Oracle Linux 9 ELSA-2025-20368 important kernel security update

kernel-uek-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-core-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-core-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-devel-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-core-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-deprecated-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-desktop-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-extra-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-extra-netfilter-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-usb-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-debug-modules-wireless-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-devel-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-extra-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-core-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-deprecated-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-desktop-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-extra-netfilter-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-usb-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek-modules-wireless-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-core-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-core-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-deprecated-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-desktop-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-extra-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-extra-netfilter-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-usb-6.12.0-100.28.2.el9uek.aarch64.rpm kernel-uek64k-modules-wireless-6.12.0-100.28.2.el9uek.aarch64.rpm - aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump (Brian Maly) [Orabug: 37446372] - vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang) [Orabug: 37840543] - vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang) [Orabug: 37840543] - vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang) [Orabug: 37840543] - vhost-scsi: Reduce response iov mem use (Mike Christie) [Orabug: 37840543] - vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie) [Orabug: 37840543] - vhost-scsi: Stop duplicating se_cmd fields (Mike Christie) [Orabug: 37840543] - vhost-scsi: Dynamically allocate scatterlists (Mike Christie) [Orabug: 37840543] - vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie) [Orabug: 37840543] - vhost-scsi: Add better resource allocation failure handling (Mike Christie) [Orabug: 37840543] - vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie) [Orabug: 37840543] - vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie) [Orabug: 37840543] - Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie) [Orabug: 37840543] - Revert "vhost_scsi: log write descriptors" (Mike Christie) [Orabug: 37840543] - scsi: mpi3mr: Event processing debug improvement (Ranjan Kumar) [Orabug: 37878021] - scsi: mpi3mr: Add level check to control event logging (Ranjan Kumar) [Orabug: 37878021] - scsi: mpi3mr: Reset the pending interrupt flag (Ranjan Kumar) [Orabug: 37878021] - scsi: mpi3mr: Fix pending I/O counter (Ranjan Kumar) [Orabug: 37878021] [6.12.0-2.24.1.el9uek] - x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky) [Orabug: 37800727] - LTS version: v6.12.24 (Jack Vogel) - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Thomas Richter) - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov) - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann) - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor) - libbpf: Prevent compiler warnings/errors (Eder Zulian) - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle) - nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton) - NFSD: Fix CB_GETATTR status fix (Chuck Lever) - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Olga Kornievskaia) - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor) - iommufd: Fail replace if device has not been attached (Yi Liu) - iommufd: Make attach_handle generic than fault specific (Nicolin Chen) - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson) - thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold (Nícolas F. R. A. Prado) - thermal/drivers/mediatek/lvts: Disable monitor mode during suspend (Nícolas F. R. A. Prado) - selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu) - selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang) - sched_ext: create_dsq: Return -EEXIST on duplicate request (Jake Hillion) - s390: Fix linker error when -no-pie option is unavailable (Sumanth Korikkar) - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Niklas Schnelle) - ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Steven Rostedt) - pinctrl: samsung: add support for eint_fltcon_offset (Peter Griffin) - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold) - phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger) - PCI: Fix wrong length of devres array (Philipp Stanner) - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke) - PCI: pciehp: Avoid unnecessary device replacement check (Lukas Wunner) - PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 (Siddharth Vadapalli) - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov) - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu) - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu) - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu) - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu) - of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu) - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin) - net: mana: Switch to page pool for jumbo frames (Haiyang Zhang) - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi) - selftests/landlock: Add a new test for setuid() (Mickaël Salaün) - selftests/landlock: Split signal_scoping_threads tests (Mickaël Salaün) - landlock: Prepare to add second errata (Mickaël Salaün) - landlock: Always allow signals between threads of the same process (Mickaël Salaün) - landlock: Add erratum for TCP fix (Mickaël Salaün) - landlock: Add the errata interface (Mickaël Salaün) - landlock: Move code to ease future backports (Mickaël Salaün) - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson) - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Amit Machhiwal) - gve: handle overflow when reporting TX consumed descriptors (Joshua Washington) - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski) - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu) - ftrace: Properly merge notrace hashes (Andy Chiu) - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin) - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski) - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski) - dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka) - dm-integrity: fix non-constant-time tag verification (Jo Van Bulck) - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka) - dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka) - dlm: fix error if active rsb is not hashed (Alexander Aring) - dlm: fix error if inactive rsb is not hashed (Alexander Aring) - crypto: ccp - Fix uAPI definitions of PSP errors (Dionna Glaze) - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky) - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das) - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue) - clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue) - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey) - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar) - cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár) - cifs: fix integer overflow in match_server() (Roman Smirnov) - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina) - CIFS: Propagate min offload along with other parameters from primary to secondary channels. (Aman) - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner) - tracing: Do not add length to print format in synthetic events (Steven Rostedt) - tracing: fprobe events: Fix possible UAF on modules (Masami Hiramatsu (Google)) - x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne) - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) - mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper (Jinjiang Tu) - mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert) - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue) - mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu) - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers) - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes) - mm: fix lazy mmu docs and usage (Ryan Roberts) - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand) - mm/damon/ops: have damon_get_folio return folio even for tail pages (Usama Arif) - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts) - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts) - iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs (Sean Christopherson) - iommu/vt-d: Fix possible circular locking dependency (Lu Baolu) - iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes (Sean Christopherson) - iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled (Sean Christopherson) - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Nicolin Chen) - iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen) - btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn) - btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn) - btrfs: tests: fix chunk map leak after failure to add it to the tree (Filipe Manana) - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana) - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina) - arm64: dts: exynos: gs101: disable pinctrl_gsacore node (Peter Griffin) - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai) - arm64: mm: Correct the update of max_pfn (Zhenhua Huang) - arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade) - arm64: mops: Do not dereference src reg for a set operation (Keir Fraser) - mtd: rawnand: Add status chack in r852_ready() (Wentao Liang) - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang) - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0)) - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan) - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham) - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng) - mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput) - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang) - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa) - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa) - jbd2: remove wrong sb->s_sequence check (Jan Kara) - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu) - ima: limit the number of ToMToU integrity violations (Mimi Zohar) - ima: limit the number of open-writers integrity violations (Mimi Zohar) - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French) - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang) - svcrdma: do not unregister device for listeners (Olga Kornievskaia) - tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo) - udf: Fix inode_getblk() return value (Jan Kara) - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu) - f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil) - ext4: fix off-by-one error in do_split (Artem Sadovnikov) - bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo) - accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Jacek Lawrynowicz) - accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() (Jacek Lawrynowicz) - ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx (Sharan Kumar M) - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov) - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla) - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla) - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla) - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla) - ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla) - ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() (Haoxiang Li) - io_uring/kbuf: reject zero sized provided buffers (Jens Axboe) - io_uring/net: fix io_req_post_cqe abuse by send bundle (Pavel Begunkov) - io_uring/net: fix accept multishot handling (Pavel Begunkov) - wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO (Ming Yen Hsieh) - wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present (Ming Yen Hsieh) - wifi: mt76: mt7925: fix country count limitation for CLC (Ming Yen Hsieh) - wifi: mt76: mt7925: ensure wow pattern command align fw format (Ming Yen Hsieh) - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia) - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li) - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue) - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang) - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún) - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún) - mtd: Add check for devm_kcalloc() (Jiasheng Jiang) - mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0)) - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0)) - media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster (Jackson.lee) - media: chips-media: wave5: Fix a hang after seeking (Jackson.lee) - media: chips-media: wave5: Avoid race condition in the interrupt handler (Jackson.lee) - media: chips-media: wave5: Fix gray color on screen (Jackson.lee) - media: i2c: imx214: Rectify probe error handling related to runtime PM (Sakari Ailus) - media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus) - media: i2c: imx319: Rectify runtime PM handling probe and remove (Sakari Ailus) - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) - media: nuvoton: Fix reference handling of ece_pdev (Ricardo Ribalda) - media: nuvoton: Fix reference handling of ece_node (Ricardo Ribalda) - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus) - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus) - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus) - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus) - Revert "media: imx214: Fix the error handling in imx214_probe()" (Sakari Ailus) - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich) - media: imx219: Adjust PLL settings based on the number of MIPI lanes (Dave Stevenson) - media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang) - media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne) - media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() (Hans de Goede) - media: streamzap: prevent processing IR data on URB failure (Murad Masimov) - accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Jacek Lawrynowicz) - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell) - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal) - KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon) - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson) - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson) - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson) - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson) - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich) - media: rockchip: rga: fix rga offset lookup (John Keeping) - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can) - media: vim2m: print device name after registering device (Matthew Majewski) - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) - media: intel/ipu6: set the dev_parent of video device to pdev (Bingbu Cao) - media: mgb4: Fix switched CMT frequency range "magic values" sets (Martin Tůma) - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund) - media: mgb4: Fix CMT registers update logic (Martin Tůma) - media: uapi: rkisp1-config: Fix typo in extensible params example (Niklas Söderlund) - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann) - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang) - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat) - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li) - HID: pidff: Fix set_device_control() (Tomasz Pakuła) - HID: pidff: Fix 90 degrees direction name North -> East (Tomasz Pakuła) - HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff (Tomasz Pakuła) - HID: pidff: Clamp effect playback LOOP_COUNT value (Tomasz Pakuła) - HID: pidff: Rename two functions to align them with naming convention (Tomasz Pakuła) - HID: pidff: Remove redundant call to pidff_find_special_keys (Tomasz Pakuła) - HID: pidff: Support device error response from PID_BLOCK_LOAD (Tomasz Pakuła) - HID: pidff: Comment and code style update (Tomasz Pakuła) - HID: hid-universal-pidff: Add Asetek wheelbases support (Tomasz Pakuła) - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła) - HID: pidff: Factor out pool report fetch and remove excess declaration (Tomasz Pakuła) - HID: pidff: Use macros instead of hardcoded min/max values for shorts (Tomasz Pakuła) - HID: pidff: Simplify pidff_rescale_signed (Tomasz Pakuła) - HID: pidff: Move all hid-pidff definitions to a dedicated header (Tomasz Pakuła) - HID: pidff: Factor out code for setting gain (Tomasz Pakuła) - HID: pidff: Rescale time values to match field units (Tomasz Pakuła) - HID: pidff: Define values used in pidff_find_special_fields (Tomasz Pakuła) - HID: pidff: Simplify pidff_upload_effect function (Tomasz Pakuła) - HID: pidff: Completely rework and fix pidff_reset function (Tomasz Pakuła) - HID: pidff: Stop all effects before enabling actuators (Tomasz Pakuła) - HID: pidff: Clamp PERIODIC effect period to device's logical range (Tomasz Pakuła) - s390/pci: Fix s390_mmio_read/write syscall page fault handling (Niklas Schnelle) - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn) - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn) - erofs: set error to bio if file-backed IO fails (Sheng Yong) - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König) - pwm: rcar: Improve register calculation (Uwe Kleine-König) - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) - tpm: End any active auth session before shutdown (Jonathan McDowell) - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell) - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain) - tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google)) - fbdev: omapfb: Add 'plane' value check (Leonid Arapov) - drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König) - drm/amdgpu: Fix the race condition for draining retry fault (Emily Deng) - PCI: Enable Configuration RRS SV early (Bjorn Helgaas) - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang) - PCI: Add Rockchip Vendor ID (Shawn Lin) - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno) - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno) - drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds (Tvrtko Ursulin) - drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang) - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang) - drm/amdkfd: Fix mode1 reset crash issue (Philip Yang) - drm/amdkfd: clamp queue size to minimum (David Yat Sin) - drivers: base: devres: Allow to release group on device release (Lucas De Marchi) - drm/amd/display: stop DML2 from removing pipes based on planes (Mike Katsnelson) - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli) - drm/debugfs: fix printk format for bridge index (Luca Ceresoli) - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt) - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt) - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt) - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt) - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt) - drm/amdgpu: Unlocked unmap only clear page table leaves (Philip Yang) - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai) - drm/xe/vf: Don't try to trigger a full GT reset if VF (Michal Wajdeczko) - drm/xe/bmg: Add new PCI IDs (Shekhar Chauhan) - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar) - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE (Pedro Nishiyama) - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama) - Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov) - Bluetooth: hci_qca: use the power sequencer for wcn6750 (Janaki Ramaiah Thota) - Bluetooth: btusb: Add 2 HWIDs for MT7922 (Jiande Lu) - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov) - Bluetooth: btintel_pcie: Add device id of Whale Peak (Kiran K) - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni) - net: vlan: don't propagate flags on open (Stanislav Fomichev) - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng) - btrfs: harden block_group::bg_list against list_del() races (Boris Burkov) - ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI (Huacai Chen) - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn) - ext4: ignore xattrs past end (Bhupesh) - Revert "f2fs: rebuild nat_bits during umount" (Chao Yu) - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo) - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral) - net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module (Martin Schiller) - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran) - net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz) - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel) - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb) - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) - can: flexcan: add NXP S32G2/S32G3 SoC support (Ciprian Marian Costea) - can: flexcan: Add quirk to handle separate interrupt lines for mailboxes (Ciprian Marian Costea) - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) - net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze) - scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen) - wifi: mac80211: ensure sdata->work is canceled before initialized. (Miri Korenblit) - wifi: mac80211: add strict mode disabling workarounds (Johannes Berg) - f2fs: don't retry IO for corrupted data scenario (Chao Yu) - net: page_pool: don't cast mp param to devmem (Pavel Begunkov) - ata: libata-core: Add 'external' to the libata.force kernel parameter (Niklas Cassel) - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh) - wifi: ath12k: fix memory leak in ath12k_pci_remove() (Miaoqing Pan) - wifi: ath11k: fix memory leak in ath11k_xxx_remove() (Miaoqing Pan) - wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues (P Praneesh) - platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig (Hans de Goede) - ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem) - ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify) - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof) - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty) - media: s5p-mfc: Corrected NV12M/NV21M plane-sizes (Aakarsh Jain) - media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda) - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang) - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy) - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy) - ASoC: amd: ps: use macro for ACP6.3 pci revision id (Vijendar Mukunda) - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) - HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła) - HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła) - HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła) - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła) - HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła) - HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła) - HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła) - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła) - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła) - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng) - platform/chrome: cros_ec_lpc: Match on Framework ACPI device (Daniel Schaefer) - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar) - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook) - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson) - Flush console log from kernel_power_off() (Paul E. McKenney) - PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() (Lizhi Xu) - perf/dwc_pcie: fix some unreleased resources (Yunhui Cui) - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland) - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker) - x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel)) - x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 (Uros Bizjak) - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle)) - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) - umount: Allow superblock owners to force umount (Trond Myklebust) - fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik) - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud) - iommu/exynos: Fix suspend/resume with IDENTITY domain (Marek Szyprowski) - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal) - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) - ipv6: Align behavior across nexthops during path selection (Ido Schimmel) - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Vladimir Oltean) - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Vladimir Oltean) - smb: client: fix UAF in decryption with multichannel (Paulo Alcantara) - net_sched: sch_sfq: move the limit validation (Octavian Purdila) - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner) - drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik) - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang) - net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang) - drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard) - drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard) - drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard) - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard) - drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard) - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier) - tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen) - octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam) - net: tls: explicitly disallow disconnect (Jakub Kicinski) - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang) - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf) - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) - drm/xe/hw_engine: define sysfs_ops on all directories (Tejas Upadhyay) - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI (Petr Vaněk) - drm/i915: Disable RPG during live selftest (Badal Nilawar) - ublk: fix handling recovery & reissue in ublk_abort_queue() (Ming Lei) - ublk: refactor recovery configuration flag helpers (Uday Shankar) - selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw) - gpiolib: of: Fix the choice for Ingenic NAND quirk (Andy Shevchenko) - cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set (Waiman Long) - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long) - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long) - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long) - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long) - ASoC: Intel: adl: add 2xrt1316 audio configuration (Bard Liao)