Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2024-11-22

                Ported from the following upstream stable releases:
                        v6.6.54, v6.10.13

       from git://git.kernel.org/

perf stat: Fix a segfault with --per-cluster --metric-only
EDAC/synopsys: Fix ECC status and IRQ control race condition
EDAC/synopsys: Fix error injection on Zynq UltraScale+
wifi: rtw88: always wait for both firmware loading attempts
crypto: xor - fix template benchmarking
ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
wifi: brcmfmac: export firmware interface functions
wifi: brcmfmac: introducing fwil query functions
wifi: ath9k: Remove error checks when creating debugfs entries
wifi: ath12k: fix BSS chan info request WMI command
wifi: ath12k: match WMI BSS chan info structure with firmware definition
wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
arm64: signal: Fix some under-bracketed UAPI macros
wifi: rtw88: remove CPT execution branch never used
RISC-V: KVM: Fix sbiret init before forwarding to userspace
RISC-V: KVM: Allow legacy PMU access from guest
RISC-V: KVM: Fix to allow hpmcounter31 from the guest
mount: handle OOM on mnt_warn_timestamp_expiry
ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
powercap: intel_rapl: Fix off by one in get_rpi()
kselftest/arm64: signal: fix/refactor SVE vector length enumeration
drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
wifi: mac80211: don't use rate mask for offchannel TX either
wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
wifi: iwlwifi: config: label 'gl' devices as discrete
wifi: iwlwifi: mvm: increase the time between ranging measurements
padata: Honor the caller's alignment in case of chunk_size 0
drivers/perf: hisi_pcie: Record hardware counts correctly
drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
kselftest/arm64: Actually test SME vector length changes via sigreturn
can: j1939: use correct function name in comment
ACPI: CPPC: Fix MASK_VAL() usage
netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
netfilter: nf_tables: reject element expiration with no timeout
netfilter: nf_tables: reject expiration higher than timeout
netfilter: nf_tables: remove annotation to access set timeout while holding lock
perf/arm-cmn: Improve debugfs pretty-printing for large configs
perf/arm-cmn: Refactor node ID handling. Again.
perf/arm-cmn: Fix CCLA register offset
perf/arm-cmn: Ensure dtm_idx is big enough
cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
wifi: mt76: mt7915: fix oops on non-dbdc mt7986
wifi: mt76: mt7996: use hweight16 to get correct tx antenna
wifi: mt76: mt7996: fix traffic delay when switching back to working channel
wifi: mt76: mt7996: fix wmm set of station interface to 3
wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
wifi: mt76: mt7996: fix EHT beamforming capability check
x86/sgx: Fix deadlock in SGX NUMA node search
pm:cpupower: Add missing powercap_set_enabled() stub function
crypto: hisilicon/hpre - mask cluster timeout error
crypto: hisilicon/qm - reset device before enabling it
crypto: hisilicon/qm - inject error before stopping queue
wifi: mt76: mt7603: fix mixed declarations and code
wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
wifi: mt76: mt7915: fix rx filter setting for bfee functionality
wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
wifi: mt76: mt7996: fix uninitialized TLV data
wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
sock_map: Add a cond_resched() in sock_hash_free()
can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
can: m_can: enable NAPI before enabling interrupts
can: m_can: m_can_close(): stop clocks after device has been shut down
Bluetooth: btusb: Fix not handling ZPL/short-transfer
bareudp: Pull inner IP header in bareudp_udp_encap_recv().
bareudp: Pull inner IP header on xmit.
net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
net: tipc: avoid possible garbage value
ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
ublk: move zone report data out of request pdu
nbd: fix race between timeout and normal completion
block, bfq: fix possible UAF for bfqq->bic with merge chain
block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
block, bfq: don't break merge chain in bfq_split_bfqq()
cachefiles: Fix non-taking of sb_writers around set/removexattr
erofs: fix incorrect symlink detection in fast symlink
block, bfq: fix uaf for accessing waker_bfqq after splitting
block, bfq: fix procress reference leakage for bfqq in merge chain
io_uring/io-wq: do not allow pinning outside of cpuset
io_uring/io-wq: inherit cpuset of cgroup in io worker
block: fix potential invalid pointer dereference in blk_add_partition
spi: ppc4xx: handle irq_of_parse_and_map() errors
arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
firmware: arm_scmi: Fix double free in OPTEE transport
spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
regulator: Return actual error in of_regulator_bulk_get_all()
arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
ARM: dts: microchip: sama7g5: Fix RTT clock
ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
ARM: versatile: fix OF node leak in CPUs prepare
reset: berlin: fix OF node leak in probe() error path
reset: k210: fix OF node leak in probe() error path
clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
x86/mm: Use IPIs to synchronize LAM enablement
ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
ASoC: tas2781: remove unused acpi_subysystem_id
ASoC: tas2781: Use of_property_read_reg()
ASoC: tas2781-i2c: Drop weird GPIO code
ASoC: tas2781-i2c: Get the right GPIO line
selftests/ftrace: Add required dependency for kprobe tests
ALSA: hda: cs35l41: fix module autoloading
m68k: Fix kernel_clone_args.flags in m68k_clone()
ASoC: loongson: fix error release
hwmon: (max16065) Fix overflows seen when writing limits
hwmon: (max16065) Remove use of i2c_match_id()
hwmon: (max16065) Fix alarm attributes
mtd: slram: insert break after errors in parsing the map
hwmon: (ntc_thermistor) fix module autoloading
power: supply: axp20x_battery: Remove design from min and max voltage
power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
iommu/amd: Do not set the D bit on AMD v2 table entries
mtd: powernv: Add check devm_kasprintf() returned value
rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
mtd: rawnand: mtk: Fix init error path
iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
pmdomain: core: Harden inter-column space in debug summary
drm/stm: Fix an error handling path in stm_drm_platform_probe()
drm/stm: ltdc: check memory returned by devm_kzalloc()
drm/amd/display: Add null check for set_output_gamma in 
dcn30_set_output_transfer_func
drm/amdgpu: properly handle vbios fake edid sizing
drm/radeon: properly handle vbios fake edid sizing
scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
scsi: NCR5380: Check for phase match during PDMA fixup
drm/amd/amdgpu: Properly tune the size of struct
drm/rockchip: vop: Allow 4096px width scaling
drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
powerpc/8xx: Fix initial memory mapping
powerpc/8xx: Fix kernel vs user address comparison
powerpc/vdso: Inconditionally use CFUNC macro
drm/msm: Fix incorrect file name output in adreno_request_fw()
drm/msm/a5xx: disable preemption in submits by default
drm/msm/a5xx: properly clear preemption records on resume
drm/msm/a5xx: fix races in preemption evaluation stage
drm/msm/a5xx: workaround early ring-buffer emptiness check
ipmi: docs: don't advertise deprecated sysfs entries
drm/msm/dsi: correct programming sequence for SM8350 / SM8450
drm/msm: fix %s null argument error
drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
xen: use correct end address of kernel for conflict checking
HID: wacom: Support sequence numbers smaller than 16-bit
HID: wacom: Do not warn about dropped packets for first packet
ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
minmax: avoid overly complex min()/max() macro arguments in xen
xen: introduce generic helper checking for memory map conflicts
xen: move max_pfn in xen_memory_setup() out of function scope
xen: add capability to remap non-RAM pages to different PFNs
xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
xen/swiotlb: add alignment check for dma buffers
xen/swiotlb: fix allocated size
tpm: Clean up TPM space after command failure
sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
selftests/bpf: Workaround strict bpf_lsm return value check.
selftests/bpf: Fix error linking uprobe_multi on mips
bpf: Use -Wno-error in certain tests when building with GCC
bpf: Disable some `attribute ignored' warnings in GCC
bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
selftests/bpf: Add CFLAGS per source file and runner
selftests/bpf: Fix wrong binary in Makefile log output
tools/runqslower: Fix LDFLAGS and add LDLIBS support
selftests/bpf: Use pid_t consistently in test_progs.c
selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
selftests/bpf: Drop unneeded error.h includes
selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
selftests/bpf: Fix missing BUILD_BUG_ON() declaration
selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
selftests/bpf: Fix include of <sys/fcntl.h>
selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
selftests/bpf: Fix compiling kfree_skb.c with musl-libc
selftests/bpf: Fix compiling flow_dissector.c with musl-libc
selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
selftests/bpf: Fix compiling core_reloc.c with musl-libc
selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
selftests/bpf: Fix arg parsing in veristat, test_progs
selftests/bpf: Fix error compiling test_lru_map.c
selftests/bpf: Fix C++ compile error from missing _Bool type
selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
selftests/bpf: Fix compile if backtrace support missing in libc
selftests/bpf: Fix error compiling tc_redirect.c with musl libc
samples/bpf: Fix compilation errors with cf-protection option
bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
xz: cleanup CRC32 edits from 2018
kthread: fix task state in kthread worker if being frozen
ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
ext4: avoid buffer_head leak in ext4_mark_inode_used()
ext4: avoid potential buffer_head leak in __ext4_new_inode()
ext4: avoid negative min_clusters in find_group_orlov()
ext4: return error on ext4_find_inline_entry
ext4: avoid OOB when system.data xattr changes underneath the filesystem
ext4: check stripe size compatibility on remount as well
sched/numa: Fix the vma scan starving issue
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
nilfs2: determine empty node blocks as corrupted
nilfs2: fix potential oob read in nilfs_btree_check_delete()
bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
bpf: Fix helper writes to read-only maps
bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
perf mem: Free the allocated sort string, fixing a leak
perf inject: Fix leader sampling inserting additional samples
perf report: Fix --total-cycles --stdio output error
perf sched timehist: Fix missing free of session in perf_sched__timehist()
perf stat: Display iostat headers correctly
perf sched timehist: Fixed timestamp error when unable to confirm event 
sched_in time
perf time-utils: Fix 32-bit nsec parsing
clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
clk: imx: imx6ul: fix default parent for enet*_ref_sel
clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after 
error detection
clk: imx: composite-8m: Enable gate clk with mcore_booted
clk: imx: composite-93: keep root clock on when mcore enabled
clk: imx: composite-7ulp: Check the PCC present bit
clk: imx: fracn-gppll: fix fractional part of PLL getting lost
clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
clk: imx: imx8qxp: Parent should be initialized earlier than the clock
remoteproc: imx_rproc: Correct ddr alias for i.MX8M
remoteproc: imx_rproc: Initialize workqueue earlier
clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
clk: qcom: dispcc-sm8550: fix several supposed typos
clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
clk: qcom: dispcc-sm8650: Update the GDSC flags
clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
pinctrl: ti: ti-iodelay: Fix some error handling paths
Input: ilitek_ts_i2c - avoid wrong input subsystem sync
Input: ilitek_ts_i2c - add report id message validation
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
PCI: Wait for Link before restoring Downstream Buses
firewire: core: correct range of block for case of switch statement
PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
leds: leds-pca995x: Add support for NXP PCA9956B
leds: pca995x: Use device_for_each_child_node() to access device child nodes
leds: pca995x: Fix device child node usage in pca995x_probe()
x86/PCI: Check pcie_find_root_port() return for NULL
nvdimm: Fix devs leaks in scan_labels()
PCI: xilinx-nwl: Fix register misspelling
PCI: xilinx-nwl: Clean up clock on probe failure/removal
media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
pinctrl: single: fix missing error code in pcs_probe()
clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
clk: ti: dra7-atl: Fix leak of of_nodes
clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
nfsd: fix refcount leak when file is unhashed after being found
pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
IB/core: Fix ib_cache_setup_one error flow cleanup
PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
RDMA/erdma: Return QP state in erdma_query_qp
RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
watchdog: imx_sc_wdt: Don't disable WDT in suspend
RDMA/hns: Don't modify rq next block addr in HIP09 QPC
RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
RDMA/hns: Optimize hem allocation performance
RDMA/hns: Fix restricted __le16 degrades to integer issue
RDMA/mlx5: Obtain upper net device only when needed
riscv: Fix fp alignment bug in perf_callchain_user()
RDMA/cxgb4: Added NULL check for lookup_atid
RDMA/irdma: fix error message in irdma_modify_qp_roce()
ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
ntb_perf: Fix printk format
ntb: Force physically contiguous allocation of rx ring buffers
nfsd: call cache_put if xdr_reserve_space returns NULL
nfsd: return -EINVAL when namelen is 0
crypto: caam - Pad SG length when allocating hash edesc
crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
f2fs: atomic: fix to avoid racing w/ GC
f2fs: reduce expensive checkpoint trigger frequency
f2fs: fix to avoid racing in between read and OPU dio write
f2fs: Create COW inode from parent dentry for atomic write
f2fs: fix to wait page writeback before setting gcing flag
f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
f2fs: support .shutdown in f2fs_sops
f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
f2fs: compress: don't redirty sparse cluster during {,de}compress
f2fs: prevent atomic file from being dirtied before commit
f2fs: get rid of online repaire on corrupted directory
f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
spi: atmel-quadspi: Undo runtime PM changes at driver exit time
spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
lib/sbitmap: define swap_lock as raw_spinlock_t
spi: atmel-quadspi: Avoid overwriting delay register settings
nvme-multipath: system fails to create generic nvme device
iio: adc: ad7606: fix oversampling gpio array
iio: adc: ad7606: fix standby gpio state to match the documentation
driver core: Fix error handling in driver API device_rename()
ABI: testing: fix admv8818 attr description
iio: chemical: bme680: Fix read/write ops to device by adding mutexes
iio: magnetometer: ak8975: drop incorrect AK09116 compatible
dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
driver core: Fix a potential null-ptr-deref in module_add_driver()
serial: 8250: omap: Cleanup on error in request_irq
coresight: tmc: sg: Do not leak sg_table
interconnect: icc-clk: Add missed num_nodes initialization
cxl/pci: Fix to record only non-zero ranges
vhost_vdpa: assign irq bypass producer token correctly
ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
Revert "dm: requeue IO if mapping table not yet available"
net: xilinx: axienet: Schedule NAPI in two steps
net: xilinx: axienet: Fix packet counting
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race 
Condition
net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
tcp: check skb is non-NULL in tcp_rto_delta_us()
net: qrtr: Update packets cloning when broadcasting
bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
virtio_net: Fix mismatched buf address when unmapping for small packets
netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
netfilter: ctnetlink: compile ctnetlink_label_size with 
CONFIG_NF_CONNTRACK_EVENTS
netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
io_uring/sqpoll: do not allow pinning outside of cpuset
io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
mm: call the security_mmap_file() LSM hook in remap_file_pages()
drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
Revert "net: libwx: fix alloc msix vectors failed"
xen: move checks for e820 conflicts further up
xen: allow mapping ACPI data using a different physical address
io_uring/sqpoll: retain test for whether the CPU is valid
io_uring/sqpoll: do not put cpumask on stack
Remove *.orig pattern from .gitignore
PCI: Revert to the original speed after PCIe failed link retraining
PCI: Clear the LBMS bit after a link retrain
PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
PCI: imx6: Fix missing call to phy_power_off() in error handling
PCI: Correct error reporting with PCIe failed link retraining
PCI: Use an error code with PCIe failed link retraining
PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
soc: fsl: cpm1: tsa: Fix tsa_write8()
soc: versatile: integrator: fix OF node leak in probe() error path
Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
iommufd: Protect against overflow of ALIGN() during iova allocation
Input: adp5588-keys - fix check on return code
Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
drm/amd/display: Add HDMI DSC native YCbCr422 support
drm/amd/display: Round calculated vtotal
drm/amd/display: Validate backlight caps are sane
KEYS: prevent NULL pointer dereference in find_asymmetric_key()
powerpc/atomic: Use YZ constraints for DS-form instructions
fs: Create a generic is_dot_dotdot() utility
ksmbd: make __dir_empty() compatible with POSIX
ksmbd: allow write with FILE_APPEND_DATA
ksmbd: handle caseless file creation
ata: libata-scsi: Fix ata_msense_control() CDL page reporting
scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
scsi: ufs: qcom: Update MODE_MAX cfg_bw value
scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
scsi: mac_scsi: Refactor polling loop
scsi: mac_scsi: Disallow bus errors during PDMA send
can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
usbnet: fix cyclical race on disconnect with work queue
arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
USB: appledisplay: close race between probe and completion handler
USB: misc: cypress_cy7c63: check for short transfer
USB: class: CDC-ACM: fix race between get_serial and set_serial
usb: cdnsp: Fix incorrect usb_request status
usb: dwc2: drd: fix clock gating on USB role switch
bus: integrator-lm: fix OF node leak in probe()
bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
firmware_loader: Block path traversal
tty: rp2: Fix reset with non forgiving PCIe host bridges
xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
serial: qcom-geni: fix fifo polling timeout
crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
drbd: Fix atomicity violation in drbd_uuid_set_bm()
drbd: Add NULL check for net_conf to prevent dereference in state validation
ACPI: sysfs: validate return type of _STR method
ACPI: resource: Add another DMI match for the TongFang GMxXGxx
efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
perf/x86/intel/pt: Fix sampling synchronization
wifi: mt76: mt7921: Check devm_kasprintf() returned value
wifi: mt76: mt7915: check devm_kasprintf() returned value
wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
wifi: rtw88: 8822c: Fix reported RX band width
wifi: mt76: mt7615: check devm_kasprintf() returned value
debugobjects: Fix conditions in fill_pool()
btrfs: tree-checker: fix the wrong output of data backref objectid
btrfs: always update fstrim_range on failure in FITRIM ioctl
f2fs: fix several potential integer overflows in file offsets
f2fs: prevent possible int overflow in dir_block_index()
f2fs: avoid potential int overflow in sanity_check_area_boundary()
f2fs: Require FMODE_WRITE for atomic write ioctls
f2fs: fix to check atomic_file in f2fs ioctl interfaces
hwrng: mtk - Use devm_pm_runtime_enable
hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
arm64: esr: Define ESR_ELx_EC_* constants as UL
arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
vfs: fix race between evice_inodes() and find_inode()&iput()
fs: Fix file_set_fowner LSM hook inconsistencies
nfs: fix memory leak in error path of nfs4_do_reclaim
EDAC/igen6: Fix conversion of system address to physical memory address
icmp: change the order of rate limits
cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
padata: use integer wrap around to prevent deadlock on seq_nr overflow
spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
soc: versatile: realview: fix memory leak during device remove
soc: versatile: realview: fix soc_dev leak during device remove
USB: misc: yurex: fix race between read and write
xhci: Add a quirk for writing ERST in high-low order
usb: xhci: fix loss of data on Cadence xHC
pps: remove usage of the deprecated ida_simple_xx() API
pps: add an error check in parport_attach
serial: don't use uninitialized value in uart_poll_init()
x86/idtentry: Incorporate definitions/declarations of the FRED entries
x86/entry: Remove unwanted instrumentation in common_interrupt()
lib/bitmap: add bitmap_{read,write}()
btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
btrfs: fix race setting file private on concurrent lseek using same fd
dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
dt-bindings: spi: nxp-fspi: add imx8ulp support
thunderbolt: Improve DisplayPort tunnel setup process to be more robust
bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
dm-verity: restart or panic on an I/O error
lockdep: fix deadlock issue between lockdep and rcu
mm: only enforce minimum stack gap size if it's sensible
spi: fspi: add support for imx8ulp
module: Fix KCOV-ignored file name
mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu 
read lock
i2c: aspeed: Update the stop sw state when the bus recovery occurs
i2c: isch: Add missed 'else'
Documentation: KVM: fix warning in "make htmldocs"
bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
wifi: brcmfmac: add linefeed at end of file
x86/tdx: Fix "in-kernel MMIO" check
spi: atmel-quadspi: Fix wrong register value written to MR
Revert: "dm-verity: restart or panic on an I/O error"
wifi: ath11k: use work queue to process beacon tx event
crypto: qat - disable IOV in adf_dev_stop()
crypto: qat - fix recovery flow for VFs
crypto: qat - ensure correct order in VF restarting handler
crypto: iaa - Fix potential use after free bug
autofs: fix missing fput for FSCONFIG_SET_FD
arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI first
thermal: core: Fold two functions into their respective callers
thermal: core: Fix rounding of delay jiffies
perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
perf/dwc_pcie: Always register for PCIe bus notifier
ACPI: video: force native for some T2 macbooks
ACPI: video: force native for Apple MacbookPro9,2
wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
wifi: mac80211: fix the comeback long retry times
ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
ACPICA: executer/exsystem: Don't nag user about every Stall() violating the spec
netfilter: nft_dynset: annotate data-races around set timeout
wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
crypto: ccp - do not request interrupt on cmd completion when irqs disabled
wifi: mt76: connac: fix checksum offload fields of connac3 RXD
net: hsr: Use the seqnr lock for frames received via interlink port.
crypto: n2 - Set err to EINVAL if snprintf fails for hmac
firmware: qcom: scm: Disable SDI and write no dump to dump mode
arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
arm64: tegra: Correct location of power-sensors for IGX Orin
arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
selftests/ftrace: Fix eventfs ownership testcase to find mount point
iommu/amd: Introduce struct protection_domain.pd_mode
iommu/amd: Allocate the page table root using GFP_KERNEL
iommu/amd: Convert comma to semicolon
platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
kselftest: dt: Ignore nodes that have ancestors disabled
bpf, x64: Fix tailcall hierarchy
bpf, lsm: Add check for BPF LSM return value
bpf: Fix compare error in function retval_range_within
bpf: Fail verification for sign-extension of packet data/data_end/data_meta
selftests/bpf: Support checks against a regular expression
selftests/bpf: no need to track next_match_pos in struct test_loader
selftests/bpf: extract test_loader->expect_msgs as a data structure
selftests/bpf: allow checking xlated programs in verifier_* tests
selftests/bpf: __arch_* macro to limit test cases to specific archs
libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
sched/deadline: Fix schedstats vs deadline servers
perf scripts python cs-etm: Restore first sample log in verbose mode
perf lock contention: Change stack_id type to s32
quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
media: staging: media: starfive: camss: Drop obsolete return value documentation
leds: gpio: Set num_leds after allocation
iommufd/selftest: Fix buffer read overrrun in the dirty test
iommufd: Check the domain owner of the parent before creating a nesting domain
RDMA/mlx5: Fix counter update on MR cache mkey creation
RDMA/mlx5: Drop redundant work canceling from clean_keys()
RDMA/mlx5: Fix MR cache temp entries cleanup
RDMA/hns: Fix ah error counter in sw stat not increasing
Coresight: Set correct cs_mode for TPDM to fix disable issue
Coresight: Set correct cs_mode for dummy source to fix disable issue
interconnect: qcom: sm8250: Enable sync_state
vdpa/mlx5: Fix invalid mr resource destroy
net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
selftests: netfilter: Avoid hanging ipvs.sh
io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
mm: migrate: annotate data-race in migrate_folio_unmap()
selftests/bpf: correctly move 'log' upon successful match
soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
drm/amdgpu/vcn: enable AV1 on both instances
drm/amd/display: Clean up dsc blocks in accelerated mode
drm/amd/display: Skip to enable dsc if it has been off
arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
serial: qcom-geni: fix false console tx restart
crypto: qcom-rng - fix support for ACPI-based systems
ACPI: resource: Do IRQ override on MECHREV GM7XG0M
perf/x86/intel: Allow to setup LBR for counting event for BPF
f2fs: check discard support for conventional zones
netfs: Delete subtree of 'fs/netfs' when netfs module exits
md: Don't flush sync_work in md_write_start()
tools/nolibc: include arch.h from string.h
KVM: x86: Make x2APIC ID 100% readonly
x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails
x86/mm: Make x86_platform.guest.enc_status_change_*() return an error
x86/tdx: Account shared memory
x86/mm: Add callbacks to prepare encrypted memory for kexec
x86/tdx: Convert shared memory back to private on kexec
soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
idpf: stop using macros for accessing queue descriptors
fs_parse: add uid & gid option option parsing helpers
compiler.h: specify correct attribute for .rodata..c_jump_table
exfat: resolve memory leak from exfat_create_upcase_table()
s390/ftrace: Avoid calling unwinder in ftrace_return_address()
fbdev: xen-fbfront: Assign fb_info->device
UBUNTU: [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10
UBUNTU: Upstream stable to v6.6.54, v6.10.13

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Noble)
     Importance: Medium
     Assignee: Portia Stephens (portias)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Noble)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Noble)
       Status: New => In Progress

** Changed in: linux (Ubuntu Noble)
     Assignee: (unassigned) => Portia Stephens (portias)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2024-11-22
+ 
+                 Ported from the following upstream stable releases:
+                         v6.6.54, v6.10.13
+ 
         from git://git.kernel.org/
+ 
+ perf stat: Fix a segfault with --per-cluster --metric-only
+ EDAC/synopsys: Fix ECC status and IRQ control race condition
+ EDAC/synopsys: Fix error injection on Zynq UltraScale+
+ wifi: rtw88: always wait for both firmware loading attempts
+ crypto: xor - fix template benchmarking
+ ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
+ wifi: brcmfmac: export firmware interface functions
+ wifi: brcmfmac: introducing fwil query functions
+ wifi: ath9k: Remove error checks when creating debugfs entries
+ wifi: ath12k: fix BSS chan info request WMI command
+ wifi: ath12k: match WMI BSS chan info structure with firmware definition
+ wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
+ net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
+ arm64: signal: Fix some under-bracketed UAPI macros
+ wifi: rtw88: remove CPT execution branch never used
+ RISC-V: KVM: Fix sbiret init before forwarding to userspace
+ RISC-V: KVM: Allow legacy PMU access from guest
+ RISC-V: KVM: Fix to allow hpmcounter31 from the guest
+ mount: handle OOM on mnt_warn_timestamp_expiry
+ ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
+ powercap: intel_rapl: Fix off by one in get_rpi()
+ kselftest/arm64: signal: fix/refactor SVE vector length enumeration
+ drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
+ wifi: mac80211: don't use rate mask for offchannel TX either
+ wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
+ wifi: iwlwifi: config: label 'gl' devices as discrete
+ wifi: iwlwifi: mvm: increase the time between ranging measurements
+ padata: Honor the caller's alignment in case of chunk_size 0
+ drivers/perf: hisi_pcie: Record hardware counts correctly
+ drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
+ kselftest/arm64: Actually test SME vector length changes via sigreturn
+ can: j1939: use correct function name in comment
+ ACPI: CPPC: Fix MASK_VAL() usage
+ netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
+ netfilter: nf_tables: reject element expiration with no timeout
+ netfilter: nf_tables: reject expiration higher than timeout
+ netfilter: nf_tables: remove annotation to access set timeout while holding 
lock
+ perf/arm-cmn: Improve debugfs pretty-printing for large configs
+ perf/arm-cmn: Refactor node ID handling. Again.
+ perf/arm-cmn: Fix CCLA register offset
+ perf/arm-cmn: Ensure dtm_idx is big enough
+ cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
+ wifi: mt76: mt7915: fix oops on non-dbdc mt7986
+ wifi: mt76: mt7996: use hweight16 to get correct tx antenna
+ wifi: mt76: mt7996: fix traffic delay when switching back to working channel
+ wifi: mt76: mt7996: fix wmm set of station interface to 3
+ wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
+ wifi: mt76: mt7996: fix EHT beamforming capability check
+ x86/sgx: Fix deadlock in SGX NUMA node search
+ pm:cpupower: Add missing powercap_set_enabled() stub function
+ crypto: hisilicon/hpre - mask cluster timeout error
+ crypto: hisilicon/qm - reset device before enabling it
+ crypto: hisilicon/qm - inject error before stopping queue
+ wifi: mt76: mt7603: fix mixed declarations and code
+ wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
+ wifi: mt76: mt7915: fix rx filter setting for bfee functionality
+ wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
+ wifi: mt76: mt7996: fix uninitialized TLV data
+ wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
+ wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
+ wifi: wilc1000: fix potential RCU dereference issue in 
wilc_parse_join_bss_param
+ Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
+ Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
+ sock_map: Add a cond_resched() in sock_hash_free()
+ can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
+ can: m_can: enable NAPI before enabling interrupts
+ can: m_can: m_can_close(): stop clocks after device has been shut down
+ Bluetooth: btusb: Fix not handling ZPL/short-transfer
+ bareudp: Pull inner IP header in bareudp_udp_encap_recv().
+ bareudp: Pull inner IP header on xmit.
+ net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
+ net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
+ net: tipc: avoid possible garbage value
+ ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
+ ublk: move zone report data out of request pdu
+ nbd: fix race between timeout and normal completion
+ block, bfq: fix possible UAF for bfqq->bic with merge chain
+ block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
+ block, bfq: don't break merge chain in bfq_split_bfqq()
+ cachefiles: Fix non-taking of sb_writers around set/removexattr
+ erofs: fix incorrect symlink detection in fast symlink
+ block, bfq: fix uaf for accessing waker_bfqq after splitting
+ block, bfq: fix procress reference leakage for bfqq in merge chain
+ io_uring/io-wq: do not allow pinning outside of cpuset
+ io_uring/io-wq: inherit cpuset of cgroup in io worker
+ block: fix potential invalid pointer dereference in blk_add_partition
+ spi: ppc4xx: handle irq_of_parse_and_map() errors
+ arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
+ arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
+ firmware: arm_scmi: Fix double free in OPTEE transport
+ spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
+ regulator: Return actual error in of_regulator_bulk_get_all()
+ arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
+ arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
+ arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
+ ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
+ arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
+ arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
+ arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
+ spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
+ ARM: dts: microchip: sama7g5: Fix RTT clock
+ ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
+ ARM: versatile: fix OF node leak in CPUs prepare
+ reset: berlin: fix OF node leak in probe() error path
+ reset: k210: fix OF node leak in probe() error path
+ clocksource/drivers/qcom: Add missing iounmap() on errors in 
msm_dt_timer_init()
+ arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
+ x86/mm: Use IPIs to synchronize LAM enablement
+ ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
+ ASoC: tas2781: remove unused acpi_subysystem_id
+ ASoC: tas2781: Use of_property_read_reg()
+ ASoC: tas2781-i2c: Drop weird GPIO code
+ ASoC: tas2781-i2c: Get the right GPIO line
+ selftests/ftrace: Add required dependency for kprobe tests
+ ALSA: hda: cs35l41: fix module autoloading
+ m68k: Fix kernel_clone_args.flags in m68k_clone()
+ ASoC: loongson: fix error release
+ hwmon: (max16065) Fix overflows seen when writing limits
+ hwmon: (max16065) Remove use of i2c_match_id()
+ hwmon: (max16065) Fix alarm attributes
+ mtd: slram: insert break after errors in parsing the map
+ hwmon: (ntc_thermistor) fix module autoloading
+ power: supply: axp20x_battery: Remove design from min and max voltage
+ power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
+ fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
+ iommu/amd: Do not set the D bit on AMD v2 table entries
+ mtd: powernv: Add check devm_kasprintf() returned value
+ rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
+ mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
+ mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
+ mtd: rawnand: mtk: Fix init error path
+ iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
+ iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
+ iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
+ pmdomain: core: Harden inter-column space in debug summary
+ drm/stm: Fix an error handling path in stm_drm_platform_probe()
+ drm/stm: ltdc: check memory returned by devm_kzalloc()
+ drm/amd/display: Add null check for set_output_gamma in 
dcn30_set_output_transfer_func
+ drm/amdgpu: properly handle vbios fake edid sizing
+ drm/radeon: properly handle vbios fake edid sizing
+ scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
+ scsi: NCR5380: Check for phase match during PDMA fixup
+ drm/amd/amdgpu: Properly tune the size of struct
+ drm/rockchip: vop: Allow 4096px width scaling
+ drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
+ drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
+ drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
+ drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
+ scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
+ jfs: fix out-of-bounds in dbNextAG() and diAlloc()
+ drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
+ drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
+ powerpc/8xx: Fix initial memory mapping
+ powerpc/8xx: Fix kernel vs user address comparison
+ powerpc/vdso: Inconditionally use CFUNC macro
+ drm/msm: Fix incorrect file name output in adreno_request_fw()
+ drm/msm/a5xx: disable preemption in submits by default
+ drm/msm/a5xx: properly clear preemption records on resume
+ drm/msm/a5xx: fix races in preemption evaluation stage
+ drm/msm/a5xx: workaround early ring-buffer emptiness check
+ ipmi: docs: don't advertise deprecated sysfs entries
+ drm/msm/dsi: correct programming sequence for SM8350 / SM8450
+ drm/msm: fix %s null argument error
+ drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
+ xen: use correct end address of kernel for conflict checking
+ HID: wacom: Support sequence numbers smaller than 16-bit
+ HID: wacom: Do not warn about dropped packets for first packet
+ ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
+ minmax: avoid overly complex min()/max() macro arguments in xen
+ xen: introduce generic helper checking for memory map conflicts
+ xen: move max_pfn in xen_memory_setup() out of function scope
+ xen: add capability to remap non-RAM pages to different PFNs
+ xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
+ xen/swiotlb: add alignment check for dma buffers
+ xen/swiotlb: fix allocated size
+ tpm: Clean up TPM space after command failure
+ sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
+ selftests/bpf: Workaround strict bpf_lsm return value check.
+ selftests/bpf: Fix error linking uprobe_multi on mips
+ bpf: Use -Wno-error in certain tests when building with GCC
+ bpf: Disable some `attribute ignored' warnings in GCC
+ bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
+ selftests/bpf: Add CFLAGS per source file and runner
+ selftests/bpf: Fix wrong binary in Makefile log output
+ tools/runqslower: Fix LDFLAGS and add LDLIBS support
+ selftests/bpf: Use pid_t consistently in test_progs.c
+ selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
+ selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
+ selftests/bpf: Drop unneeded error.h includes
+ selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
+ selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
+ selftests/bpf: Fix missing BUILD_BUG_ON() declaration
+ selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
+ selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
+ selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
+ selftests/bpf: Fix include of <sys/fcntl.h>
+ selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
+ selftests/bpf: Fix compiling kfree_skb.c with musl-libc
+ selftests/bpf: Fix compiling flow_dissector.c with musl-libc
+ selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
+ selftests/bpf: Fix compiling core_reloc.c with musl-libc
+ selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
+ selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
+ selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
+ selftests/bpf: Fix arg parsing in veristat, test_progs
+ selftests/bpf: Fix error compiling test_lru_map.c
+ selftests/bpf: Fix C++ compile error from missing _Bool type
+ selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
+ selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
+ selftests/bpf: Fix compile if backtrace support missing in libc
+ selftests/bpf: Fix error compiling tc_redirect.c with musl libc
+ samples/bpf: Fix compilation errors with cf-protection option
+ bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
+ xz: cleanup CRC32 edits from 2018
+ kthread: fix task state in kthread worker if being frozen
+ ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
+ smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
+ ext4: avoid buffer_head leak in ext4_mark_inode_used()
+ ext4: avoid potential buffer_head leak in __ext4_new_inode()
+ ext4: avoid negative min_clusters in find_group_orlov()
+ ext4: return error on ext4_find_inline_entry
+ ext4: avoid OOB when system.data xattr changes underneath the filesystem
+ ext4: check stripe size compatibility on remount as well
+ sched/numa: Fix the vma scan starving issue
+ nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
+ nilfs2: determine empty node blocks as corrupted
+ nilfs2: fix potential oob read in nilfs_btree_check_delete()
+ bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
+ bpf: Fix helper writes to read-only maps
+ bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
+ bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
+ perf mem: Free the allocated sort string, fixing a leak
+ perf inject: Fix leader sampling inserting additional samples
+ perf report: Fix --total-cycles --stdio output error
+ perf sched timehist: Fix missing free of session in perf_sched__timehist()
+ perf stat: Display iostat headers correctly
+ perf sched timehist: Fixed timestamp error when unable to confirm event 
sched_in time
+ perf time-utils: Fix 32-bit nsec parsing
+ clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
+ clk: imx: imx6ul: fix default parent for enet*_ref_sel
+ clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() 
after error detection
+ clk: imx: composite-8m: Enable gate clk with mcore_booted
+ clk: imx: composite-93: keep root clock on when mcore enabled
+ clk: imx: composite-7ulp: Check the PCC present bit
+ clk: imx: fracn-gppll: fix fractional part of PLL getting lost
+ clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
+ clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
+ clk: imx: imx8qxp: Parent should be initialized earlier than the clock
+ remoteproc: imx_rproc: Correct ddr alias for i.MX8M
+ remoteproc: imx_rproc: Initialize workqueue earlier
+ clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
+ clk: qcom: dispcc-sm8550: fix several supposed typos
+ clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
+ clk: qcom: dispcc-sm8650: Update the GDSC flags
+ clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
+ leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
+ pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
+ pinctrl: ti: ti-iodelay: Fix some error handling paths
+ Input: ilitek_ts_i2c - avoid wrong input subsystem sync
+ Input: ilitek_ts_i2c - add report id message validation
+ drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
+ drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
+ PCI: Wait for Link before restoring Downstream Buses
+ firewire: core: correct range of block for case of switch statement
+ PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
+ clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
+ clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
+ leds: leds-pca995x: Add support for NXP PCA9956B
+ leds: pca995x: Use device_for_each_child_node() to access device child nodes
+ leds: pca995x: Fix device child node usage in pca995x_probe()
+ x86/PCI: Check pcie_find_root_port() return for NULL
+ nvdimm: Fix devs leaks in scan_labels()
+ PCI: xilinx-nwl: Fix register misspelling
+ PCI: xilinx-nwl: Clean up clock on probe failure/removal
+ media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
+ RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
+ pinctrl: single: fix missing error code in pcs_probe()
+ clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
+ media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
+ media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
+ media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
+ RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
+ RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
+ clk: ti: dra7-atl: Fix leak of of_nodes
+ clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() 
usage
+ clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
+ nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
+ nfsd: fix refcount leak when file is unhashed after being found
+ pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
+ IB/core: Fix ib_cache_setup_one error flow cleanup
+ PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
+ RDMA/erdma: Return QP state in erdma_query_qp
+ RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
+ watchdog: imx_sc_wdt: Don't disable WDT in suspend
+ RDMA/hns: Don't modify rq next block addr in HIP09 QPC
+ RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
+ RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
+ RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
+ RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
+ RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
+ RDMA/hns: Optimize hem allocation performance
+ RDMA/hns: Fix restricted __le16 degrades to integer issue
+ RDMA/mlx5: Obtain upper net device only when needed
+ riscv: Fix fp alignment bug in perf_callchain_user()
+ RDMA/cxgb4: Added NULL check for lookup_atid
+ RDMA/irdma: fix error message in irdma_modify_qp_roce()
+ ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
+ ntb_perf: Fix printk format
+ ntb: Force physically contiguous allocation of rx ring buffers
+ nfsd: call cache_put if xdr_reserve_space returns NULL
+ nfsd: return -EINVAL when namelen is 0
+ crypto: caam - Pad SG length when allocating hash edesc
+ crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
+ f2fs: atomic: fix to avoid racing w/ GC
+ f2fs: reduce expensive checkpoint trigger frequency
+ f2fs: fix to avoid racing in between read and OPU dio write
+ f2fs: Create COW inode from parent dentry for atomic write
+ f2fs: fix to wait page writeback before setting gcing flag
+ f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
+ f2fs: support .shutdown in f2fs_sops
+ f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
+ f2fs: compress: don't redirty sparse cluster during {,de}compress
+ f2fs: prevent atomic file from being dirtied before commit
+ f2fs: get rid of online repaire on corrupted directory
+ f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
+ spi: atmel-quadspi: Undo runtime PM changes at driver exit time
+ spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
+ lib/sbitmap: define swap_lock as raw_spinlock_t
+ spi: atmel-quadspi: Avoid overwriting delay register settings
+ nvme-multipath: system fails to create generic nvme device
+ iio: adc: ad7606: fix oversampling gpio array
+ iio: adc: ad7606: fix standby gpio state to match the documentation
+ driver core: Fix error handling in driver API device_rename()
+ ABI: testing: fix admv8818 attr description
+ iio: chemical: bme680: Fix read/write ops to device by adding mutexes
+ iio: magnetometer: ak8975: drop incorrect AK09116 compatible
+ dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
+ driver core: Fix a potential null-ptr-deref in module_add_driver()
+ serial: 8250: omap: Cleanup on error in request_irq
+ coresight: tmc: sg: Do not leak sg_table
+ interconnect: icc-clk: Add missed num_nodes initialization
+ cxl/pci: Fix to record only non-zero ranges
+ vhost_vdpa: assign irq bypass producer token correctly
+ ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
+ Revert "dm: requeue IO if mapping table not yet available"
+ net: xilinx: axienet: Schedule NAPI in two steps
+ net: xilinx: axienet: Fix packet counting
+ netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
+ net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race 
Condition
+ net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
+ tcp: check skb is non-NULL in tcp_rto_delta_us()
+ net: qrtr: Update packets cloning when broadcasting
+ bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
+ virtio_net: Fix mismatched buf address when unmapping for small packets
+ netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
+ netfilter: ctnetlink: compile ctnetlink_label_size with 
CONFIG_NF_CONNTRACK_EVENTS
+ netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
+ io_uring/sqpoll: do not allow pinning outside of cpuset
+ io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
+ mm: call the security_mmap_file() LSM hook in remap_file_pages()
+ drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
+ Revert "net: libwx: fix alloc msix vectors failed"
+ xen: move checks for e820 conflicts further up
+ xen: allow mapping ACPI data using a different physical address
+ io_uring/sqpoll: retain test for whether the CPU is valid
+ io_uring/sqpoll: do not put cpumask on stack
+ Remove *.orig pattern from .gitignore
+ PCI: Revert to the original speed after PCIe failed link retraining
+ PCI: Clear the LBMS bit after a link retrain
+ PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
+ PCI: imx6: Fix missing call to phy_power_off() in error handling
+ PCI: Correct error reporting with PCIe failed link retraining
+ PCI: Use an error code with PCIe failed link retraining
+ PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
+ Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
+ ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
+ soc: fsl: cpm1: tsa: Fix tsa_write8()
+ soc: versatile: integrator: fix OF node leak in probe() error path
+ Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
+ iommufd: Protect against overflow of ALIGN() during iova allocation
+ Input: adp5588-keys - fix check on return code
+ Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
+ Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
+ Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
+ KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
+ KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
+ KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
+ KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
+ drm/amd/display: Add HDMI DSC native YCbCr422 support
+ drm/amd/display: Round calculated vtotal
+ drm/amd/display: Validate backlight caps are sane
+ KEYS: prevent NULL pointer dereference in find_asymmetric_key()
+ powerpc/atomic: Use YZ constraints for DS-form instructions
+ fs: Create a generic is_dot_dotdot() utility
+ ksmbd: make __dir_empty() compatible with POSIX
+ ksmbd: allow write with FILE_APPEND_DATA
+ ksmbd: handle caseless file creation
+ ata: libata-scsi: Fix ata_msense_control() CDL page reporting
+ scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
+ scsi: ufs: qcom: Update MODE_MAX cfg_bw value
+ scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
+ scsi: mac_scsi: Refactor polling loop
+ scsi: mac_scsi: Disallow bus errors during PDMA send
+ can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
+ wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
+ usbnet: fix cyclical race on disconnect with work queue
+ arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
+ USB: appledisplay: close race between probe and completion handler
+ USB: misc: cypress_cy7c63: check for short transfer
+ USB: class: CDC-ACM: fix race between get_serial and set_serial
+ usb: cdnsp: Fix incorrect usb_request status
+ usb: dwc2: drd: fix clock gating on USB role switch
+ bus: integrator-lm: fix OF node leak in probe()
+ bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
+ firmware_loader: Block path traversal
+ tty: rp2: Fix reset with non forgiving PCIe host bridges
+ xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
+ serial: qcom-geni: fix fifo polling timeout
+ crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
+ drbd: Fix atomicity violation in drbd_uuid_set_bm()
+ drbd: Add NULL check for net_conf to prevent dereference in state validation
+ ACPI: sysfs: validate return type of _STR method
+ ACPI: resource: Add another DMI match for the TongFang GMxXGxx
+ efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
+ perf/x86/intel/pt: Fix sampling synchronization
+ wifi: mt76: mt7921: Check devm_kasprintf() returned value
+ wifi: mt76: mt7915: check devm_kasprintf() returned value
+ wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
+ wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
+ wifi: rtw88: 8822c: Fix reported RX band width
+ wifi: mt76: mt7615: check devm_kasprintf() returned value
+ debugobjects: Fix conditions in fill_pool()
+ btrfs: tree-checker: fix the wrong output of data backref objectid
+ btrfs: always update fstrim_range on failure in FITRIM ioctl
+ f2fs: fix several potential integer overflows in file offsets
+ f2fs: prevent possible int overflow in dir_block_index()
+ f2fs: avoid potential int overflow in sanity_check_area_boundary()
+ f2fs: Require FMODE_WRITE for atomic write ioctls
+ f2fs: fix to check atomic_file in f2fs ioctl interfaces
+ hwrng: mtk - Use devm_pm_runtime_enable
+ hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
+ hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
+ arm64: esr: Define ESR_ELx_EC_* constants as UL
+ arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
+ arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
+ arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
+ arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
+ vfs: fix race between evice_inodes() and find_inode()&iput()
+ fs: Fix file_set_fowner LSM hook inconsistencies
+ nfs: fix memory leak in error path of nfs4_do_reclaim
+ EDAC/igen6: Fix conversion of system address to physical memory address
+ icmp: change the order of rate limits
+ cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
+ padata: use integer wrap around to prevent deadlock on seq_nr overflow
+ spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
+ ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
+ soc: versatile: realview: fix memory leak during device remove
+ soc: versatile: realview: fix soc_dev leak during device remove
+ USB: misc: yurex: fix race between read and write
+ xhci: Add a quirk for writing ERST in high-low order
+ usb: xhci: fix loss of data on Cadence xHC
+ pps: remove usage of the deprecated ida_simple_xx() API
+ pps: add an error check in parport_attach
+ serial: don't use uninitialized value in uart_poll_init()
+ x86/idtentry: Incorporate definitions/declarations of the FRED entries
+ x86/entry: Remove unwanted instrumentation in common_interrupt()
+ lib/bitmap: add bitmap_{read,write}()
+ btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
+ btrfs: fix race setting file private on concurrent lseek using same fd
+ dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
+ dt-bindings: spi: nxp-fspi: add imx8ulp support
+ thunderbolt: Improve DisplayPort tunnel setup process to be more robust
+ bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
+ dm-verity: restart or panic on an I/O error
+ lockdep: fix deadlock issue between lockdep and rcu
+ mm: only enforce minimum stack gap size if it's sensible
+ spi: fspi: add support for imx8ulp
+ module: Fix KCOV-ignored file name
+ mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu 
read lock
+ i2c: aspeed: Update the stop sw state when the bus recovery occurs
+ i2c: isch: Add missed 'else'
+ Documentation: KVM: fix warning in "make htmldocs"
+ bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
+ wifi: brcmfmac: add linefeed at end of file
+ x86/tdx: Fix "in-kernel MMIO" check
+ spi: atmel-quadspi: Fix wrong register value written to MR
+ Revert: "dm-verity: restart or panic on an I/O error"
+ wifi: ath11k: use work queue to process beacon tx event
+ crypto: qat - disable IOV in adf_dev_stop()
+ crypto: qat - fix recovery flow for VFs
+ crypto: qat - ensure correct order in VF restarting handler
+ crypto: iaa - Fix potential use after free bug
+ autofs: fix missing fput for FSCONFIG_SET_FD
+ arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI first
+ thermal: core: Fold two functions into their respective callers
+ thermal: core: Fix rounding of delay jiffies
+ perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
+ perf/dwc_pcie: Always register for PCIe bus notifier
+ ACPI: video: force native for some T2 macbooks
+ ACPI: video: force native for Apple MacbookPro9,2
+ wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
+ wifi: mac80211: fix the comeback long retry times
+ ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
+ ACPICA: executer/exsystem: Don't nag user about every Stall() violating the 
spec
+ netfilter: nft_dynset: annotate data-races around set timeout
+ wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
+ crypto: ccp - do not request interrupt on cmd completion when irqs disabled
+ wifi: mt76: connac: fix checksum offload fields of connac3 RXD
+ net: hsr: Use the seqnr lock for frames received via interlink port.
+ crypto: n2 - Set err to EINVAL if snprintf fails for hmac
+ firmware: qcom: scm: Disable SDI and write no dump to dump mode
+ arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
+ arm64: tegra: Correct location of power-sensors for IGX Orin
+ arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
+ selftests/ftrace: Fix eventfs ownership testcase to find mount point
+ iommu/amd: Introduce struct protection_domain.pd_mode
+ iommu/amd: Allocate the page table root using GFP_KERNEL
+ iommu/amd: Convert comma to semicolon
+ platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
+ kselftest: dt: Ignore nodes that have ancestors disabled
+ bpf, x64: Fix tailcall hierarchy
+ bpf, lsm: Add check for BPF LSM return value
+ bpf: Fix compare error in function retval_range_within
+ bpf: Fail verification for sign-extension of packet data/data_end/data_meta
+ selftests/bpf: Support checks against a regular expression
+ selftests/bpf: no need to track next_match_pos in struct test_loader
+ selftests/bpf: extract test_loader->expect_msgs as a data structure
+ selftests/bpf: allow checking xlated programs in verifier_* tests
+ selftests/bpf: __arch_* macro to limit test cases to specific archs
+ libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
+ s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
+ sched/deadline: Fix schedstats vs deadline servers
+ perf scripts python cs-etm: Restore first sample log in verbose mode
+ perf lock contention: Change stack_id type to s32
+ quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
+ media: staging: media: starfive: camss: Drop obsolete return value 
documentation
+ leds: gpio: Set num_leds after allocation
+ iommufd/selftest: Fix buffer read overrrun in the dirty test
+ iommufd: Check the domain owner of the parent before creating a nesting domain
+ RDMA/mlx5: Fix counter update on MR cache mkey creation
+ RDMA/mlx5: Drop redundant work canceling from clean_keys()
+ RDMA/mlx5: Fix MR cache temp entries cleanup
+ RDMA/hns: Fix ah error counter in sw stat not increasing
+ Coresight: Set correct cs_mode for TPDM to fix disable issue
+ Coresight: Set correct cs_mode for dummy source to fix disable issue
+ interconnect: qcom: sm8250: Enable sync_state
+ vdpa/mlx5: Fix invalid mr resource destroy
+ net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
+ selftests: netfilter: Avoid hanging ipvs.sh
+ io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
+ mm: migrate: annotate data-race in migrate_folio_unmap()
+ selftests/bpf: correctly move 'log' upon successful match
+ soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
+ drm/amdgpu/vcn: enable AV1 on both instances
+ drm/amd/display: Clean up dsc blocks in accelerated mode
+ drm/amd/display: Skip to enable dsc if it has been off
+ arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
+ usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
+ serial: qcom-geni: fix false console tx restart
+ crypto: qcom-rng - fix support for ACPI-based systems
+ ACPI: resource: Do IRQ override on MECHREV GM7XG0M
+ perf/x86/intel: Allow to setup LBR for counting event for BPF
+ f2fs: check discard support for conventional zones
+ netfs: Delete subtree of 'fs/netfs' when netfs module exits
+ md: Don't flush sync_work in md_write_start()
+ tools/nolibc: include arch.h from string.h
+ KVM: x86: Make x2APIC ID 100% readonly
+ x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails
+ x86/mm: Make x86_platform.guest.enc_status_change_*() return an error
+ x86/tdx: Account shared memory
+ x86/mm: Add callbacks to prepare encrypted memory for kexec
+ x86/tdx: Convert shared memory back to private on kexec
+ soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
+ serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
+ serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
+ idpf: stop using macros for accessing queue descriptors
+ fs_parse: add uid & gid option option parsing helpers
+ compiler.h: specify correct attribute for .rodata..c_jump_table
+ exfat: resolve memory leak from exfat_create_upcase_table()
+ s390/ftrace: Avoid calling unwinder in ftrace_return_address()
+ fbdev: xen-fbfront: Assign fb_info->device
+ UBUNTU: [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10
+ UBUNTU: Upstream stable to v6.6.54, v6.10.13

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2089340

Title:
  Noble update: upstream stable patchset 2024-11-22

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Noble:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2024-11-22

                  Ported from the following upstream stable releases:
                          v6.6.54, v6.10.13

         from git://git.kernel.org/

  perf stat: Fix a segfault with --per-cluster --metric-only
  EDAC/synopsys: Fix ECC status and IRQ control race condition
  EDAC/synopsys: Fix error injection on Zynq UltraScale+
  wifi: rtw88: always wait for both firmware loading attempts
  crypto: xor - fix template benchmarking
  ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
  wifi: brcmfmac: export firmware interface functions
  wifi: brcmfmac: introducing fwil query functions
  wifi: ath9k: Remove error checks when creating debugfs entries
  wifi: ath12k: fix BSS chan info request WMI command
  wifi: ath12k: match WMI BSS chan info structure with firmware definition
  wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
  net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
  arm64: signal: Fix some under-bracketed UAPI macros
  wifi: rtw88: remove CPT execution branch never used
  RISC-V: KVM: Fix sbiret init before forwarding to userspace
  RISC-V: KVM: Allow legacy PMU access from guest
  RISC-V: KVM: Fix to allow hpmcounter31 from the guest
  mount: handle OOM on mnt_warn_timestamp_expiry
  ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
  powercap: intel_rapl: Fix off by one in get_rpi()
  kselftest/arm64: signal: fix/refactor SVE vector length enumeration
  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
  wifi: mac80211: don't use rate mask for offchannel TX either
  wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
  wifi: iwlwifi: config: label 'gl' devices as discrete
  wifi: iwlwifi: mvm: increase the time between ranging measurements
  padata: Honor the caller's alignment in case of chunk_size 0
  drivers/perf: hisi_pcie: Record hardware counts correctly
  drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
  kselftest/arm64: Actually test SME vector length changes via sigreturn
  can: j1939: use correct function name in comment
  ACPI: CPPC: Fix MASK_VAL() usage
  netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
  netfilter: nf_tables: reject element expiration with no timeout
  netfilter: nf_tables: reject expiration higher than timeout
  netfilter: nf_tables: remove annotation to access set timeout while holding 
lock
  perf/arm-cmn: Improve debugfs pretty-printing for large configs
  perf/arm-cmn: Refactor node ID handling. Again.
  perf/arm-cmn: Fix CCLA register offset
  perf/arm-cmn: Ensure dtm_idx is big enough
  cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
  wifi: mt76: mt7915: fix oops on non-dbdc mt7986
  wifi: mt76: mt7996: use hweight16 to get correct tx antenna
  wifi: mt76: mt7996: fix traffic delay when switching back to working channel
  wifi: mt76: mt7996: fix wmm set of station interface to 3
  wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
  wifi: mt76: mt7996: fix EHT beamforming capability check
  x86/sgx: Fix deadlock in SGX NUMA node search
  pm:cpupower: Add missing powercap_set_enabled() stub function
  crypto: hisilicon/hpre - mask cluster timeout error
  crypto: hisilicon/qm - reset device before enabling it
  crypto: hisilicon/qm - inject error before stopping queue
  wifi: mt76: mt7603: fix mixed declarations and code
  wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
  wifi: mt76: mt7915: fix rx filter setting for bfee functionality
  wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
  wifi: mt76: mt7996: fix uninitialized TLV data
  wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  wifi: wilc1000: fix potential RCU dereference issue in 
wilc_parse_join_bss_param
  Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
  Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
  sock_map: Add a cond_resched() in sock_hash_free()
  can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  can: m_can: enable NAPI before enabling interrupts
  can: m_can: m_can_close(): stop clocks after device has been shut down
  Bluetooth: btusb: Fix not handling ZPL/short-transfer
  bareudp: Pull inner IP header in bareudp_udp_encap_recv().
  bareudp: Pull inner IP header on xmit.
  net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
  net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
  net: tipc: avoid possible garbage value
  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  ublk: move zone report data out of request pdu
  nbd: fix race between timeout and normal completion
  block, bfq: fix possible UAF for bfqq->bic with merge chain
  block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
  block, bfq: don't break merge chain in bfq_split_bfqq()
  cachefiles: Fix non-taking of sb_writers around set/removexattr
  erofs: fix incorrect symlink detection in fast symlink
  block, bfq: fix uaf for accessing waker_bfqq after splitting
  block, bfq: fix procress reference leakage for bfqq in merge chain
  io_uring/io-wq: do not allow pinning outside of cpuset
  io_uring/io-wq: inherit cpuset of cgroup in io worker
  block: fix potential invalid pointer dereference in blk_add_partition
  spi: ppc4xx: handle irq_of_parse_and_map() errors
  arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
  arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
  firmware: arm_scmi: Fix double free in OPTEE transport
  spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
  regulator: Return actual error in of_regulator_bulk_get_all()
  arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
  arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
  arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
  ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
  arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
  arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
  arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
  spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
  ARM: dts: microchip: sama7g5: Fix RTT clock
  ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
  ARM: versatile: fix OF node leak in CPUs prepare
  reset: berlin: fix OF node leak in probe() error path
  reset: k210: fix OF node leak in probe() error path
  clocksource/drivers/qcom: Add missing iounmap() on errors in 
msm_dt_timer_init()
  arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
  x86/mm: Use IPIs to synchronize LAM enablement
  ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
  ASoC: tas2781: remove unused acpi_subysystem_id
  ASoC: tas2781: Use of_property_read_reg()
  ASoC: tas2781-i2c: Drop weird GPIO code
  ASoC: tas2781-i2c: Get the right GPIO line
  selftests/ftrace: Add required dependency for kprobe tests
  ALSA: hda: cs35l41: fix module autoloading
  m68k: Fix kernel_clone_args.flags in m68k_clone()
  ASoC: loongson: fix error release
  hwmon: (max16065) Fix overflows seen when writing limits
  hwmon: (max16065) Remove use of i2c_match_id()
  hwmon: (max16065) Fix alarm attributes
  mtd: slram: insert break after errors in parsing the map
  hwmon: (ntc_thermistor) fix module autoloading
  power: supply: axp20x_battery: Remove design from min and max voltage
  power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
  fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
  iommu/amd: Do not set the D bit on AMD v2 table entries
  mtd: powernv: Add check devm_kasprintf() returned value
  rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
  mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
  mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
  mtd: rawnand: mtk: Fix init error path
  iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
  iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
  iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
  pmdomain: core: Harden inter-column space in debug summary
  drm/stm: Fix an error handling path in stm_drm_platform_probe()
  drm/stm: ltdc: check memory returned by devm_kzalloc()
  drm/amd/display: Add null check for set_output_gamma in 
dcn30_set_output_transfer_func
  drm/amdgpu: properly handle vbios fake edid sizing
  drm/radeon: properly handle vbios fake edid sizing
  scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
  scsi: NCR5380: Check for phase match during PDMA fixup
  drm/amd/amdgpu: Properly tune the size of struct
  drm/rockchip: vop: Allow 4096px width scaling
  drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
  drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
  drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
  drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
  scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
  jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
  drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
  powerpc/8xx: Fix initial memory mapping
  powerpc/8xx: Fix kernel vs user address comparison
  powerpc/vdso: Inconditionally use CFUNC macro
  drm/msm: Fix incorrect file name output in adreno_request_fw()
  drm/msm/a5xx: disable preemption in submits by default
  drm/msm/a5xx: properly clear preemption records on resume
  drm/msm/a5xx: fix races in preemption evaluation stage
  drm/msm/a5xx: workaround early ring-buffer emptiness check
  ipmi: docs: don't advertise deprecated sysfs entries
  drm/msm/dsi: correct programming sequence for SM8350 / SM8450
  drm/msm: fix %s null argument error
  drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
  xen: use correct end address of kernel for conflict checking
  HID: wacom: Support sequence numbers smaller than 16-bit
  HID: wacom: Do not warn about dropped packets for first packet
  ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
  minmax: avoid overly complex min()/max() macro arguments in xen
  xen: introduce generic helper checking for memory map conflicts
  xen: move max_pfn in xen_memory_setup() out of function scope
  xen: add capability to remap non-RAM pages to different PFNs
  xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
  xen/swiotlb: add alignment check for dma buffers
  xen/swiotlb: fix allocated size
  tpm: Clean up TPM space after command failure
  sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
  selftests/bpf: Workaround strict bpf_lsm return value check.
  selftests/bpf: Fix error linking uprobe_multi on mips
  bpf: Use -Wno-error in certain tests when building with GCC
  bpf: Disable some `attribute ignored' warnings in GCC
  bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
  selftests/bpf: Add CFLAGS per source file and runner
  selftests/bpf: Fix wrong binary in Makefile log output
  tools/runqslower: Fix LDFLAGS and add LDLIBS support
  selftests/bpf: Use pid_t consistently in test_progs.c
  selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
  selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
  selftests/bpf: Drop unneeded error.h includes
  selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
  selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
  selftests/bpf: Fix missing BUILD_BUG_ON() declaration
  selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
  selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
  selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
  selftests/bpf: Fix include of <sys/fcntl.h>
  selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
  selftests/bpf: Fix compiling kfree_skb.c with musl-libc
  selftests/bpf: Fix compiling flow_dissector.c with musl-libc
  selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
  selftests/bpf: Fix compiling core_reloc.c with musl-libc
  selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
  selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
  selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
  selftests/bpf: Fix arg parsing in veristat, test_progs
  selftests/bpf: Fix error compiling test_lru_map.c
  selftests/bpf: Fix C++ compile error from missing _Bool type
  selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
  selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
  selftests/bpf: Fix compile if backtrace support missing in libc
  selftests/bpf: Fix error compiling tc_redirect.c with musl libc
  samples/bpf: Fix compilation errors with cf-protection option
  bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
  xz: cleanup CRC32 edits from 2018
  kthread: fix task state in kthread worker if being frozen
  ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
  smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
  ext4: avoid buffer_head leak in ext4_mark_inode_used()
  ext4: avoid potential buffer_head leak in __ext4_new_inode()
  ext4: avoid negative min_clusters in find_group_orlov()
  ext4: return error on ext4_find_inline_entry
  ext4: avoid OOB when system.data xattr changes underneath the filesystem
  ext4: check stripe size compatibility on remount as well
  sched/numa: Fix the vma scan starving issue
  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  nilfs2: determine empty node blocks as corrupted
  nilfs2: fix potential oob read in nilfs_btree_check_delete()
  bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
  bpf: Fix helper writes to read-only maps
  bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  perf mem: Free the allocated sort string, fixing a leak
  perf inject: Fix leader sampling inserting additional samples
  perf report: Fix --total-cycles --stdio output error
  perf sched timehist: Fix missing free of session in perf_sched__timehist()
  perf stat: Display iostat headers correctly
  perf sched timehist: Fixed timestamp error when unable to confirm event 
sched_in time
  perf time-utils: Fix 32-bit nsec parsing
  clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
  clk: imx: imx6ul: fix default parent for enet*_ref_sel
  clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() 
after error detection
  clk: imx: composite-8m: Enable gate clk with mcore_booted
  clk: imx: composite-93: keep root clock on when mcore enabled
  clk: imx: composite-7ulp: Check the PCC present bit
  clk: imx: fracn-gppll: fix fractional part of PLL getting lost
  clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
  clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
  clk: imx: imx8qxp: Parent should be initialized earlier than the clock
  remoteproc: imx_rproc: Correct ddr alias for i.MX8M
  remoteproc: imx_rproc: Initialize workqueue earlier
  clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
  clk: qcom: dispcc-sm8550: fix several supposed typos
  clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
  clk: qcom: dispcc-sm8650: Update the GDSC flags
  clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
  leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
  pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
  pinctrl: ti: ti-iodelay: Fix some error handling paths
  Input: ilitek_ts_i2c - avoid wrong input subsystem sync
  Input: ilitek_ts_i2c - add report id message validation
  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  PCI: Wait for Link before restoring Downstream Buses
  firewire: core: correct range of block for case of switch statement
  PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
  clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
  leds: leds-pca995x: Add support for NXP PCA9956B
  leds: pca995x: Use device_for_each_child_node() to access device child nodes
  leds: pca995x: Fix device child node usage in pca995x_probe()
  x86/PCI: Check pcie_find_root_port() return for NULL
  nvdimm: Fix devs leaks in scan_labels()
  PCI: xilinx-nwl: Fix register misspelling
  PCI: xilinx-nwl: Clean up clock on probe failure/removal
  media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  pinctrl: single: fix missing error code in pcs_probe()
  clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
  media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
  media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
  media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
  RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  clk: ti: dra7-atl: Fix leak of of_nodes
  clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() 
usage
  clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
  nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
  nfsd: fix refcount leak when file is unhashed after being found
  pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
  IB/core: Fix ib_cache_setup_one error flow cleanup
  PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
  RDMA/erdma: Return QP state in erdma_query_qp
  RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
  watchdog: imx_sc_wdt: Don't disable WDT in suspend
  RDMA/hns: Don't modify rq next block addr in HIP09 QPC
  RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
  RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
  RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
  RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
  RDMA/hns: Optimize hem allocation performance
  RDMA/hns: Fix restricted __le16 degrades to integer issue
  RDMA/mlx5: Obtain upper net device only when needed
  riscv: Fix fp alignment bug in perf_callchain_user()
  RDMA/cxgb4: Added NULL check for lookup_atid
  RDMA/irdma: fix error message in irdma_modify_qp_roce()
  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  ntb_perf: Fix printk format
  ntb: Force physically contiguous allocation of rx ring buffers
  nfsd: call cache_put if xdr_reserve_space returns NULL
  nfsd: return -EINVAL when namelen is 0
  crypto: caam - Pad SG length when allocating hash edesc
  crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
  f2fs: atomic: fix to avoid racing w/ GC
  f2fs: reduce expensive checkpoint trigger frequency
  f2fs: fix to avoid racing in between read and OPU dio write
  f2fs: Create COW inode from parent dentry for atomic write
  f2fs: fix to wait page writeback before setting gcing flag
  f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
  f2fs: support .shutdown in f2fs_sops
  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  f2fs: compress: don't redirty sparse cluster during {,de}compress
  f2fs: prevent atomic file from being dirtied before commit
  f2fs: get rid of online repaire on corrupted directory
  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
  spi: atmel-quadspi: Undo runtime PM changes at driver exit time
  spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
  lib/sbitmap: define swap_lock as raw_spinlock_t
  spi: atmel-quadspi: Avoid overwriting delay register settings
  nvme-multipath: system fails to create generic nvme device
  iio: adc: ad7606: fix oversampling gpio array
  iio: adc: ad7606: fix standby gpio state to match the documentation
  driver core: Fix error handling in driver API device_rename()
  ABI: testing: fix admv8818 attr description
  iio: chemical: bme680: Fix read/write ops to device by adding mutexes
  iio: magnetometer: ak8975: drop incorrect AK09116 compatible
  dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
  driver core: Fix a potential null-ptr-deref in module_add_driver()
  serial: 8250: omap: Cleanup on error in request_irq
  coresight: tmc: sg: Do not leak sg_table
  interconnect: icc-clk: Add missed num_nodes initialization
  cxl/pci: Fix to record only non-zero ranges
  vhost_vdpa: assign irq bypass producer token correctly
  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
  Revert "dm: requeue IO if mapping table not yet available"
  net: xilinx: axienet: Schedule NAPI in two steps
  net: xilinx: axienet: Fix packet counting
  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race 
Condition
  net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
  tcp: check skb is non-NULL in tcp_rto_delta_us()
  net: qrtr: Update packets cloning when broadcasting
  bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
  virtio_net: Fix mismatched buf address when unmapping for small packets
  netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
  netfilter: ctnetlink: compile ctnetlink_label_size with 
CONFIG_NF_CONNTRACK_EVENTS
  netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
  io_uring/sqpoll: do not allow pinning outside of cpuset
  io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
  mm: call the security_mmap_file() LSM hook in remap_file_pages()
  drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
  Revert "net: libwx: fix alloc msix vectors failed"
  xen: move checks for e820 conflicts further up
  xen: allow mapping ACPI data using a different physical address
  io_uring/sqpoll: retain test for whether the CPU is valid
  io_uring/sqpoll: do not put cpumask on stack
  Remove *.orig pattern from .gitignore
  PCI: Revert to the original speed after PCIe failed link retraining
  PCI: Clear the LBMS bit after a link retrain
  PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
  PCI: imx6: Fix missing call to phy_power_off() in error handling
  PCI: Correct error reporting with PCIe failed link retraining
  PCI: Use an error code with PCIe failed link retraining
  PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
  Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
  ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
  soc: fsl: cpm1: tsa: Fix tsa_write8()
  soc: versatile: integrator: fix OF node leak in probe() error path
  Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
  iommufd: Protect against overflow of ALIGN() during iova allocation
  Input: adp5588-keys - fix check on return code
  Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
  Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
  Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
  KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
  KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
  KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
  KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
  drm/amd/display: Add HDMI DSC native YCbCr422 support
  drm/amd/display: Round calculated vtotal
  drm/amd/display: Validate backlight caps are sane
  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
  powerpc/atomic: Use YZ constraints for DS-form instructions
  fs: Create a generic is_dot_dotdot() utility
  ksmbd: make __dir_empty() compatible with POSIX
  ksmbd: allow write with FILE_APPEND_DATA
  ksmbd: handle caseless file creation
  ata: libata-scsi: Fix ata_msense_control() CDL page reporting
  scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
  scsi: ufs: qcom: Update MODE_MAX cfg_bw value
  scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
  scsi: mac_scsi: Refactor polling loop
  scsi: mac_scsi: Disallow bus errors during PDMA send
  can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
  wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
  usbnet: fix cyclical race on disconnect with work queue
  arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
  USB: appledisplay: close race between probe and completion handler
  USB: misc: cypress_cy7c63: check for short transfer
  USB: class: CDC-ACM: fix race between get_serial and set_serial
  usb: cdnsp: Fix incorrect usb_request status
  usb: dwc2: drd: fix clock gating on USB role switch
  bus: integrator-lm: fix OF node leak in probe()
  bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
  firmware_loader: Block path traversal
  tty: rp2: Fix reset with non forgiving PCIe host bridges
  xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
  serial: qcom-geni: fix fifo polling timeout
  crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
  drbd: Fix atomicity violation in drbd_uuid_set_bm()
  drbd: Add NULL check for net_conf to prevent dereference in state validation
  ACPI: sysfs: validate return type of _STR method
  ACPI: resource: Add another DMI match for the TongFang GMxXGxx
  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  perf/x86/intel/pt: Fix sampling synchronization
  wifi: mt76: mt7921: Check devm_kasprintf() returned value
  wifi: mt76: mt7915: check devm_kasprintf() returned value
  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
  wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
  wifi: rtw88: 8822c: Fix reported RX band width
  wifi: mt76: mt7615: check devm_kasprintf() returned value
  debugobjects: Fix conditions in fill_pool()
  btrfs: tree-checker: fix the wrong output of data backref objectid
  btrfs: always update fstrim_range on failure in FITRIM ioctl
  f2fs: fix several potential integer overflows in file offsets
  f2fs: prevent possible int overflow in dir_block_index()
  f2fs: avoid potential int overflow in sanity_check_area_boundary()
  f2fs: Require FMODE_WRITE for atomic write ioctls
  f2fs: fix to check atomic_file in f2fs ioctl interfaces
  hwrng: mtk - Use devm_pm_runtime_enable
  hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
  hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
  arm64: esr: Define ESR_ELx_EC_* constants as UL
  arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
  arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
  arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
  arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
  vfs: fix race between evice_inodes() and find_inode()&iput()
  fs: Fix file_set_fowner LSM hook inconsistencies
  nfs: fix memory leak in error path of nfs4_do_reclaim
  EDAC/igen6: Fix conversion of system address to physical memory address
  icmp: change the order of rate limits
  cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
  padata: use integer wrap around to prevent deadlock on seq_nr overflow
  spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
  ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
  soc: versatile: realview: fix memory leak during device remove
  soc: versatile: realview: fix soc_dev leak during device remove
  USB: misc: yurex: fix race between read and write
  xhci: Add a quirk for writing ERST in high-low order
  usb: xhci: fix loss of data on Cadence xHC
  pps: remove usage of the deprecated ida_simple_xx() API
  pps: add an error check in parport_attach
  serial: don't use uninitialized value in uart_poll_init()
  x86/idtentry: Incorporate definitions/declarations of the FRED entries
  x86/entry: Remove unwanted instrumentation in common_interrupt()
  lib/bitmap: add bitmap_{read,write}()
  btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
  btrfs: fix race setting file private on concurrent lseek using same fd
  dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
  dt-bindings: spi: nxp-fspi: add imx8ulp support
  thunderbolt: Improve DisplayPort tunnel setup process to be more robust
  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
  dm-verity: restart or panic on an I/O error
  lockdep: fix deadlock issue between lockdep and rcu
  mm: only enforce minimum stack gap size if it's sensible
  spi: fspi: add support for imx8ulp
  module: Fix KCOV-ignored file name
  mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu 
read lock
  i2c: aspeed: Update the stop sw state when the bus recovery occurs
  i2c: isch: Add missed 'else'
  Documentation: KVM: fix warning in "make htmldocs"
  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
  wifi: brcmfmac: add linefeed at end of file
  x86/tdx: Fix "in-kernel MMIO" check
  spi: atmel-quadspi: Fix wrong register value written to MR
  Revert: "dm-verity: restart or panic on an I/O error"
  wifi: ath11k: use work queue to process beacon tx event
  crypto: qat - disable IOV in adf_dev_stop()
  crypto: qat - fix recovery flow for VFs
  crypto: qat - ensure correct order in VF restarting handler
  crypto: iaa - Fix potential use after free bug
  autofs: fix missing fput for FSCONFIG_SET_FD
  arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI first
  thermal: core: Fold two functions into their respective callers
  thermal: core: Fix rounding of delay jiffies
  perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
  perf/dwc_pcie: Always register for PCIe bus notifier
  ACPI: video: force native for some T2 macbooks
  ACPI: video: force native for Apple MacbookPro9,2
  wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
  wifi: mac80211: fix the comeback long retry times
  ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
  ACPICA: executer/exsystem: Don't nag user about every Stall() violating the 
spec
  netfilter: nft_dynset: annotate data-races around set timeout
  wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
  crypto: ccp - do not request interrupt on cmd completion when irqs disabled
  wifi: mt76: connac: fix checksum offload fields of connac3 RXD
  net: hsr: Use the seqnr lock for frames received via interlink port.
  crypto: n2 - Set err to EINVAL if snprintf fails for hmac
  firmware: qcom: scm: Disable SDI and write no dump to dump mode
  arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
  arm64: tegra: Correct location of power-sensors for IGX Orin
  arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
  selftests/ftrace: Fix eventfs ownership testcase to find mount point
  iommu/amd: Introduce struct protection_domain.pd_mode
  iommu/amd: Allocate the page table root using GFP_KERNEL
  iommu/amd: Convert comma to semicolon
  platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
  kselftest: dt: Ignore nodes that have ancestors disabled
  bpf, x64: Fix tailcall hierarchy
  bpf, lsm: Add check for BPF LSM return value
  bpf: Fix compare error in function retval_range_within
  bpf: Fail verification for sign-extension of packet data/data_end/data_meta
  selftests/bpf: Support checks against a regular expression
  selftests/bpf: no need to track next_match_pos in struct test_loader
  selftests/bpf: extract test_loader->expect_msgs as a data structure
  selftests/bpf: allow checking xlated programs in verifier_* tests
  selftests/bpf: __arch_* macro to limit test cases to specific archs
  libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
  s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
  sched/deadline: Fix schedstats vs deadline servers
  perf scripts python cs-etm: Restore first sample log in verbose mode
  perf lock contention: Change stack_id type to s32
  quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
  media: staging: media: starfive: camss: Drop obsolete return value 
documentation
  leds: gpio: Set num_leds after allocation
  iommufd/selftest: Fix buffer read overrrun in the dirty test
  iommufd: Check the domain owner of the parent before creating a nesting domain
  RDMA/mlx5: Fix counter update on MR cache mkey creation
  RDMA/mlx5: Drop redundant work canceling from clean_keys()
  RDMA/mlx5: Fix MR cache temp entries cleanup
  RDMA/hns: Fix ah error counter in sw stat not increasing
  Coresight: Set correct cs_mode for TPDM to fix disable issue
  Coresight: Set correct cs_mode for dummy source to fix disable issue
  interconnect: qcom: sm8250: Enable sync_state
  vdpa/mlx5: Fix invalid mr resource destroy
  net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
  selftests: netfilter: Avoid hanging ipvs.sh
  io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
  mm: migrate: annotate data-race in migrate_folio_unmap()
  selftests/bpf: correctly move 'log' upon successful match
  soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
  drm/amdgpu/vcn: enable AV1 on both instances
  drm/amd/display: Clean up dsc blocks in accelerated mode
  drm/amd/display: Skip to enable dsc if it has been off
  arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
  usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
  serial: qcom-geni: fix false console tx restart
  crypto: qcom-rng - fix support for ACPI-based systems
  ACPI: resource: Do IRQ override on MECHREV GM7XG0M
  perf/x86/intel: Allow to setup LBR for counting event for BPF
  f2fs: check discard support for conventional zones
  netfs: Delete subtree of 'fs/netfs' when netfs module exits
  md: Don't flush sync_work in md_write_start()
  tools/nolibc: include arch.h from string.h
  KVM: x86: Make x2APIC ID 100% readonly
  x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails
  x86/mm: Make x86_platform.guest.enc_status_change_*() return an error
  x86/tdx: Account shared memory
  x86/mm: Add callbacks to prepare encrypted memory for kexec
  x86/tdx: Convert shared memory back to private on kexec
  soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
  serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
  serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
  idpf: stop using macros for accessing queue descriptors
  fs_parse: add uid & gid option option parsing helpers
  compiler.h: specify correct attribute for .rodata..c_jump_table
  exfat: resolve memory leak from exfat_create_upcase_table()
  s390/ftrace: Avoid calling unwinder in ftrace_return_address()
  fbdev: xen-fbfront: Assign fb_info->device
  UBUNTU: [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10
  UBUNTU: Upstream stable to v6.6.54, v6.10.13

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089340/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to