoid bitfield RMW for claim/retune flags
(bsc#1258210).
- ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop
and start (bsc#1258210).
- tipc: fix divide-by-zero in tipc_sk_filter_connect()
(bsc#1258210).
- kprobes: avoid crash when rmmod/insmod after ftrace killed
(bsc#1258210).
- ceph: add a bunch of missing ceph_path_info initializers
(bsc#1258210).
- libceph: Fix potential out-of-bounds access in
ceph_handle_auth_reply() (bsc#1258210).
- libceph: reject preamble if control segment is empty
(bsc#1258210).
- libceph: prevent potential out-of-bounds reads in
process_message_header() (bsc#1258210).
- libceph: Use u32 for non-negative values in ceph_monmap_decode()
(bsc#1258210).
- libceph: admit message frames only in CEPH_CON_S_OPEN state
(bsc#1258210).
- ceph: fix i_nlink underrun during async unlink (bsc#1258210).
- ceph: do not skip the first folio of the next object in
writeback (bsc#1258210).
- ceph: fix memory leaks in ceph_mdsc_build_path() (bsc#1258210).
- ALSA: usb-audio: Improve Focusrite sample rate filtering
(bsc#1258210).
- time/jiffies: Mark jiffies_64_to_clock_t() notrace
(bsc#1258210).
- i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach
and reattach (bsc#1258210).
- powerpc, perf: Check that current->mm is alive before getting
user callchain (bsc#1258210).
- scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS
suspend (bsc#1258210).
- scsi: hisi_sas: Fix NULL pointer exception during user_scan()
(bsc#1258210).
- Revert "tcpm: allow looking for role_sw device in the main node"
(bsc#1258210).
- Revert "ptdesc: remove references to folios from
__pagetable_ctor() and pagetable_dtor()" (bsc#1258210).
- kthread: consolidate kthread exit paths to prevent
use-after-free (bsc#1258210).
- cpufreq: intel_pstate: Fix NULL pointer dereference in
update_cpu_qos_request() (bsc#1258210).
- drm/amdgpu: add upper bound check on user inputs in signal ioctl
(bsc#1258210).
- drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
(bsc#1258210).
- drm/amdgpu: add upper bound check on user inputs in wait ioctl
(bsc#1258210).
- drm/amd: Disable MES LR compute W/A (bsc#1258210).
- ipmi:si: Don't block module unload if the BMC is messed up
(bsc#1258210).
- ipmi:si: Use a long timeout when the BMC is misbehaving
(bsc#1258210).
- drm/bridge: samsung-dsim: Fix memory leak in error path
(bsc#1258210).
- drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
(bsc#1258210).
- ipmi:si: Handle waiting messages when BMC failure detected
(bsc#1258210).
- nouveau/gsp: drop WARN_ON in ACPI probes (bsc#1258210).
- drm/i915/alpm: ALPM disable fixes (bsc#1258210).
- gpiolib: normalize the return value of gc->get() on behalf of
buggy drivers (bsc#1258210).
- ipmi:si: Fix check for a misbehaving BMC (bsc#1258210).
- drm/xe/sync: Cleanup partially initialized sync on parse failure
(bsc#1258210).
- s390/pfault: Fix virtual vs physical address confusion
(bsc#1258210).
- bpf: Fix kprobe_multi cookies access in show_fdinfo callback
(bsc#1258210).
- arm64: gcs: Honour mprotect(PROT_NONE) on shadow stack mappings
(bsc#1258210).
- nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit()
(bsc#1258210).
- device property: Allow secondary lookup in
fwnode_get_next_child_node() (bsc#1258210).
- irqchip/gic-v3-its: Limit number of per-device MSIs to the
range the ITS supports (bsc#1258210).
- btrfs: fix chunk map leak in btrfs_map_block() after
btrfs_chunk_map_num_copies() (bsc#1258210).
- iomap: reject delalloc mappings during writeback (bsc#1258210).
- ice: reintroduce retry mechanism for indirect AQ (bsc#1258210).
- kunit: irq: Ensure timer doesn't fire too frequently
(bsc#1258210).
- ixgbevf: fix link setup issue (bsc#1258210).
- mm/damon/core: clear walk_control on inactive context in
damos_walk() (bsc#1258210).
- mm/slab: fix an incorrect check in obj_exts_alloc_size()
(bsc#1258210).
- staging: sm750fb: add missing pci_release_region on error and
removal (bsc#1258210).
- staging: rtl8723bs: properly validate the data in
rtw_get_ie_ex() (bsc#1258210).
- staging: rtl8723bs: fix potential out-of-bounds read in
rtw_restruct_wmm_ie (bsc#1258210).
- pinctrl: cy8c95x0: Don't miss reading the last bank registers
(bsc#1258210).
- selftests: fix mntns iteration selftests (bsc#1258210).
- media: dvb-net: fix OOB access in ULE extension header tables
(bsc#1258210).
- net: mana: Ring doorbell at 4 CQ wraparounds (bsc#1258210).
- ice: fix retry for AQ command 0x06EE (bsc#1258210).
- tracing: Fix syscall events activation by ensuring refcount
hits zero (bsc#1258210).
- net/tcp-ao: Fix MAC comparison to be constant-time
(bsc#1258210).
- batman-adv: Avoid double-rtnl_lock ELP metric worker
(bsc#1258210).
- drm/xe/xe2_hpg: Correct implementation of Wa_16025250150
(bsc#1258210).
- pmdomain: rockchip: Fix PD_VCODEC for RK3588 (bsc#1258210).
- parisc: Increase initial mapping to 64 MB with KALLSYMS
(bsc#1258210).
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
(bsc#1258210).
- arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix
kexec/hibernation (bsc#1258210).
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
(bsc#1258210).
- io_uring/zcrx: use READ_ONCE with user shared RQEs
(bsc#1258210).
- parisc: Fix initial page table creation for boot (bsc#1258210).
- arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS
faults (bsc#1258210).
- parisc: Check kernel mapping earlier at bootup (bsc#1258210).
- io_uring/net: reject SEND_VECTORIZED when unsupported
(bsc#1258210).
- regulator: pf9453: Respect IRQ trigger settings from firmware
(bsc#1258210).
- pmdomain: bcm: bcm2835-power: Fix broken reset status read
(bsc#1258210).
- crypto: ccp - allow callers to use HV-Fixed page API when SEV
is disabled (bsc#1258210).
- s390/stackleak: Fix __stackleak_poison() inline assembly
constraint (bsc#1258210).
- ata: libata-core: Disable LPM on ST1000DM010-2EP102
(bsc#1258210).
- s390/xor: Fix xor_xc_2() inline assembly constraints
(bsc#1258210).
- drm/amd/display: Fallback to boot snapshot for dispclk
(bsc#1258210).
- s390/xor: Fix xor_xc_5() inline assembly (bsc#1258210).
- slab: distinguish lock and trylock for sheaf_flush_main()
(bsc#1258210).
- memcg: fix slab accounting in refill_obj_stock() trylock path
(bsc#1258210).
- ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
(bsc#1258210).
- smb: server: fix use-after-free in smb2_open() (bsc#1258210).
- ksmbd: fix use-after-free by using call_rcu() for oplock_info
(bsc#1258210).
- net: mctp: fix device leak on probe failure (bsc#1258210).
- net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
(bsc#1258210).
- net: ncsi: fix skb leak in error paths (bsc#1258210).
- net: ethernet: arc: emac: quiesce interrupts before requesting
IRQ (bsc#1258210).
- net: dsa: microchip: Fix error path in PTP IRQ setup
(bsc#1258210).
- drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on
smu v13.0.x (bsc#1258210).
- drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1258210).
- drm/amd: Set num IP blocks to 0 if discovery fails
(bsc#1258210).
- drm/amd: Fix NULL pointer dereference in device cleanup
(bsc#1258210).
- drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
(bsc#1258210).
- drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS
output (bsc#1258210).
- drm/i915: Fix potential overflow of shmem scatterlist length
(bsc#1258210).
- drm/i915/psr: Repeat Selective Update area alignment
(bsc#1258210).
- drm/msm: Fix dma_free_attrs() buffer size (bsc#1258210).
- drm/amd: Fix a few more NULL pointer dereference in device
cleanup (bsc#1258210).
- drm/msm/dpu: Correct the SA8775P intr_underrun/intr_underrun
index (bsc#1258210).
- tracing: Fix enabling multiple events on the kernel command
line and bootconfig (bsc#1258210).
- tracing: Fix trace_buf_size= cmdline parameter with sizes >=
2G (bsc#1258210).
- net-shapers: don't free reply skb after genlmsg_reply()
(bsc#1258210).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
(bsc#1258210).
- io_uring/kbuf: check if target buffer list is still legacy on
recycle (bsc#1258210).
- cifs: make default value of retrans as zero (bsc#1258210).
- xfs: fix integer overflow in bmap intent sort comparator
(bsc#1258210).
- xfs: fix returned valued from xfs_defer_can_append
(bsc#1258210).
- xfs: fix undersized l_iclog_roundoff values (bsc#1258210).
- xfs: ensure dquot item is deleted from AIL only after log
shutdown (bsc#1258210).
- sched_ext: Fix enqueue_task_scx() truncation of upper enqueue
flags (bsc#1258210).
- s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
(bsc#1258210).
- s390/dasd: Move quiesce state with pprc swap (bsc#1258210).
- s390/dasd: Copy detected format information to secondary device
(bsc#1258210).
- powerpc/pseries: Correct MSI allocation tracking (bsc#1258210).
- powerpc64/bpf: fix kfunc call support (bsc#1258210).
- powerpc64/bpf: fix the address returned by bpf_get_func_ip
(bsc#1258210).
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed
brace error (bsc#1258210).
- scsi: core: Fix error handling for scsi_alloc_sdev()
(bsc#1258210).
- x86/apic: Disable x2apic on resume if the kernel expects so
(bsc#1258210).
- kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
(bsc#1258210).
- lib/bootconfig: fix snprintf truncation check in
xbc_node_compose_key_after() (bsc#1258210).
- lib/bootconfig: check bounds before writing in
__xbc_open_brace() (bsc#1258210).
- smb: client: fix atomic open with O_DIRECT & O_SYNC
(bsc#1258210).
- smb: client: fix in-place encryption corruption in SMB2_write()
(bsc#1258210).
- smb: client: fix iface port assignment in
parse_server_interfaces (bsc#1258210).
- btrfs: fix transaction abort when snapshotting received
subvolumes (bsc#1258210).
- btrfs: fix transaction abort on file creation due to name hash
collision (bsc#1258210).
- btrfs: fix transaction abort on set received ioctl due to item
overflow (bsc#1258210).
- btrfs: add missing RCU unlock in error path in
try_release_subpage_extent_buffer() (bsc#1258210).
- btrfs: abort transaction on failure to update root in the
received subvol ioctl (bsc#1258210).
- iio: dac: ds4424: reject -128 RAW value (bsc#1258210).
- iio: frequency: adf4377: Fix duplicated soft reset mask
(bsc#1258210).
- iio: chemical: sps30_serial: fix buffer size in
sps30_serial_read_meas() (bsc#1258210).
- iio: chemical: sps30_i2c: fix buffer size in
sps30_i2c_read_meas() (bsc#1258210).
- iio: magnetometer: tlv493d: remove erroneous shift in X-axis
data (bsc#1258210).
- iio: potentiometer: mcp4131: fix double application of wiper
shift (bsc#1258210).
- iio: chemical: bme680: Fix measurement wait duration calculation
(bsc#1258210).
- iio: buffer: Fix wait_queue not being removed (bsc#1258210).
- iio: gyro: mpu3050-core: fix pm_runtime error handling
(bsc#1258210).
- iio: imu: adis: Fix NULL pointer dereference in adis_init
(bsc#1258210).
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling
(bsc#1258210).
- iio: light: bh1780: fix PM runtime leak on error path
(bsc#1258210).
- iio: imu: inv_icm42600: fix odr switch to the same value
(bsc#1258210).
- iio: imu: inv_icm42600: fix odr switch when turning buffer off
(bsc#1258210).
- iio: proximity: hx9023s: fix assignment order for __counted_by
(bsc#1258210).
- iio: proximity: hx9023s: Protect against division by zero in
set_samp_freq (bsc#1258210).
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout
errors (bsc#1258210).
- i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path
(bsc#1258210).
- i3c: mipi-i3c-hci: Consolidate spinlocks (bsc#1258210).
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue
abort (bsc#1258210).
- i3c: mipi-i3c-hci: Add missing TID field to no-op command
descriptor (bsc#1258210).
- i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1258210).
- i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA
dequeue (bsc#1258210).
- cxl/acpi: Fix CXL_ACPI and CXL_PMEM Kconfig tristate mismatch
(bsc#1258210).
- mm: Fix a hmm_range_fault() livelock / starvation problem
(bsc#1258210).
- drm/gud: rearrange gud_probe() to prepare for function splitting
(bsc#1258210).
- drm/gud: fix NULL crtc dereference on display disable
(bsc#1258210).
- mmc: dw_mmc-rockchip: Add memory clock auto-gating support
(bsc#1258210).
- mmc: dw_mmc-rockchip: Fix runtime PM support for internal
phase support (bsc#1258210).
- KVM: arm64: gic: Set vgic_model before initing private IRQs
(bsc#1258210).
- KVM: arm64: Eagerly init vgic dist/redist on vgic creation
(bsc#1258210).
- KVM: SVM: Limit AVIC physical max index based on configured
max_vcpu_ids (bsc#1258210).
- KVM: SVM: Add a helper to look up the max physical ID for AVIC
(bsc#1258210).
- KVM: SVM: Set/clear CR8 write interception when AVIC is
(de)activated (bsc#1258210).
- smb: client: Compare MACs in constant time (bsc#1258210).
- ksmbd: Compare MACs in constant time (bsc#1258210).
- lib/crypto: tests: Depend on library options rather than
selecting them (bsc#1258210).
- net/tcp-md5: Fix MAC comparison to be constant-time
(bsc#1258210).
- io_uring: ensure ctx->rings is stable for task work flags
manipulation (bsc#1258210).
- io_uring/eventfd: use ctx->rings_rcu for flags checking
(bsc#1258210).
- mm/damon/core: disallow non-power of two min_region_sz
(bsc#1258210).
- drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode
with HPD (bsc#1258210).
- bpf: drop kthread_exit from noreturn_deny (bsc#1258210).
- Rename to
patches.kernel.org/6.18.19-326-kbuild-Leave-objtool-binary-around-with-make-.patch.
- commit 23e2070
* Fri Mar 20 2026 rfrohl@suse.com
- Revert "usb: gadget: u_ether: use <linux/hex.h> header file (git-fixes)."
This reverts commit 1aece24b649082c913a49dcbd8bea35804e440a9.
- commit caf1124
* Fri Mar 13 2026 rfrohl@suse.com
- Linux 6.18.18 (bsc#1258210).
- ata: libata: cancel pending work after clearing deferred_qc
(bsc#1258210).
- apparmor: fix race between freeing data and fs accessing it
(bsc#1258210).
- apparmor: fix race on rawdata dereference (bsc#1258210).
- apparmor: fix differential encoding verification (bsc#1258210).
- apparmor: fix unprivileged local user can do privileged policy
management (bsc#1258210).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
(bsc#1258210).
- apparmor: fix missing bounds check on DEFAULT table in
verify_dfa() (bsc#1258210).
- apparmor: fix side-effect bug in match_char() macro usage
(bsc#1258210).
- apparmor: fix: limit the number of levels of policy namespaces
(bsc#1258210).
- apparmor: replace recursive profile removal with iterative
approach (bsc#1258210).
- apparmor: fix memory leak in verify_header (bsc#1258210).
- apparmor: validate DFA start states are in bounds in unpack_pdb
(bsc#1258210).
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
and shared blocks (bsc#1258210).
- net/sched: act_gate: snapshot parameters with RCU on replace
(bsc#1258210).
- commit 567c0f1
* Fri Mar 13 2026 rfrohl@suse.com
- usb: gadget: u_ether: use <linux/hex.h> header file (git-fixes).
- Revert "drm/syncobj: Fix handle <-> fd ioctls with dirty stack"
(git-fixes).
- commit 1aece24
* Thu Mar 12 2026 rfrohl@suse.com
- Update x86_64 config files for v6.18.17.
- commit 4b4c582
* Thu Mar 12 2026 rfrohl@suse.com
- Linux 6.18.17 (bsc#1258210).
- selftests/bpf: Avoid simplification of crafted bounds test
(bsc#1258210).
- bpf: collect only live registers in linked regs (bsc#1258210).
- tracing: Add NULL pointer check to trigger_data_free()
(bsc#1258210).
- selftest/arm64: Fix sve2p1_sigill() to hwcap test (bsc#1258210).
- ata: libata-eh: Fix detection of deferred qc timeouts
(bsc#1258210).
- xdp: produce a warning when calculated tailroom is negative
(bsc#1258210).
- net: enetc: use truesize as XDP RxQ info frag_size (bsc#1258210).
- i40e: use xdp.frame_sz as XDP RxQ info frag_size (bsc#1258210).
- i40e: fix registering XDP RxQ info (bsc#1258210).
- xsk: introduce helper to determine rxq->frag_size (bsc#1258210).
- xdp: use modulo operation to calculate XDP frag tailroom
(bsc#1258210).
- net/sched: act_ife: Fix metalist update behavior (bsc#1258210).
- net: ipv6: fix panic when IPv4 route references loopback IPv6
nexthop (bsc#1258210).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
(bsc#1258210).
- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
(bsc#1258210).
- selftests/harness: order TEST_F and XFAIL_ADD constructors
(bsc#1258210).
- kselftest/harness: Use helper to avoid zero-size memset warning
(bsc#1258210).
- net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case
of error in mtk_xdp_setup() (bsc#1258210).
- netfilter: nft_set_pipapo: split gc into unlink and reclaim
phase (bsc#1258210).
- netfilter: nf_tables: clone set on flush only (bsc#1258210).
- netfilter: nf_tables: unconditionally bump set->nelems before
insertion (bsc#1258210).
- net: Provide a PREEMPT_RT specific check for
netdev_queue::_xmit_lock (bsc#1258210).
- block: use trylock to avoid lockdep circular dependency in sysfs
(bsc#1258210).
- net: stmmac: Defer VLAN HW configuration when interface is down
(bsc#1258210).
- net: stmmac: Fix VLAN HW state restore (bsc#1258210).
- net: stmmac: Improve double VLAN handling (bsc#1258210).
- net: stmmac: Fix error handling in VLAN add and delete paths
(bsc#1258210).
- nfc: rawsock: cancel tx_work before socket teardown
(bsc#1258210).
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion
callback (bsc#1258210).
- nfc: nci: complete pending data exchange on device close
(bsc#1258210).
- nfc: nci: free skb on nci_transceive early error paths
(bsc#1258210).
- net: devmem: use READ_ONCE/WRITE_ONCE on binding->dev
(bsc#1258210).
- net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset()
(bsc#1258210).
- net: nfc: nci: Fix zero-length proprietary notifications
(bsc#1258210).
- tcp: secure_seq: add back ports to TS offset (bsc#1258210).
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for
lockless qdiscs (bsc#1258210).
- hwmon: (max6639) fix inverted polarity (bsc#1258210).
- timekeeping: Fix timex status validation for auxiliary clocks
(bsc#1258210).
- nvme: fix memory allocation in nvme_pr_read_keys() (bsc#1258210).
- nvme: reject invalid pr_read_keys() num_keys values
(bsc#1258210).
- drm/xe/reg_sr: Fix leak on xa_store failure (bsc#1258210).
- drm/xe/gsc: Fix GSC proxy cleanup on early initialization
failure (bsc#1258210).
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus
lock" (bsc#1258210).
- drm/sched: Fix kernel-doc warning for drm_sched_job_done()
(bsc#1258210).
- amd-xgbe: fix sleep while atomic on suspend/resume (bsc#1258210).
- net: ipv4: fix ARM64 alignment fault in multipath hash seed
(bsc#1258210).
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
(bsc#1258210).
- smb/client: fix buffer size for smb311_posix_qinfo in
SMB311_posix_query_info() (bsc#1258210).
- smb/client: fix buffer size for smb311_posix_qinfo in
smb2_compound_op() (bsc#1258210).
- bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
(bsc#1258210).
- igb: Fix trigger of incorrect irq in igb_xsk_wakeup
(bsc#1258210).
- iavf: fix netdev->max_mtu to respect actual hardware limit
(bsc#1258210).
- libie: don't unroll if fwlog isn't supported (bsc#1258210).
- ice: fix adding AQ LLDP filter for VF (bsc#1258210).
- xen/acpi-processor: fix _CST detection using undersized
evaluation buffer (bsc#1258210).
- net/rds: Fix circular locking dependency in rds_tcp_tune
(bsc#1258210).
- indirect_call_wrapper: do not reevaluate function pointer
(bsc#1258210).
- wifi: mt76: Fix possible oob access in
mt76_connac2_mac_write_txwi_80211() (bsc#1258210).
- wifi: mt76: mt7925: Fix possible oob access in
mt7925_mac_write_txwi_80211() (bsc#1258210).
- wifi: mt76: mt7996: Fix possible oob access in
mt7996_mac_write_txwi_80211() (bsc#1258210).
- wifi: wlcore: Fix a locking bug (bsc#1258210).
- wifi: cw1200: Fix locking in error paths (bsc#1258210).
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (bsc#1258210).
- octeon_ep_vf: Relocate counter updates before NAPI (bsc#1258210).
- octeon_ep: avoid compiler and IQ/OQ reordering (bsc#1258210).
- octeon_ep: Relocate counter updates before NAPI (bsc#1258210).
- bpf/bonding: reject vlan+srcmac xmit_hash_policy change when
XDP is loaded (bsc#1258210).
- net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write
return value (bsc#1258210).
- kunit: tool: copy caller args in run_kernel to prevent mutation
(bsc#1258210).
- rust: kunit: fix warning when !CONFIG_PRINTK (bsc#1258210).
- drm/xe/configfs: Free ctx_restore_mid_bb in release
(bsc#1258210).
- drm/xe: Do not preempt fence signaling CS instructions
(bsc#1258210).
- drm/syncobj: Fix handle <-> fd ioctls with dirty stack
(bsc#1258210).
- wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config
(bsc#1258210).
- can: mcp251x: fix deadlock in error path of mcp251x_open
(bsc#1258210).
- can: bcm: fix locking for bcm_op runtime updates (bsc#1258210).
- amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
(bsc#1258210).
- net: ti: icssg-prueth: Fix ping failure after offload mode
setup when link speed is not 1G (bsc#1258210).
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (bsc#1258210).
- dpaa2-switch: Fix interrupt storm after receiving bad if_id
in IRQ handler (bsc#1258210).
- xsk: Fix zero-copy AF_XDP fragment drop (bsc#1258210).
- xsk: Fix fragment node deletion to prevent buffer leak
(bsc#1258210).
- tcp: give up on stronger sk_rcvbuf checks (for now)
(bsc#1258210).
- udp: Unhash auto-bound connected sk from 4-tuple hash table
when disconnected (bsc#1258210).
- inet: annotate data-races around isk->inet_num (bsc#1258210).
- nvme-multipath: fix leak on try_module_get failure (bsc#1258210).
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast
entry handling in ALE table (bsc#1258210).
- net: annotate data-races around sk->sk_{data_ready,write_space}
(bsc#1258210).
- nvmet-fcloop: Check remoteport port_state before calling done
callback (bsc#1258210).
- netfs: Fix unbuffered/DIO writes to dispatch subrequests in
strict sequence (bsc#1258210).
- drm/solomon: Fix page start when updating rectangle in page
addressing mode (bsc#1258210).
- e1000e: clear DPG_EN after reset to avoid autonomous power-gating
(bsc#1258210).
- i40e: Fix preempt count leak in napi poll tracepoint
(bsc#1258210).
- ice: recap the VSI and QoS info after rebuild (bsc#1258210).
- idpf: Fix flow rule delete failure due to invalid validation
(bsc#1258210).
- idpf: change IRQ naming to match netdev and ethtool queue
numbering (bsc#1258210).
- idpf: increment completion queue next_to_clean in sw marker
wait routine (bsc#1258210).
- hwmon: (it87) Check the it87_lock() return value (bsc#1258210).
- pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe()
(bsc#1258210).
- pinctrl: meson: amlogic-a4: Fix device node reference leak in
aml_dt_node_to_map_pinmux() (bsc#1258210).
- pinctrl: generic: move function to amlogic-am4 driver
(bsc#1258210).
- HID: multitouch: new class MT_CLS_EGALAX_P80H84 (bsc#1258210).
- module: Remove duplicate freeing of lockdep classes
(bsc#1258210).
- platform/x86: thinkpad_acpi: Fix errors reading battery
thresholds (bsc#1258210).
- pinctrl: qcom: qcs615: Add missing dual edge GPIO IRQ errata
flag (bsc#1258210).
- pinctrl: equilibrium: fix warning trace on load (bsc#1258210).
- pinctrl: equilibrium: rename irq_chip function callbacks
(bsc#1258210).
- hwmon: (aht10) Fix initialization commands for AHT20
(bsc#1258210).
- hwmon: (aht10) Add support for dht20 (bsc#1258210).
- nvme: fix admin queue leak on controller reset (bsc#1258210).
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
(bsc#1258210).
- Bluetooth: Fix CIS host feature condition (bsc#1258210).
- net: stmmac: remove support for lpi_intr_o (bsc#1258210).
- platform/x86: hp-bioscfg: Support allocations of larger data
(bsc#1258210).
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error
paths (bsc#1258210).
- ipmi: Fix use-after-free and list corruption on sender error
(bsc#1258210).
- ASoC: fsl_xcvr: provide regmap names (bsc#1258210).
- ASoC: fsl_xcvr: use dev_err_probe() replacing dev_err() +
return (bsc#1258210).
- ARM: clean up the memset64() C wrapper (bsc#1258210).
- Revert "netfilter: nft_set_rbtree: validate open interval
overlap" (bsc#1258210).
- kbuild: Split .modinfo out from ELF_DETAILS (bsc#1258210).
- selftests: mptcp: join: check removing signal+subflow endp
(bsc#1258210).
- selftests: mptcp: join: check RM_ADDR not sent over same subflow
(bsc#1258210).
- selftests: mptcp: more stable simult_flows tests (bsc#1258210).
- mptcp: pm: in-kernel: always mark signal+subflow endp as used
(bsc#1258210).
- mptcp: pm: avoid sending RM_ADDR over same subflow (bsc#1258210).
- scsi: core: Fix refcount leak for tagset_refcnt (bsc#1258210).
- smb: client: fix oops due to uninitialised var in smb2_unlink()
(bsc#1258210).
- smb: client: Don't log plaintext credentials in
cifs_set_cifscreds (bsc#1258210).
- smb: client: fix broken multichannel with krb5+signing
(bsc#1258210).
- smb: client: fix cifs_pick_channel when channels are equally
loaded (bsc#1258210).
- xfs: Fix error pointer dereference (bsc#1258210).
- xfs: fix xfs_group release bug in xfs_dax_notify_dev_failure
(bsc#1258210).
- drbd: fix null-pointer dereference on local read error
(bsc#1258210).
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
(bsc#1258210).
- Squashfs: check metadata block offset is within range
(bsc#1258210).
- mm: thp: deny THP for files on anonymous inodes (bsc#1258210).
- scsi: target: Fix recursive locking in __configfs_open_file()
(bsc#1258210).
- tracing: Fix WARN_ON in tracing_buffers_mmap_close (bsc#1258210).
- nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit()
(bsc#1258210).
- net/sched: ets: fix divide by zero in the offload path
(bsc#1258210).
- arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2
is enabled (bsc#1258210).
- cpufreq: intel_pstate: Fix crash during turbo disable
(bsc#1258210).
- RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
(bsc#1258210).
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
(bsc#1258210).
- IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
(bsc#1258210).
- net: phy: register phy led_triggers during probe to avoid
AB-BA deadlock (bsc#1258210).
- gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets
for QPL (bsc#1258210).
- Bluetooth: purge error queues in socket destructors
(bsc#1258210).
- wifi: mac80211: fix NULL pointer dereference in
mesh_rx_csa_frame() (bsc#1258210).
- wifi: mac80211: bounds-check link_id in
ieee80211_ml_reconfiguration (bsc#1258210).
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
(bsc#1258210).
- wifi: libertas: fix use-after-free in lbs_free_adapter()
(bsc#1258210).
- wifi: radiotap: reject radiotap with unknown bits (bsc#1258210).
- ALSA: hda/realtek: add quirk for Samsung Galaxy Book Flex
(NT950QCT-A38A) (bsc#1258210).
- ALSA: hda/realtek: Add quirk for Acer Aspire V3-572G
(bsc#1258210).
- ALSA: hda/realtek: fix model name typo for Samsung Galaxy Book
Flex (NT950QCG-X716) (bsc#1258210).
- ALSA: hda/intel: increase default bdl_pos_adj for Nvidia
controllers (bsc#1258210).
- ALSA: usb-audio: Use correct version for UAC3 header validation
(bsc#1258210).
- ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_SKIP_IFACE_SETUP
(bsc#1258210).
- ALSA: hda/realtek: Add quirk for HP Pavilion 15-eh1xxx to
enable mute LED (bsc#1258210).
- platform/x86: dell-wmi: Add audio/mic mute key codes
(bsc#1258210).
- platform/x86: alienware-wmi-wmax: Add G-Mode support to m18
laptops (bsc#1258210).
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password
data (bsc#1258210).
- x86/boot/sev: Move SEV decompressor variables into the .data
section (bsc#1258210).
- x86/sev: Allow IBPB-on-Entry feature for SNP guests
(bsc#1258210).
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths
(bsc#1258210).
- perf/x86/intel/uncore: Add per-scheduler IMC CAS count events
(bsc#1258210).
- x86/efi: defer freeing of boot services memory (bsc#1258210).
- HID: multitouch: Keep latency normal on deactivate for
reactivation gesture (bsc#1258210).
- HID: pidff: Fix condition effect bit clearing (bsc#1258210).
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks
missing them (bsc#1258210).
- can: usb: f81604: handle bulk write errors properly
(bsc#1258210).
- can: usb: f81604: handle short interrupt urb messages properly
(bsc#1258210).
- can: usb: etas_es58x: correctly anchor the urb in the read
bulk callback (bsc#1258210).
- can: ucan: Fix infinite loop from zero-length messages
(bsc#1258210).
- can: usb: f81604: correctly anchor the urb in the read bulk
callback (bsc#1258210).
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper
length of a message (bsc#1258210).
- net: usb: pegasus: validate USB endpoints (bsc#1258210).
- net: usb: kalmia: validate USB endpoints (bsc#1258210).
- net: usb: kaweth: validate USB endpoints (bsc#1258210).
- nfc: pn533: properly drop the usb interface reference on
disconnect (bsc#1258210).
- media: dvb-core: fix wrong reinitialization of ringbuffer on
reopen (bsc#1258210).
- namespace: fix proc mount iteration (bsc#1258210).
- eventpoll: Fix integer overflow in ep_loop_check_proc()
(bsc#1258210).
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards
(bsc#1258210).
- drm/i915/dp: Fix pipe BPP clamping due to HDR (bsc#1258210).
- drm/i915/dp: Fail state computation for invalid DSC source
input BPP values (bsc#1258210).
- LoongArch: Remove some extern variables in source files
(bsc#1258210).
- LoongArch: Handle percpu handler address for ORC unwinder
(bsc#1258210).
- LoongArch: Remove unnecessary checks for ORC unwinder
(bsc#1258210).
- mm/slab: use prandom if !allow_spin (bsc#1258210).
- slub: remove CONFIG_SLUB_TINY specific code paths (bsc#1258210).
- hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler
optimization induced race (bsc#1258210).
- drm/amd: Fix hang on amdgpu unload by using
pci_dev_is_disconnected() (bsc#1258210).
- PM: sleep: core: Avoid bit field races related to
work_in_progress (bsc#1258210).
- btrfs: zoned: fixup last alloc pointer after extent removal
for RAID0/10 (bsc#1258210).
- btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros
(bsc#1258210).
- KVM: x86: Add x2APIC "features" to control EOI broadcast
suppression (bsc#1258210).
- PCI: dwc: ep: Fix resizable BAR support for multi-PF
configurations (bsc#1258210).
- PCI: dwc: Remove duplicate dw_pcie_ep_hide_ext_capability()
function (bsc#1258210).
- PCI: dwc: Add new APIs to remove standard and extended Capability
(bsc#1258210).
- PCI: Add preceding capability position support in
PCI_FIND_NEXT_*_CAP macros (bsc#1258210).
- ARM: dts: imx53-usbarmory: Replace license text comment with
SPDX identifier (bsc#1258210).
- ACPI: APEI: GHES: Disable KASAN instrumentation when compile
testing with clang < 18 (bsc#1258210).
- ACPI: APEI: GHES: Add helper for CPER CXL protocol errors checks
(bsc#1258210).
- clk: tegra: tegra124-emc: fix device leak on set_rate()
(bsc#1258210).
- arm64: dts: rockchip: Fix rk3588 PCIe range mappings
(bsc#1258210).
- arm64: dts: rockchip: Fix rk356x PCIe range mappings
(bsc#1258210).
- iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device
without scalable mode (bsc#1258210).
- Input: synaptics_i2c - guard polling restart in resume
(bsc#1258210).
- Input: synaptics_i2c - replace use of system_wq with
system_dfl_wq (bsc#1258210).
- media: iris: Add missing platform data entries for SM8750
(bsc#1258210).
- media: iris: remove v4l2_m2m_ioctl_{de,en}coder_cmd API usage
during STOP handling (bsc#1258210).
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before
submitting I/O (bsc#1258210).
- ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT
(bsc#1258210).
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks
(bsc#1258210).
- unwind_user/x86: Teach FP unwind about start of function
(bsc#1258210).
- unwind_user/x86: Enable frame pointer unwinding on x86
(bsc#1258210).
- unwind: Implement compat fp unwind (bsc#1258210).
- unwind: Simplify unwind_user_next_fp() alignment check
(bsc#1258210).
- drm/tegra: dsi: fix device leak on probe (bsc#1258210).
- KVM: x86: Ignore -EBUSY when checking nested events from
vcpu_block() (bsc#1258210).
- media: tegra-video: Fix memory leak in
__tegra_channel_try_format() (bsc#1258210).
- accel/rocket: fix unwinding in error path in rocket_probe
(bsc#1258210).
- accel/rocket: fix unwinding in error path in rocket_core_init
(bsc#1258210).
- usb: gadget: f_ncm: align net_device lifecycle with bind/unbind
(bsc#1258210).
- usb: gadget: u_ether: Add auto-cleanup helper for freeing
net_device (bsc#1258210).
- usb: gadget: u_ether: add gether_opts for config caching
(bsc#1258210).
- net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels
(bsc#1258210).
- Revert "PCI: dw-rockchip: Enumerate endpoints based on
dll_link_up IRQ" (bsc#1258210).
- PCI: dw-rockchip: Change get_ltssm() to provide L1 Substates
info (bsc#1258210).
- PCI: dwc: Add L1 Substates context to ltssm_status of debugfs
(bsc#1258210).
- PCI: dw-rockchip: Configure L1SS support (bsc#1258210).
- PCI: dwc: Advertise L1 PM Substates only if driver requests it
(bsc#1258210).
- PCI: j721e: Add config guards for Cadence Host and Endpoint
library APIs (bsc#1258210).
- PCI: j721e: Use devm_clk_get_optional_enabled() to get and
enable the clock (bsc#1258210).
- memory: mtk-smi: fix device leak on larb probe (bsc#1258210).
- memory: mtk-smi: fix device leaks on common probe (bsc#1258210).
- x86/acpi/boot: Correct acpi_is_processor_usable() check again
(bsc#1258210).
- bpf: Improve bounds when tnum has a single possible value
(bsc#1258210).
- bpf: Introduce tnum_step to step through tnum's members
(bsc#1258210).
- bpf: Add bitwise tracking for BPF_END (bsc#1258210).
- bpf: Fix race in devmap on PREEMPT_RT (bsc#1258210).
- bpf: Fix race in cpumap on PREEMPT_RT (bsc#1258210).
- PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value (bsc#1258210).
- spi: stm32: fix missing pointer assignment in case of dma
chaining (bsc#1258210).
- sched_ext: Fix SCX_EFLAG_INITIALIZED being a no-op flag
(bsc#1258210).
- selftests/bpf: Fix OOB read in dmabuf_collector (bsc#1258210).
- bpf: Fix stack-out-of-bounds write in devmap (bsc#1258210).
- bpf, arm64: Force 8-byte alignment for JIT buffer to prevent
atomic tearing (bsc#1258210).
- ASoC: SDCA: Fix comments for sdca_irq_request() (bsc#1258210).
- ALSA: usb: qcom: Correct parameter comment for
uaudio_transfer_buffer_setup() (bsc#1258210).
- btrfs: fix compat mask in error messages in
btrfs_check_features() (bsc#1258210).
- btrfs: print correct subvol num if active swapfile prevents
deletion (bsc#1258210).
- btrfs: fix warning in scrub_verify_one_metadata() (bsc#1258210).
- btrfs: fix objectid value in error message in
check_extent_data_ref() (bsc#1258210).
- btrfs: fix incorrect key offset in error message in
check_dev_extent_item() (bsc#1258210).
- btrfs: fix error message order of parameters in
btrfs_delete_delayed_dir_index() (bsc#1258210).
- btrfs: free pages on error in btrfs_uring_read_extent()
(bsc#1258210).
- ALSA: hda: cs35l56: Fix signedness error in
cs35l56_hda_posture_put() (bsc#1258210).
- drm/amdgpu: Fix error handling in slot reset (bsc#1258210).
- drm/amdgpu: Fix locking bugs in error paths (bsc#1258210).
- drm/amdgpu: Unlock a mutex before destroying it (bsc#1258210).
- drm/amdgpu/userq: Do not allow userspace to trivially triger
kernel warnings (bsc#1258210).
- PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
(bsc#1258210).
- arm64: io: Extract user memory type in ioremap_prot()
(bsc#1258210).
- arm64: io: Rename ioremap_prot() to __ioremap_prot()
(bsc#1258210).
- s390/vtime: Fix virtual timer forwarding (bsc#1258210).
- s390/idle: Fix cpu idle exit cpu time accounting (bsc#1258210).
- perf: Fix __perf_event_overflow() vs perf_remove_from_context()
race (bsc#1258210).
- ALSA: usb-audio: Use inclusive terms (bsc#1258210).
- ALSA: usb-audio: Cap the packet size pre-calculations
(bsc#1258210).
- drm/client: Do not destroy NULL modes (bsc#1258210).
- zloop: check for spurious options passed to remove (bsc#1258210).
- zloop: advertise a volatile write cache (bsc#1258210).
- regulator: bq257xx: Fix device node reference leak in
bq257xx_reg_dt_parse_gpio() (bsc#1258210).
- scsi: ufs: core: Move link recovery for hibern8 exit failure
to wl_resume (bsc#1258210).
- cxl: Fix race of nvdimm_bus object when creating nvdimm objects
(bsc#1258210).
- cxl: Move devm_cxl_add_nvdimm_bridge() to cxl_pmem.ko
(bsc#1258210).
- cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask()
in update_cpumasks_hier() (bsc#1258210).
- drm/xe/wa: Steer RMW of MCR registers while building default
LRC (bsc#1258210).
- accel/amdxdna: Validate command buffer payload count
(bsc#1258210).
- accel/amdxdna: Prevent ubuf size overflow (bsc#1258210).
- accel/amdxdna: Remove buffer size check when creating command BO
(bsc#1258210).
- perf/core: Fix invalid wait context in ctx_sched_in()
(bsc#1258210).
- rseq: Clarify rseq registration rseq_size bound check comment
(bsc#1258210).
- sched/fair: Fix lag clamp (bsc#1258210).
- sched/eevdf: Update se->vprot in reweight_entity() (bsc#1258210).
- sched/fair: Only set slice protection at pick time (bsc#1258210).
- sched/fair: Fix zero_vruntime tracking (bsc#1258210).
- sched/fair: Introduce and use the vruntime_cmp() and
vruntime_op() wrappers for wrapped-signed aritmetics
(bsc#1258210).
- sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime,
and helper functions (bsc#1258210).
- sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight
(bsc#1258210).
- x86/cfi: Fix CFI rewrite for odd alignments (bsc#1258210).
- x86/fred: Correct speculative safety in fred_extint()
(bsc#1258210).
- ALSA: usb-audio: Add QUIRK_FLAG_SKIP_IFACE_SETUP (bsc#1258210).
- ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite
devices (bsc#1258210).
- ALSA: scarlett2: Fix DSP filter control array handling
(bsc#1258210).
- drm/imx: parallel-display: check return value of
devm_drm_bridge_add() in imx_pd_probe() (bsc#1258210).
- scsi: pm8001: Fix use-after-free in pm8001_queue_command()
(bsc#1258210).
- scsi: lpfc: Properly set WC for DPP mapping (bsc#1258210).
- irqchip/sifive-plic: Fix frozen interrupt due to affinity
setting (bsc#1258210).
- drm/tiny: sharp-memory: fix pointer error dereference
(bsc#1258210).
- drm/fourcc: fix plane order for 10/12/16-bit YCbCr formats
(bsc#1258210).
- KVM: arm64: Fix ID register initialization for non-protected
pKVM guests (bsc#1258210).
- KVM: arm64: Hide S1POE from guests when not supported by the
host (bsc#1258210).
- drm/logicvc: Fix device node reference leak in
logicvc_drm_config_parse() (bsc#1258210).
- debugobject: Make it work with deferred page initialization -
again (bsc#1258210).
- drm/vmwgfx: Return the correct value in vmw_translate_ptr
functions (bsc#1258210).
- drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release
(bsc#1258210).
- perf/core: Fix refcount bug and potential UAF in perf_mmap
(bsc#1258210).
- commit a8213c9
* Wed Mar 04 2026 rfrohl@suse.com
- Refresh
patches.kernel.org/6.18.16-498-KVM-nSVM-Remove-a-user-triggerable-WARN-on-ne.patch.
- commit e903c9c
* Wed Mar 04 2026 rfrohl@suse.com
- dpll: zl3073x: Fix ref frequency setting (git-fixes).
- commit 4b64a5c
* Wed Mar 04 2026 rfrohl@suse.com
- Linux 6.18.16 (bsc#1258210).
- perf test stat: Update test expectations and events
(bsc#1258210).
- perf test stat tests: Fix for virtualized machines
(bsc#1258210).
- perf build: Raise minimum shellcheck version to 0.7.2
(bsc#1258210).
- perf unwind-libdw: Fix invalid reference counts (bsc#1258210).
- perf callchain: Fix srcline printing with inlines (bsc#1258210).
- libsubcmd: Fix null intersection case in exclude_cmds()
(bsc#1258210).
- rtc: max31335: use correct CONFIG symbol in IS_REACHABLE()
(bsc#1258210).
- perf symbol-elf: Fix leak of ELF files with GNU debugdata
(bsc#1258210).
- perf tools: Get debug info of DSO properly (bsc#1258210).
- perf cs-etm: Fix decoding for sparse CPU maps (bsc#1258210).
- perf annotate: Fix args leak of map_symbol (bsc#1258210).
- perf maps: Fix reference count leak in maps__find_ams()
(bsc#1258210).
- perf tests sched: Avoid error in cleanup on loaded machines
(bsc#1258210).
- perf annotate: Fix memcpy size in arch__grow_instructions()
(bsc#1258210).
- tools headers: Go back to include asm-generic/unistd.h for arm64
(bsc#1258210).
- perf annotate: Fix BUILD_NONDISTRO=1 missing args->ms
conversions to pointer (bsc#1258210).
- perf vendor events amd: Fix Zen 5 MAB allocation events
(bsc#1258210).
- perf build: Remove NO_LIBCAP that controls nothing
(bsc#1258210).
- libperf build: Always place libperf includes first
(bsc#1258210).
- perf test: Fix test case perftool-testsuite_report for s390
(bsc#1258210).
- rtc: interface: Alarm race handling should not discard preceding
error (bsc#1258210).
- statmount: permission check should return EPERM (bsc#1258210).
- hfsplus: fix volume corruption issue for generic/480
(bsc#1258210).
- audit: add fchmodat2() to change attributes class (bsc#1258210).
- hfsplus: fix volume corruption issue for generic/498
(bsc#1258210).
- fs/buffer: add alert in try_to_free_buffers() for folios
without buffers (bsc#1258210).
- kselftest/kublk: include message in _Static_assert for C11
compatibility (bsc#1258210).
- audit: add missing syscalls to read class (bsc#1258210).
- hfsplus: pretend special inodes as regular files (bsc#1258210).
- i3c: master: svc: Initialize 'dev' to NULL in
svc_i3c_master_ibi_isr() (bsc#1258210).
- i3c: mipi-i3c-hci: Stop reading Extended Capabilities if
capability ID is 0 (bsc#1258210).
- i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init
(bsc#1258210).
- dlm: fix recovery pending middle conversion (bsc#1258210).
- minix: Add required sanity checking to minix_check_superblock()
(bsc#1258210).
- dlm: validate length in dlm_search_rsb_tree (bsc#1258210).
- btrfs: fallback to buffered IO if the data profile has
duplication (bsc#1258210).
- btrfs: handle user interrupt properly in btrfs_trim_fs()
(bsc#1258210).
- netfs: when subreq is marked for retry, do not check if it
faced an error (bsc#1258210).
- smb: client: add proper locking around ses->iface_last_update
(bsc#1258210).
- gfs2: fiemap page fault fix (bsc#1258210).
- smb: client: prevent races in ->query_interfaces()
(bsc#1258210).
- tools/cpupower: Fix inverted APERF capability check
(bsc#1258210).
- s390/boot: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
(bsc#1258210).
- tools/power cpupower: Reset errno before strtoull()
(bsc#1258210).
- s390/purgatory: Add -Wno-default-const-init-unsafe to
KBUILD_CFLAGS (bsc#1258210).
- perf/arm-cmn: Support CMN-600AE (bsc#1258210).
- arm64: Add support for TSV110 Spectre-BHB mitigation
(bsc#1258210).
- rnbd-srv: Zero the rsp buffer before using it (bsc#1258210).
- x86/xen/pvh: Enable PAE mode for 32-bit guest only when
CONFIG_X86_PAE is set (bsc#1258210).
- ntfs: ->d_compare() must not block (bsc#1258210).
- EFI/CPER: don't dump the entire memory region (bsc#1258210).
- APEI/GHES: ensure that won't go past CPER allocated record
(bsc#1258210).
- APEI/GHES: ARM processor Error: don't go past allocated memory
(bsc#1258210).
- EFI/CPER: don't go past the ARM processor CPER record buffer
(bsc#1258210).
- ACPI: processor: Fix NULL-pointer dereference in
acpi_processor_errata_piix4() (bsc#1258210).
- ACPI: resource: Add JWIPC JVC9100 to
irq1_level_low_skip_override[] (bsc#1258210).
- ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
(bsc#1258210).
- powercap: intel_rapl: Add PL4 support for Ice Lake
(bsc#1258210).
- io_uring/timeout: annotate data race in io_flush_timeouts()
(bsc#1258210).
- alpha: fix user-space corruption during memory compaction
(bsc#1258210).
- md-cluster: fix NULL pointer dereference in
process_metadata_update (bsc#1258210).
- md raid: fix hang when stopping arrays with metadata through
dm-raid (bsc#1258210).
- rust: cpufreq: always inline functions using build_assert with
arguments (bsc#1258210).
- cpufreq: dt-platdev: Block the driver from probing on more QC
platforms (bsc#1258210).
- s390/perf: Disable register readout on sampling events
(bsc#1258210).
- perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
(bsc#1258210).
- ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On
Display) (bsc#1258210).
- ACPI: battery: fix incorrect charging status when current is
zero (bsc#1258210).
- xenbus: Use .freeze/.thaw to handle xenbus devices
(bsc#1258210).
- blk-mq-debugfs: add missing debugfs_mutex in
blk_mq_debugfs_register_hctxs() (bsc#1258210).
- blk-mq-sched: unify elevators checking for async requests
(bsc#1258210).
- block: decouple secure erase size limit from discard size limit
(bsc#1258210).
- sparc: Synchronize user stack on fork and clone (bsc#1258210).
- sparc: don't reference obsolete termio struct for TC* constants
(bsc#1258210).
- bpf: verifier improvement in 32bit shift sign extension pattern
(bsc#1258210).
- irqchip/riscv-imsic: Add a CPU pm notifier to restore the
IMSIC on exit (bsc#1258210).
- perf/x86/msr: Add Airmont NP (bsc#1258210).
- perf/x86/cstate: Add Airmont NP (bsc#1258210).
- perf/x86/intel: Add Airmont NP (bsc#1258210).
- bpf: crypto: Use the correct destructor kfunc type
(bsc#1258210).
- bpf: net_sched: Use the correct destructor kfunc type
(bsc#1258210).
- bpf: Recognize special arithmetic shift in the verifier
(bsc#1258210).
- genirq/cpuhotplug: Notify about affinity changes breaking the
affinity mask (bsc#1258210).
- bpf: Properly mark live registers for indirect jumps
(bsc#1258210).
- perf/core: Fix slow perf_event_task_exit() with LBR callstacks
(bsc#1258210).
- arm64/ftrace,bpf: Fix partial regs after bpf_prog_run
(bsc#1258210).
- clocksource/drivers/sh_tmu: Always leave device running after
probe (bsc#1258210).
- clocksource/drivers/timer-integrator-ap: Add missing Kconfig
dependency on OF (bsc#1258210).
- PCI/MSI: Unmap MSI-X region on error (bsc#1258210).
- bpftool: Fix dependencies for static build (bsc#1258210).
- crypto: hisilicon/qm - move the barrier before writing to the
mailbox register (bsc#1258210).
- mailbox: bcm-ferxrm-mailbox: Use default primary handler
(bsc#1258210).
- char: tpm: cr50: Remove IRQF_ONESHOT (bsc#1258210).
- sched/debug: Fix updating of ppos on server write ops
(bsc#1258210).
- pstore: ram_core: fix incorrect success return when vmap()
fails (bsc#1258210).
- firmware: arm_ffa: Unmap Rx/Tx buffers on init failure
(bsc#1258210).
- Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"
(bsc#1258210).
- EDAC/igen6: Add more Intel Panther Lake-H SoCs support
(bsc#1258210).
- EDAC/igen6: Add two Intel Amston Lake SoCs support
(bsc#1258210).
- arm64: tegra: smaug: Add usb-role-switch support (bsc#1258210).
- soc: imx8m: Fix error handling for clk_prepare_enable()
(bsc#1258210).
- x86/sev: Use kfree_sensitive() when freeing a SNP message
descriptor (bsc#1258210).
- parisc: Prevent interrupts during reboot (bsc#1258210).
- drm/xe/ggtt: Use scope-based runtime pm (bsc#1258210).
- drm/xe: Covert return of -EBUSY to -ENOMEM in VM bind IOCTL
(bsc#1258210).
- drm/xe/vm: Skip ufence association for CPU address mirror VMA
during MAP (bsc#1258210).
- drm/display/dp_mst: Add protection against 0 vcpi (bsc#1258210).
- drm/panthor: Always wait after sending a command to an AS
(bsc#1258210).
- drm/xe/xe3_lpg: Apply Wa_16028005424 (bsc#1258210).
- gpu/panel-edp: add AUO panel entry for B140HAN06.4
(bsc#1258210).
- accel/amdxdna: Fix tail-pointer polling in mailbox_get_msg()
(bsc#1258210).
- drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1258210).
- drm/amdgpu: fix the calculation of RAS bad page number
(bsc#1258210).
- drm/amdgpu/ras: Move ras data alloc before bad page check
(bsc#1258210).
- drm/amd/display: Correct FIXED_VS Link Rate Toggle Condition
(bsc#1258210).
- drm/amd/display: Guard FAMS2 configuration updates
(bsc#1258210).
- drm/panel-edp: Add AUO B140QAX01.H panel (bsc#1258210).
- drm/amdkfd: Handle GPU reset and drain retry fault race
(bsc#1258210).
- spi-geni-qcom: initialize mode related registers to 0
(bsc#1258210).
- spi-geni-qcom: use xfer->bits_per_word for can_dma()
(bsc#1258210).
- spi: cadence-quadspi: Parse DT for flashes with the rest of
the DT parsing (bsc#1258210).
- drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32
(bsc#1258210).
- drm/amd/display: Don't disable DPCD mst_en if sink connected
(bsc#1258210).
- ASoC: SOF: ipc4: Support for sending payload along with
LARGE_CONFIG_GET (bsc#1258210).
- media: dvb-core: dmxdevfilter must always flush bufs
(bsc#1258210).
- gpio: pca953x: Add support for TCAL6408 TCAL6416 (bsc#1258210).
- spi: stm32: fix Overrun issue at < 8bpw (bsc#1258210).
- drm/v3d: Set DMA segment size to avoid debug warnings
(bsc#1258210).
- media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
(bsc#1258210).
- media: omap3isp: isppreview: always clamp in
preview_try_format() (bsc#1258210).
- media: omap3isp: set initial format (bsc#1258210).
- media: chips-media: wave5: Fix conditional in start_streaming
(bsc#1258210).
- media: chips-media: wave5: Process ready frames when CMD_STOP
sent to Encoder (bsc#1258210).
- drm/panel: edp: add BOE NV140WUM-T08 panel (bsc#1258210).
- media: mediatek: vcodec: Don't try to decode 422/444 VP9
(bsc#1258210).
- drm/amdgpu: add support for HDP IP version 6.1.1 (bsc#1258210).
- drm/amd/display: Fix dsc eDP issue (bsc#1258210).
- drm/amdgpu: avoid a warning in timedout job handler
(bsc#1258210).
- drm/amd/display: Add signal type check for dcn401
get_phyd32clk_src (bsc#1258210).
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last
Fence Update and Timeline Management v4 (bsc#1258210).
- HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple
keyboards (bsc#1258210).
- HID: pidff: Do not set out of range trigger button
(bsc#1258210).
- HID: multitouch: add quirks for Lenovo Yoga Book 9i
(bsc#1258210).
- drm/amdgpu: Skip loading SDMA_RS64 in VF (bsc#1258210).
- drm/amd/display: only power down dig on phy endpoints
(bsc#1258210).
- drm/xe: Only toggle scheduling in TDR if GuC is running
(bsc#1258210).
- ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
(bsc#1258210).
- ASoC: wm8962: Don't report a microphone if it's shorted to
ground on plug (bsc#1258210).
- spi: spi-mem: Limit octal DTR constraints to octal DTR
situations (bsc#1258210).
- cgroup/cpuset: Don't fail cpuset.cpus change in v2
(bsc#1258210).
- media: amphion: Clear last_buffer_dequeued flag for
DEC_CMD_START (bsc#1258210).
- drm/panel: Fix a possible null-pointer dereference in
jdi_panel_dsi_remove() (bsc#1258210).
- media: adv7180: fix frame interval in progressive mode
(bsc#1258210).
- media: pvrusb2: fix URB leak in pvr2_send_request_ex
(bsc#1258210).
- media: solo6x10: Check for out of bounds chip_id (bsc#1258210).
- media: cx25821: Fix a resource leak in cx25821_dev_setup()
(bsc#1258210).
- media: qcom: camss: Do not enable cpas fast ahb clock for
SM8550 VFE lite (bsc#1258210).
- media: v4l2-async: Fix error handling on steps after finding
a match (bsc#1258210).
- media: mt9m114: Avoid a reset low spike during probe()
(bsc#1258210).
- media: mt9m114: Return -EPROBE_DEFER if no endpoint is found
(bsc#1258210).
- media: ipu6: Ensure stream_mutex is acquired when dealing with
node list (bsc#1258210).
- media: ipu6: Close firmware streams on streaming enable failure
(bsc#1258210).
- media: ipu6: Always close firmware stream (bsc#1258210).
- ALSA: hda/realtek: add HP Victus 16-e0xxx mute LED quirk
(bsc#1258210).
- ALSA: usb-audio: presonus s18xx uses little-endian
(bsc#1258210).
- drm/amdkfd: Relax size checking during queue buffer get
(bsc#1258210).
- drm/amdkfd: Fix GART PTE for non-4K pagesize in
svm_migrate_gart_map() (bsc#1258210).
- drm: Account property blob allocations to memcg (bsc#1258210).
- drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting
for some panels (bsc#1258210).
- hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
(bsc#1258210).
- virt: vbox: uapi: Mark inner unions in packed structs as packed
(bsc#1258210).
- ASoC: soc-acpi-intel-arl-match: change rt722 amp endpoint to
aggregated (bsc#1258210).
- PCI: Add Intel Nova Lake audio Device ID (bsc#1258210).
- drm/amd/display: Disable FEC when powering down encoders
(bsc#1258210).
- drm/amd/display: Ensure link output is disabled in backend
reset for PLL_ON (bsc#1258210).
- drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state
callback (bsc#1258210).
- drm/atmel-hlcdc: don't reject the commit if the src rect has
fractional parts (bsc#1258210).
- drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after
release (bsc#1258210).
- media: rkisp1: Fix filter mode register configuration
(bsc#1258210).
- drm/amd/display: Revert "init dispclk from bootup clock for
DCN315" (bsc#1258210).
- HID: multitouch: add eGalaxTouch EXC3188 support (bsc#1258210).
- media: uvcvideo: Create an ID namespace for streaming output
terminals (bsc#1258210).
- HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
(bsc#1258210).
- ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie
15X Pro (bsc#1258210).
- ALSA: hda/realtek: fix LG Gram Style 14 speakers (bsc#1258210).
- gpio: aspeed-sgpio: Change the macro to support deferred probe
(bsc#1258210).
- ASoC: sunxi: sun50i-dmic: Add missing check for
devm_regmap_init_mmio (bsc#1258210).
- spi: spi-mem: Protect dirmap_create() with
spi_mem_access_start/end (bsc#1258210).
- drm/amd/display: Fix GFX12 family constant checks (bsc#1258210).
- drm/amd/display: avoid dig reg access timeout on usb4 link
training fail (bsc#1258210).
- drm/amdgpu: validate user queue size constraints (bsc#1258210).
- spi: cadence-qspi: Try hard to disable the clocks (bsc#1258210).
- ASoC: codecs: max98390: Check return value of
devm_gpiod_get_optional() in max98390_i2c_probe() (bsc#1258210).
- hwmon: (dell-smm) Add support for Dell OptiPlex 7080
(bsc#1258210).
- hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (bsc#1258210).
- hwmon: (nct6683) Add customer ID for ASRock Z590 Taichi
(bsc#1258210).
- hwmon: (emc2305) Fix a resource leak in
emc2305_of_parse_pwm_child (bsc#1258210).
- hwmon: (f71882fg) Add F81968 support (bsc#1258210).
- hwmon: (nct7363) Fix a resource leak in
nct7363_present_pwm_fanin (bsc#1258210).
- HID: logitech-hidpp: Add support for Logitech K980
(bsc#1258210).
- ASoC: es8328: Add error unwind in resume (bsc#1258210).
- modpost: Amend ppc64 save/restfpr symnames for -Os build
(bsc#1258210).
- power: sequencing: fix missing state_lock in pwrseq_power_on()
error path (bsc#1258210).
- ASoC: SOF: Intel: hda: Fix NULL pointer dereference
(bsc#1258210).
- spi: geni-qcom: Fix abort sequence execution for serial engine
errors (bsc#1258210).
- ASoC: fsl: imx-rpmsg: use snd_soc_find_dai_with_mutex() in probe
(bsc#1258210).
- ALSA: hda/realtek - Enable mute LEDs on HP ENVY x360 15-es0xxx
(bsc#1258210).
- ALSA: mixer: oss: Add card disconnect checkpoints (bsc#1258210).
- ALSA: usb-audio: Add iface reset and delay quirk for AB13X
USB Audio (bsc#1258210).
- jfs: Add missing set_freezable() for freezable kthread
(bsc#1258210).
- jfs: nlink overflow in jfs_rename (bsc#1258210).
- PCI: dwc: Skip PME_Turn_Off broadcast and L2/L3 transition
during suspend if link is not up (bsc#1258210).
- wifi: rtw88: fix DTIM period handling when conf->dtim_period
is zero (bsc#1258210).
- wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
(bsc#1258210).
- wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (bsc#1258210).
- wifi: rtw89: 8922a: set random mac if efuse contains zeroes
(bsc#1258210).
- wifi: rtw89: ser: enable error IMR after recovering from L1
(bsc#1258210).
- wifi: rtw89: setting TBTT AGG number when mac port
initialization (bsc#1258210).
- wifi: rtw89: mcc: reset probe counter when receiving beacon
(bsc#1258210).
- wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
(bsc#1258210).
- wifi: rtw88: Fix inadvertent sharing of struct
ieee80211_supported_band data (bsc#1258210).
- wifi: rtw89: regd: 6 GHz power type marks default when inactive
(bsc#1258210).
- dm: replace -EEXIST with -EBUSY (bsc#1258210).
- dm: remove fake timeout to avoid leak request (bsc#1258210).
- iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
(bsc#1258210).
- net: wwan: mhi: Add network support for Foxconn T99W760
(bsc#1258210).
- wifi: rtw89: fix potential zero beacon interval in beacon
tracking (bsc#1258210).
- rtla: Fix NULL pointer dereference in actions_parse
(bsc#1258210).
- wifi: libertas: fix WARNING in usb_tx_block (bsc#1258210).
- iommu/amd: move wait_on_sem() out of spinlock (bsc#1258210).
- wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N)
(bsc#1258210).
- wifi: rtw89: pci: validate sequence number of TX release report
(bsc#1258210).
- wifi: rtw89: mac: correct page number for CSI response
(bsc#1258210).
- wifi: rtw89: wow: add reason codes for disassociation in WoWLAN
mode (bsc#1258210).
- PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
(bsc#1258210).
- wifi: rtw89: disable EHT protocol by chip capabilities
(bsc#1258210).
- wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
(bsc#1258210).
- wifi: ath11k: Fix failure to connect to a 6 GHz AP
(bsc#1258210).
- wifi: ath12k: fix preferred hardware mode calculation
(bsc#1258210).
- wifi: ath12k: fix mac phy capability parsing (bsc#1258210).
- wifi: cfg80211: allow only one NAN interface, also in multi
radio (bsc#1258210).
- ipv6: annotate data-races in
ip6_multipath_hash_{policy,fields}() (bsc#1258210).
- ipv6: annotate data-races over sysctl.flowlabel_reflect
(bsc#1258210).
- ipv6: annotate data-races in net/ipv6/route.c (bsc#1258210).
- ipv6: exthdrs: annotate data-race over multiple sysctl
(bsc#1258210).
- ext4: mark group add fast-commit ineligible (bsc#1258210).
- ext4: move ext4_percpu_param_init() before ext4_mb_init()
(bsc#1258210).
- ext4: mark group extend fast-commit ineligible (bsc#1258210).
- ext4: use reserved metadata blocks when splitting extent on
endio (bsc#1258210).
- netfilter: nf_conntrack: Add allow_clash to generic protocol
handler (bsc#1258210).
- netfilter: xt_tcpmss: check remaining length before reading
optlen (bsc#1258210).
- openrisc: define arch-specific version of nop() (bsc#1258210).
- net: usb: r8152: fix transmit queue timeout (bsc#1258210).
- PCI: imx6: Add CLKREQ# override to enable REFCLK for i.MX95 PCIe
(bsc#1258210).
- wifi: iwlwifi: mld: Handle rate selection for NAN interface
(bsc#1258210).
- wifi: iwlwifi: mvm: check the validity of noa_len (bsc#1258210).
- wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1258210).
- wifi: iwlwifi: mld: fix chandef start calculation (bsc#1258210).
- wifi: iwlwifi: mld: Fix primary link selection logic
(bsc#1258210).
- driver core: faux: stop using static struct device
(bsc#1258210).
- wifi: rtw89: fix unable to receive probe responses under MLO
connection (bsc#1258210).
- wifi: rtw89: 8922a: add digital compensation for 2GHz
(bsc#1258210).
- net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1258210).
- ext4: propagate flags to convert_initialized_extent()
(bsc#1258210).
- gro: change the BUG_ON() in gro_pull_from_frag0() (bsc#1258210).
- ipv4: igmp: annotate data-races around idev->mr_maxdelay
(bsc#1258210).
- net: hns3: extend HCLGE_FD_AD_QID to 11 bits (bsc#1258210).
- wifi: iwlegacy: add missing mutex protection in
il4965_store_tx_power() (bsc#1258210).
- wifi: iwlegacy: add missing mutex protection in
il3945_store_measurement() (bsc#1258210).
- wifi: rtw89: pci: validate release report content before using
for RTL8922DE (bsc#1258210).
- ipv4: fib: Annotate access to struct fib_alias.fa_state
(bsc#1258210).
- Bluetooth: btusb: Add support for MediaTek7920 0489:e158
(bsc#1258210).
- Bluetooth: hci_qca: Fix SSR (SubSystem Restart) fail when
BT_EN is pulled up by hw (bsc#1258210).
- Bluetooth: hci_conn: Set link_policy on incoming ACL connections
(bsc#1258210).
- Bluetooth: btusb: Add USB ID 0489:e112 for Realtek 8851BE
(bsc#1258210).
- Bluetooth: hci_conn: use mod_delayed_work for active mode
timeout (bsc#1258210).
- Bluetooth: btusb: Add new VID/PID for RTL8852CE (bsc#1258210).
- Bluetooth: btusb: Add device ID for Realtek RTL8761BU
(bsc#1258210).
- octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
(bsc#1258210).
- net: sfp: add quirk for Lantech 8330-265D (bsc#1258210).
- wifi: rtw89: pci: restore LDO setting after device resume
(bsc#1258210).
- wifi: ath10k: fix lock protection in
ath10k_wmi_event_peer_sta_ps_state_chg() (bsc#1258210).
- bnxt_en: Allow ntuple filters for drops (bsc#1258210).
- ptp: ptp_vmclock: add 'VMCLOCK' to ACPI device match
(bsc#1258210).
- net: usb: sr9700: remove code to drive nonexistent multicast
filter (bsc#1258210).
- vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
(bsc#1258210).
- net/rds: Clear reconnect pending bit (bsc#1258210).
- PCI: Mark ASM1164 SATA controller to avoid bus reset
(bsc#1258210).
- PCI/AER: Clear stale errors on reporting agents upon probe
(bsc#1258210).
- PCI: Fix pci_slot_lock () device locking (bsc#1258210).
- PCI: Enable ACS after configuring IOMMU for OF platforms
(bsc#1258210).
- PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (bsc#1258210).
- PCI: Mark Nvidia GB10 to avoid bus reset (bsc#1258210).
- PCI/bwctrl: Disable BW controller on Intel P45 using a quirk
(bsc#1258210).
- myri10ge: avoid uninitialized variable use (bsc#1258210).
- nfc: nxp-nci: remove interrupt trigger type (bsc#1258210).
- hisi_acc_vfio_pci: resolve duplicate migration states
(bsc#1258210).
- RDMA/rtrs-clt: For conn rejection use actual err number
(bsc#1258210).
- hisi_acc_vfio_pci: fix the queue parameter anomaly issue
(bsc#1258210).
- um: Preserve errno within signal handler (bsc#1258210).
- ata: libata: avoid long timeouts on hot-unplugged SATA DAS
(bsc#1258210).
- hisi_acc_vfio_pci: update status after RAS error (bsc#1258210).
- scsi: buslogic: Reduce stack usage (bsc#1258210).
- vhost: fix caching attributes of MMIO regions by setting them
explicitly (bsc#1258210).
- scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale()
trace event (bsc#1258210).
- riscv: vector: init vector context with proper vlenb
(bsc#1258210).
- tracing: Fix false sharing in hwlat get_sample() (bsc#1258210).
- remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when
mailbox TX channel is uninitialized (bsc#1258210).
- mailbox: mchp-ipc-sbi: fix out-of-bounds access in
mchp_ipc_get_cluster_aggr_irq() (bsc#1258210).
- mailbox: pcc: Remove spurious IRQF_ONESHOT usage (bsc#1258210).
- mailbox: imx: Skip the suspend flag for i.MX7ULP (bsc#1258210).
- mailbox: mchp-ipc-sbi: fix uninitialized symbol and other
smatch warnings (bsc#1258210).
- mailbox: sprd: mask interrupts that are not handled
(bsc#1258210).
- remoteproc: mediatek: Break lock dependency to `prepare_lock`
(bsc#1258210).
- mailbox: sprd: clear delivery flag before handling TX done
(bsc#1258210).
- clk: amlogic: remove potentially unsafe flags from S4 video
clocks (bsc#1258210).
- clk: renesas: rzg2l: Deassert reset on assert timeout
(bsc#1258210).
- clk: microchip: core: correct return value on *_get_parent()
(bsc#1258210).
- HID: i2c-hid: Add FocalTech FT8112 (bsc#1258210).
- m68k: nommu: fix memmove() with differently aligned src and
dest for 68000 (bsc#1258210).
- 9p/xen: protect xen_9pfs_front_free against concurrent calls
(bsc#1258210).
- dmaengine: stm32-dma3: use module_platform_driver (bsc#1258210).
- soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded
of NUC15) (bsc#1258210).
- soundwire: intel_auxdevice: add cs42l45 codec to
wake_capable_list (bsc#1258210).
- staging: rtl8723bs: fix missing status update on
sdio_alloc_irq() failure (bsc#1258210).
- serial: 8250_dw: handle clock enable errors in runtime_resume
(bsc#1258210).
- usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed
PDOs (bsc#1258210).
- fpga: of-fpga-region: Fail if any bridge is missing
(bsc#1258210).
- most: core: fix resource leak in most_register_interface error
paths (bsc#1258210).
- dmaengine: sun6i: Choose appropriate burst length under maxburst
(bsc#1258210).
- dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to
fix warnings (bsc#1258210).
- phy: ti: phy-j721e-wiz: restore mux selection during resume
(bsc#1258210).
- phy: cadence-torrent: restore parent clock for refclk during
resume (bsc#1258210).
- misc: bcm_vk: Fix possible null-pointer dereferences in
bcm_vk_read() (bsc#1258210).
- pinctrl: mediatek: make devm allocations safer and clearer in
mtk_eint_do_init() (bsc#1258210).
- misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
(bsc#1258210).
- misc: ti_fpc202: fix a potential memory leak in probe function
(bsc#1258210).
- pinctrl: renesas: rzt2h: Allow .get_direction() for IRQ function
GPIOs (bsc#1258210).
- iio: bmi270_i2c: Add MODULE_DEVICE_TABLE for BMI260/270
(bsc#1258210).
- usb: gadget: f_fs: fix DMA-BUF OUT queues (bsc#1258210).
- usb: gadget: f_fs: Fix ioctl error handling (bsc#1258210).
- usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
(bsc#1258210).
- staging: rtl8723bs: fix memory leak on failure path
(bsc#1258210).
- serial: 8250: 8250_omap.c: Add support for handling UART error
conditions (bsc#1258210).
- serial: 8250: 8250_omap.c: Clear DMA RX running status only
after DMA termination is done (bsc#1258210).
- fix it87_wdt early reboot by reporting running timer
(bsc#1258210).
- binder: don't use %pK through printk (bsc#1258210).
- watchdog: imx7ulp_wdt: handle the nowayout option (bsc#1258210).
- watchdog: rzv2h_wdt: Discard pm_runtime_put() return value
(bsc#1258210).
- phy: mvebu-cp110-utmi: fix dr_mode property read from dts
(bsc#1258210).
- phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
(bsc#1258210).
- Revert "mfd: da9052-spi: Change read-mask to write-mask"
(bsc#1258210).
- mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (bsc#1258210).
- iio: Use IRQF_NO_THREAD (bsc#1258210).
- iio: magnetometer: Remove IRQF_ONESHOT (bsc#1258210).
- MIPS: Loongson: Make cpumask_of_node() robust against
NUMA_NO_NODE (bsc#1258210).
- fs: ntfs3: check return value of indx_find to avoid infinite
loop (bsc#1258210).
- fs: ntfs3: fix infinite loop in attr_load_runs_range on
inconsistent metadata (bsc#1258210).
- fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
(bsc#1258210).
- fs/ntfs3: drop preallocated clusters for sparse and compressed
files (bsc#1258210).
- ntfs3: fix circular locking dependency in run_unpack_ex
(bsc#1258210).
- fs/ntfs3: avoid calling run_get_entry() when run == NULL in
ntfs_read_run_nb_ra() (bsc#1258210).
- ceph: supply snapshot context in ceph_uninline_data()
(bsc#1258210).
- libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1258210).
- thermal: int340x: Fix sysfs group leak on DLVR registration
failure (bsc#1258210).
- ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90
(bsc#1258210).
- include: uapi: netfilter_bridge.h: Cover for musl libc
(bsc#1258210).
- ARM: 9467/1: mm: Don't use %pK through printk (bsc#1258210).
- drm/amd/display: Fix writeback on DCN 3.2+ (bsc#1258210).
- drm/amdgpu: Skip vcn poison irq release on VF (bsc#1258210).
- mshv: clear eventfd counter on irqfd shutdown (bsc#1258210).
- ASoC: rt721-sdca: Fix issue of fail to detect OMTP jack type
(bsc#1258210).
- regulator: core: Remove regulator supply_name length limit
(bsc#1258210).
- ALSA: hda/tas2781: Ignore reset check for SPI device
(bsc#1258210).
- drm/amd/display: Fix system resume lag issue (bsc#1258210).
- drm/amd/display: Avoid updating surface with the same surface
under MPO (bsc#1258210).
- drm/amdgpu: return when ras table checksum is error
(bsc#1258210).
- drm/amdgpu: Adjust usleep_range in fence wait (bsc#1258210).
- ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3405MA
(bsc#1258210).
- ALSA: usb-audio: Update the number of packets properly at
receiving (bsc#1258210).
- drm/amdgpu: Add HAINAN clock adjustment (bsc#1258210).
- drm/amd/display: bypass post csc for additional color spaces
in dal (bsc#1258210).
- spi: spidev: fix lock inversion between spi_lock and buf_lock
(bsc#1258210).
- drm/radeon: Add HAINAN clock adjustment (bsc#1258210).
- ALSA: usb-audio: Add sanity check for OOB writes at silencing
(bsc#1258210).
- btrfs: replace BUG() with error handling in __btrfs_balance()
(bsc#1258210).
- ASoC: amd: amd_sdw: add machine driver quirk for Lenovo models
(bsc#1258210).
- ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (bsc#1258210).
- arm64: hugetlbpage: avoid unused-but-set-parameter warning
(gcc-16) (bsc#1258210).
- drm/amd/display: Remove conditional for shaper 3DLUT power-on
(bsc#1258210).
- drm/amdgpu: avoid sdma ring reset in sriov (bsc#1258210).
- rtc: zynqmp: correct frequency value (bsc#1258210).
- ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
(bsc#1258210).
- ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
(bsc#1258210).
- iommu/amd: serialize sequence allocation under concurrent TLB
invalidations (bsc#1258210).
- xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
(bsc#1258210).
- xfrm: skip templates check for packet offload tunnel mode
(bsc#1258210).
- ipmi: ipmb: initialise event handler read bytes (bsc#1258210).
- xfrm: always flush state and policy upon NETDEV_UNREGISTER event
(bsc#1258210).
- ipv6: Move ipv6_fl_list from ipv6_pinfo to inet_sock
(bsc#1258210).
- tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1258210).
- psp: use sk->sk_hash in psp_write_headers() (bsc#1258210).
- espintcp: Fix race condition in espintcp_close() (bsc#1258210).
- net: usb: kaweth: remove TX queue manipulation in
kaweth_set_rx_mode (bsc#1258210).
- net: usb: lan78xx: scan all MDIO addresses on LAN7801
(bsc#1258210).
- proc: Fix pointer error dereference (bsc#1258210).
- net: phy: qcom: qca807x: normalize return value of gpio_get
(bsc#1258210).
- net: ethernet: xscale: Check for PTP support properly
(bsc#1258210).
- udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb()
(bsc#1258210).
- bnxt_en: Fix RSS context delete logic (bsc#1258210).
- bnxt_en: Fix deleting of Ntuple filters (bsc#1258210).
- ovpn: tcp - fix packet extraction from stream (bsc#1258210).
- ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
(bsc#1258210).
- dma-mapping: avoid random addr value print out on error path
(bsc#1258210).
- wifi: cfg80211: wext: fix IGTK key ID off-by-one (bsc#1258210).
- wifi: brcmfmac: Fix potential kernel oops when probe fails
(bsc#1258210).
- Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
(bsc#1258210).
- Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ
(bsc#1258210).
- Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU
is too short (bsc#1258210).
- Bluetooth: hci_qca: Cleanup on all setup failures (bsc#1258210).
- Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ
(bsc#1258210).
- Bluetooth: L2CAP: Fix not checking output MTU is acceptable
on L2CAP_ECRED_CONN_REQ (bsc#1258210).
- Bluetooth: L2CAP: Fix missing key size check for
L2CAP_LE_CONN_REQ (bsc#1258210).
- net: do not pass flow_id to set_rps_cpu() (bsc#1258210).
- tls: Fix race condition in tls_sw_cancel_work_tx()
(bsc#1258210).
- kcm: fix zero-frag skb in frag_list on partial sendmsg error
(bsc#1258210).
- dpll: zl3073x: Cache reference monitor status (bsc#1258210).
- dpll: zl3073x: Cache all reference properties in zl3073x_ref
(bsc#1258210).
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for
some chip IDs (bsc#1258210).
- tipc: fix duplicate publication key in
tipc_service_insert_publ() (bsc#1258210).
- RDMA/core: Fix stale RoCE GIDs during netdev events at
registration (bsc#1258210).
- net: wan: farsync: Fix use-after-free bugs caused by unfinished
tasklets (bsc#1258210).
- netconsole: avoid OOB reads, msg is not nul-terminated
(bsc#1258210).
- RDMA/ionic: Fix potential NULL pointer dereference in
ionic_query_port (bsc#1258210).
- RDMA/efa: Fix typo in efa_alloc_mr() (bsc#1258210).
- net: Drop the lock in skb_may_tx_timestamp() (bsc#1258210).
- net: usb: pegasus: enable basic endpoint checking (bsc#1258210).
- erofs: fix interlaced plain identification for encoded extents
(bsc#1258210).
- RDMA/umem: Fix double dma_buf_unpin in failure path
(bsc#1258210).
- tcp: re-enable acceptance of FIN packets when RWIN is 0
(bsc#1258210).
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init()
(bsc#1258210).
- net: mana: Fix double destroy_workqueue on service rescan PCI
path (bsc#1258210).
- net: add a common function to compute features for upper devices
(bsc#1258210).
- team: use common function to compute the features (bsc#1258210).
- team: avoid NETDEV_CHANGEMTU event when unregistering slave
(bsc#1258210).
- net/mlx5: DR, Fix circular locking dependency in dump
(bsc#1258210).
- net/mlx5: LAG, disable MPESW in lag_disable_change()
(bsc#1258210).
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev
(bsc#1258210).
- net/mlx5: Fix missing devlink lock in SRIOV enable error path
(bsc#1258210).
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address
query (bsc#1258210).
- net: consume xmit errors of GSO frames (bsc#1258210).
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write
(bsc#1258210).
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
(bsc#1258210).
- rpmsg: core: fix race in driver_override_show() and use core
helper (bsc#1258210).
- clk: renesas: rzg2l: Fix intin variable size (bsc#1258210).
- clk: renesas: rzg2l: Select correct div round macro
(bsc#1258210).
- hfsplus: ensure sb->s_fs_info is always cleaned up
(bsc#1258210).
- arm64: dts: ti: am62p-verdin: Fix SD regulator startup delay
(bsc#1258210).
- drm/panthor: fix for dma-fence safe access rules (bsc#1258210).
- ASoC: SOF: ipc4-control: If there is no data do not send bytes
update (bsc#1258210).
- ASoC: SOF: ipc4-topology: Correct the allocation size for
bytes controls (bsc#1258210).
- ASoC: SOF: ipc4-control: Use the correct size for
scontrol->ipc_control_data (bsc#1258210).
- ASoC: SOF: ipc4-control: Keep the payload size up to date
(bsc#1258210).
- fpga: dfl: use subsys_initcall to allow built-in drivers to
be added (bsc#1258210).
- drm/tests: shmem: Swap names of export tests (bsc#1258210).
- drm/tests: shmem: Add clean-up action to unpin pages
(bsc#1258210).
- drm/tests: shmem: Hold reservation lock around vmap/vunmap
(bsc#1258210).
- drm/tests: shmem: Hold reservation lock around madvise
(bsc#1258210).
- drm/tests: shmem: Hold reservation lock around purge
(bsc#1258210).
- drm/xe: Fix ggtt fb alignment (bsc#1258210).
- Revert "PCI: dw-rockchip: Don't wait for link since we can
detect Link Up" (bsc#1258210).
- Revert "PCI: qcom: Don't wait for link if we can detect Link Up"
(bsc#1258210).
- Revert "PCI: qcom: Enable MSI interrupts together with Link
up if 'Global IRQ' is supported" (bsc#1258210).
- Revert "PCI: qcom: Enumerate endpoints based on Link up event in
'global_irq' interrupt" (bsc#1258210).
- Revert "PCI: dwc: Don't wait for link up if driver can detect
Link Up event" (bsc#1258210).
- PCI: Use resource_set_range() that correctly sets ->end
(bsc#1258210).
- phy: qcom: edp: Make the number of clocks flexible
(bsc#1258210).
- arm64: dts: qcom: sdm630: Add missing MDSS reset (bsc#1258210).
- dm-verity: correctly handle dm_bufio_client_create() failure
(bsc#1258210).
- media: uvcvideo: Fix support for
V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (bsc#1258210).
- media: mediatek: encoder: Fix uninitialized scalar variable
issue (bsc#1258210).
- media: mtk-mdp: Fix error handling in probe function
(bsc#1258210).
- media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
(bsc#1258210).
- media: chips-media: wave5: Fix PM runtime usage count underflow
(bsc#1258210).
- media: chips-media: wave5: Fix kthread worker destruction in
polling mode (bsc#1258210).
- media: chips-media: wave5: Fix device cleanup order to prevent
kernel panic (bsc#1258210).
- media: chips-media: wave5: Fix SError of kernel panic when
closed (bsc#1258210).
- media: chips-media: wave5: Fix Null reference while testing
fluster (bsc#1258210).
- media: verisilicon: AV1: Fix enable cdef computation
(bsc#1258210).
- media: verisilicon: AV1: Fix tx mode bit setting (bsc#1258210).
- arm64: dts: qcom: x1e80100: Add missing TCSR ref clock to the
DP PHYs (bsc#1258210).
- arm64: dts: qcom: sm8750: Fix BAM DMA probing (bsc#1258210).
- ARM: omap2: Fix reference count leaks in omap_control_init()
(bsc#1258210).
- arm64: kernel: initialize missing kexec_buf->random field
(bsc#1258210).
- powerpc/pseries: Fix MSI-X allocation failure when quota is
exceeded (bsc#1258210).
- KVM: x86: Return "unsupported" instead of "invalid" on access
to unsupported PV MSR (bsc#1258210).
- KVM: nSVM: Remove a user-triggerable WARN on
nested_svm_load_cr3() succeeding (bsc#1258210).
- arm64: Disable branch profiling for all arm64 code
(bsc#1258210).
- pinctrl: meson: amlogic-a4: mark the GPIO controller as sleeping
(bsc#1258210).
- HID: hid-pl: handle probe errors (bsc#1258210).
- HID: magicmouse: Do not crash on missing msc->input
(bsc#1258210).
- HID: prodikeys: Check presence of pm->input_ep82 (bsc#1258210).
- HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
(bsc#1258210).
- fs: ensure that internal tmpfs mount gets mount id zero
(bsc#1258210).
- arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
(bsc#1258210).
- media: amphion: Drop min_queued_buffers assignment
(bsc#1258210).
- media: rockchip: rga: Fix possible ERR_PTR dereference in
rga_buf_init() (bsc#1258210).
- media: verisilicon: AV1: Set IDR flag for intra_only frame type
(bsc#1258210).
- media: radio-keene: fix memory leak in error path (bsc#1258210).
- media: cx88: Add missing unmap in snd_cx88_hw_params()
(bsc#1258210).
- media: cx23885: Add missing unmap in snd_cx23885_hw_params()
(bsc#1258210).
- media: cx25821: Add missing unmap in snd_cx25821_hw_params()
(bsc#1258210).
- media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
(bsc#1258210).
- media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
(bsc#1258210).
- media: i2c: ov01a10: Fix the horizontal flip control
(bsc#1258210).
- media: i2c: ov01a10: Fix reported pixel-rate value
(bsc#1258210).
- media: i2c: ov01a10: Fix analogue gain range (bsc#1258210).
- media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
(bsc#1258210).
- media: i2c: ov01a10: Fix passing stream instead of pad to
v4l2_subdev_state_get_format() (bsc#1258210).
- media: i2c: ov01a10: Fix test-pattern disabling (bsc#1258210).
- media: qcom: camss: vfe: Fix out-of-bounds access in
vfe_isr_reg_update() (bsc#1258210).
- media: ccs: Avoid possible division by zero (bsc#1258210).
- media: i2c: ov5647: Initialize subdev before controls
(bsc#1258210).
- media: i2c: ov5647: Correct pixel array offset (bsc#1258210).
- media: i2c: ov5647: Correct minimum VBLANK value (bsc#1258210).
- media: i2c: ov5647: Sensor should report RAW color space
(bsc#1258210).
- media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
(bsc#1258210).
- media: ccs: Fix setting initial sub-device state (bsc#1258210).
- media: i2c: ov5647: use our own mutex for the ctrl lock
(bsc#1258210).
- media: dw9714: Fix powerup sequence (bsc#1258210).
- media: ipu6: Fix typo and wrong constant in ipu6-mmu.c
(bsc#1258210).
- media: ipu6: Fix RPM reference leak in probe error paths
(bsc#1258210).
- media: staging/ipu7: Ignore interrupts when device is suspended
(bsc#1258210).
- media: staging/ipu7: Call synchronous RPM suspend in probe
failure (bsc#1258210).
- media: staging/ipu7: Update CDPHY register settings
(bsc#1258210).
- media: staging/ipu7: Fix the loop bound in l2 table alloc
(bsc#1258210).
- platform/x86: ISST: Add missing write block check (bsc#1258210).
- platform/x86: ISST: Store and restore all domains data
(bsc#1258210).
- dm-integrity: fix a typo in the code for write/discard race
(bsc#1258210).
- dm: clear cloned request bio pointer when last clone bio
completes (bsc#1258210).
- soc: ti: k3-socinfo: Fix regmap leak on probe failure
(bsc#1258210).
- soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
(bsc#1258210).
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
(bsc#1258210).
- bus: omap-ocp2scp: fix OF populate on driver rebind
(bsc#1258210).
- clk: clk-apple-nco: Add "apple,t8103-nco" compatible
(bsc#1258210).
- soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition
(bsc#1258210).
- soc: rockchip: grf: Support multiple grf to be handled
(bsc#1258210).
- media: stm32: dcmipp: avoid naming clock if only one is needed
(bsc#1258210).
- media: stm32: dcmipp: bytecap: clear all interrupts upon stream
stop (bsc#1258210).
- media: stm32: dcmipp: byteproc: disable compose for all bayers
(bsc#1258210).
- media: i2c: ov01a10: Fix digital gain range (bsc#1258210).
- arm64: dts: rockchip: Fix SD card support for RK3576 EVB1
(bsc#1258210).
- clk: tegra: tegra124-emc: Fix potential memory leak in
tegra124_clk_register_emc() (bsc#1258210).
- s390/pci: Handle futile config accesses of disabled devices
directly (bsc#1258210).
- mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
(bsc#1258210).
- drm/i915/psr: Don't enable Panel Replay on sink if globally
disabled (bsc#1258210).
- reset: gpio: suppress bind attributes in sysfs (bsc#1258210).
- dm-integrity: fix recalculation in bitmap mode (bsc#1258210).
- dm-unstripe: fix mapping bug when there are multiple targets
in a table (bsc#1258210).
- rtc: pcf8563: use correct of_node for output clock
(bsc#1258210).
- drm/tyr: fix register name in error print (bsc#1258210).
- arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook
Pro (bsc#1258210).
- media: venus: vdec: fix error state assignment for zero
bytesused (bsc#1258210).
- media: venus: vdec: restrict EOS addr quirk to IRIS2 only
(bsc#1258210).
- Revert "media: iris: Add sanity check for stop streaming"
(bsc#1258210).
- media: iris: Fix ffmpeg corrupted frame error (bsc#1258210).
- media: iris: Fix fps calculation (bsc#1258210).
- media: iris: use fallback size when S_FMT is called without
width/height (bsc#1258210).
- media: iris: Add buffer to list only after successful allocation
(bsc#1258210).
- media: iris: Skip resolution set on first IPSC (bsc#1258210).
- media: iris: gen1: Destroy internal buffers after FW releases
(bsc#1258210).
- media: iris: gen2: Add sanity check for session stop
(bsc#1258210).
- media: iris: Prevent output buffer queuing before stream-on
completes (bsc#1258210).
- drm: of: drm_of_panel_bridge_remove(): fix device_node leak
(bsc#1258210).
- docs: kdoc: avoid error_count overflows (bsc#1258210).
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
allocations (bsc#1258210).
- selftests/mm/charge_reserved_hugetlb: drop mount size for
hugetlbfs (bsc#1258210).
- drm/buddy: Prevent BUG_ON by validating rounded allocation
(bsc#1258210).
- drm/bridge: anx7625: Fix invalid EDID size (bsc#1258210).
- phy: fsl-imx8mq-usb: set platform driver data (bsc#1258210).
- PCI: dwc: Skip waiting for L2/L3 Ready if
dw_pcie_rp::skip_l23_wait is true (bsc#1258210).
- xfs: mark data structures corrupt on EIO and ENODATA
(bsc#1258210).
- xfs: remove xfs_attr_leaf_hasname (bsc#1258210).
- media: verisilicon: AV1: Fix tile info buffer size
(bsc#1258210).
- dm: fix excessive blk-crypto operations for invalid keys
(bsc#1258210).
- media: uvcvideo: Return queued buffers on start_streaming()
failure (bsc#1258210).
- iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible
in scalable mode (bsc#1258210).
- iommu/vt-d: Flush piotlb for SVM and Nested domain
(bsc#1258210).
- KVM: arm64: nv: Return correct RES0 bits for FGT registers
(bsc#1258210).
- mfd: core: Add locking around 'mfd_of_node_list' (bsc#1258210).
- mfd: tps65219: Implement LOCK register handling for TPS65214
(bsc#1258210).
- mfd: macsmc: Initialize mutex (bsc#1258210).
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind
(bsc#1258210).
- mfd: omap-usb-host: Fix OF populate on driver rebind
(bsc#1258210).
- erofs: fix incorrect early exits for invalid metabox-enabled
images (bsc#1258210).
- erofs: fix incorrect early exits in volume label handling
(bsc#1258210).
- arm64: dts: rockchip: Explicitly request UFS reset pin on RK3576
(bsc#1258210).
- PCI/PM: Prevent runtime suspend until devices are fully
initialized (bsc#1258210).
- iio: accel: adxl380: Avoid reading more entries than present
in FIFO (bsc#1258210).
- iommu/arm-smmu-v3: Add update_safe bits to fix STE update
sequence (bsc#1258210).
- iommu/arm-smmu-v3: Mark STE MEV safe when computing the update
sequence (bsc#1258210).
- iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the
update sequence (bsc#1258210).
- iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is
Translate (bsc#1258210).
- usb: host: tegra: Remove manual wake IRQ disposal (bsc#1258210).
- xfs: delete attr leaf freemap entries when empty (bsc#1258210).
- xfs: fix freemap adjustments when adding xattrs to leaf blocks
(bsc#1258210).
- xfs: fix the xattr scrub to detect freemap/entries array
collisions (bsc#1258210).
- xfs: fix remote xattr valuelblk check (bsc#1258210).
- xfs: get rid of the xchk_xfile_*_descr calls (bsc#1258210).
- spmi: apple: Add "apple,t8103-spmi" compatible (bsc#1258210).
- rust/drm: Fix Registration::{new,new_foreign_owned}() docs
(bsc#1258210).
- KVM: x86: Add SRCU protection for reading PDPTRs in
__get_sregs2() (bsc#1258210).
- PCI: endpoint: Fix swapped parameters in
pci_{primary/secondary}_epc_epf_unlink() functions
(bsc#1258210).
- pinctrl: intel: Add code name documentation (bsc#1258210).
- xfs: only call xf{array,blob}_destroy if we have a valid pointer
(bsc#1258210).
- xfs: check return value of xchk_scrub_create_subord
(bsc#1258210).
- xfs: check for deleted cursors when revalidating two btrees
(bsc#1258210).
- md/bitmap: fix GPF in write_page caused by resize race
(bsc#1258210).
- NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation
(bsc#1258210).
- nfsd: fix return error code for nfsd_map_name_to_[ug]id
(bsc#1258210).
- nvmem: Drop OF node reference on nvmem_add_one_cell() failure
(bsc#1258210).
- PCI: Fix bridge window alignment with optional resources
(bsc#1258210).
- ima: verify the previous kernel's IMA buffer lies in addressable
RAM (bsc#1258210).
- of/kexec: refactor ima_get_kexec_buffer() to use
ima_validate_range() (bsc#1258210).
- x86/kexec: add a sanity check on previous kernel's ima kexec
buffer (bsc#1258210).
- mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
(bsc#1258210).
- usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
(bsc#1258210).
- mm/slab: add rcu_barrier() to kvfree_rcu_barrier_on_cache()
(bsc#1258210).
- io_uring/net: don't continue send bundle if poll was required
for retry (bsc#1258210).
- bus: fsl-mc: fix an error handling in fsl_mc_device_add()
(bsc#1258210).
- dm mpath: make pg_init_delay_msecs settable (bsc#1258210).
- arm64: poe: fix stale POR_EL0 values for ptrace (bsc#1258210).
- tools: Fix bitfield dependency failure (bsc#1258210).
- vhost: move vdpa group bound check to vhost_vdpa (bsc#1258210).
- powerpc/smp: Add check for kcalloc() failure in
parse_thread_groups() (bsc#1258210).
- iio: gyro: itg3200: Fix unchecked return value in read_raw
(bsc#1258210).
- mtd: spinand: Disable continuous read during probe
(bsc#1258210).
- power: reset: tdx-ec-poweroff: fix restart (bsc#1258210).
- mm/highmem: fix __kmap_to_page() build error (bsc#1258210).
- compiler-clang.h: require LLVM 19.1.0 or higher for
__typeof_unqual__ (bsc#1258210).
- rapidio: replace rio_free_net() with kfree() in
rio_scan_alloc_net() (bsc#1258210).
- ocfs2: fix reflink preserve cleanup issue (bsc#1258210).
- kexec: derive purgatory entry from symbol (bsc#1258210).
- crash_dump: fix dm_crypt keys locking and ref leak
(bsc#1258210).
- kho: skip memoryless NUMA nodes when reserving scratch areas
(bsc#1258210).
- Revert "PCI/IOV: Add PCI rescan-remove locking when
enabling/disabling SR-IOV" (bsc#1258210).
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
(bsc#1258210).
- arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
(bsc#1258210).
- uprobes: Fix incorrect lockdep condition in filter_chain()
(bsc#1258210).
- clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
(bsc#1258210).
- btrfs: fix periodic reclaim condition (bsc#1258210).
- btrfs: zoned: fixup last alloc pointer after extent removal
for RAID1 (bsc#1258210).
- btrfs: zoned: fixup last alloc pointer after extent removal
for DUP (bsc#1258210).
- btrfs: continue trimming remaining devices on failure
(bsc#1258210).
- remoteproc: imx_rproc: Fix invalid loaded resource table
detection (bsc#1258210).
- perf/arm-cmn: Reject unsupported hardware configurations
(bsc#1258210).
- scsi: ufs: core: Flush exception handling work when RPM level
is zero (bsc#1258210).
- mm/slab: avoid allocating slabobj_ext array from its own slab
(bsc#1258210).
- mm/slab: use unsigned long for orig_size to ensure proper
metadata align (bsc#1258210).
- MIPS: Loongson2ef: Register PCI controller in early stage
(bsc#1258210).
- MIPS: Loongson2ef: Use pcibios_align_resource() to block io
range (bsc#1258210).
- PCI: dwc: Fix msg_atu_index assignment (bsc#1258210).
- mux: mmio: fix regmap leak on probe failure (bsc#1258210).
- usb: dwc3: gadget: Move vbus draw to workqueue context
(bsc#1258210).
- usb: dwc2: fix resume failure if dr_mode is host (bsc#1258210).
- mtd: rawnand: pl353: Fix software ECC support (bsc#1258210).
- tipc: fix RCU dereference race in tipc_aead_users_dec()
(bsc#1258210).
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
(bsc#1258210).
- drm/amdgpu: Protect GPU register accesses in powergated state
in some paths (bsc#1258210).
- net: cpsw_new: Fix unnecessary netdev unregistration in
cpsw_probe() error path (bsc#1258210).
- net: cpsw_new: Fix potential unregister of netdev that has
not been registered yet (bsc#1258210).
- PCI: Don't claim disabled bridge windows (bsc#1258210).
- PCI: Fix pci_slot_trylock() error handling (bsc#1258210).
- parisc: kernel: replace kfree() with put_device() in
create_tree_node() (bsc#1258210).
- mptcp: pm: in-kernel: always set ID as avail when rm endp
(bsc#1258210).
- staging: rtl8723bs: fix null dereference in find_network
(bsc#1258210).
- kcsan, compiler_types: avoid duplicate type issues in BPF Type
Format (bsc#1258210).
- watchdog/softlockup: fix sample ring index wrap in
need_counting_irqs() (bsc#1258210).
- i2c: imx-lpi2c: fix SMBus block read NACK after byte count
(bsc#1258210).
- cifs: Fix locking usage for tcon fields (bsc#1258210).
- MIPS: rb532: Fix MMIO UART resource registration (bsc#1258210).
- ceph: supply snapshot context in ceph_zero_partial_object()
(bsc#1258210).
- drm/i915/quirks: Fix device id for QUIRK_EDP_LIMIT_RATE_HBR2
entry (bsc#1258210).
- rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0
(bsc#1258210).
- mm/slab: do not access current->mems_allowed_seq if !allow_spin
(bsc#1258210).
- LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
(bsc#1258210).
- LoongArch: Prefer top-down allocation after arch_mem_init()
(bsc#1258210).
- LoongArch: Use %px to print unmodified unwinding address
(bsc#1258210).
- LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
(bsc#1258210).
- LoongArch: Disable instrumentation for setup_ptwalker()
(bsc#1258210).
- net: ethernet: marvell: skge: remove incorrect conflicting
PCI ID (bsc#1258210).
- net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in
uhdlc_memclean() (bsc#1258210).
- octeontx2-af: CGX: fix bitmap leaks (bsc#1258210).
- net: ti: icssg-prueth: Add optional dependency on HSR
(bsc#1258210).
- net: macb: Fix tx/rx malfunction after phy link down and up
(bsc#1258210).
- tracing: Fix to set write permission to per-cpu buffer_size_kb
(bsc#1258210).
- tracing: Reset last_boot_info if ring buffer is reset
(bsc#1258210).
- ceph: do not propagate page array emplacement errors as batch
errors (bsc#1258210).
- ceph: fix write storm on fscrypted files (bsc#1258210).
- io_uring/filetable: clamp alloc_hint to the configured alloc
range (bsc#1258210).
- io_uring/openclose: fix io_pipe_fixed() slot tracking for
specific slots (bsc#1258210).
- drm/amd/display: Increase DCN35 SR enter/exit latency
(bsc#1258210).
- drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
(bsc#1258210).
- mm/hugetlb: restore failed global reservations to subpool
(bsc#1258210).
- mm/page_alloc: skip debug_check_no_{obj,locks}_freed with
FPI_TRYLOCK (bsc#1258210).
- procfs: fix possible double mmput() in do_procmap_query()
(bsc#1258210).
- mm/vmscan: fix demotion targets checks in reclaim/demotion
(bsc#1258210).
- mm/page_alloc: clear page->private in free_pages_prepare()
(bsc#1258210).
- net: intel: fix PCI device ID conflict between i40e and ipw2200
(bsc#1258210).
- atm: fore200e: fix use-after-free in tasklets during device
removal (bsc#1258210).
- function_graph: Restore direct mode when callbacks drop to one
(bsc#1258210).
- kbuild: Fix CC_CAN_LINK detection (bsc#1258210).
- kbuild: rpm-pkg: Restrict manual debug package creation
(bsc#1258210).
- kernel: rpm-pkg: Restore find-debuginfo.sh approach to
- debuginfo package (bsc#1258210).
- kbuild: rpm-pkg: Fix manual debuginfo generation when using
.src.rpm (bsc#1258210).
- ipv6: ioam: fix heap buffer overflow in
__ioam6_fill_trace_data() (bsc#1258210).
- mm: numa_memblks: Identify the accurate NUMA ID of CFMW
(bsc#1258210).
- fbdev: Use device_create_with_groups() to fix sysfs groups
registration race (bsc#1258210).
- fbcon: check return value of con2fb_acquire_newinfo()
(bsc#1258210).
- fbdev: vt8500lcdfb: fix missing dma_free_coherent()
(bsc#1258210).
- fbdev: of: display_timing: fix refcount leak in
of_get_display_timings() (bsc#1258210).
- fbdev: ffb: fix corrupted video output on Sun FFB1
(bsc#1258210).
- fbcon: Remove struct fbcon_display.inverse (bsc#1258210).
- io_uring/zcrx: fix sgtable leak on mapping failures
(bsc#1258210).
- cifs: some missing initializations on replay (bsc#1258210).
- gpio: nomadik: Add missing IS_ERR() check (bsc#1258210).
- io_uring/cmd_net: fix too strict requirement on ioctl
(bsc#1258210).
- ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
(bsc#1258210).
- kbuild: rpm-pkg: Disable automatic requires for manual debuginfo
package (bsc#1258210).
- drm/xe: Add bounds check on pat_index to prevent OOB kernel
read in madvise (bsc#1258210).
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
(bsc#1258210).
- net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
(bsc#1258210).
- gpio: sysfs: fix chip removal with GPIOs exported over sysfs
(bsc#1258210).
- x86/kexec: Copy ACPI root pointer address from config table
(bsc#1258210).
- io_uring/zcrx: fix user_ref race between scrub and refill paths
(bsc#1258210).
- rust: irq: add `'static` bounds to irq callbacks (bsc#1258210).
- rust: pin-init: replace clippy `expect` with `allow`
(bsc#1258210).
- arm64: Force the use of CNTVCT_EL0 in __delay() (bsc#1258210).
- drm/amd/display: Correct logic check error for fastboot
(bsc#1258210).
- drm/amdgpu: keep vga memory on MacBooks with switchable graphics
(bsc#1258210).
- net: nfc: nci: Fix parameter validation for packet data
(bsc#1258210).
- ring-buffer: Fix possible dereference of uninitialized pointer
(bsc#1258210).
- tracing: ring-buffer: Fix to check event length before using
(bsc#1258210).
- fgraph: Do not call handlers direct when not using ftrace_ops
(bsc#1258210).
- tracing: Fix checking of freed trace_event_file for hist files
(bsc#1258210).
- tracing: Wake up poll waiters for hist files when removing an
event (bsc#1258210).
- rust: list: Add unsafe blocks for container_of and safety
comments (bsc#1258210).
- NTB: ntb_transport: Fix too small buffer for debugfs_name
(bsc#1258210).
- ALSA: pcm: Revert bufs move in snd_pcm_xfern_frames_ioctl()
(bsc#1258210).
- Revert "ACPI: processor: Update cpuidle driver check in
__acpi_processor_start()" (bsc#1258210).
- drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
(bsc#1258210).
- xfs: fix copy-paste error in previous fix (bsc#1258210).
- arm64: Fix sampling the "stable" virtual counter in preemptible
section (bsc#1258210).
- most: core: fix leak on early registration failure
(bsc#1258210).
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last
Fence Update and Timeline Management v7 (bsc#1258210).
- Rename to
patches.kernel.org/6.18.16-080-gendwarfksyms-Fix-build-on-32-bit-hosts.patch.
- commit 7aae583
* Sun Mar 01 2026 rfrohl@suse.com
- Update arm64 config files with missing options.
- commit 1841de0
* Sat Feb 28 2026 rfrohl@suse.com
- Linux 6.18.15 (bsc#1258210).
- netfilter: nf_tables: add .abort_skip_removal flag for set types
(bsc#1258210).
- commit 2e6fb09
* Sat Feb 28 2026 rfrohl@suse.com
- Update arm64 config file with 6.18.14.
- commit 93eca88
* Sat Feb 28 2026 jslaby@suse.cz
- kbuild: Leave objtool binary around with 'make clean' (kmp-fix).
- commit 4228ab3
* Fri Feb 27 2026 rfrohl@suse.com
- Linux 6.18.14 (bsc#1258210).
- ata: libata-core: fix cancellation of a port deferred qc work
(bsc#1258210).
- ata: libata-eh: correctly handle deferred qc timeouts
(bsc#1258210).
- drm/amd/display: Add an hdmi_hpd_debounce_delay_ms module
(bsc#1258210).
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz
(bsc#1258210).
- drm/amd/display: Clear HDMI HPD pending work only if it is
enabled (bsc#1258210).
- selftests/bpf: Test bpf_skb_check_mtu(BPF_MTU_CHK_SEGS) when
transport_header is not set (bsc#1258210).
- io_uring/rsrc: clean up buffer cloning arg validation
(bsc#1258210).
- Drivers: hv: vmbus: Use kthread for vmbus interrupts on
PREEMPT_RT (bsc#1258210).
- drm/exynos: vidi: fix to avoid directly dereferencing user
pointer (bsc#1258210).
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in
vidi_connection_ioctl() (bsc#1258210).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360
(NP965QFG) (bsc#1258210).
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift
SF314 (bsc#1258210).
- ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023)
(bsc#1258210).
- ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
(bsc#1258210).
- ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
(bsc#1258210).
- ASoC: dt-bindings: asahi-kasei,ak4458: set
unevaluatedProperties:false (bsc#1258210).
- dt-bindings: media: qcom,qcs8300-camss: Add missing power
supplies (bsc#1258210).
- dt-bindings: phy: qcom-edp: Add missing clock for X Elite
(bsc#1258210).
- SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
(bsc#1258210).
- SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
(bsc#1258210).
- ata: libata-scsi: avoid Non-NCQ command starvation (bsc#1258210).
- ata: libata-scsi: refactor ata_scsi_translate() (bsc#1258210).
- ata: pata_ftide010: Fix some DMA timings (bsc#1258210).
- ext4: use optimized mballoc scanning regardless of inode format
(bsc#1258210).
- ext4: always allocate blocks only from groups inode can use
(bsc#1258210).
- ext4: fix dirtyclusters double decrement on fs shutdown
(bsc#1258210).
- ext4: fix e4b bitmap inconsistency reports (bsc#1258210).
- ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1258210).
- ext4: drop extent cache when splitting extent fails
(bsc#1258210).
- ext4: drop extent cache after doing PARTIAL_VALID1 zeroout
(bsc#1258210).
- ext4: don't cache extent during splitting extent (bsc#1258210).
- ext4: don't zero the entire extent if
EXT4_EXT_DATA_PARTIAL_VALID1 (bsc#1258210).
- ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1258210).
- MIPS: Work around LLVM bug when gp is used as global register
variable (bsc#1258210).
- usb: cdns3: fix role switching during resume (bsc#1258210).
- drm/amd/display: Use same max plane scaling limits for all 64
bpp formats (bsc#1258210).
- ASoC: rockchip: i2s-tdm: Use param rate if not provided by
set_sysclk (bsc#1258210).
- x86/hyperv: Fix error pointer dereference (bsc#1258210).
- btrfs: fix invalid leaf access in btrfs_quota_enable() if ref
key not found (bsc#1258210).
- btrfs: use the correct type to initialize block reserve for
delayed refs (bsc#1258210).
- btrfs: reset block group size class when it becomes empty
(bsc#1258210).
- btrfs: reduce block group critical section in
btrfs_free_reserved_bytes() (bsc#1258210).
- btrfs: remove fs_info argument from btrfs_try_granting_tickets()
(bsc#1258210).
- efi: Fix reservation of unaccepted memory table (bsc#1258210).
- gpio: amd-fch: ionly return allowed values from
amd_fch_gpio_get() (bsc#1258210).
- drm/xe/bo: Redirect faults to dummy page for wedged device
(bsc#1258210).
- drm/xe: Make xe_modparam.force_vram_bar_size signed
(bsc#1258210).
- drm/xe/xe2_hpg: Fix handling of Wa_14019988906 & Wa_14019877138
(bsc#1258210).
- drm/xe/mmio: Avoid double-adjust in 64-bit reads (bsc#1258210).
- drm/xe/configfs: Fix 'parameter name omitted' errors
(bsc#1258210).
- s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
(bsc#1258210).
- spi: wpcm-fiu: Fix potential NULL pointer dereference in
wpcm_fiu_probe() (bsc#1258210).
- drm/amd/display: Fix out-of-bounds stream encoder index v3
(bsc#1258210).
- drm/amd/display: Reject cursor plane on DCE when scaled
differently than primary (bsc#1258210).
- drm/amdkfd: Fix watch_id bounds checking in debug address
watch v2 (bsc#1258210).
- PCI: Validate window resource type in
pbus_select_window_for_type() (bsc#1258210).
- ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic
init (bsc#1258210).
- drm/i915/acpi: free _DSM package when no connectors
(bsc#1258210).
- ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
(bsc#1258210).
- mshv: fix SRCU protection in irqfd resampler ack handler
(bsc#1258210).
- drm/amdgpu/sdma6: enable queue resets unconditionally
(bsc#1258210).
- drm/amdgpu/sdma5.2: enable queue resets unconditionally
(bsc#1258210).
- drm/amdgpu/sdma5: enable queue resets unconditionally
(bsc#1258210).
- drm/amdgpu: move reset debug disable handling (bsc#1258210).
- drm/amdgpu: Fix memory leak in amdgpu_ras_init() (bsc#1258210).
- drm/amdgpu: Use kvfree instead of kfree in
amdgpu_gmc_get_nps_memranges() (bsc#1258210).
- drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
(bsc#1258210).
- apparmor: fix aa_label to return state from compount and
component match (bsc#1258210).
- apparmor: fix invalid deref of rawdata when export_binary is
unset (bsc#1258210).
- apparmor: avoid per-cpu hold underflow in aa_get_buffer
(bsc#1258210).
- apparmor: make label_match return a consistent value
(bsc#1258210).
- apparmor: remove apply_modes_to_perms from label_match
(bsc#1258210).
- apparmor: fix rlimit for posix cpu timers (bsc#1258210).
- apparmor: move check for aa_null file to cover all cases
(bsc#1258210).
- apparmor: account for in_atomic removal in common_file_perm
(bsc#1258210).
- apparmor: drop in_atomic flag in common_mmap, and
common_file_perm (bsc#1258210).
- apparmor: fix boolean argument in apparmor_mmap_file
(bsc#1258210).
- apparmor: return -ENOMEM in unpack_perms_table upon alloc
failure (bsc#1258210).
- apparmor: Fix & Optimize table creation from possibly unaligned
memory (bsc#1258210).
- AppArmor: Allow apparmor to handle unaligned dfa tables
(bsc#1258210).
- apparmor: fix NULL sock in aa_sock_file_perm (bsc#1258210).
- apparmor: fix NULL pointer dereference in
__unix_needs_revalidation (bsc#1258210).
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels
(bsc#1258210).
- net/mlx5e: Fix deadlocks between devlink and netdev instance
locks (bsc#1258210).
- net/mlx5: Fix misidentification of write combining CQE during
poll loop (bsc#1258210).
- net/mlx5: Fix multiport device check over light SFs
(bsc#1258210).
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down
(bsc#1258210).
- bnge: fix reserving resources from FW (bsc#1258210).
- eth: fbnic: Advertise supported XDP features (bsc#1258210).
- octeontx2-af: Fix default entries mcam entry action
(bsc#1258210).
- ipv6: icmp: remove obsolete code in icmpv6_xrlim_allow()
(bsc#1258210).
- inet: move icmp_global_{credit,stamp} to a separate cache line
(bsc#1258210).
- icmp: prevent possible overflow in icmp_global_allow()
(bsc#1258210).
- eth: fbnic: Add validation for MTU changes (bsc#1258210).
- macvlan: observe an RCU grace period in macvlan_common_newlink()
error path (bsc#1258210).
- selftests: tc_actions: don't dump 2MB of \0 to stdout
(bsc#1258210).
- ping: annotate data-races in ping_lookup() (bsc#1258210).
- net: psp: select CONFIG_SKB_EXTENSIONS (bsc#1258210).
- bpftool: Fix truncated netlink dumps (bsc#1258210).
- ipv6: fix a race in ip6_sock_set_v6only() (bsc#1258210).
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
(bsc#1258210).
- net: remove WARN_ON_ONCE when accessing forward path array
(bsc#1258210).
- ipvs: do not keep dest_dst if dev is going down (bsc#1258210).
- netfilter: nf_conntrack_h323: don't pass uninitialised l3num
value (bsc#1258210).
- selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure
with br_netfilter enabled (bsc#1258210).
- selftests: forwarding: vxlan_bridge_1d: fix test failure with
br_netfilter enabled (bsc#1258210).
- net: bridge: mcast: always update mdb_n_entries for vlan contexts
(bsc#1258210).
- net/rds: rds_sendmsg should not discard payload_len
(bsc#1258210).
- xen-netback: reject zero-queue configuration from guest
(bsc#1258210).
- net: usb: catc: enable basic endpoint checking (bsc#1258210).
- ovpn: tcp - don't deref NULL sk_socket member after tcp_close()
(bsc#1258210).
- eth: fbnic: set DMA_HINT_L4 for all flows (bsc#1258210).
- eth: fbnic: increase FBNIC_HDR_BYTES_MIN from 128 to 256 bytes
(bsc#1258210).
- eth: fbnic: set FBNIC_QUEUE_RDE_CTL0_EN_HDR_SPLIT on RDE_CTL0
(bsc#1258210).
- eth: fbnic: Configure RDE settings for pause frame (bsc#1258210).
- bpf: Add a map/btf from a fd array more consistently
(bsc#1258210).
- bpf: Fix a potential use-after-free of BTF object (bsc#1258210).
- libbpf: Fix invalid write loop logic in bpf_linker__add_buf()
(bsc#1258210).
- fbnic: close fw_log race between users and teardown
(bsc#1258210).
- net: sparx5/lan969x: fix PTP clock max_adj value (bsc#1258210).
- ipv6: Fix out-of-bound access in fib6_add_rt2node()
(bsc#1258210).
- selftests: netconsole: Increase port listening timeout
(bsc#1258210).
- selftests: netconsole: remove log noise due to socat exit
(bsc#1258210).
- net: mscc: ocelot: add missing lock protection in
ocelot_port_xmit_inj() (bsc#1258210).
- net: mscc: ocelot: split xmit into FDMA and register injection
paths (bsc#1258210).
- net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
(bsc#1258210).
- net: sparx5/lan969x: fix DWRR cost max to match hardware
register width (bsc#1258210).
- net: stmmac: fix oops when split header is enabled (bsc#1258210).
- net: stmmac: replace has_xxxx with core_type (bsc#1258210).
- net: stmmac: remove broken PCS code (bsc#1258210).
- selftests: net: lib: Fix jq parsing error (bsc#1258210).
- selftests: mlxsw: tc_restrictions: Fix test failure with new
iproute2 (bsc#1258210).
- ovpn: fix VPN TX bytes counting (bsc#1258210).
- ovpn: fix possible use-after-free in ovpn_net_xmit (bsc#1258210).
- ovpn: set sk_user_data before overriding callbacks (bsc#1258210).
- cpuidle: Skip governor when only one idle state is available
(bsc#1258210).
- ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
(bsc#1258210).
- objpool: fix the overestimation of object pooling metadata size
(bsc#1258210).
- selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
(bsc#1258210).
- kbuild: Add objtool to top-level clean target (bsc#1258210).
- powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version
check (bsc#1258210).
- ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online
CPUs (bsc#1258210).
- fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
(bsc#1258210).
- fs/ntfs3: prevent infinite loops caused by the next valid
being the same (bsc#1258210).
- fs/ntfs3: Initialize new folios before use (bsc#1258210).
- io_uring/cancel: de-unionize file and user_data in struct
io_cancel_data (bsc#1258210).
- io_uring: delay sqarray static branch disablement (bsc#1258210).
- drbd: always set BLK_FEAT_STABLE_WRITES (bsc#1258210).
- dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
(bsc#1258210).
- backlight: qcom-wled: Change PM8950 WLED configurations
(bsc#1258210).
- backlight: qcom-wled: Support ovp values for PMI8994
(bsc#1258210).
- leds: qcom-lpg: Check the return value of regmap_bulk_write()
(bsc#1258210).
- leds: expresswire: Fix chip state breakage (bsc#1258210).
- pinctrl: canaan: k230: Fix NULL pointer dereference when
parsing devicetree (bsc#1258210).
- pinctrl: single: fix refcount leak in pcs_add_gpio_func()
(bsc#1258210).
- pinctrl: meson: amlogic-a4: Fix device node reference leak in
bank helpers (bsc#1258210).
- pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
(bsc#1258210).
- pidfs: return -EREMOTE when PIDFD_GET_INFO is called on another
ns (bsc#1258210).
- mips: LOONGSON32: drop a dangling Kconfig symbol (bsc#1258210).
- iio: sca3000: Fix a resource leak in sca3000_probe()
(bsc#1258210).
- ovl: Fix uninit-value in ovl_fill_real (bsc#1258210).
- pinctrl: equilibrium: Fix device node reference leak in
pinbank_init() (bsc#1258210).
- mcb: fix incorrect sanity check (bsc#1258210).
- nvmem: an8855: drop an unused Kconfig symbol (bsc#1258210).
- usb: bdc: fix sleep during atomic (bsc#1258210).
- drivers: iio: mpu3050: use dev_err_probe for regulator request
(bsc#1258210).
- mfd: simple-mfd-i2c: Add Delta TN48M CPLD support (bsc#1258210).
- mfd: arizona: Fix regulator resource leak on
wm5102_clear_write_sequencer() failure (bsc#1258210).
- Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay
to 5ms" (bsc#1258210).
- coresight: tmc-etr: Fix race condition between sysfs and perf
mode (bsc#1258210).
- phy: freescale: imx8qm-hsio: fix NULL pointer dereference
(bsc#1258210).
- coresight: etm3x: Fix cpulocked warning on cpuhp (bsc#1258210).
- watchdog: starfive-wdt: Fix PM reference leak in probe error
path (bsc#1258210).
- iio: pressure: mprls0025pa: fix pressure calculation
(bsc#1258210).
- iio: pressure: mprls0025pa: fix scan_type struct (bsc#1258210).
- iio: pressure: mprls0025pa: fix interrupt flag (bsc#1258210).
- iio: pressure: mprls0025pa: fix SPI CS delay violation
(bsc#1258210).
- iio: pressure: mprls0025pa: fix spi_transfer struct
initialisation (bsc#1258210).
- mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
(bsc#1258210).
- gpib: Fix memory leak in ni_usb_init() (bsc#1258210).
- gpib: Fix error code in ni_usb_write_registers() (bsc#1258210).
- gpib: Fix error code in ibonline() (bsc#1258210).
- serial: SH_SCI: improve "DMA support" prompt (bsc#1258210).
- serial: imx: change SERIAL_IMX_CONSOLE to bool (bsc#1258210).
- staging: greybus: lights: avoid NULL deref (bsc#1258210).
- usb: typec: ucsi: drop an unused Kconfig symbol (bsc#1258210).
- iio: test: drop dangling symbol in gain-time-scale helpers
(bsc#1258210).
- soundwire: intel_ace2x: add SND_HDA_CORE dependency
(bsc#1258210).
- char: misc: Use IS_ERR() for filp_open() return value
(bsc#1258210).
- phy: rockchip: samsung-hdptx: Pre-compute HDMI PLL config for
461.10125 MHz output (bsc#1258210).
- dma: dma-axi-dmac: fix HW scatter-gather not looking at the
queue (bsc#1258210).
- dma: dma-axi-dmac: fix SW cyclic transfers (bsc#1258210).
- dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
(bsc#1258210).
- interconnect: mediatek: Aggregate bandwidth with saturating add
(bsc#1258210).
- interconnect: mediatek: Don't hijack parent device (bsc#1258210).
- clk: zynqmp: pll: Fix zynqmp_clk_divider_determine_rate kerneldoc
(bsc#1258210).
- clk: zynqmp: divider: Fix zynqmp_clk_divider_determine_rate
kerneldoc (bsc#1258210).
- clk: mediatek: Fix error handling in runtime PM setup
(bsc#1258210).
- clk: mediatek: Add mfg_eb as parent to mt8196 mfgpll clocks
(bsc#1258210).
- clk: mediatek: Drop __initconst from gates (bsc#1258210).
- clk: zynqmp: divider: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: x86: cgu: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: versaclock3: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: stm32: stm32-core: convert from divider_round_rate_parent()
to divider_determine_rate() (bsc#1258210).
- clk: stm32: stm32-core: convert from divider_ro_round_rate()
to divider_ro_determine_rate() (bsc#1258210).
- clk: sprd: div: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: sophgo: sg2042-clkgen: convert from divider_round_rate()
to divider_determine_rate() (bsc#1258210).
- clk: nxp: lpc32xx: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: nuvoton: ma35d1-divider: convert from divider_round_rate()
to divider_determine_rate() (bsc#1258210).
- clk: milbeaut: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: loongson1: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: hisilicon: clkdivider-hi6220: convert from
divider_round_rate() to divider_determine_rate() (bsc#1258210).
- clk: bm1880: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: actions: owl-divider: convert from divider_round_rate()
to divider_determine_rate() (bsc#1258210).
- clk: actions: owl-composite: convert from
owl_divider_helper_round_rate() to divider_determine_rate()
(bsc#1258210).
- clk: qcom: gfx3d: add parent to parent request map (bsc#1258210).
- clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk1_clk_src
(bsc#1258210).
- clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
(bsc#1258210).
- clk: qcom: regmap-divider: convert from divider_round_rate()
to divider_determine_rate() (bsc#1258210).
- clk: qcom: regmap-divider: convert from divider_ro_round_rate()
to divider_ro_determine_rate() (bsc#1258210).
- clk: Move clk_{save,restore}_context() to COMMON_CLK section
(bsc#1258210).
- Input: adp5589 - remove a leftover header file (bsc#1258210).
- clk: microchip: core: remove duplicate determine_rate on
pic32_sclk_ops (bsc#1258210).
- clk: rockchip: Fix error pointer check after
rockchip_clk_register_gate_link() (bsc#1258210).
- clk: qcom: alpha-pll: convert from divider_round_rate() to
divider_determine_rate() (bsc#1258210).
- clk: qcom: gcc-ipq5018: flag sleep clock as critical
(bsc#1258210).
- clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
(bsc#1258210).
- clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
(bsc#1258210).
- clk: qcom: gcc-glymur: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-x1e80100: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-milos: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-sdx75: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-sm4450: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-sm8750: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: qcom: gcc-sm8450: Update the SDCC RCGs to use
shared_floor_ops (bsc#1258210).
- clk: meson: g12a: Limit the HDMI PLL OD to /4 (bsc#1258210).
- clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
(bsc#1258210).
- clk: qcom: rcg2: compute 2d using duty fraction directly
(bsc#1258210).
- clk: qcom: gcc-sm8650: Use floor ops for SDCC RCGs (bsc#1258210).
- clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs (bsc#1258210).
- clk: spacemit: Respect Kconfig setting when building modules
(bsc#1258210).
- clk: thead: th1520-ap: Poll for PLL lock and wait for stability
(bsc#1258210).
- fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
(bsc#1258210).
- fbdev: of_display_timing: Fix device node reference leak in
of_get_display_timings() (bsc#1258210).
- Revert "mailbox/pcc: support mailbox management of the shared
buffer" (bsc#1258210).
- remoteproc: imx_dsp_rproc: Only reset carveout memory at
RPROC_OFFLINE state (bsc#1258210).
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR
macros (bsc#1258210).
- tracing: Properly process error handling in
event_hist_trigger_parse() (bsc#1258210).
- fs/nfs: Fix readdir slow-start regression (bsc#1258210).
- nvdimm: virtio_pmem: serialize flush requests (bsc#1258210).
- scsi: csiostor: Fix dereference of null pointer rn (bsc#1258210).
- scsi: ufs: host: mediatek: Require CONFIG_PM (bsc#1258210).
- scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
(bsc#1258210).
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
(bsc#1258210).
- RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv()
kmalloc (bsc#1258210).
- power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
(bsc#1258210).
- power: supply: pm8916_lbc: Fix use-after-free for extcon in
IRQ handler (bsc#1258210).
- hisi_acc_vfio_pci: fix VF reset timeout issue (bsc#1258210).
- mtd: spinand: Fix kernel doc (bsc#1258210).
- mtd: parsers: ofpart: fix OF node refcount leak in
parse_fixed_partitions() (bsc#1258210).
- cxl: Fix premature commit_end increment on decoder commit
failure (bsc#1258210).
- RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
(bsc#1258210).
- RDMA/rxe: Fix race condition in QP timer handlers (bsc#1258210).
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler
(bsc#1258210).
- RDMA/uverbs: Validate wqe_size before using it in
ib_uverbs_post_send (bsc#1258210).
- RDMA/rxe: Fix iova-to-va conversion for MR page sizes !=
PAGE_SIZE (bsc#1258210).
- cxl/core: Fix cxl_dport debugfs EINJ entries (bsc#1258210).
- NFS/localio: remove -EAGAIN handling in nfs_local_doio()
(bsc#1258210).
- NFS/localio: use GFP_NOIO and non-memreclaim workqueue in
nfs_local_commit (bsc#1258210).
- NFS/localio: prevent direct reclaim recursion into NFS via
nfs_writepages (bsc#1258210).
- NFS/localio: Handle short writes by retrying (bsc#1258210).
- mtd: parsers: Fix memory leak in
mtd_parser_tplink_safeloader_parse() (bsc#1258210).
- crypto: ccp - Send PSP_CMD_TEE_RING_DESTROY when
PSP_CMD_TEE_RING_INIT fails (bsc#1258210).
- crypto: ccp - Factor out ring destroy handling to a helper
(bsc#1258210).
- crypto: ccp - Add an S4 restore flow (bsc#1258210).
- crypto: ccp - Declare PSP dead if PSP_CMD_TEE_RING_INIT fails
(bsc#1258210).
- platform/x86/amd/pmf: Prevent TEE errors after hibernate
(bsc#1258210).
- vfio/pci: Lock upstream bridge for vfio_pci_core_disable()
(bsc#1258210).
- mtd: intel-dg: Fix accessing regions before setting nregions
(bsc#1258210).
- mtd: rawnand: cadence: Fix return type of CDMA send-and-wait
helper (bsc#1258210).
- IB/mlx5: Fix port speed query for representors (bsc#1258210).
- RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1258210).
- tools/power/x86/intel-speed-select: Fix file descriptor leak
in isolate_cpus() (bsc#1258210).
- platform/x86: hp-wmi: fix platform profile values for Omen
16-wf1xxx (bsc#1258210).
- RDMA/iwcm: Fix workqueue list corruption by removing work_list
(bsc#1258210).
- RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1258210).
- RDMA/rtrs-srv: fix SG mapping (bsc#1258210).
- power: supply: wm97xx: Fix NULL pointer dereference in
power_supply_changed() (bsc#1258210).
- power: supply: bq27xxx: fix wrong errno when bus ops are
unsupported (bsc#1258210).
- power: reset: nvmem-reboot-mode: respect cell size for
nvmem_cell_write (bsc#1258210).
- power: supply: sbs-battery: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: rt9455: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: pm8916_lbc: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: pm8916_bms_vm: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: goldfish: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: cpcap-battery: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: bq25980: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: bq256xx: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: act8945a: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- power: supply: ab8500: Fix use-after-free in
power_supply_changed() (bsc#1258210).
- cxl/mem: Fix devm_cxl_memdev_edac_release() confusion
(bsc#1258210).
- RDMA/mlx5: Fix ucaps init error flow (bsc#1258210).
- RDMA/hns: Notify ULP of remaining soft-WCs during reset
(bsc#1258210).
- RDMA/hns: Fix RoCEv1 failure due to DSCP (bsc#1258210).
- RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1258210).
- IB/cache: update gid cache on client reregister event
(bsc#1258210).
- RDMA/rtrs: server: remove dead code (bsc#1258210).
- af_unix: Fix memleak of newsk in unix_stream_connect()
(bsc#1258210).
- octeontx2-pf: Unregister devlink on probe failure (bsc#1258210).
- net: renesas: rswitch: fix forwarding offload statemachine
(bsc#1258210).
- ionic: Rate limit unknown xcvr type messages (bsc#1258210).
- octeon_ep_vf: ensure dbell BADDR updation (bsc#1258210).
- octeon_ep: ensure dbell BADDR updation (bsc#1258210).
- octeon_ep: disable per ring interrupts (bsc#1258210).
- serial: caif: fix use-after-free in caif_serial ldisc_close()
(bsc#1258210).
- xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path
(bsc#1258210).
- net: sunhme: Fix sbus regression (bsc#1258210).
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
(bsc#1258210).
- smb: client: correct value for smbd_max_fragmented_recv_size
(bsc#1258210).
- procfs: fix missing RCU protection when reading real_parent
in do_task_stat() (bsc#1258210).
- net: hns3: fix double free issue for tx spare buffer
(bsc#1258210).
- dpll: zl3073x: Fix output pin phase adjustment sign
(bsc#1258210).
- dpll: zl3073x: Cache all output properties in zl3073x_out
(bsc#1258210).
- dpll: zl3073x: Split ref, out, and synth logic from core
(bsc#1258210).
- dpll: zl3073x: Store raw register values instead of parsed state
(bsc#1258210).
- dpll: zl3073x: Specify phase adjustment granularity for pins
(bsc#1258210).
- dpll: add phase-adjust-gran pin attribute (bsc#1258210).
- PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
(bsc#1258210).
- netfilter: nft_set_rbtree: validate open interval overlap
(bsc#1258210).
- netfilter: nft_set_rbtree: validate element belonging to interval
(bsc#1258210).
- netfilter: nft_set_rbtree: don't gc elements on insert
(bsc#1258210).
- netfilter: nft_set_rbtree: remove seqcount_rwlock_t
(bsc#1258210).
- netfilter: nft_set_rbtree: use binary search array in get
command (bsc#1258210).
- netfilter: nft_set_rbtree: translate rbtree to array for binary
search (bsc#1258210).
- netfilter: nft_set_rbtree: check for partial overlaps in
anonymous sets (bsc#1258210).
- netfilter: nft_set_rbtree: fix bogus EEXIST with NLM_F_CREATE
with null interval (bsc#1258210).
- netfilter: nft_counter: fix reset of counters on 32bit archs
(bsc#1258210).
- netfilter: nft_set_hash: fix get operation on big endian
(bsc#1258210).
- netfilter: nfnetlink_queue: do shared-unconfirmed check before
segmentation (bsc#1258210).
- netfilter: nfnetlink_queue: optimize verdict lookup with hash
table (bsc#1258210).
- nfc: hci: shdlc: Stop timers and work before freeing context
(bsc#1258210).
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
(bsc#1258210).
- bonding: only set speed/duplex to unknown, if getting speed
failed (bsc#1258210).
- octeontx2-af: Fix PF driver crash with kexec kernel booting
(bsc#1258210).
- mptcp: fix receive space timestamp initialization (bsc#1258210).
- mptcp: do not account for OoO in mptcp_rcvbuf_grow()
(bsc#1258210).
- of: unittest: fix possible null-pointer dereferences in
of_unittest_property_copy() (bsc#1258210).
- tcp: accecn: handle unexpected AccECN negotiation feedback
(bsc#1258210).
- tcp: disable RFC3168 fallback identifier for CC modules
(bsc#1258210).
- tcp: ECT_1_NEGOTIATION and NEEDS_ACCECN identifiers
(bsc#1258210).
- jfs: avoid -Wtautological-constant-out-of-range-compare warning
(bsc#1258210).
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
(bsc#1258210).
- ipc: don't audit capability check in ipc_permissions()
(bsc#1258210).
- selftests/mm: fix usage of FORCE_READ() in cow tests
(bsc#1258210).
- PCI/ACPI: Restrict program_hpx_type2() to AER bits (bsc#1258210).
- PCI: Initialize RCB from pci_configure_device() (bsc#1258210).
- wifi: ath12k: clear stale link mapping of ahvif->links_map
(bsc#1258210).
- wifi: ath12k: Fix index decrement when array_len is zero
(bsc#1258210).
- wifi: ath11k: add usecase firmware handling based on device
compatible (bsc#1258210).
- wifi: ath10k: sdio: add missing lock protection in
ath10k_sdio_fw_crashed_dump() (bsc#1258210).
- PCI: Check parent for NULL in of_pci_bus_release_domain_nr()
(bsc#1258210).
- tcp: tcp_tx_timestamp() must look at the rtx queue (bsc#1258210).
- PCI: Remove old_size limit from bridge window sizing
(bsc#1258210).
- PCI: Stop over-estimating bridge window size (bsc#1258210).
- PCI: Rewrite bridge window head alignment function (bsc#1258210).
- fat: avoid parent link count underflow in rmdir (bsc#1258210).
- rust: task: restrict Task::group_leader() to current
(bsc#1258210).
- lib/kstrtox: fix kstrtobool() docstring to mention
enabled/disabled (bsc#1258210).
- nfsd: never defer requests during idmap lookup (bsc#1258210).
- xdrgen: Remove inclusion of nlm4.h header (bsc#1258210).
- xdrgen: Initialize data pointer for zero-length items
(bsc#1258210).
- NFS: NFSERR_INVAL is not defined by NFSv2 (bsc#1258210).
- xdrgen: Fix struct prefix for typedef types in program wrappers
(bsc#1258210).
- dm: use bio_clone_blkg_association (bsc#1258210).
- iommu/vt-d: Clear Present bit before tearing down context entry
(bsc#1258210).
- iommu/vt-d: Clear Present bit before tearing down PASID entry
(bsc#1258210).
- iommu/vt-d: Flush cache for PASID table before